CVS commit: pkgsrc/www/firefox115

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Tue Nov 26 19:11:54 UTC 2024

Modified Files:
        pkgsrc/www/firefox115: Makefile distinfo

Log Message:
firefox115: update to 115.18.0

Security Vulnerabilities fixed in Firefox ESR 115.18

#CVE-2024-11691: Out-of-bounds write in Apple GPU drivers via WebGL

Impact: high

Certain WebGL operations on Apple silicon M series devices could have lead to
an out-of-bounds write and memory corruption due to a flaw in Apple's GPU
driver.
This bug only affected the application on Apple M series hardware. Other
platforms were unaffected.

#CVE-2024-11694: CSP Bypass and XSS Exposure via Web Compatibility Shims

Impact: moderate

Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP
frame-src bypass and DOM-based XSS through the Google SafeFrame shim in the Web
Compatibility extension. This issue could have exposed users to malicious
frames masquerading as legitimate content.


To generate a diff of this commit:
cvs rdiff -u -r1.37 -r1.38 pkgsrc/www/firefox115/Makefile
cvs rdiff -u -r1.19 -r1.20 pkgsrc/www/firefox115/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox115/Makefile
diff -u pkgsrc/www/firefox115/Makefile:1.37 pkgsrc/www/firefox115/Makefile:1.38
--- pkgsrc/www/firefox115/Makefile:1.37 Sun Nov 17 07:16:49 2024
+++ pkgsrc/www/firefox115/Makefile      Tue Nov 26 19:11:54 2024
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.37 2024/11/17 07:16:49 wiz Exp $
+# $NetBSD: Makefile,v 1.38 2024/11/26 19:11:54 bsiegert Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            115.17
+MOZ_BRANCH=            115.18
 MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox115-/}
-PKGREVISION=   2
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}

Index: pkgsrc/www/firefox115/distinfo
diff -u pkgsrc/www/firefox115/distinfo:1.19 pkgsrc/www/firefox115/distinfo:1.20
--- pkgsrc/www/firefox115/distinfo:1.19 Fri Nov  8 02:15:10 2024
+++ pkgsrc/www/firefox115/distinfo      Tue Nov 26 19:11:54 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.19 2024/11/08 02:15:10 gutteridge Exp $
+$NetBSD: distinfo,v 1.20 2024/11/26 19:11:54 bsiegert Exp $
 
-BLAKE2s (firefox-115.17.0esr.source.tar.xz) = b011a4dcfcc2cd2e12857fe492ce29123eef1f1ac796e0e5185f7db44b917e86
-SHA512 (firefox-115.17.0esr.source.tar.xz) = b6edbc8593ecee339c5c5e2384077e78d6c551a420f8577725c3f03608ba729a2c352a77dad6b75ec838095d91bd3b73db79cc64cf1c00e0d60d367f4e1497a2
-Size (firefox-115.17.0esr.source.tar.xz) = 505387352 bytes
+BLAKE2s (firefox-115.18.0esr.source.tar.xz) = 0e99ddebd96b2dc7168062dbaf9f9d33422a9a17aa287ba8b5727a407e41c651
+SHA512 (firefox-115.18.0esr.source.tar.xz) = 620ea4ec0385cf372ef2398ac14225f0b7d60466ac4cc85e7cb074d85aa8b4d1bd74e95d482395a672d61d379bee4443e38937795f44dfedf986a4f8bca26e96
+Size (firefox-115.18.0esr.source.tar.xz) = 509818360 bytes
 BLAKE2s (nodejs-output-115.0.tgz) = 95d25628b865aa71e85c63001f4054d03ff58b273ca05784a021fa176b2b1425
 SHA512 (nodejs-output-115.0.tgz) = 345108033cfbff90e3244bb5591b307e1fcf56c7290b5112e949d400bdadf08c1e4a6d109b5f7264ac417c2cc4e76371cc14678417f6cb017649cc883bdbb4d4
 Size (nodejs-output-115.0.tgz) = 221458 bytes