CVS commit: pkgsrc/www/firefox

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/www/firefox
From: "Ryo ONODERA" <ryoon%netbsd.org@localhost>
Date: Fri, 26 Sep 2025 23:15:49 +0000

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Fri Sep 26 23:15:49 UTC 2025

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo
        pkgsrc/www/firefox/patches:
            patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
            patch-third__party_libwebrtc_rtc__base_memory__usage.cc
Added Files:
        pkgsrc/www/firefox/patches:
            patch-dom_media_webrtc_libwebrtc__overrides_moz.build

Log Message:
www/firefox: Update to 143.0.1

Changelog:
143.0.1:
Fixed

  * Fixed a tab crash experienced by some users caused by DLL injection. (Bug
    1872261)

143.0:
New

  * On Windows, Firefox now supports running websites as web apps pinned
    directly to the taskbar. These are sites that you can pin and run as
    simplified windows directly from the taskbar without losing access to your
    installed add-ons. This feature is not currently available for Firefox
    installs from the Microsoft Store.

  * Tabs can now be pinned by dragging them to the start of the tab strip,
    making it easier to keep important sites within reach.

  * Copilot from Microsoft can now be chosen as a chatbot to use in the sidebar
    for quick access without leaving your main view.

  * When a site asks for camera access, it can now be previewed inside the
    permission dialog. This is especially helpful when switching between
    multiple cameras.

  * The Firefox address bar can now show you important dates and events. This
    feature supports displaying events (e.g. ??Mother??s Day??) in the United
    States, United Kingdom, Germany, France, and Italy regions.

  * Firefox has expanded its Fingerprinting Protection by reporting constant
    values for several more attributes of user's computers.

  * When downloading a file in Private Browsing mode, Firefox now asks whether
    to keep or delete it after that session ends. You can adjust this behavior
    in Settings.

  * Firefox now supports Windows UI Automation, which improves support for
    accessibility tools such as Windows Voice Access, Text Cursor Indicator and
    Narrator.

Fixed

  * Various security fixes.

Security fixes:
Mozilla Foundation Security Advisory 2025-73
#CVE-2025-10527: Sandbox escape due to use-after-free in the Graphics: Canvas2D
 component
#CVE-2025-10528: Sandbox escape due to undefined behavior, invalid pointer in
 the Graphics: Canvas2D component
#CVE-2025-10529: Same-origin policy bypass in the Layout component
#CVE-2025-10530: Spoofing issue in the WebAuthn component in Firefox for
 Android
#CVE-2025-10531: Mitigation bypass in the Web Compatibility: Tooling component
#CVE-2025-10532: Incorrect boundary conditions in the JavaScript: GC component
#CVE-2025-10533: Integer overflow in the SVG component
#CVE-2025-10534: Spoofing issue in the Site Permissions component
#CVE-2025-10535: Information disclosure, mitigation bypass in the Privacy
 component in Firefox for Android
#CVE-2025-10536: Information disclosure in the Networking: Cache component
#CVE-2025-10537: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR
 140.3, Firefox 143 and Thunderbird 143


To generate a diff of this commit:
cvs rdiff -u -r1.642 -r1.643 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.563 -r1.564 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/www/firefox/patches/patch-dom_media_webrtc_libwebrtc__overrides_moz.build
cvs rdiff -u -r1.5 -r1.6 \
    pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
cvs rdiff -u -r1.3 -r1.4 \
    pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_memory__usage.cc

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.642 pkgsrc/www/firefox/Makefile:1.643
--- pkgsrc/www/firefox/Makefile:1.642   Sat Aug 30 22:46:30 2025
+++ pkgsrc/www/firefox/Makefile Fri Sep 26 23:15:49 2025
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.642 2025/08/30 22:46:30 wiz Exp $
+# $NetBSD: Makefile,v 1.643 2025/09/26 23:15:49 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            142.0
+MOZ_BRANCH=            143.0
 MOZ_BRANCH_MINOR=      .1
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
-PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.563 pkgsrc/www/firefox/distinfo:1.564
--- pkgsrc/www/firefox/distinfo:1.563   Fri Aug 29 11:20:15 2025
+++ pkgsrc/www/firefox/distinfo Fri Sep 26 23:15:49 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.563 2025/08/29 11:20:15 ryoon Exp $
+$NetBSD: distinfo,v 1.564 2025/09/26 23:15:49 ryoon Exp $
 
