CVS commit: pkgsrc/www/firefox78

["Nia Alarie" <nia%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   nia
Date:           Wed Nov 18 12:33:45 UTC 2020

Modified Files:
        pkgsrc/www/firefox78: Makefile distinfo

Log Message:
firefox78: Update to 78.5.0

Security Vulnerabilities fixed in Firefox ESR 78.5

    #CVE-2020-26951: Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code

    #CVE-2020-16012: Variable time processing of cross-origin images during
    drawImage calls

    #CVE-2020-26953: Fullscreen could be enabled without displaying the security
    UI

    #CVE-2020-26956: XSS through paste (manual and clipboard API)

    #CVE-2020-26958: Requests intercepted through ServiceWorkers lacked MIME
    type restrictions

    #CVE-2020-26959: Use-after-free in WebRequestService

    #CVE-2020-26960: Potential use-after-free in uses of nsTArray

    #CVE-2020-15999: Heap buffer overflow in freetype

    #CVE-2020-26961: DoH did not filter IPv4 mapped IP Addresses

    #CVE-2020-26965: Software keyboards may have remembered typed passwords

    #CVE-2020-26966: Single-word search queries were also broadcast to local
    network

    #CVE-2020-26968: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5


To generate a diff of this commit:
cvs rdiff -u -r1.12 -r1.13 pkgsrc/www/firefox78/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/firefox78/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox78/Makefile
diff -u pkgsrc/www/firefox78/Makefile:1.12 pkgsrc/www/firefox78/Makefile:1.13
--- pkgsrc/www/firefox78/Makefile:1.12  Wed Nov 11 23:04:44 2020
+++ pkgsrc/www/firefox78/Makefile       Wed Nov 18 12:33:45 2020
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.12 2020/11/11 23:04:44 wiz Exp $
+# $NetBSD: Makefile,v 1.13 2020/11/18 12:33:45 nia Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            78.4
-MOZ_BRANCH_MINOR=      .1esr
+MOZ_BRANCH=            78.5
+MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox78-/}
-PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/firefox78/distinfo
diff -u pkgsrc/www/firefox78/distinfo:1.5 pkgsrc/www/firefox78/distinfo:1.6
--- pkgsrc/www/firefox78/distinfo:1.5   Tue Nov 10 02:59:27 2020
+++ pkgsrc/www/firefox78/distinfo       Wed Nov 18 12:33:45 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.5 2020/11/10 02:59:27 nia Exp $
+$NetBSD: distinfo,v 1.6 2020/11/18 12:33:45 nia Exp $
 
-SHA1 (firefox-78.4.1esr.source.tar.xz) = d2a0207af9d0777d26424c60e90fcc93b8b6ad09
-RMD160 (firefox-78.4.1esr.source.tar.xz) = 4cf4a6744019f5afa5b11ac5564ad1188fb30378
-SHA512 (firefox-78.4.1esr.source.tar.xz) = 287096ad67e86b307554475c3b5d1003a325d6d13987bfbec2ec79aa0f8004dce1614ab62585ba5cf153545618906ab640cd4657d5a910085afb3d8ceb46e8de
-Size (firefox-78.4.1esr.source.tar.xz) = 334673424 bytes
+SHA1 (firefox-78.5.0esr.source.tar.xz) = ae46913563ffe92efa7cdaacb818435a4c3d4492
+RMD160 (firefox-78.5.0esr.source.tar.xz) = 53bf565b08f8c743f22e5f61fca8fd98da062a6c
+SHA512 (firefox-78.5.0esr.source.tar.xz) = 0d16013342b6e8d67adb5c111177ea4796db4fb593da8aa254d0d95bdf33fad798c2dbb235d44db4177c32dd2d7b3ac26b938b476342753ee8d6c83d968d0281
+Size (firefox-78.5.0esr.source.tar.xz) = 333995288 bytes
 SHA1 (patch-aa) = 11060461fdaca5661e89651b8ded4a59d2abc4d7
 SHA1 (patch-browser_app_profile_firefox.js) = 89cea0a66457c96ad0b94aaa524aa5942ad781d0
 SHA1 (patch-build_moz.configure_rust.configure) = ee9e207e67709f3c9455b4d22f5f254890e99ca8