CVS commit: pkgsrc/www/firefox68

["Nia Alarie" <nia%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   nia
Date:           Sat May  9 13:08:01 UTC 2020

Modified Files:
        pkgsrc/www/firefox68: Makefile PLIST distinfo

Log Message:
firefox68: Update to 68.8.0

Security Vulnerabilities fixed in Firefox ESR 68.8

    #CVE-2020-12387: Use-after-free during worker shutdown

    #CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens

    #CVE-2020-12389: Sandbox escape with improperly separated process types

    #CVE-2020-6831: Buffer overflow in SCTP chunk input validation

    #CVE-2020-12392: Arbitrary local file access with 'Copy as cURL'

    #CVE-2020-12393: Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command injection

    #CVE-2020-12395: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8


To generate a diff of this commit:
cvs rdiff -u -r1.19 -r1.20 pkgsrc/www/firefox68/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/firefox68/PLIST
cvs rdiff -u -r1.14 -r1.15 pkgsrc/www/firefox68/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox68/Makefile
diff -u pkgsrc/www/firefox68/Makefile:1.19 pkgsrc/www/firefox68/Makefile:1.20
--- pkgsrc/www/firefox68/Makefile:1.19  Fri Apr 24 13:24:21 2020
+++ pkgsrc/www/firefox68/Makefile       Sat May  9 13:08:01 2020
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.19 2020/04/24 13:24:21 nia Exp $
+# $NetBSD: Makefile,v 1.20 2020/05/09 13:08:01 nia Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            68.7
+MOZ_BRANCH=            68.8
 MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox68-/}
-PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/firefox68/PLIST
diff -u pkgsrc/www/firefox68/PLIST:1.5 pkgsrc/www/firefox68/PLIST:1.6
--- pkgsrc/www/firefox68/PLIST:1.5      Thu Mar 12 19:39:35 2020
+++ pkgsrc/www/firefox68/PLIST  Sat May  9 13:08:01 2020
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2020/03/12 19:39:35 nia Exp $
+@comment $NetBSD: PLIST,v 1.6 2020/05/09 13:08:01 nia Exp $
 bin/firefox68
 lib/firefox68/actors/AudioPlaybackChild.jsm
 lib/firefox68/actors/AutoplayChild.jsm
@@ -4253,38 +4253,35 @@ lib/firefox68/browser/features/webcompat
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/experiment-apis/systemManufacturer.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/experiment-apis/systemManufacturer.json
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug0000000-testbed-css-injection.css
-lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1432935-discordapp.com-webkit-scorllbar-white-line.css
-lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1518781-twitch.tv-webkit-scrollbar.css
-lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1526977-sreedharscce.in-login-fix.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1561371-mail.google.com-allow-horizontal-scrolling.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1567610-dns.google.com-moz-fit-content.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1568256-zertifikate.commerzbank.de-flex.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1568908-console.cloud.google.com-scrollbar-fix.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1570119-teamcoco.com-scrollbar-width.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1570328-developer-apple.com-transform-scale.css
-lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1574973-patch.com-dropdown-menu-fix.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1575000-apply.lloydsbank.co.uk-radio-buttons-fix.css
-lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1575011-holiday-weather.com-scrolling-fix.css
-lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1575017-dunkindonuts.com-flex-basis.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1577270-binance.com-calc-height-fix.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1577297-kitkat.com.au-slider-width-fix.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1605611-maps.google.com-directions-time.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1609991-cracked.com-flex-basis-fix.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1610016-gaana.com-input-position-fix.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1610344-directv.com.co-hide-unsupported-message.css
+lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1631960-websube.ckbogazici.com.tr-table-row-fix.css
+lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/css/bug1632019-everyman.co-gallery-width-fix.css
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug0000000-testbed-js-injection.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1452707-window.controllers-shim-ib.absa.co.za.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1457335-histography.io-ua-change.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1472075-bankofamerica.com-ua-change.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1570856-medium.com-menu-isTier1.js
-lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1577245-salesforce-communities-hide-unsupported.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1579159-m.tailieu.vn-pdfjs-worker-disable.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1605611-maps.google.com-directions-time.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1610358-pcloud.com-appVersion-change.js
+lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1623375-salesforce-communities-hide-unsupported.js
+lib/firefox68/browser/features/webcompat%mozilla.org@localhost/injections/js/bug1625224-sixt-neuwagen.de-window-netscape-shim.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/lib/about_compat_broker.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/lib/custom_functions.js
-lib/firefox68/browser/features/webcompat%mozilla.org@localhost/lib/google.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/lib/injections.js
+lib/firefox68/browser/features/webcompat%mozilla.org@localhost/lib/intervention_helpers.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/lib/module_shim.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/lib/picture_in_picture_overrides.js
 lib/firefox68/browser/features/webcompat%mozilla.org@localhost/lib/ua_overrides.js

Index: pkgsrc/www/firefox68/distinfo
diff -u pkgsrc/www/firefox68/distinfo:1.14 pkgsrc/www/firefox68/distinfo:1.15
--- pkgsrc/www/firefox68/distinfo:1.14  Fri Apr 10 10:41:50 2020
+++ pkgsrc/www/firefox68/distinfo       Sat May  9 13:08:01 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.14 2020/04/10 10:41:50 nia Exp $
+$NetBSD: distinfo,v 1.15 2020/05/09 13:08:01 nia Exp $
 
-SHA1 (firefox-68.7.0esr.source.tar.xz) = 27a2728ac1fff2134f2aae2e411f2266c19db1c2
-RMD160 (firefox-68.7.0esr.source.tar.xz) = 2f50d2dc66db24fb628820bdb9b181448c51d561
-SHA512 (firefox-68.7.0esr.source.tar.xz) = a3ddcf8ffe5f568b30b1fc9ddcaa5cebe600bf11ce353c09507d5466f999022d45a0dee9a08f53f37b10202a2e2ce4c180743cd6a2ca38dfea1c3e4487b18593
-Size (firefox-68.7.0esr.source.tar.xz) = 312235932 bytes
+SHA1 (firefox-68.8.0esr.source.tar.xz) = 291cb48dcbf50030a38a66eca40d9cfcaff9784d
+RMD160 (firefox-68.8.0esr.source.tar.xz) = d275572b5a35dff01b271285880dff2222f24038
+SHA512 (firefox-68.8.0esr.source.tar.xz) = 139a63dc85ae76a50da6be9a31425f97144e6c7e4a65b0f3009a84eb5c8c9566f6bb331e26590f8aecd5045c4d730ab4e848cf7220f3444a31147b5533c742b3
+Size (firefox-68.8.0esr.source.tar.xz) = 312602308 bytes
 SHA1 (patch-aa) = 9f7200c411cd2217a80ec10a276c8877bc6b845c
 SHA1 (patch-browser_app_profile_firefox.js) = 076cc2892547bac07fe907533f4e821f13f5738e
 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 11b45e0c7a9399c5b74b170648280a388dd67d89