Received: by mail.netbsd.org (Postfix, from userid 605) id 104AD84D6A; Wed, 3 Jun 2020 13:00:26 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 8A71384D69 for ; Wed, 3 Jun 2020 13:00:25 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id W8u9yh8SCrSa for ; Wed, 3 Jun 2020 13:00:25 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id ED64C84D22 for ; Wed, 3 Jun 2020 13:00:24 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id E6964FB27; Wed, 3 Jun 2020 13:00:24 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1591189224272710" MIME-Version: 1.0 Date: Wed, 3 Jun 2020 13:00:24 +0000 From: "Nia Alarie" Subject: CVS commit: pkgsrc/www/firefox68 To: pkgsrc-changes@NetBSD.org Reply-To: nia@netbsd.org X-Mailer: log_accum Message-Id: <20200603130024.E6964FB27@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1591189224272710 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: nia Date: Wed Jun 3 13:00:24 UTC 2020 Modified Files: pkgsrc/www/firefox68: Makefile distinfo Added Files: pkgsrc/www/firefox68/patches: patch-build_moz.configure_rust.configure Log Message: firefox68: Update to 68.9.0 Security Vulnerabilities fixed in Firefox ESR 68.9 #CVE-2020-12399: Timing attack on DSA signatures in NSS library #CVE-2020-12405: Use-after-free in SharedWorkerService #CVE-2020-12406: JavaScript Type confusion with NativeTypes #CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 To generate a diff of this commit: cvs rdiff -u -r1.21 -r1.22 pkgsrc/www/firefox68/Makefile cvs rdiff -u -r1.15 -r1.16 pkgsrc/www/firefox68/distinfo cvs rdiff -u -r0 -r1.1 \ pkgsrc/www/firefox68/patches/patch-build_moz.configure_rust.configure Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1591189224272710 Content-Disposition: inline Content-Length: 3545 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/firefox68/Makefile diff -u pkgsrc/www/firefox68/Makefile:1.21 pkgsrc/www/firefox68/Makefile:1.22 --- pkgsrc/www/firefox68/Makefile:1.21 Tue Jun 2 08:24:56 2020 +++ pkgsrc/www/firefox68/Makefile Wed Jun 3 13:00:24 2020 @@ -1,12 +1,11 @@ -# $NetBSD: Makefile,v 1.21 2020/06/02 08:24:56 adam Exp $ +# $NetBSD: Makefile,v 1.22 2020/06/03 13:00:24 nia Exp $ FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR} -MOZ_BRANCH= 68.8 +MOZ_BRANCH= 68.9 MOZ_BRANCH_MINOR= .0esr DISTNAME= firefox-${FIREFOX_VER}.source PKGNAME= ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox68-/} -PKGREVISION= 1 CATEGORIES= www MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/} EXTRACT_SUFX= .tar.xz Index: pkgsrc/www/firefox68/distinfo diff -u pkgsrc/www/firefox68/distinfo:1.15 pkgsrc/www/firefox68/distinfo:1.16 --- pkgsrc/www/firefox68/distinfo:1.15 Sat May 9 13:08:01 2020 +++ pkgsrc/www/firefox68/distinfo Wed Jun 3 13:00:24 2020 @@ -1,11 +1,12 @@ -$NetBSD: distinfo,v 1.15 2020/05/09 13:08:01 nia Exp $ +$NetBSD: distinfo,v 1.16 2020/06/03 13:00:24 nia Exp $ -SHA1 (firefox-68.8.0esr.source.tar.xz) = 291cb48dcbf50030a38a66eca40d9cfcaff9784d -RMD160 (firefox-68.8.0esr.source.tar.xz) = d275572b5a35dff01b271285880dff2222f24038 -SHA512 (firefox-68.8.0esr.source.tar.xz) = 139a63dc85ae76a50da6be9a31425f97144e6c7e4a65b0f3009a84eb5c8c9566f6bb331e26590f8aecd5045c4d730ab4e848cf7220f3444a31147b5533c742b3 -Size (firefox-68.8.0esr.source.tar.xz) = 312602308 bytes +SHA1 (firefox-68.9.0esr.source.tar.xz) = ee6406ec1280afc24d4a90c392ff09ff5060686e +RMD160 (firefox-68.9.0esr.source.tar.xz) = 6bb287d394768b137d46f4abac9111ba662b9942 +SHA512 (firefox-68.9.0esr.source.tar.xz) = 98431800d80f7c680aef9eede29df8217810912a319a7f7f8c2e637c43ecd4f4e29223a417afb2a6315e825f979453ff6e6b5a575649aba5cc63ce5956375bb8 +Size (firefox-68.9.0esr.source.tar.xz) = 317469120 bytes SHA1 (patch-aa) = 9f7200c411cd2217a80ec10a276c8877bc6b845c SHA1 (patch-browser_app_profile_firefox.js) = 076cc2892547bac07fe907533f4e821f13f5738e +SHA1 (patch-build_moz.configure_rust.configure) = b57a9b1451dc426d75774f73d7c05fc98fe6e317 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 11b45e0c7a9399c5b74b170648280a388dd67d89 SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49 SHA1 (patch-dom_media_CubebUtils.cpp) = 3cd2c65ab281d802c56216565970450767a3fb24 Added files: Index: pkgsrc/www/firefox68/patches/patch-build_moz.configure_rust.configure diff -u /dev/null pkgsrc/www/firefox68/patches/patch-build_moz.configure_rust.configure:1.1 --- /dev/null Wed Jun 3 13:00:24 2020 +++ pkgsrc/www/firefox68/patches/patch-build_moz.configure_rust.configure Wed Jun 3 13:00:24 2020 @@ -0,0 +1,17 @@ +$NetBSD: patch-build_moz.configure_rust.configure,v 1.1 2020/06/03 13:00:24 nia Exp $ + +* Do not match rumprun toolchain for NetBSD, + narrowed should be one not two. + +--- build/moz.configure/rust.configure.orig 2020-05-28 00:01:39.000000000 +0000 ++++ build/moz.configure/rust.configure +@@ -330,7 +330,8 @@ def rust_triple_alias(host_or_target): + narrowed = [ + c for c in candidates + if c.target.raw_os == host_or_target.raw_os and +- c.target.raw_cpu == host_or_target.raw_cpu ++ c.target.raw_cpu == host_or_target.raw_cpu and ++ not c.rust_target.endswith("-rumprun-netbsd") + ] + if len(narrowed) == 1: + return narrowed[0].rust_target --_----------=_1591189224272710--