CVS commit: [pkgsrc-2020Q3] pkgsrc/www/firefox78

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sat Dec 19 20:38:04 UTC 2020

Modified Files:
        pkgsrc/www/firefox78 [pkgsrc-2020Q3]: Makefile distinfo

Log Message:
Pullup ticket #6385 - requested by nia
www/firefox78: security fix

Revisions pulled up:
- www/firefox78/Makefile                                        1.14
- www/firefox78/distinfo                                        1.7

---
   Module Name: pkgsrc
   Committed By:        nia
   Date:                Thu Dec 17 13:24:30 UTC 2020

   Modified Files:
        pkgsrc/www/firefox78: Makefile distinfo

   Log Message:
   firefox78: Update to 78.6.0

   Security Vulnerabilities fixed in Firefox ESR 78.6

   #CVE-2020-16042: Operations on a BigInt could have caused uninitialized
   memory to be exposed

   #CVE-2020-26971: Heap buffer overflow in WebGL

   #CVE-2020-26973: CSS Sanitizer performed incorrect sanitization

   #CVE-2020-26974: Incorrect cast of StyleGenericFlexBasis resulted in a heap
   use-after-free

   #CVE-2020-26978: Internal network hosts could have been probed by a
   malicious webpage

   #CVE-2020-35111: The proxy.onRequest API did not catch view-source URLs

   #CVE-2020-35112: Opening an extension-less download may have inadvertently
   launched an executable instead

   #CVE-2020-35113: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6


To generate a diff of this commit:
cvs rdiff -u -r1.6.2.2 -r1.6.2.3 pkgsrc/www/firefox78/Makefile
cvs rdiff -u -r1.3.2.2 -r1.3.2.3 pkgsrc/www/firefox78/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox78/Makefile
diff -u pkgsrc/www/firefox78/Makefile:1.6.2.2 pkgsrc/www/firefox78/Makefile:1.6.2.3
--- pkgsrc/www/firefox78/Makefile:1.6.2.2       Tue Nov 24 18:29:25 2020
+++ pkgsrc/www/firefox78/Makefile       Sat Dec 19 20:38:04 2020
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.6.2.2 2020/11/24 18:29:25 bsiegert Exp $
+# $NetBSD: Makefile,v 1.6.2.3 2020/12/19 20:38:04 bsiegert Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            78.5
+MOZ_BRANCH=            78.6
 MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source

Index: pkgsrc/www/firefox78/distinfo
diff -u pkgsrc/www/firefox78/distinfo:1.3.2.2 pkgsrc/www/firefox78/distinfo:1.3.2.3
--- pkgsrc/www/firefox78/distinfo:1.3.2.2       Tue Nov 24 18:29:25 2020
+++ pkgsrc/www/firefox78/distinfo       Sat Dec 19 20:38:04 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.3.2.2 2020/11/24 18:29:25 bsiegert Exp $
+$NetBSD: distinfo,v 1.3.2.3 2020/12/19 20:38:04 bsiegert Exp $
 
-SHA1 (firefox-78.5.0esr.source.tar.xz) = ae46913563ffe92efa7cdaacb818435a4c3d4492
-RMD160 (firefox-78.5.0esr.source.tar.xz) = 53bf565b08f8c743f22e5f61fca8fd98da062a6c
-SHA512 (firefox-78.5.0esr.source.tar.xz) = 0d16013342b6e8d67adb5c111177ea4796db4fb593da8aa254d0d95bdf33fad798c2dbb235d44db4177c32dd2d7b3ac26b938b476342753ee8d6c83d968d0281
-Size (firefox-78.5.0esr.source.tar.xz) = 333995288 bytes
+SHA1 (firefox-78.6.0esr.source.tar.xz) = 4dc4e41ae749e1d189ac8f45d0b804a18b8d38c3
+RMD160 (firefox-78.6.0esr.source.tar.xz) = 55970d3df407955f191b47ecae83d6597adbbc5b
+SHA512 (firefox-78.6.0esr.source.tar.xz) = a1e2d6af0020784d00ed3cb4d778c136685e7c2f6ae536cc270fbd331d51d483d17dff9acd7ad8e6b3b231b9df894c146092889357b23715814a080c6f08d11a
+Size (firefox-78.6.0esr.source.tar.xz) = 338098664 bytes
 SHA1 (patch-aa) = 11060461fdaca5661e89651b8ded4a59d2abc4d7
 SHA1 (patch-browser_app_profile_firefox.js) = 89cea0a66457c96ad0b94aaa524aa5942ad781d0
 SHA1 (patch-build_moz.configure_rust.configure) = ee9e207e67709f3c9455b4d22f5f254890e99ca8