CVS commit: pkgsrc/www/firefox

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/www/firefox
From: "Ryo ONODERA" <ryoon%netbsd.org@localhost>
Date: Sun, 15 Oct 2023 07:40:11 +0000

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sun Oct 15 07:40:10 UTC 2023

Modified Files:
        pkgsrc/www/firefox: Makefile PLIST distinfo
        pkgsrc/www/firefox/files: node-wrapper.sh
        pkgsrc/www/firefox/patches:
            patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc

Log Message:
firefox: Update to 118.0.2

Changelog:
118.0.2
Fixed

  * Fixed games not loading on betsoft.com (bug 1856145)

  * Fixed printing issues for some SVG images (bug 1853727)

  * Fixed CORS XHR with authentication no longer working (bug 1855650)

  * Fixed h264 WebRTC video not working in some contexts (bug 1855636)

  * Fixed Firefox Translations not working on some pages (bugs 1841656 -
    1855307)

  * Stability fixes (bugs 1851991 - 1799326 - 1856637)

118.0.1
Fixed

  * Security fix.

Mozilla Foundation Security Advisory 2023-44
#CVE-2023-5217: Heap buffer overflow in libvpx

118.0
New

  * Automated translation of web content is now available to Firefox users!
    Unlike cloud-based alternatives, translation is done locally in Firefox, so
    that the text being translated does not leave your machine. Many thanks to
    the various partners of the EU R&D Bergamot project.

  * Web Audio in Firefox now uses the FDLIBM math library on all systems to
    improve anonymity with Fingerprint Protection.

  * The visibility of fonts to websites has been restricted to system fonts and
    language pack fonts to mitigate font fingerprinting in Private Browsing
    windows.

  * Video Effects and background blur are now available to Firefox users on
    Google Meet! (Note: These effects have also been released retroactively to
    support Firefox versions back to Firefox 115.)

  * Firefox Suggest users (US-only at this time) will now be able to see
    browser add-on suggestions right in the address bar based on their
    keywords.

Fixed

  * Various security fixes.

Enterprise

  * You can find information about policy updates and enterprise specific bug
    fixes in the Firefox for Enterprise 118 Release Notes.

Web Platform

  * 10 new CSS math functions are now supported: round, mod, rem, pow, sqrt,
    hypot, log, exp, abs, sign.

  * OpaqueResponseBlocking is now enabled by default.

  * The <search> element is now supported. The <search> element is a group
    element that serves to contain all the elements used in a search or
    filtering operation.

Mozilla Foundation Security Advisory 2023-41
#CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1
#CVE-2023-5169: Out-of-bounds write in PathOps
#CVE-2023-5170: Memory leak from a privileged process
#CVE-2023-5171: Use-after-free in Ion Compiler
#CVE-2023-5172: Memory Corruption in Ion Hints
#CVE-2023-5173: Out-of-bounds write in HTTP Alternate Services
#CVE-2023-5174: Double-free in process spawning on Windows
#CVE-2023-5175: Use-after-free of ImageBitmap during process shutdown
#CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and
 Thunderbird 115.3


To generate a diff of this commit:
cvs rdiff -u -r1.571 -r1.572 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.185 -r1.186 pkgsrc/www/firefox/PLIST
cvs rdiff -u -r1.510 -r1.511 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.10 -r1.11 pkgsrc/www/firefox/files/node-wrapper.sh
cvs rdiff -u -r1.2 -r1.3 \
    pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.571 pkgsrc/www/firefox/Makefile:1.572
--- pkgsrc/www/firefox/Makefile:1.571   Mon Sep 18 06:12:47 2023
+++ pkgsrc/www/firefox/Makefile Sun Oct 15 07:40:10 2023
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.571 2023/09/18 06:12:47 ryoon Exp $
+# $NetBSD: Makefile,v 1.572 2023/10/15 07:40:10 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            117.0
-MOZ_BRANCH_MINOR=      .1
+MOZ_BRANCH=            118.0
+MOZ_BRANCH_MINOR=      .2
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
-PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}

