Re: Need help improving the security of Mozilla packages

[nia <nia%NetBSD.org@localhost>]

On Wed, Nov 11, 2020 at 10:41:36PM +0000, nia wrote:
> On Wed, Nov 11, 2020 at 10:37:45PM +0000, nia wrote:
> > Hi,
> > 
> > There's patches in pkgsrc that make Firefox PaX-MPROTECT safe on NetBSD
> > for three versions now, www/firefox, www/firefox78, and www/firefox52.
> > There is also a patch for lang/mozjs68.
> > 
> > The following packages still need to be fixed. Building and testing all
> > of them will take me a long time alone:
> > 
> > - lang/mozjs60
> > - mail/thunderbird52 (based on www/firefox52)
> > - mail/thunderbird68 (based on www/firefox68)
> > - mail/thunderbird (based on www/firefox78)
> > - www/cliqz
> > - www/seamonkey
> > 
> > If you want to help, it should be easy to copy the patches from
> > the most appropriate Firefox version into these packages. You need
> > the following:
> > 
> > - patch-js_src_vm_ArrayBufferObject.cpp
> > - patch-js_src_jit_ProcessExecutableMemory.cpp
> > 
> > After the patches are applied, you should be able to remove
> > NOT_PAX_MPROTECT_SAFE from the package, and bump the revision.
> > 
> > Thanks! (this message is BCCed to the maintainers of said packages)
> 
> Oh, and www/firefox68 also needs fixing (this version is kept for
> compatibility with NetBSD 8.x).

So, does nobody care about these packages?