Received: by mail.netbsd.org (Postfix, from userid 605) id 2475084D3C; Thu, 24 Sep 2020 04:31:09 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id A032284D2F for ; Thu, 24 Sep 2020 04:31:08 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id uXZLBbmdZW57 for ; Thu, 24 Sep 2020 04:31:08 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 1FB2484CEC for ; Thu, 24 Sep 2020 04:31:08 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 12918FB28; Thu, 24 Sep 2020 04:31:08 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1600921868152770" MIME-Version: 1.0 Date: Thu, 24 Sep 2020 04:31:08 +0000 From: "Nia Alarie" Subject: CVS commit: pkgsrc/www/firefox78 To: pkgsrc-changes@NetBSD.org Reply-To: nia@netbsd.org X-Mailer: log_accum Message-Id: <20200924043108.12918FB28@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1600921868152770 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: nia Date: Thu Sep 24 04:31:07 UTC 2020 Modified Files: pkgsrc/www/firefox78: Makefile distinfo Log Message: firefox78: Update to 78.3.0 Security Vulnerabilities fixed in Firefox ESR 78.3 #CVE-2020-15677: Download origin spoofing via redirect #CVE-2020-15676: XSS when pasting attacker-controlled data into a contenteditable element #CVE-2020-15678: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario #CVE-2020-15673: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 To generate a diff of this commit: cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/firefox78/Makefile cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/firefox78/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1600921868152770 Content-Disposition: inline Content-Length: 2154 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/firefox78/Makefile diff -u pkgsrc/www/firefox78/Makefile:1.5 pkgsrc/www/firefox78/Makefile:1.6 --- pkgsrc/www/firefox78/Makefile:1.5 Mon Aug 31 18:12:33 2020 +++ pkgsrc/www/firefox78/Makefile Thu Sep 24 04:31:07 2020 @@ -1,12 +1,11 @@ -# $NetBSD: Makefile,v 1.5 2020/08/31 18:12:33 wiz Exp $ +# $NetBSD: Makefile,v 1.6 2020/09/24 04:31:07 nia Exp $ FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR} -MOZ_BRANCH= 78.2 +MOZ_BRANCH= 78.3 MOZ_BRANCH_MINOR= .0esr DISTNAME= firefox-${FIREFOX_VER}.source PKGNAME= ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox78-/} -PKGREVISION= 1 CATEGORIES= www MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/} EXTRACT_SUFX= .tar.xz Index: pkgsrc/www/firefox78/distinfo diff -u pkgsrc/www/firefox78/distinfo:1.2 pkgsrc/www/firefox78/distinfo:1.3 --- pkgsrc/www/firefox78/distinfo:1.2 Sat Aug 29 15:56:43 2020 +++ pkgsrc/www/firefox78/distinfo Thu Sep 24 04:31:07 2020 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.2 2020/08/29 15:56:43 nia Exp $ +$NetBSD: distinfo,v 1.3 2020/09/24 04:31:07 nia Exp $ -SHA1 (firefox-78.2.0esr.source.tar.xz) = be371c42648f5581cbde2446f4de861d26104758 -RMD160 (firefox-78.2.0esr.source.tar.xz) = 59095816729c680fdfdfdce99d515066e7ad56ce -SHA512 (firefox-78.2.0esr.source.tar.xz) = 38f91a24634ce5d0c10340c9ac762071f8488f4bd7649bff9ed9cb1cbecda23e207b593118d38488810540e63be39d9c1c45c3b9a6acb477b6b2edf636e56d5b -Size (firefox-78.2.0esr.source.tar.xz) = 331996944 bytes +SHA1 (firefox-78.3.0esr.source.tar.xz) = f2e0607bf57105e8741c0f941bcacee8a75d672a +RMD160 (firefox-78.3.0esr.source.tar.xz) = d311378c9535ee5d53a13e94fd9a38b1b181de3a +SHA512 (firefox-78.3.0esr.source.tar.xz) = 89e12797429d99760b294e302d803432f533b7c2c10f1fcd3781b89b27ec9698173d4fbf1bfe7506186602daf6666c09152407ce5668fb5b7391e38b5566f2f2 +Size (firefox-78.3.0esr.source.tar.xz) = 331073228 bytes SHA1 (patch-aa) = 11060461fdaca5661e89651b8ded4a59d2abc4d7 SHA1 (patch-browser_app_profile_firefox.js) = 89cea0a66457c96ad0b94aaa524aa5942ad781d0 SHA1 (patch-build_moz.configure_rust.configure) = ee9e207e67709f3c9455b4d22f5f254890e99ca8 --_----------=_1600921868152770--