Received: by mail.netbsd.org (Postfix, from userid 605) id 2E89E84DE9; Thu, 9 Jul 2020 08:07:53 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id ABDBC84DE8 for ; Thu, 9 Jul 2020 08:07:52 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id ag97r-AUAI38 for ; Thu, 9 Jul 2020 08:07:52 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 23C5784D6E for ; Thu, 9 Jul 2020 08:07:52 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 1D403FB28; Thu, 9 Jul 2020 08:07:52 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_159428207268470" MIME-Version: 1.0 Date: Thu, 9 Jul 2020 08:07:52 +0000 From: "Benny Siegert" Subject: CVS commit: [pkgsrc-2020Q2] pkgsrc/www/firefox68 To: pkgsrc-changes@NetBSD.org Reply-To: bsiegert@netbsd.org X-Mailer: log_accum Message-Id: <20200709080752.1D403FB28@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_159428207268470 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: bsiegert Date: Thu Jul 9 08:07:52 UTC 2020 Modified Files: pkgsrc/www/firefox68 [pkgsrc-2020Q2]: Makefile distinfo Log Message: Pullup ticket #6266 - requested by nia www/firefox68: security fix Revisions pulled up: - www/firefox68/Makefile 1.29 - www/firefox68/distinfo 1.19 --- Module Name: pkgsrc Committed By: nia Date: Tue Jul 7 16:44:11 UTC 2020 Modified Files: pkgsrc/www/firefox68: Makefile distinfo Log Message: firefox68: Update to 68.10.0 For anyone curious about the delay: apparently, my ccache cache was corrupted so the build was failing. *sigh* that won't be a problem soon... Security Vulnerabilities fixed in Firefox ESR 68.10 #CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 #CVE-2020-12418: Information disclosure due to manipulated URL object #CVE-2020-12419: Use-after-free in nsGlobalWindowInner #CVE-2020-12420: Use-After-Free when trying to connect to a STUN server #CVE-2020-12421: Add-On updates did not respect the same certificate trust rules as software updates To generate a diff of this commit: cvs rdiff -u -r1.26 -r1.26.2.1 pkgsrc/www/firefox68/Makefile cvs rdiff -u -r1.18 -r1.18.2.1 pkgsrc/www/firefox68/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_159428207268470 Content-Disposition: inline Content-Length: 2195 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/firefox68/Makefile diff -u pkgsrc/www/firefox68/Makefile:1.26 pkgsrc/www/firefox68/Makefile:1.26.2.1 --- pkgsrc/www/firefox68/Makefile:1.26 Wed Jun 17 17:57:25 2020 +++ pkgsrc/www/firefox68/Makefile Thu Jul 9 08:07:51 2020 @@ -1,12 +1,11 @@ -# $NetBSD: Makefile,v 1.26 2020/06/17 17:57:25 nia Exp $ +# $NetBSD: Makefile,v 1.26.2.1 2020/07/09 08:07:51 bsiegert Exp $ FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR} -MOZ_BRANCH= 68.9 +MOZ_BRANCH= 68.10 MOZ_BRANCH_MINOR= .0esr DISTNAME= firefox-${FIREFOX_VER}.source PKGNAME= ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox68-/} -PKGREVISION= 2 CATEGORIES= www MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/} EXTRACT_SUFX= .tar.xz Index: pkgsrc/www/firefox68/distinfo diff -u pkgsrc/www/firefox68/distinfo:1.18 pkgsrc/www/firefox68/distinfo:1.18.2.1 --- pkgsrc/www/firefox68/distinfo:1.18 Wed Jun 17 17:59:25 2020 +++ pkgsrc/www/firefox68/distinfo Thu Jul 9 08:07:51 2020 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.18 2020/06/17 17:59:25 nia Exp $ +$NetBSD: distinfo,v 1.18.2.1 2020/07/09 08:07:51 bsiegert Exp $ -SHA1 (firefox-68.9.0esr.source.tar.xz) = ee6406ec1280afc24d4a90c392ff09ff5060686e -RMD160 (firefox-68.9.0esr.source.tar.xz) = 6bb287d394768b137d46f4abac9111ba662b9942 -SHA512 (firefox-68.9.0esr.source.tar.xz) = 98431800d80f7c680aef9eede29df8217810912a319a7f7f8c2e637c43ecd4f4e29223a417afb2a6315e825f979453ff6e6b5a575649aba5cc63ce5956375bb8 -Size (firefox-68.9.0esr.source.tar.xz) = 317469120 bytes +SHA1 (firefox-68.10.0esr.source.tar.xz) = 6c502a8d2379c761250781b313db53d7a270985e +RMD160 (firefox-68.10.0esr.source.tar.xz) = 870aaf124f1812018c885ed461fc8541df089b5c +SHA512 (firefox-68.10.0esr.source.tar.xz) = c5c1833560364851e7cf8ea51659bc4fb60239b960125cdb20fe31f742d757ffdaef8f314f800dc91214ee8e358033dc2af971c08bbba474ef6158b101881653 +Size (firefox-68.10.0esr.source.tar.xz) = 314526224 bytes SHA1 (patch-aa) = 9f7200c411cd2217a80ec10a276c8877bc6b845c SHA1 (patch-browser_app_profile_firefox.js) = cf93582b68b8d4e72c3c25682ab9138e185418c8 SHA1 (patch-build_moz.configure_rust.configure) = b57a9b1451dc426d75774f73d7c05fc98fe6e317 --_----------=_159428207268470--