Index: pkgsrc/www/firefox/PLIST
diff -u pkgsrc/www/firefox/PLIST:1.185 pkgsrc/www/firefox/PLIST:1.186
--- pkgsrc/www/firefox/PLIST:1.185      Sat Sep  9 20:23:14 2023
+++ pkgsrc/www/firefox/PLIST    Sun Oct 15 07:40:10 2023
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.185 2023/09/09 20:23:14 leot Exp $
+@comment $NetBSD: PLIST,v 1.186 2023/10/15 07:40:10 ryoon Exp $
 bin/firefox
 lib/firefox/application.ini
 lib/firefox/browser/chrome/icons/default/default128.png
@@ -21,6 +21,7 @@ lib/firefox/glxtest
 lib/firefox/gmp-clearkey/0.1/libclearkey.so
 lib/firefox/gmp-clearkey/0.1/manifest.json
 lib/firefox/libipcclientcerts.so
+lib/firefox/libgkcodecs.so
 lib/firefox/liblgpllibs.so
 ${PLIST.ffvpx}lib/firefox/libmozavcodec.so
 ${PLIST.ffvpx}lib/firefox/libmozavutil.so

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.510 pkgsrc/www/firefox/distinfo:1.511
--- pkgsrc/www/firefox/distinfo:1.510   Mon Sep 18 06:12:47 2023
+++ pkgsrc/www/firefox/distinfo Sun Oct 15 07:40:10 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.510 2023/09/18 06:12:47 ryoon Exp $
+$NetBSD: distinfo,v 1.511 2023/10/15 07:40:10 ryoon Exp $
 
-BLAKE2s (firefox-117.0.1.source.tar.xz) = 4aa980b9fbe9d07a3675796538b199463030e7081dbed53d851296a0fecd5e53
-SHA512 (firefox-117.0.1.source.tar.xz) = 1583b0ad3b3b17c59bfbfb3e416074766327d0b926ef4f6c6b1e3b2d7cf6a18dec592b7d17fab9493ba1506f3540a02277096d28616dd29b6e7b9e93905f2071
-Size (firefox-117.0.1.source.tar.xz) = 509601584 bytes
+BLAKE2s (firefox-118.0.2.source.tar.xz) = 4615d3f03d8debf66cf9088934478099e557dbc5cb419765fb0dc91296221697
+SHA512 (firefox-118.0.2.source.tar.xz) = fe9d7951927e44aee98a15840820251b779cc427f27597951497bd01fde3c3f2857942535c64c9d1a64f877c43802771304ed97254bffd9216f554e1af9efbf4
+Size (firefox-118.0.2.source.tar.xz) = 520864692 bytes
 BLAKE2s (nodejs-output-116.0.tgz) = 3d453c6500fa7c93997c795a937b581aa4494b54293218b6657758a2102fee97
 SHA512 (nodejs-output-116.0.tgz) = 16354fc33c3ccf4a8f392a410fc94d4851391621f2e4e3e15bfbb75027e0a9ae7f9f771391988f1ac177cb5d0deab70a4abdc71bfe4bfe39ac3e428a40e909a0
 Size (nodejs-output-116.0.tgz) = 219731 bytes
@@ -31,7 +31,7 @@ SHA1 (patch-security_nss_lib_freebl_mpi_
 SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = e2dfa63e628527014509622b86baf62cb98ceb44
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 455be625b5de2f6f1f4b2dbb6c8cb33ca16c2583
-SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 8848fb05c1e8b45234f74db71602a8a84c0404a4
+SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 4cb0e1c88dc83370024ed1aac7f75445b9f98df8
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd
 SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = b90e22b50879f7adcc1da3a993f52c0701b720f8
 SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.10 pkgsrc/www/firefox/files/node-wrapper.sh:1.11
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.10       Tue Sep  5 14:08:39 2023
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Sun Oct 15 07:40:10 2023
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v20.5.1
+VERS=v20.7.0
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"

