CVS commit: [pkgsrc-2025Q2] pkgsrc/www/palemoon

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Mon Aug  4 13:03:01 UTC 2025

Modified Files:
        pkgsrc/www/palemoon [pkgsrc-2025Q2]: Makefile distinfo

Log Message:
Pullup ticket #7000 - requested by nia
www/palemoon: Security fix

Revisions pulled up:
- www/palemoon/Makefile                                         1.37
- www/palemoon/distinfo                                         1.27

---
   Module Name: pkgsrc
   Committed By:        nia
   Date:                Thu Jul 31 10:46:56 UTC 2025

   Modified Files:
        pkgsrc/www/palemoon: Makefile distinfo

   Log Message:
   palemoon: Update to 33.8.1.1

        v33.8.1.1 (2025-07-30)

      This is an important bugfix update.

      Changes/fixes:
        * Fixed a browser crash in the new code introduced in 33.8.1 around
          <object> restrictions.
        * Fixed a regression in the styling of the address bar drop-down making
          links unreadable when highlighted.

        ----------------------------------------------------------------------

        v33.8.1 (2025-07-29)

      This is a bugfix and security release.

      Changes/fixes:
        * Pale Moon no longer accepts nameless cookies. See implementation
          notes.
        * Improved the "copy as curl" command in devtools further, partially
          rolling back the DiD changes in previous versions since we aren't
          offering cross-platform commands and it caused potential issues with
          overzealous escaping.
        * Fixed a potential use-after-free scenario in the CSS parser.
        * Fixed uninitialized use of fontconfig scenarios for Linux/GTK.
        * Adjusted CSP URI reporting to more closely match the current spec and
          common browser behavior.
        * Fixed a potential crash in font handling.
        * Adjusted the size of WASM compiled table size limits to match
          V8/Gecko.
        * Increased restrictions on the types of data loads <object> elements
          are allowed to trigger, to match the fetch spec more closely.
        * Fixed build issues for PPC architectures.
        * Security issues addressed: CVE-2025-8031, CVE-2025-8028 (DiD),
          CVE-2025-8037 (and related), CVE-2025-8029, and several others that do
          not have a CVE number.


To generate a diff of this commit:
cvs rdiff -u -r1.35 -r1.35.2.1 pkgsrc/www/palemoon/Makefile
cvs rdiff -u -r1.25 -r1.25.2.1 pkgsrc/www/palemoon/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/palemoon/Makefile
diff -u pkgsrc/www/palemoon/Makefile:1.35 pkgsrc/www/palemoon/Makefile:1.35.2.1
--- pkgsrc/www/palemoon/Makefile:1.35   Fri Jun  6 17:41:07 2025
+++ pkgsrc/www/palemoon/Makefile        Mon Aug  4 13:03:01 2025
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.35 2025/06/06 17:41:07 nia Exp $
+# $NetBSD: Makefile,v 1.35.2.1 2025/08/04 13:03:01 maya Exp $
 # for build instructions see
 # https://developer.palemoon.org/build/linux/
 
-PKGNAME=       palemoon-33.7.2
+PKGNAME=       palemoon-33.8.1.1
 CATEGORIES=    www
 
 DIST_SUBDIR=   palemoon-${PKGVERSION_NOREV}
@@ -14,7 +14,7 @@ SITES.palemoon.tar.gz= \
        -https://repo.palemoon.org/MoonchildProductions/Pale-Moon/archive/${PKGVERSION_NOREV}_Release.tar.gz
 
 SITES.uxp.tar.gz= \
-       -https://repo.palemoon.org/MoonchildProductions/UXP/archive/RB_20250602.tar.gz
+       -https://repo.palemoon.org/MoonchildProductions/UXP/archive/RB_20250730.tar.gz
 
 SITES.psutil.tar.gz= \
        -https://files.pythonhosted.org/packages/7b/58/2675697b6831e6ac4b7b7bc4e5dcdb24a2f39f8411186573eb0de16eb6d5/psutil-3.4.2.tar.gz

Index: pkgsrc/www/palemoon/distinfo
diff -u pkgsrc/www/palemoon/distinfo:1.25 pkgsrc/www/palemoon/distinfo:1.25.2.1
--- pkgsrc/www/palemoon/distinfo:1.25   Fri Jun  6 17:41:07 2025
+++ pkgsrc/www/palemoon/distinfo        Mon Aug  4 13:03:01 2025
@@ -1,17 +1,17 @@
-$NetBSD: distinfo,v 1.25 2025/06/06 17:41:07 nia Exp $
+$NetBSD: distinfo,v 1.25.2.1 2025/08/04 13:03:01 maya Exp $
 
