CVS commit: pkgsrc/www/firefox

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/www/firefox
From: "Ryo ONODERA" <ryoon%netbsd.org@localhost>
Date: Tue, 16 Apr 2024 20:10:33 +0000

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Tue Apr 16 20:10:33 UTC 2024

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk
        pkgsrc/www/firefox/files: node-wrapper.sh
        pkgsrc/www/firefox/patches: patch-media_libpng_pngpriv.h

Log Message:
www/firefox: Update to 125.0.1

* Back to multimedia/ffmpeg6.
  ffmpeg7 causes unstable H.264 and AV1 playback.

Changelog:
125.0.1;
New

  * Firefox now supports the AV1 codec for Encrypted Media Extensions (EME),
    enabling higher-quality playback from video streaming providers.

  * The Firefox PDF viewer now supports text highlighting.

  * Firefox View now displays pinned tabs in the Open tabs section. Tab
    indicators have also been added to Open tabs, so users can do things like
    see which tabs are playing media and quickly mute or unmute across windows.
    Indicators were also added for bookmarks, tabs with notifications, and
    more!

  * Firefox now prompts users in the US and Canada to save their addresses upon
    submitting an address form, allowing Firefox to autofill stored address
    information in the future.

  * Firefox now more proactively blocks downloads from URLs that are considered
    to be potentially untrustworthy.

  * The URL Paste Suggestion feature provides a convenient way for users to
    quickly visit URLs copied to the clipboard in the address bar of Firefox.
    When the clipboard contains a URL and the URL bar is focused, an
    autocomplete result appears automatically. Activating the clipboard
    suggestion will navigate the user to the URL with 1 click.

  * Users of tab-specific Container add-ons can now search in the Address Bar
    for tabs that are open in different containers. Special thanks to volunteer
    contributor atararx for kicking off the work on this feature!

  * Firefox now provides an option to enable Web Proxy Auto-Discovery (WPAD)
    while configured to use system proxy settings.

Fixed

  * Various security fixes.

Security fixes:
Mozilla Foundation Security Advisory 2024-18
#CVE-2024-3852: GetBoundName in the JIT returned the wrong object
#CVE-2024-3853: Use-after-free if garbage collection runs during realm
 initialization
#CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement
#CVE-2024-3855: Incorrect JIT optimization of MSubstr leads to out-of-bounds
 reads
#CVE-2024-3856: Use-after-free in WASM garbage collection
#CVE-2024-3857: Incorrect JITting of arguments led to use-after-free during
 garbage collection
#CVE-2024-3858: Corrupt pointer dereference in js::CheckTracedThing<js::Shape>
#CVE-2024-3859: Integer-overflow led to out-of-bounds-read in the OpenType
 sanitizer
#CVE-2024-3860: Crash when tracing empty shape lists
#CVE-2024-3861: Potential use-after-free due to AlignedBuffer self-move
#CVE-2024-3862: Potential use of uninitialized memory in MarkStack assignment
 operator on self-assignment
#CVE-2024-3863: Download Protections were bypassed by .xrm-ms files on Windows
#CVE-2024-3302: Denial of Service using HTTP/2 CONTINUATION frames
#CVE-2024-3864: Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and
 Thunderbird 115.10
#CVE-2024-3865: Memory safety bugs fixed in Firefox 125


To generate a diff of this commit:
cvs rdiff -u -r1.596 -r1.597 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.526 -r1.527 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.278 -r1.279 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/firefox/files/node-wrapper.sh
cvs rdiff -u -r1.6 -r1.7 \
    pkgsrc/www/firefox/patches/patch-media_libpng_pngpriv.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.596 pkgsrc/www/firefox/Makefile:1.597
--- pkgsrc/www/firefox/Makefile:1.596   Sun Apr  7 17:54:03 2024
+++ pkgsrc/www/firefox/Makefile Tue Apr 16 20:10:32 2024
@@ -1,18 +1,17 @@
-# $NetBSD: Makefile,v 1.596 2024/04/07 17:54:03 ryoon Exp $
+# $NetBSD: Makefile,v 1.597 2024/04/16 20:10:32 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            124.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            125.0
+MOZ_BRANCH_MINOR=      .1
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
-PKGREVISION=   2
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
 
-NODEJSKIT=             nodejs-output-124.0.tgz
+NODEJSKIT=             nodejs-output-125.0.1.tgz
 DISTFILES=             ${DEFAULT_DISTFILES} ${NODEJSKIT}
 SITES.${NODEJSKIT}=    ${MASTER_SITE_LOCAL}
 

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.526 pkgsrc/www/firefox/distinfo:1.527
--- pkgsrc/www/firefox/distinfo:1.526   Sat Apr  6 08:53:34 2024
+++ pkgsrc/www/firefox/distinfo Tue Apr 16 20:10:32 2024
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.526 2024/04/06 08:53:34 ryoon Exp $
+$NetBSD: distinfo,v 1.527 2024/04/16 20:10:32 ryoon Exp $
 