Index: pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc
diff -u pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc:1.2 
pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc:1.3
--- pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc:1.2      Tue Jan 24 17:57:09 2023
+++ pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc  Sun Oct 15 07:40:10 2023
@@ -1,11 +1,11 @@
-$NetBSD: patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc,v 1.2 2023/01/24 17:57:09 nia Exp $
+$NetBSD: patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc,v 1.3 2023/10/15 07:40:10 ryoon Exp $
 
 * Fix build under NetBSD 9 and older.
   The older NetBSD's sys/videoio.h does not have v4l2_capability.device_caps.
 
---- third_party/libwebrtc/modules/video_capture/linux/device_info_v4l2.cc.orig 2022-10-19 18:00:20.000000000 +0000
+--- third_party/libwebrtc/modules/video_capture/linux/device_info_v4l2.cc.orig 2023-09-14 21:15:08.000000000 +0000
 +++ third_party/libwebrtc/modules/video_capture/linux/device_info_v4l2.cc
-@@ -193,11 +193,13 @@ uint32_t DeviceInfoV4l2::NumberOfDevices
+@@ -211,11 +211,13 @@ uint32_t DeviceInfoV4l2::NumberOfDevices
    for (int n = 0; n < 64; n++) {
      snprintf(device, sizeof(device), "/dev/video%d", n);
      if ((fd = open(device, O_RDONLY)) != -1) {
@@ -19,9 +19,9 @@ $NetBSD: patch-third__party_libwebrtc_mo
  
        close(fd);
        count++;
-@@ -225,11 +227,13 @@ int32_t DeviceInfoV4l2::GetDeviceName(ui
-   for (device_index = 0; device_index < 64; device_index++) {
-     sprintf(device, "/dev/video%d", device_index);
+@@ -242,11 +244,13 @@ int32_t DeviceInfoV4l2::GetDeviceName(ui
+   for (int n = 0; n < 64; n++) {
+     snprintf(device, sizeof(device), "/dev/video%d", n);
      if ((fd = open(device, O_RDONLY)) != -1) {
 +#if defined(VIDIOC_QUERYCAP)
        // query device capabilities and make sure this is a video capture device
@@ -33,7 +33,7 @@ $NetBSD: patch-third__party_libwebrtc_mo
        if (count == deviceNumber) {
          // Found the device
          found = true;
-@@ -307,6 +311,7 @@ int32_t DeviceInfoV4l2::CreateCapability
+@@ -317,6 +321,7 @@ int32_t DeviceInfoV4l2::CreateCapability
      if (fd == -1)
        continue;
  
@@ -41,7 +41,7 @@ $NetBSD: patch-third__party_libwebrtc_mo
      // query device capabilities
      struct v4l2_capability cap;
      if (ioctl(fd, VIDIOC_QUERYCAP, &cap) == 0) {
-@@ -331,6 +336,7 @@ int32_t DeviceInfoV4l2::CreateCapability
+@@ -341,6 +346,7 @@ int32_t DeviceInfoV4l2::CreateCapability
          }
        }
      }
@@ -49,7 +49,7 @@ $NetBSD: patch-third__party_libwebrtc_mo
      close(fd);  // close since this is not the matching device
    }
  
-@@ -376,11 +382,15 @@ bool DeviceInfoV4l2::IsDeviceNameMatches
+@@ -386,11 +392,15 @@ bool DeviceInfoV4l2::IsDeviceNameMatches
  
  bool DeviceInfoV4l2::IsVideoCaptureDevice(struct v4l2_capability* cap)
  {

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: pkgsrc/www/firefox
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: pkgsrc/www/firefox
Indexes:

Home | Main Index | Thread Index | Old Index