[pkgsrc/pkgsrc-2020Q2]: pkgsrc/www/firefox68 Pullup ticket #6287 - requested ...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/26d86eeb6ace
branches:  pkgsrc-2020Q2
changeset: 436257:26d86eeb6ace
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Thu Jul 30 18:13:52 2020 +0000

description:
Pullup ticket #6287 - requested by nia
www/firefox68: security fix

Revisions pulled up:
- www/firefox68/Makefile                                        1.31
- www/firefox68/distinfo                                        1.21

---
   Module Name: pkgsrc
   Committed By:        nia
   Date:                Wed Jul 29 14:20:30 UTC 2020

   Modified Files:
        pkgsrc/www/firefox68: Makefile distinfo

   Log Message:
   firefox68: Update to 68.11.0

   Security Vulnerabilities fixed in Firefox ESR 68.11

       #CVE-2020-15652: Potential leak of redirect targets when loading scripts in
       a worker

       #CVE-2020-6514: WebRTC data channel leaks internal address to peer

       #CVE-2020-6463: Use-after-free in ANGLE
       gl::Texture::onUnbindAsSamplerTexture

       #CVE-2020-15650: Overwriting local files through malicious file picker
       application

       #CVE-2020-15649: Exfiltrating local files through malicious file picker
       application

       #CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR
       68.11

diffstat:

 www/firefox68/Makefile |   4 ++--
 www/firefox68/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (31 lines):

diff -r 866beb867415 -r 26d86eeb6ace www/firefox68/Makefile
--- a/www/firefox68/Makefile    Thu Jul 30 16:13:31 2020 +0000
+++ b/www/firefox68/Makefile    Thu Jul 30 18:13:52 2020 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.26.2.1 2020/07/09 08:07:51 bsiegert Exp $
+# $NetBSD: Makefile,v 1.26.2.2 2020/07/30 18:13:52 bsiegert Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            68.10
+MOZ_BRANCH=            68.11
 MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
diff -r 866beb867415 -r 26d86eeb6ace www/firefox68/distinfo
--- a/www/firefox68/distinfo    Thu Jul 30 16:13:31 2020 +0000
+++ b/www/firefox68/distinfo    Thu Jul 30 18:13:52 2020 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.18.2.1 2020/07/09 08:07:51 bsiegert Exp $
+$NetBSD: distinfo,v 1.18.2.2 2020/07/30 18:13:52 bsiegert Exp $
 
-SHA1 (firefox-68.10.0esr.source.tar.xz) = 6c502a8d2379c761250781b313db53d7a270985e
-RMD160 (firefox-68.10.0esr.source.tar.xz) = 870aaf124f1812018c885ed461fc8541df089b5c
-SHA512 (firefox-68.10.0esr.source.tar.xz) = c5c1833560364851e7cf8ea51659bc4fb60239b960125cdb20fe31f742d757ffdaef8f314f800dc91214ee8e358033dc2af971c08bbba474ef6158b101881653
-Size (firefox-68.10.0esr.source.tar.xz) = 314526224 bytes
+SHA1 (firefox-68.11.0esr.source.tar.xz) = 445acbf7b7b8f75374ee6347bb6f45748511bcf9
+RMD160 (firefox-68.11.0esr.source.tar.xz) = 82edab46fe312a47889047fe431784c511684ade
+SHA512 (firefox-68.11.0esr.source.tar.xz) = 7dcfa4944945bce184b96643a7afbd0cc97c93e4f727695bd5ee1e1745cff89784e68baf109588ef56791211b4b8f5c7c056ae6ac77f54fd00a5af5d5606f23e
+Size (firefox-68.11.0esr.source.tar.xz) = 321294384 bytes
 SHA1 (patch-aa) = 9f7200c411cd2217a80ec10a276c8877bc6b845c
 SHA1 (patch-browser_app_profile_firefox.js) = cf93582b68b8d4e72c3c25682ab9138e185418c8
 SHA1 (patch-build_moz.configure_rust.configure) = b57a9b1451dc426d75774f73d7c05fc98fe6e317