CVS commit: pkgsrc/www/firefox153

["David H. Gutteridge" <gutteridge%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   gutteridge
Date:           Wed Oct 21 04:11:26 UTC 2026

Modified Files:
        pkgsrc/www/firefox153: Makefile distinfo

Log Message:
firefox153: update to 153.5.1

Mozilla Foundation Security Advisory 2026-112
Security Vulnerabilities fixed in Firefox ESR 153.5.1

Announced
    October 20, 2026
Impact
    high
Products
    Firefox ESR
Fixed in

        Firefox ESR 153.5.1

Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.

#CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component

Reporter
    Wayne
Impact
    high

Description

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated 
OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is disabled by policy or otherwise unavailable in the user's network environment.
References

    Bug 2083382


To generate a diff of this commit:
cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/firefox153/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/firefox153/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox153/Makefile
diff -u pkgsrc/www/firefox153/Makefile:1.9 pkgsrc/www/firefox153/Makefile:1.10
--- pkgsrc/www/firefox153/Makefile:1.9  Tue Oct 13 13:11:04 2026
+++ pkgsrc/www/firefox153/Makefile      Wed Oct 21 04:11:26 2026
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.9 2026/10/13 13:11:04 gutteridge Exp $
+# $NetBSD: Makefile,v 1.10 2026/10/21 04:11:26 gutteridge Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
 MOZ_BRANCH=            153.5
-MOZ_BRANCH_MINOR=      .0esr
+MOZ_BRANCH_MINOR=      .1esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox153-/}

Index: pkgsrc/www/firefox153/distinfo
diff -u pkgsrc/www/firefox153/distinfo:1.5 pkgsrc/www/firefox153/distinfo:1.6
--- pkgsrc/www/firefox153/distinfo:1.5  Tue Oct 13 13:11:04 2026
+++ pkgsrc/www/firefox153/distinfo      Wed Oct 21 04:11:26 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.5 2026/10/13 13:11:04 gutteridge Exp $
+$NetBSD: distinfo,v 1.6 2026/10/21 04:11:26 gutteridge Exp $
 
-BLAKE2s (firefox-153.5.0esr.source.tar.xz) = 9cd6556c9accb9f9cdbdfbcae1a934e7de4b5ae9394a93a5ceb8d545f8124a0a
-SHA512 (firefox-153.5.0esr.source.tar.xz) = 9acb8d1a4b241767e39da36d6f520d4edaae0f237f311496beeed10e2383cf399b0af11cac6984d425b620af0ecba3e67808637ec74733c7d23186d0dd2bd5d4
-Size (firefox-153.5.0esr.source.tar.xz) = 801858032 bytes
+BLAKE2s (firefox-153.5.1esr.source.tar.xz) = 6ef265168be332e58b72d84490948da441406ec2a27f28296b9154c9fcaf45f4
+SHA512 (firefox-153.5.1esr.source.tar.xz) = 9dccf8c5383653ddcf807b500889a91f9b9d56a512dab88a2683755ae6cb0c4b5d0788faa9541e5709a2b783002ee9f434020a43c8a43653038a2c3decd9f2c1
+Size (firefox-153.5.1esr.source.tar.xz) = 801725652 bytes
 BLAKE2s (nodejs-output-153.0.tgz) = 55a9ae8d1b743f57148a3b763bce2bc9afe2bd902f5b5d6a07a3e597c569aca1
 SHA512 (nodejs-output-153.0.tgz) = 2513c4c47c9bb619a1702a36b8ec316a6c48d6b641656abf86ff33c5ae9e146721947b26a3a1af8295a005daeffb0c77e5f82f36ca9a717decc6850b3518c275
 Size (nodejs-output-153.0.tgz) = 247910 bytes