PR/56955 CVS commit: [pkgsrc-2023Q2] pkgsrc/www

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

The following reply was made to PR pkg/56955; it has been noted by GNATS.

From: "Benny Siegert" <bsiegert%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/56955 CVS commit: [pkgsrc-2023Q2] pkgsrc/www
Date: Sun, 13 Aug 2023 09:01:14 +0000

 Module Name:	pkgsrc
 Committed By:	bsiegert
 Date:		Sun Aug 13 09:01:14 UTC 2023
 
 Modified Files:
 	pkgsrc/www/firefox102 [pkgsrc-2023Q2]: Makefile distinfo
 	pkgsrc/www/firefox102-l10n [pkgsrc-2023Q2]: Makefile distinfo
 	pkgsrc/www/firefox102/files [pkgsrc-2023Q2]: replace-moz.build.awk
 
 Log Message:
 Pullup ticket #6783 - requested by leot
 www/firefox102: Enable WebRTC X11 desktop capture
 Pullup ticket #6788 - requested by nia
 www/firefox102: security fix
 
 Revisions pulled up:
 - www/firefox102-l10n/Makefile                                  1.14
 - www/firefox102-l10n/distinfo                                  1.13
 - www/firefox102/Makefile                                       1.23-1.24
 - www/firefox102/distinfo                                       1.15
 - www/firefox102/files/replace-moz.build.awk                    1.2
 
 ---
    Module Name:    pkgsrc
    Committed By:   ryoon
    Date:           Wed Jul 26 15:52:05 UTC 2023
 
    Modified Files:
            pkgsrc/www/firefox102: Makefile
            pkgsrc/www/firefox102/files: replace-moz.build.awk
 
    Log Message:
    firefox102: Enable WebRTC X11 desktop capture
 
    Fix PR pkg/56955.
    Bump PKGREVISION.
 
 ---
    Module Name:	pkgsrc
    Committed By:	nia
    Date:		Tue Aug  8 15:46:58 UTC 2023
 
    Modified Files:
    	pkgsrc/www/firefox102: Makefile distinfo
    	pkgsrc/www/firefox102-l10n: Makefile distinfo
 
    Log Message:
    firefox102: Update to 102.14.0
 
    Security Vulnerabilities fixed in Firefox ESR 102.14
 
        #CVE-2023-4045: Offscreen Canvas could have bypassed cross-origin
        restrictions
 
        #CVE-2023-4046: Incorrect value used during WASM compilation
 
        #CVE-2023-4047: Potential permissions request bypass via clickjacking
 
        #CVE-2023-4048: Crash in DOMParser due to out-of-memory conditions
 
        #CVE-2023-4049: Fix potential race conditions when releasing platform
        objects
 
        #CVE-2023-4050: Stack buffer overflow in StorageManager
 
        #CVE-2023-4054: Lack of warning when opening appref-ms files
 
        #CVE-2023-4055: Cookie jar overflow caused unexpected cookie jar state
 
        #CVE-2023-4056: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
        Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.21.2.1 -r1.21.2.2 pkgsrc/www/firefox102/Makefile
 cvs rdiff -u -r1.13.2.1 -r1.13.2.2 pkgsrc/www/firefox102/distinfo
 cvs rdiff -u -r1.12.2.1 -r1.12.2.2 pkgsrc/www/firefox102-l10n/Makefile
 cvs rdiff -u -r1.11.2.1 -r1.11.2.2 pkgsrc/www/firefox102-l10n/distinfo
 cvs rdiff -u -r1.1 -r1.1.8.1 \
     pkgsrc/www/firefox102/files/replace-moz.build.awk
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.