Received: by mail.netbsd.org (Postfix, from userid 605) id 0A0FC84D87; Thu, 30 Jul 2020 18:13:54 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 848DC84D86 for ; Thu, 30 Jul 2020 18:13:53 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id V7Ugle__fU7G for ; Thu, 30 Jul 2020 18:13:53 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id E90C684C8B for ; Thu, 30 Jul 2020 18:13:52 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id D7EF7FB28; Thu, 30 Jul 2020 18:13:52 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1596132832134500" MIME-Version: 1.0 Date: Thu, 30 Jul 2020 18:13:52 +0000 From: "Benny Siegert" Subject: CVS commit: [pkgsrc-2020Q2] pkgsrc/www/firefox68 To: pkgsrc-changes@NetBSD.org Reply-To: bsiegert@netbsd.org X-Mailer: log_accum Message-Id: <20200730181352.D7EF7FB28@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1596132832134500 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: bsiegert Date: Thu Jul 30 18:13:52 UTC 2020 Modified Files: pkgsrc/www/firefox68 [pkgsrc-2020Q2]: Makefile distinfo Log Message: Pullup ticket #6287 - requested by nia www/firefox68: security fix Revisions pulled up: - www/firefox68/Makefile 1.31 - www/firefox68/distinfo 1.21 --- Module Name: pkgsrc Committed By: nia Date: Wed Jul 29 14:20:30 UTC 2020 Modified Files: pkgsrc/www/firefox68: Makefile distinfo Log Message: firefox68: Update to 68.11.0 Security Vulnerabilities fixed in Firefox ESR 68.11 #CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker #CVE-2020-6514: WebRTC data channel leaks internal address to peer #CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture #CVE-2020-15650: Overwriting local files through malicious file picker application #CVE-2020-15649: Exfiltrating local files through malicious file picker application #CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11 To generate a diff of this commit: cvs rdiff -u -r1.26.2.1 -r1.26.2.2 pkgsrc/www/firefox68/Makefile cvs rdiff -u -r1.18.2.1 -r1.18.2.2 pkgsrc/www/firefox68/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1596132832134500 Content-Disposition: inline Content-Length: 2021 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/firefox68/Makefile diff -u pkgsrc/www/firefox68/Makefile:1.26.2.1 pkgsrc/www/firefox68/Makefile:1.26.2.2 --- pkgsrc/www/firefox68/Makefile:1.26.2.1 Thu Jul 9 08:07:51 2020 +++ pkgsrc/www/firefox68/Makefile Thu Jul 30 18:13:52 2020 @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.26.2.1 2020/07/09 08:07:51 bsiegert Exp $ +# $NetBSD: Makefile,v 1.26.2.2 2020/07/30 18:13:52 bsiegert Exp $ FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR} -MOZ_BRANCH= 68.10 +MOZ_BRANCH= 68.11 MOZ_BRANCH_MINOR= .0esr DISTNAME= firefox-${FIREFOX_VER}.source Index: pkgsrc/www/firefox68/distinfo diff -u pkgsrc/www/firefox68/distinfo:1.18.2.1 pkgsrc/www/firefox68/distinfo:1.18.2.2 --- pkgsrc/www/firefox68/distinfo:1.18.2.1 Thu Jul 9 08:07:51 2020 +++ pkgsrc/www/firefox68/distinfo Thu Jul 30 18:13:52 2020 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.18.2.1 2020/07/09 08:07:51 bsiegert Exp $ +$NetBSD: distinfo,v 1.18.2.2 2020/07/30 18:13:52 bsiegert Exp $ -SHA1 (firefox-68.10.0esr.source.tar.xz) = 6c502a8d2379c761250781b313db53d7a270985e -RMD160 (firefox-68.10.0esr.source.tar.xz) = 870aaf124f1812018c885ed461fc8541df089b5c -SHA512 (firefox-68.10.0esr.source.tar.xz) = c5c1833560364851e7cf8ea51659bc4fb60239b960125cdb20fe31f742d757ffdaef8f314f800dc91214ee8e358033dc2af971c08bbba474ef6158b101881653 -Size (firefox-68.10.0esr.source.tar.xz) = 314526224 bytes +SHA1 (firefox-68.11.0esr.source.tar.xz) = 445acbf7b7b8f75374ee6347bb6f45748511bcf9 +RMD160 (firefox-68.11.0esr.source.tar.xz) = 82edab46fe312a47889047fe431784c511684ade +SHA512 (firefox-68.11.0esr.source.tar.xz) = 7dcfa4944945bce184b96643a7afbd0cc97c93e4f727695bd5ee1e1745cff89784e68baf109588ef56791211b4b8f5c7c056ae6ac77f54fd00a5af5d5606f23e +Size (firefox-68.11.0esr.source.tar.xz) = 321294384 bytes SHA1 (patch-aa) = 9f7200c411cd2217a80ec10a276c8877bc6b845c SHA1 (patch-browser_app_profile_firefox.js) = cf93582b68b8d4e72c3c25682ab9138e185418c8 SHA1 (patch-build_moz.configure_rust.configure) = b57a9b1451dc426d75774f73d7c05fc98fe6e317 --_----------=_1596132832134500--