CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Feb 15 20:38:14 UTC 2023

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk
Removed Files:
        pkgsrc/www/firefox/patches: patch-media_libcubeb_src_cubeb__jack.cpp

Log Message:
firefox: Update to 110.0

Changelog:
110.0
New

  * It's now possible to import bookmarks, history and passwords not only from
    Edge, Chrome or Safari but also from Opera, Opera GX, and Vivaldi for all
    the folks who want to move over to Firefox instead!

  * GPU sandboxing has been enabled on Windows.

    Note: A bug in the popular X-Mouse Button Control (XMBC) tool may cause
    mouse wheel scrolling to stop working. The author(s) are working on an
    update. Meanwhile, scrolling can be restored by reconfiguring XMBC: either
    disable the Make scroll wheel scroll window under cursor option in the
    global settings, or enable the Disable scroll window under cursor option if
    using a custom profile for Firefox.

  * On Windows, third-party modules can now be blocked from injecting
    themselves into Firefox, which can be helpful if they are causing crashes
    or other undesirable behavior.

  * Date, time, and datetime-local input fields can now be cleared with
    Cmd+Backspace and Cmd+Delete shortcut on macOS and Ctrl+Backspace and
    Ctrl+Delete on Windows and Linux.

  * GPU-accelerated Canvas2D is enabled by default on macOS and Linux.

  * WebGL performance improvement on Windows, MacOS and Linux.

  * Enables overlay of hardware-decoded video with non-Intel GPUs on Windows 10
    /11, improving video playback performance and video scaling quality.

Fixed

  * Various security fixes.

Changed

  * Colorways are no longer available in Firefox, at least not in the same way.
    You can still access your saved and active Colorways by selecting Add-ons
    and themes from the Firefox menu. Additionally, you can now install
    Colorways from all of the previous collections by visiting Colorways by
    Firefox on the Mozilla Add-ons website.

Enterprise

  * Various bug fixes and new policies have been implemented in the latest
    version of Firefox. You can find more information in the Firefox for
    Enterprise 110 Release Notes.

Web Platform

  * Firefox now supports CSS named pages, allowing web pages to perform
    per-page layout and add page-breaks in a declarative manner when printing.

  * Firefox now supports CSS size container queries, see the MDN page for
    documentation on this feature.

Security fixes:
#CVE-2023-25728: Content security policy leak in violation reports using
#CVE-2023-25730: Screen hijack via browser fullscreen mode
#CVE-2023-25743: Fullscreen notification not shown in Firefox Focus
#CVE-2023-0767: Arbitrary memory write via PKCS 12 in NSS
#CVE-2023-25735: Potential use-after-free from compartment mismatch in
 SpiderMonkey
#CVE-2023-25737: Invalid downcast in SVGUtils::SetupStrokeGeometry
#CVE-2023-25738: Printing on Windows could potentially crash Firefox with some
 device drivers
#CVE-2023-25739: Use-after-free in
 mozilla::dom::ScriptLoadContext::~ScriptLoadContext
#CVE-2023-25729: Extensions could have opened external schemes without user
 knowledge
#CVE-2023-25732: Out of bounds memory write from EncodeInputStream
#CVE-2023-25734: Opening local .url files could cause unexpected network loads
#CVE-2023-25740: Opening local .scf files could cause unexpected network loads
#CVE-2023-25731: Prototype pollution when rendering URLPreview
#CVE-2023-25733: Possible null pointer dereference in TaskbarPreviewCallback
#CVE-2023-25736: Invalid downcast in GetTableSelectionMode
#CVE-2023-25741: Same-origin policy leak via image drag and drop
#CVE-2023-25742: Web Crypto ImportKey crashes tab
#CVE-2023-25744: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
#CVE-2023-25745: Memory safety bugs fixed in Firefox 110


To generate a diff of this commit:
cvs rdiff -u -r1.547 -r1.548 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.491 -r1.492 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.248 -r1.249 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.3 -r0 \
    pkgsrc/www/firefox/patches/patch-media_libcubeb_src_cubeb__jack.cpp

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.547 pkgsrc/www/firefox/Makefile:1.548
--- pkgsrc/www/firefox/Makefile:1.547   Sat Feb  4 17:14:33 2023
+++ pkgsrc/www/firefox/Makefile Wed Feb 15 20:38:13 2023
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.547 2023/02/04 17:14:33 ryoon Exp $
+# $NetBSD: Makefile,v 1.548 2023/02/15 20:38:13 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            109.0
-MOZ_BRANCH_MINOR=      .1
+MOZ_BRANCH=            110.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.491 pkgsrc/www/firefox/distinfo:1.492
--- pkgsrc/www/firefox/distinfo:1.491   Sat Feb  4 17:14:33 2023
+++ pkgsrc/www/firefox/distinfo Wed Feb 15 20:38:13 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.491 2023/02/04 17:14:33 ryoon Exp $
+$NetBSD: distinfo,v 1.492 2023/02/15 20:38:13 ryoon Exp $
 