-BLAKE2s (firefox-142.0.1.source.tar.xz) = 81b7e888bc8c92d3fb4934d699fc11dfc66a4c1b31225cc8fe8000ea528b7507
-SHA512 (firefox-142.0.1.source.tar.xz) = fca1b9c67a0b2f216f1f11fd5e3a08920998921e3d61eb633f1dde7fe69cb40cdbb63a41a1dfc4f1022509da643e3791467d88e62e7ea30b293ebf69d87bb585
-Size (firefox-142.0.1.source.tar.xz) = 634262768 bytes
+BLAKE2s (firefox-143.0.1.source.tar.xz) = 54e37574b69058c5775d54bda1383c6649908fa8949094a72c4f4cc4864f19e0
+SHA512 (firefox-143.0.1.source.tar.xz) = ef00d8bab715e7c2f4c138cfce0698e004f0616c767c8a7fa918e24e4a9f9151c41184d9c089ccbc6ab46a3b4bf6f12d723196f47e9c9d7f55f2ca44bab17cb2
+Size (firefox-143.0.1.source.tar.xz) = 645101268 bytes
 BLAKE2s (nodejs-output-142.0.1.tgz) = b0b340f8accfc2ff8296298bd8ddd447d278fcc08cc42b1a7f62752542dde80f
 SHA512 (nodejs-output-142.0.1.tgz) = f40201f1fee4db3e8f722ad57637c732c208c7884aa10914931a22427b29958591ce623b94d63776eb6a2a3779ba017c71706df9b39280040f1db166815b8d72
 Size (nodejs-output-142.0.1.tgz) = 245965 bytes
@@ -12,6 +12,7 @@ SHA1 (patch-build_moz.configure_rust.con
 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 9d1f15ff487efa9202114d19ed5668b4e7aa032a
 SHA1 (patch-config_makefiles_rust.mk) = 3366ab089a23e66230e7e23749c10db38018fdd4
 SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49
+SHA1 (patch-dom_media_webrtc_libwebrtc__overrides_moz.build) = a2ff7cf1e6aaf888ee78581d89c7e658f46c3fcd
 SHA1 (patch-dom_webtransport_api_WebTransportDatagramDuplexStream.cpp) = b93b4c6367bd2fb3d1868ab7d97ca56c100be414
 SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993
 SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = b2adce9e65662283a11b6dcff40e95523e940045
@@ -36,12 +37,12 @@ SHA1 (patch-third__party_abseil-cpp_absl
 SHA1 (patch-third__party_abseil-cpp_absl_debugging_internal_vdso__support.cc) = f9c44d0d6fd952296f23c24f56053958b30d8e5c
 SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4
 SHA1 (patch-third__party_libwebrtc_modules_audio__device_audio__device__impl.cc) = 47ba1a2b88b3fdfd16cd29da3eb1e4a218ecada8
-SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = f3ae2f460bddbe0e68d9af36f7db7c1e2f72fca0
+SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = f53af8e5383f31b5de7df21f80eb53d60c11eae1
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = fc203b7a8c1557303e61cc598dc94c5cccf6f0a4
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 8831d477f14fd4f8f735ff0c1a322cba8c70e277
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_video__capture__options.cc) = e15f7e365ef6d57cd262f920f49c4d73f3a13305
-SHA1 (patch-third__party_libwebrtc_rtc__base_memory__usage.cc) = f8d926d400bf3df107127823eac27816f4b85644
+SHA1 (patch-third__party_libwebrtc_rtc__base_memory__usage.cc) = a831145ba15b30d30c6e6e216b574d416253ed4a
 SHA1 (patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc) = 6909c4da9e7b3785252e5bce9be0ff47ebb87e01
 SHA1 (patch-third__party_libwebrtc_rtc__base_platform__thread__types.cc) = 8ae75100775037347008d168eedc151e0e993b0f
 SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = b90e22b50879f7adcc1da3a993f52c0701b720f8

Index: pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
diff -u pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.5 
pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.6
--- pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.5 Fri Aug 29 11:20:15 2025
+++ pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build     Fri Sep 26 23:15:49 2025
@@ -1,20 +1,20 @@
-$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build,v 1.5 2025/08/29 11:20:15 ryoon Exp $
+$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build,v 1.6 2025/09/26 23:15:49 ryoon Exp $
 
 * Disable Wayland desktop capture for non-Linux platforms.
   Fix segfault under X11.
 
---- third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build.orig    2025-08-14 03:49:04.015142549 +0000
+--- third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build.orig    2025-09-10 12:09:29.925962441 +0000
 +++ third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build
-@@ -418,7 +418,7 @@ if CONFIG["MOZ_DEBUG"] == "1" and CONFIG
+@@ -414,7 +414,7 @@ if CONFIG["MOZ_DEBUG"] == "1" and CONFIG
  
      DEFINES["_HAS_ITERATOR_DEBUGGING"] = "0"
  
 -if CONFIG["TARGET_CPU"] == "aarch64" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
 +if CONFIG["TARGET_CPU"] == "aarch64" and CONFIG["OS_TARGET"] == "Linux":
  
-     DEFINES["CR_SYSROOT_KEY"] = "20250129T203412Z-1"
      DEFINES["WEBRTC_USE_PIPEWIRE"] = True
-@@ -470,7 +470,7 @@ if CONFIG["OS_TARGET"] == "Linux" and CO
+     DEFINES["_GNU_SOURCE"] = True
+@@ -464,7 +464,7 @@ if CONFIG["OS_TARGET"] == "Linux" and CO
          "/third_party/libwebrtc/modules/desktop_capture/linux/x11/x_window_property.cc"
      ]
  