-BLAKE2s (firefox-124.0.2.source.tar.xz) = 93de7e9a7291f5761b2a660218ac3fffbe5692072593057f7b57e38e2adad3fc
-SHA512 (firefox-124.0.2.source.tar.xz) = 8cf340de6e34812f8ae3363265859a263330af770d981c3dd1ca1e7e0cfe513604d3e68184d4aa1446569aefbdf359d561fbc200faf19a5ed020a1709d9ef10e
-Size (firefox-124.0.2.source.tar.xz) = 555223648 bytes
-BLAKE2s (nodejs-output-124.0.tgz) = b644e93be28b5c4f32e3a7188825b7ee82de1414277201b1c531dc035d79a0e6
-SHA512 (nodejs-output-124.0.tgz) = ca6c5168e33bcee45e32eb4d541beb8c92e2821e0d40cf56c910515b6636cd43a27e0bd255e6663441df29912e6b93b71c8b47f5c958265e93cc870d241fb7a0
-Size (nodejs-output-124.0.tgz) = 223660 bytes
+BLAKE2s (firefox-125.0.1.source.tar.xz) = 9ed1d68bd671ae3580cd16e62520ac854349e1e2543c34e9ddd874af95d4fa54
+SHA512 (firefox-125.0.1.source.tar.xz) = 6f2f336de8b0ec9cb19ba20c909407b7b88c0319ee3b2f1f3429133516b0c45b4c7846f287985a0cdb9f34acc7d5378ed14fb48e26bef113c8ac360501a30c4d
+Size (firefox-125.0.1.source.tar.xz) = 553213768 bytes
+BLAKE2s (nodejs-output-125.0.1.tgz) = d71ccbe962c933929c1d60c16932ffeced62f2bbf89a9747f701294423391ff2
+SHA512 (nodejs-output-125.0.1.tgz) = 008bbb4b7ec535d5144f0bba2eba174f05487063c34f4a5b6b544fca2f91b8d2cea50503cce57d948448f60ab7d5aa58480887b03047ea3b03bdf19345197aa3
+Size (nodejs-output-125.0.1.tgz) = 224740 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 9d1f15ff487efa9202114d19ed5668b4e7aa032a
@@ -24,7 +24,7 @@ SHA1 (patch-js-src-jit-arm64-vixl-MozCpu
 SHA1 (patch-js_src_jit_FlushICache.cpp) = d1e611eaf7d7be22abfac6b39fbcd99df3570e47
 SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba
 SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = de58daa0fd23d4fec50426602b65c9ea5862558a
-SHA1 (patch-media_libpng_pngpriv.h) = c8084332560017cd7c9b519b61d125fa28af0dbc
+SHA1 (patch-media_libpng_pngpriv.h) = 8320a1f7534ed5c4914b597bb3d6117d0060318f
 SHA1 (patch-media_libtheora_lib_info.c) = f6dbf536d73859a1ff78304c2e9f6a6f74dac01f
 SHA1 (patch-modules_fdlibm_src_math__private.h) = e20b6c23011d7123cbbd64a500eb8ce8c426620e
 SHA1 (patch-netwerk_protocol_http_nsHttpHandler.cpp) = 8e1d9a0746b637f5f4259e448e72172cfb08b23f

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.278 pkgsrc/www/firefox/mozilla-common.mk:1.279
--- pkgsrc/www/firefox/mozilla-common.mk:1.278  Thu Apr 11 22:20:18 2024
+++ pkgsrc/www/firefox/mozilla-common.mk        Tue Apr 16 20:10:32 2024
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.278 2024/04/11 22:20:18 gutteridge Exp $
+# $NetBSD: mozilla-common.mk,v 1.279 2024/04/16 20:10:32 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -249,7 +249,7 @@ RUST_REQ=   1.70.0
 # TODO: check again, pkgsrc has hunspell 1.7
 # was: textproc/hunspell 1.3 is too old
 #.include "../../textproc/hunspell/buildlink3.mk"
-.include "../../multimedia/ffmpeg7/buildlink3.mk"
+.include "../../multimedia/ffmpeg6/buildlink3.mk"
 .include "../../x11/libXt/buildlink3.mk"
 .include "../../x11/libXtst/buildlink3.mk"
 BUILDLINK_API_DEPENDS.pixman+= pixman>=0.25.2

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.16 pkgsrc/www/firefox/files/node-wrapper.sh:1.17
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.16       Sat Apr  6 08:53:35 2024
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Tue Apr 16 20:10:33 2024
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v21.7.0
+VERS=v21.7.3
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"

Index: pkgsrc/www/firefox/patches/patch-media_libpng_pngpriv.h
diff -u pkgsrc/www/firefox/patches/patch-media_libpng_pngpriv.h:1.6 pkgsrc/www/firefox/patches/patch-media_libpng_pngpriv.h:1.7
--- pkgsrc/www/firefox/patches/patch-media_libpng_pngpriv.h:1.6 Tue Jun 26 09:37:10 2018
+++ pkgsrc/www/firefox/patches/patch-media_libpng_pngpriv.h     Tue Apr 16 20:10:33 2024
@@ -1,15 +1,15 @@
-$NetBSD: patch-media_libpng_pngpriv.h,v 1.6 2018/06/26 09:37:10 jperkin Exp $
+$NetBSD: patch-media_libpng_pngpriv.h,v 1.7 2024/04/16 20:10:33 ryoon Exp $
 
 Fix _POSIX_SOURCE on SunOS.
 
---- media/libpng/pngpriv.h.orig        2018-06-05 19:47:32.000000000 +0000
+--- media/libpng/pngpriv.h.orig        2024-04-05 19:49:16.000000000 +0000
 +++ media/libpng/pngpriv.h
 @@ -36,8 +36,10 @@
   * still required (as of 2011-05-02.)
   */
  #ifndef _POSIX_SOURCE
 +#if !defined(__sun) || (__STDC_VERSION__-0 < 199901L)
- # define _POSIX_SOURCE 1 /* Just the POSIX 1003.1 and C89 APIs */
+ #  define _POSIX_SOURCE 1 /* Just the POSIX 1003.1 and C89 APIs */
  #endif
 +#endif

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: pkgsrc/doc
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: pkgsrc/doc
Indexes:

Home | Main Index | Thread Index | Old Index