[pkgsrc/pkgsrc-2020Q1]: pkgsrc/www/firefox68 Pullup ticket #6155 - requested ...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/6f572f5396ee
branches:  pkgsrc-2020Q1
changeset: 427090:6f572f5396ee
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Sat Apr 11 12:39:25 2020 +0000

description:
Pullup ticket #6155 - requested by nia
www/firefox68: security fix

Revisions pulled up:
- www/firefox68/Makefile                                        1.17
- www/firefox68/distinfo                                        1.14

---
   Module Name: pkgsrc
   Committed By:        nia
   Date:                Fri Apr 10 10:41:50 UTC 2020

   Modified Files:
        pkgsrc/www/firefox68: Makefile distinfo

   Log Message:
   firefox68: Update to 68.7.0

   Security Vulnerabilities fixed in Firefox ESR 68.7

       #CVE-2020-6828: Preference overwrite via crafted Intent from malicious
       Android application

       #CVE-2020-6827: Custom Tabs in Firefox for Android could have the URI
       spoofed

       #CVE-2020-6821: Uninitialized memory could be read when using the WebGL
       copyTexSubImage method

       #CVE-2020-6822: Out of bounds write in GMPDecodeData when processing large
       images

       #CVE-2020-6825: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7

diffstat:

 www/firefox68/Makefile |   6 +++---
 www/firefox68/distinfo |  10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diffs (33 lines):

diff -r 1463bfc78538 -r 6f572f5396ee www/firefox68/Makefile
--- a/www/firefox68/Makefile    Thu Apr 09 12:06:47 2020 +0000
+++ b/www/firefox68/Makefile    Sat Apr 11 12:39:25 2020 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.15.2.1 2020/04/09 10:53:14 bsiegert Exp $
+# $NetBSD: Makefile,v 1.15.2.2 2020/04/11 12:39:25 bsiegert Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            68.6
-MOZ_BRANCH_MINOR=      .1esr
+MOZ_BRANCH=            68.7
+MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox68-/}
diff -r 1463bfc78538 -r 6f572f5396ee www/firefox68/distinfo
--- a/www/firefox68/distinfo    Thu Apr 09 12:06:47 2020 +0000
+++ b/www/firefox68/distinfo    Sat Apr 11 12:39:25 2020 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.11.2.1 2020/04/09 10:53:14 bsiegert Exp $
+$NetBSD: distinfo,v 1.11.2.2 2020/04/11 12:39:25 bsiegert Exp $
 
-SHA1 (firefox-68.6.1esr.source.tar.xz) = 47a3ac24f187f64bdffab42872667cb327f22a81
-RMD160 (firefox-68.6.1esr.source.tar.xz) = 0ea4a90102ef0b4d9bb314754fffd4bea7bea2fa
-SHA512 (firefox-68.6.1esr.source.tar.xz) = 9a3a938021989d99d1c7ca6ca166d6e55a82f70f28e8b12c24b1894d72c23ed13a3e84c17ab2ea55091690775d11613d48595c64de2450e5daa43d28b341f17a
-Size (firefox-68.6.1esr.source.tar.xz) = 319034884 bytes
+SHA1 (firefox-68.7.0esr.source.tar.xz) = 27a2728ac1fff2134f2aae2e411f2266c19db1c2
+RMD160 (firefox-68.7.0esr.source.tar.xz) = 2f50d2dc66db24fb628820bdb9b181448c51d561
+SHA512 (firefox-68.7.0esr.source.tar.xz) = a3ddcf8ffe5f568b30b1fc9ddcaa5cebe600bf11ce353c09507d5466f999022d45a0dee9a08f53f37b10202a2e2ce4c180743cd6a2ca38dfea1c3e4487b18593
+Size (firefox-68.7.0esr.source.tar.xz) = 312235932 bytes
 SHA1 (patch-aa) = 9f7200c411cd2217a80ec10a276c8877bc6b845c
 SHA1 (patch-browser_app_profile_firefox.js) = 076cc2892547bac07fe907533f4e821f13f5738e
 SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49