-BLAKE2s (firefox-109.0.1.source.tar.xz) = 3812228815f048461f7df93a7078a0fbe5b8966d51825dea695aaa5840ef45ef
-SHA512 (firefox-109.0.1.source.tar.xz) = 58b21449a16a794152888f50e7fe9488c28739a7e067729acdc1de9f2e8384e6316cffdfe89f690f0d211189668d940825b4f8a26b8100468ae120772df99d72
-Size (firefox-109.0.1.source.tar.xz) = 493832884 bytes
+BLAKE2s (firefox-110.0.source.tar.xz) = 90cea360203705d0340480bacd6d11e7035f717fa8c68b555845457400654ba6
+SHA512 (firefox-110.0.source.tar.xz) = 52a37a8f59a694c4790c0a14cd81fba9e2c982f64e00191afd0897c39ae1d5e25f24cff16f74d0a0b5cdf8e93a9a0974b6042b0de605cf1a533ef4e6a3c0dcf9
+Size (firefox-110.0.source.tar.xz) = 499042592 bytes
 BLAKE2s (nodejs-output-95.0.tgz) = c44b37d3605524a49157002f01c29f568f04194b0e635bc312de7ffdeb9a74c9
 SHA512 (nodejs-output-95.0.tgz) = 2faf326f4e100b66f8597c365cc2eb5d0eee26aae92a7e2446891f2178041aa71ba16eae37000acacd43a657025ec11c18db73b112f5c49cc21cdb882da6d798
 Size (nodejs-output-95.0.tgz) = 200627 bytes
@@ -25,7 +25,6 @@ SHA1 (patch-js_src_util_NativeStack.cpp)
 SHA1 (patch-js_src_vm_ArrayBufferObject.cpp) = 374ffc0ce12e1c5babf2e553aba96612b0a30b1e
 SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = de58daa0fd23d4fec50426602b65c9ea5862558a
 SHA1 (patch-media_libcubeb_src_cubeb__alsa.c) = 2ef11da83c90c41490db4c0d9809c3e1826b488a
-SHA1 (patch-media_libcubeb_src_cubeb__jack.cpp) = fc546c5e6582fd5eda64ba83287dfbbb3c9e229f
 SHA1 (patch-media_libcubeb_src_moz.build) = 77d33aee556babe2f45638d06be9944c063ca171
 SHA1 (patch-media_libpng_pngpriv.h) = c8084332560017cd7c9b519b61d125fa28af0dbc
 SHA1 (patch-media_libtheora_lib_info.c) = f6dbf536d73859a1ff78304c2e9f6a6f74dac01f

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.248 pkgsrc/www/firefox/mozilla-common.mk:1.249
--- pkgsrc/www/firefox/mozilla-common.mk:1.248  Sat Jan 21 01:14:07 2023
+++ pkgsrc/www/firefox/mozilla-common.mk        Wed Feb 15 20:38:13 2023
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.248 2023/01/21 01:14:07 ryoon Exp $
+# $NetBSD: mozilla-common.mk,v 1.249 2023/02/15 20:38:13 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -7,12 +7,6 @@
 .include "../../mk/bsd.prefs.mk"
 
 PYTHON_VERSIONS_INCOMPATIBLE=  27
-# ERROR: .../firefox-105.0.3/xpcom/idl-parser/xpidl/xpidl.py:1620: Invalid regular expression for rule 't_multilinecomment'. global flags not at the start of the expression at position 26
-# ERROR: .../firefox/work/firefox-105.0.3/xpcom/idl-parser/xpidl/xpidl.py:1626: Invalid regular expression for rule 't_singlelinecomment'. global flags not at the start of the expression at position 
24
-# ERROR: .../firefox/work/firefox-105.0.3/xpcom/idl-parser/xpidl/xpidl.py:1639: Invalid regular expression for rule 't_LCDATA'. global flags not at the start of the expression at position 13
-# leading to:
-# SyntaxError: Can't build lexer
-PYTHON_VERSIONS_INCOMPATIBLE+= 311
 PYTHON_FOR_BUILD_ONLY=         tool
 ALL_ENV+=                      PYTHON3=${PYTHONBIN}
 
@@ -203,7 +197,7 @@ BUILDLINK_API_DEPENDS.libevent+=    libeven
 BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.34
 .include "../../devel/nspr/buildlink3.mk"
 .include "../../textproc/icu/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nss+=    nss>=3.86
+BUILDLINK_API_DEPENDS.nss+=    nss>=3.87
 .include "../../devel/nss/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 #.include "../../mk/jpeg.buildlink3.mk"