CVS commit: pkgsrc/www/firefox68

["Nia Alarie" <nia%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   nia
Date:           Sun Dec  8 20:09:41 UTC 2019

Modified Files:
        pkgsrc/www/firefox68: Makefile PLIST distinfo mozilla-common.mk

Log Message:
firefox68: Update to 68.3.0

pkgsrc changes:

- Fixed building with wayland libs installed

Security fixes:

- CVE-2019-17008: Use-after-free in worker destruction
- CVE-2019-13722: Stack corruption due to incorrect number of arguments in WebRTC code
- CVE-2019-11745: Out of bounds write in NSS when encrypting with a block cipher
- CVE-2019-17009: Updater temporary files accessible to unprivileged processes
- CVE-2019-17010: Use-after-free when performing device orientation checks
- CVE-2019-17005: Buffer overflow in plain text serializer
- CVE-2019-17011: Use-after-free when retrieving a document in antitracking
- CVE-2019-17012: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/firefox68/Makefile \
    pkgsrc/www/firefox68/distinfo pkgsrc/www/firefox68/mozilla-common.mk
cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/firefox68/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox68/Makefile
diff -u pkgsrc/www/firefox68/Makefile:1.4 pkgsrc/www/firefox68/Makefile:1.5
--- pkgsrc/www/firefox68/Makefile:1.4   Mon Nov 18 12:09:15 2019
+++ pkgsrc/www/firefox68/Makefile       Sun Dec  8 20:09:41 2019
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.4 2019/11/18 12:09:15 ryoon Exp $
+# $NetBSD: Makefile,v 1.5 2019/12/08 20:09:41 nia Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            68.2
+MOZ_BRANCH=            68.3
 MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox68-/}
-PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
Index: pkgsrc/www/firefox68/distinfo
diff -u pkgsrc/www/firefox68/distinfo:1.4 pkgsrc/www/firefox68/distinfo:1.5
--- pkgsrc/www/firefox68/distinfo:1.4   Wed Nov 27 16:22:27 2019
+++ pkgsrc/www/firefox68/distinfo       Sun Dec  8 20:09:41 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.4 2019/11/27 16:22:27 jakllsch Exp $
+$NetBSD: distinfo,v 1.5 2019/12/08 20:09:41 nia Exp $
 
-SHA1 (firefox-68.2.0esr.source.tar.xz) = 19815556c558a99ea76b4abb357eddb684cfd05a
-RMD160 (firefox-68.2.0esr.source.tar.xz) = 25c7447814adb99efea7632b539312becd3b9096
-SHA512 (firefox-68.2.0esr.source.tar.xz) = f6522ca6b9efa3fdeb866912ab9cb904eaace5806c606d5721cba23aebd679885670011c743ca8d381b579b728077182dc766f9b6d3b31ccf51c3eb583c547ee
-Size (firefox-68.2.0esr.source.tar.xz) = 312103756 bytes
+SHA1 (firefox-68.3.0esr.source.tar.xz) = 220c262c5cb2ee81d29c58a5afe4522c9880cf2b
+RMD160 (firefox-68.3.0esr.source.tar.xz) = 7cf26bd69a7414cdd78ab196e9add78b7235ef7c
+SHA512 (firefox-68.3.0esr.source.tar.xz) = f99a4a18aa1b4472152fc6de68ef56ee071c1adfc70a907c10943f8436758c9adc0fe05a90b894ea521cc0c30782e6e2c29f04747d7edf3e55080fa0c4ebf8c3
+Size (firefox-68.3.0esr.source.tar.xz) = 312378276 bytes
 SHA1 (patch-aa) = 1f292aae7d37bd480ba834324b737bfebee52503
 SHA1 (patch-browser_app_profile_firefox.js) = 076cc2892547bac07fe907533f4e821f13f5738e
 SHA1 (patch-build_moz.configure_old.configure) = 05963b12fd908d90e3378b30cff7e48291b8a447
Index: pkgsrc/www/firefox68/mozilla-common.mk
diff -u pkgsrc/www/firefox68/mozilla-common.mk:1.4 pkgsrc/www/firefox68/mozilla-common.mk:1.5
--- pkgsrc/www/firefox68/mozilla-common.mk:1.4  Mon Nov 18 12:08:10 2019
+++ pkgsrc/www/firefox68/mozilla-common.mk      Sun Dec  8 20:09:41 2019
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.4 2019/11/18 12:08:10 ryoon Exp $
+# $NetBSD: mozilla-common.mk,v 1.5 2019/12/08 20:09:41 nia Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -165,6 +165,13 @@ PLIST.tremor=      yes
 PLIST.vorbis=  yes
 .endif
 
+.include "../../mk/pkg-build-options.mk"
+
+PLIST_VARS+=   wayland
+.if !empty(PKG_BUILD_OPTIONS.gtk3:Mwayland)
+PLIST.wayland= yes
+.endif
+
 # See ${WRKSRC}/mozglue/build/moz.build: libmozglue is built and
 # installed as a shared library on these platforms.
 .if ${OPSYS} == "Cygwin" || ${OPSYS} == "Darwin" # or Android

Index: pkgsrc/www/firefox68/PLIST
diff -u pkgsrc/www/firefox68/PLIST:1.2 pkgsrc/www/firefox68/PLIST:1.3
--- pkgsrc/www/firefox68/PLIST:1.2      Tue Nov  5 17:14:30 2019
+++ pkgsrc/www/firefox68/PLIST  Sun Dec  8 20:09:41 2019
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2019/11/05 17:14:30 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.3 2019/12/08 20:09:41 nia Exp $
 bin/firefox68
 lib/firefox68/actors/AudioPlaybackChild.jsm
 lib/firefox68/actors/AutoplayChild.jsm
@@ -5267,6 +5267,7 @@ ${PLIST.ffvpx}lib/firefox68/libmozavcode
 ${PLIST.ffvpx}lib/firefox68/libmozavutil.so
 lib/firefox68/libmozgtk.so
 lib/firefox68/libmozsqlite3.so
+${PLIST.wayland}lib/firefox68/libmozwayland.so
 lib/firefox68/libxul.so
 lib/firefox68/localization/en-US/crashreporter/aboutcrashes.ftl
 lib/firefox68/localization/en-US/security/certificates/certManager.ftl