--- - branch: MAIN date: Wed Apr 5 14:22:36 UTC 2023 files: - new: '1.550' old: '1.549' path: pkgsrc/www/firefox/Makefile pathrev: pkgsrc/www/firefox/Makefile@1.550 type: modified - new: '1.494' old: '1.493' path: pkgsrc/www/firefox/distinfo pathrev: pkgsrc/www/firefox/distinfo@1.494 type: modified - new: '1.73' old: '1.72' path: pkgsrc/www/firefox/options.mk pathrev: pkgsrc/www/firefox/options.mk@1.73 type: modified - new: '1.6' old: '1.5' path: pkgsrc/www/firefox/files/node-wrapper.sh pathrev: pkgsrc/www/firefox/files/node-wrapper.sh@1.6 type: modified - new: '1.32' old: '1.31' path: pkgsrc/www/firefox/patches/patch-media_libcubeb_src_cubeb__alsa.c pathrev: pkgsrc/www/firefox/patches/patch-media_libcubeb_src_cubeb__alsa.c@1.32 type: modified - new: '0' old: '1.22' path: pkgsrc/www/firefox/patches/patch-media_libcubeb_src_moz.build pathrev: pkgsrc/www/firefox/patches/patch-media_libcubeb_src_moz.build@0 type: deleted - new: '1.1' old: '0' path: pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc pathrev: pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc@1.1 type: added - new: '1.16' old: '1.15' path: pkgsrc/www/firefox/patches/patch-toolkit_moz.configure pathrev: pkgsrc/www/firefox/patches/patch-toolkit_moz.configure@1.16 type: modified - new: '1.4' old: '1.3' path: pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp pathrev: pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp@1.4 type: modified id: 20230405T142236Z.4d130716f4d8b83b4d02b136d79a8cca17b149ae log: | firefox: Update to 111.0.1 * Enable eventfd(2) for NetBSD 10 or later. * Fix LICENSE in official Firefox branding case. Changelog: 111.0.1 Fixed * Fixed a crash on macOS while pinch-zooming under some circumstances (bug 1658986). * Fixed a bug causing Firefox to freeze on startup for some Windows users ( bug 1823159). 111.0 New * Windows native notifications are now enabled. * Firefox Relay users can now opt-in to create Relay email masks directly from the Firefox credential manager. You must be signed in with your Firefox Account. * We've added two new locales: Silhe Friulian (fur) and Sardinian (sc). Fixed * Various security fixes. Security fixes #CVE-2023-28159: Fullscreen Notification could have been hidden by download popups on Android #CVE-2023-25748: Fullscreen Notification could have been hidden by window prompts on Android #CVE-2023-25749: Firefox for Android may have opened third-party apps without a prompt #CVE-2023-25750: Potential ServiceWorker cache leak during private browsing mode #CVE-2023-25751: Incorrect code generation during JIT compilation #CVE-2023-28160: Redirect to Web Extension files may have leaked local path #CVE-2023-28164: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation #CVE-2023-28161: One-time permissions granted to a local file were extended to other local files loaded in the same tab #CVE-2023-28162: Invalid downcast in Worklets #CVE-2023-25752: Potential out-of-bounds when accessing throttled streams #CVE-2023-28163: Windows Save As dialog resolved environment variables #CVE-2023-28176: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 #CVE-2023-28177: Memory safety bugs fixed in Firefox 111 module: pkgsrc subject: 'CVS commit: pkgsrc/www/firefox' unixtime: '1680704556' user: ryoon