CVS commit: pkgsrc/www/firefox68

["Nia Alarie" <nia%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   nia
Date:           Thu Jan  9 20:51:59 UTC 2020

Modified Files:
        pkgsrc/www/firefox68: Makefile distinfo

Log Message:
firefox68: Update to 68.4.1

This release fixes one zero-day vulnerability:

CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion.
We are aware of targeted attacks in the wild abusing this flaw


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.8 pkgsrc/www/firefox68/Makefile
cvs rdiff -u -r1.6 -r1.7 pkgsrc/www/firefox68/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox68/Makefile
diff -u pkgsrc/www/firefox68/Makefile:1.7 pkgsrc/www/firefox68/Makefile:1.8
--- pkgsrc/www/firefox68/Makefile:1.7   Wed Jan  8 21:49:32 2020
+++ pkgsrc/www/firefox68/Makefile       Thu Jan  9 20:51:59 2020
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.7 2020/01/08 21:49:32 nia Exp $
+# $NetBSD: Makefile,v 1.8 2020/01/09 20:51:59 nia Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
 MOZ_BRANCH=            68.4
-MOZ_BRANCH_MINOR=      .0esr
+MOZ_BRANCH_MINOR=      .1esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox68-/}

Index: pkgsrc/www/firefox68/distinfo
diff -u pkgsrc/www/firefox68/distinfo:1.6 pkgsrc/www/firefox68/distinfo:1.7
--- pkgsrc/www/firefox68/distinfo:1.6   Wed Jan  8 21:49:32 2020
+++ pkgsrc/www/firefox68/distinfo       Thu Jan  9 20:51:59 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.6 2020/01/08 21:49:32 nia Exp $
+$NetBSD: distinfo,v 1.7 2020/01/09 20:51:59 nia Exp $
 
-SHA1 (firefox-68.4.0esr.source.tar.xz) = 363c3e0bd0158285075985a826e62ac644ba594c
-RMD160 (firefox-68.4.0esr.source.tar.xz) = e2cbdf0a0226e9b846bd67253abeb4cd1583f16d
-SHA512 (firefox-68.4.0esr.source.tar.xz) = 0460d77c5407f2bbbbc9ea1e1c86344bed70d14c050315ce982a9475c519f6350e465fea8638657919068e05fb88a74eb451c649b50059cba6996512a93a0093
-Size (firefox-68.4.0esr.source.tar.xz) = 321283916 bytes
+SHA1 (firefox-68.4.1esr.source.tar.xz) = f11c0ecc0f17435149a2bce83f490bbd329e276d
+RMD160 (firefox-68.4.1esr.source.tar.xz) = 78098317b75b079a475a0bcb8a5f012178c1a643
+SHA512 (firefox-68.4.1esr.source.tar.xz) = 8dd85096f1223b2ab396cc3b89a9f1b113f01ce8919af08a278d077cc4380c108a66b6379c75d85311aa3c54a7804f4d51f718b309fe107ff7c44aca7e4386ed
+Size (firefox-68.4.1esr.source.tar.xz) = 318559576 bytes
 SHA1 (patch-aa) = 1f292aae7d37bd480ba834324b737bfebee52503
 SHA1 (patch-browser_app_profile_firefox.js) = 076cc2892547bac07fe907533f4e821f13f5738e
 SHA1 (patch-build_moz.configure_old.configure) = 05963b12fd908d90e3378b30cff7e48291b8a447