@@ -23,16 +23,16 @@ $NetBSD: patch-third__party_libwebrtc_mo
  
      CXXFLAGS += [
          "-msse2"
-@@ -499,7 +499,7 @@ if CONFIG["TARGET_CPU"] == "x86" and (CO
+@@ -492,7 +492,7 @@ if CONFIG["TARGET_CPU"] == "x86" and (CO
          "/third_party/libwebrtc/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc"
      ]
  
 -if CONFIG["TARGET_CPU"] == "x86_64" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
 +if CONFIG["TARGET_CPU"] == "x86_64" and CONFIG["OS_TARGET"] == "Linux":
  
-     DEFINES["CR_SYSROOT_KEY"] = "20250129T203412Z-1"
      DEFINES["WEBRTC_USE_PIPEWIRE"] = True
-@@ -663,6 +663,10 @@ if CONFIG["TARGET_CPU"] == "x86_64" and 
+     DEFINES["_GNU_SOURCE"] = True
+@@ -650,6 +650,10 @@ if CONFIG["TARGET_CPU"] == "x86_64" and 
  
      DEFINES["WEBRTC_USE_X11"] = True
  

Index: pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_memory__usage.cc
diff -u pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_memory__usage.cc:1.3 pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_memory__usage.cc:1.4
--- pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_memory__usage.cc:1.3      Sat Jul 26 14:12:54 2025
+++ pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_memory__usage.cc  Fri Sep 26 23:15:49 2025
@@ -1,22 +1,23 @@
-$NetBSD: patch-third__party_libwebrtc_rtc__base_memory__usage.cc,v 1.3 2025/07/26 14:12:54 ryoon Exp $
+$NetBSD: patch-third__party_libwebrtc_rtc__base_memory__usage.cc,v 1.4 2025/09/26 23:15:49 ryoon Exp $
 
---- third_party/libwebrtc/rtc_base/memory_usage.cc.orig        2025-05-21 12:27:20.023110519 +0000
+--- third_party/libwebrtc/rtc_base/memory_usage.cc.orig        2025-09-10 12:13:46.353394466 +0000
 +++ third_party/libwebrtc/rtc_base/memory_usage.cc
-@@ -10,7 +10,7 @@
+@@ -12,7 +12,7 @@
  
- #include "rtc_base/memory_usage.h"
+ #include <cstdint>
  
 -#if defined(WEBRTC_LINUX)
 +#if defined(WEBRTC_LINUX) || defined(WEBRTC_BSD)
  #include <unistd.h>
  
  #include <cstdio>
-@@ -32,7 +32,7 @@
- namespace rtc {
+@@ -34,7 +34,8 @@
+ namespace webrtc {
  
  int64_t GetProcessResidentSizeBytes() {
 -#if defined(WEBRTC_LINUX)
 +#if defined(WEBRTC_LINUX) || defined(WEBRTC_BSD)
++ #include <unistd.h>
    FILE* file = fopen("/proc/self/statm", "r");
    if (file == nullptr) {
      RTC_LOG(LS_ERROR) << "Failed to open /proc/self/statm";

Added files:

Index: pkgsrc/www/firefox/patches/patch-dom_media_webrtc_libwebrtc__overrides_moz.build
diff -u /dev/null pkgsrc/www/firefox/patches/patch-dom_media_webrtc_libwebrtc__overrides_moz.build:1.1
--- /dev/null   Fri Sep 26 23:15:49 2025
+++ pkgsrc/www/firefox/patches/patch-dom_media_webrtc_libwebrtc__overrides_moz.build    Fri Sep 26 23:15:49 2025
@@ -0,0 +1,13 @@
+$NetBSD: patch-dom_media_webrtc_libwebrtc__overrides_moz.build,v 1.1 2025/09/26 23:15:49 ryoon Exp $
+
+--- dom/media/webrtc/libwebrtc_overrides/moz.build.orig        2025-09-10 13:58:16.516218833 +0000
++++ dom/media/webrtc/libwebrtc_overrides/moz.build
+@@ -52,7 +52,7 @@ if CONFIG["OS_TARGET"] == "Linux" and CO
+ 
+ if (
+     CONFIG["MOZ_X11"] == "1"
+-    and CONFIG["OS_TARGET"] == "Linux"
++    and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD")
+     and CONFIG["TARGET_CPU"] in ("aarch64", "arm", "mips32", "mips64", "x86", "x86_64")
+ ):
+     UNIFIED_SOURCES += [

Prev by Date: CVS commit: pkgsrc
Next by Date: CVS commit: pkgsrc/doc
Previous by Thread: CVS commit: pkgsrc
Next by Thread: CVS commit: pkgsrc/doc
Indexes:

Home | Main Index | Thread Index | Old Index