-BLAKE2s (palemoon-33.7.2/icudt63b.dat.gz) = 609cc504b54df324a891aa9531ab069b3699591bf49b989e792479df33262a92
-SHA512 (palemoon-33.7.2/icudt63b.dat.gz) = 514b8bfe28fb54e1e26b9140d4b3065504a0b0284fded121f26c4e0f13697154a54da4a7c85a0fa0b9dae2e5b452aff4df138228c28ed80969ec0ac33b0ad0b2
-Size (palemoon-33.7.2/icudt63b.dat.gz) = 11145931 bytes
-BLAKE2s (palemoon-33.7.2/palemoon.tar.gz) = c98e917ddb87351f606ad7b5629fb67f72ac33af515eebe4210cd16eaf7c35d5
-SHA512 (palemoon-33.7.2/palemoon.tar.gz) = d554b03d5982c4b3fd3a983c0e0ba4f311f45f0b3d3c69a4da50edcbf345f8a905ad7152a12f590d89f9504b1978c692795df6d6e2ad967d565bf0100ef2fe27
-Size (palemoon-33.7.2/palemoon.tar.gz) = 5607502 bytes
-BLAKE2s (palemoon-33.7.2/psutil.tar.gz) = 7a2c5c938910795453cf1cdfd5fbfa4dc8cac15e6eb43a5e9aba91ac032b37ce
-SHA512 (palemoon-33.7.2/psutil.tar.gz) = 95c246ed4ce68a476f83868312101d88dafa9d4cef96ff60af646a443c00e6cc447d37cc1ac4e85224db16c24390575174bb7ef76f48cb839fe2e93749107ffb
-Size (palemoon-33.7.2/psutil.tar.gz) = 274361 bytes
-BLAKE2s (palemoon-33.7.2/uxp.tar.gz) = 3c168610587dd2add785349d56e4a2277185d15e8c3aa46e1d537318c2daeed7
-SHA512 (palemoon-33.7.2/uxp.tar.gz) = c8a7a56954afe23d875169aeb640110fc6e423d089269b9e5b13c4f0ede37d8f3053ce7e91b4782801def1718a58199ab693be30caee8ab9d8a8ce16180139f3
-Size (palemoon-33.7.2/uxp.tar.gz) = 264521430 bytes
+BLAKE2s (palemoon-33.8.1.1/icudt63b.dat.gz) = 609cc504b54df324a891aa9531ab069b3699591bf49b989e792479df33262a92
+SHA512 (palemoon-33.8.1.1/icudt63b.dat.gz) = 514b8bfe28fb54e1e26b9140d4b3065504a0b0284fded121f26c4e0f13697154a54da4a7c85a0fa0b9dae2e5b452aff4df138228c28ed80969ec0ac33b0ad0b2
+Size (palemoon-33.8.1.1/icudt63b.dat.gz) = 11145931 bytes
+BLAKE2s (palemoon-33.8.1.1/palemoon.tar.gz) = ecf7ba041080e4676f38cd8586dd2abef286608984bb33c551cccd477cad8c39
+SHA512 (palemoon-33.8.1.1/palemoon.tar.gz) = 2546359bc019a22a109fc79c0dacb636413af1277e683fb6eef4ff130041bf681998b89b0c7e77a01b98722abd25ce8eee3aeb59be73cb6f5e486ed712ae50c2
+Size (palemoon-33.8.1.1/palemoon.tar.gz) = 5607260 bytes
+BLAKE2s (palemoon-33.8.1.1/psutil.tar.gz) = 7a2c5c938910795453cf1cdfd5fbfa4dc8cac15e6eb43a5e9aba91ac032b37ce
+SHA512 (palemoon-33.8.1.1/psutil.tar.gz) = 95c246ed4ce68a476f83868312101d88dafa9d4cef96ff60af646a443c00e6cc447d37cc1ac4e85224db16c24390575174bb7ef76f48cb839fe2e93749107ffb
+Size (palemoon-33.8.1.1/psutil.tar.gz) = 274361 bytes
+BLAKE2s (palemoon-33.8.1.1/uxp.tar.gz) = 06dfc3776e5b81e72cc06aed5e1e365f0e12a1711a2288b7e22f1daff488e957
+SHA512 (palemoon-33.8.1.1/uxp.tar.gz) = 461089c7e823dace8e7ba2b28034acbe44a4c7d86a1afdc7d103f998b5561d10825837c906f33b768f3cfa936271b36f5a213e8ff4ff4244916c31bae3483b46
+Size (palemoon-33.8.1.1/uxp.tar.gz) = 264318008 bytes
 SHA1 (patch-palemoon_app_profile_palemoon.js) = 0687dccbb5adff1ee0ea71fef4ebd46174a434d4
 SHA1 (patch-platform_build_moz.build) = 7b45929d58ad0963423f7c859922df6d98413c67
 SHA1 (patch-platform_gfx_angle_src_libANGLE_renderer_gl_glx_FunctionsGLX.cpp) = 502d79eb3ef41e08328bbac9fbb5048b96660bbb