Sat Sep 15 06:04:04 2018 UTC ()
Update to 60.2.0

Changelog:
#CVE-2018-12377: Use-after-free in refresh driver timers
#CVE-2018-12378: Use-after-free in IndexedDB
#CVE-2018-12379: Out-of-bounds write with malicious MAR file
#CVE-2017-16541: Proxy bypass using automount and autofs
#CVE-2018-12381: Dragging and dropping Outlook email message results in page navigation
#CVE-2018-12376: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2


(ryoon)
diff -r1.4 -r1.5 pkgsrc/www/firefox60/Makefile
diff -r1.1 -r1.2 pkgsrc/www/firefox60/distinfo
diff -r0 -r1.1 pkgsrc/www/firefox60/patches/patch-build_moz.configure_rust.configure
cvs diff -r1.4 -r1.5 pkgsrc/www/firefox60/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/www/firefox60/Attic/Makefile 2018/08/22 09:47:25 1.4
+++ pkgsrc/www/firefox60/Attic/Makefile 2018/09/15 06:04:04 1.5
@@ -1,22 +1,21 @@ @@ -1,22 +1,21 @@
1# $NetBSD: Makefile,v 1.4 2018/08/22 09:47:25 wiz Exp $ 1# $NetBSD: Makefile,v 1.5 2018/09/15 06:04:04 ryoon Exp $
2 2
3FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR} 3FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
4MOZ_BRANCH= 60.1 4MOZ_BRANCH= 60.2
5MOZ_BRANCH_MINOR= .0esr 5MOZ_BRANCH_MINOR= .0esr
6 6
7DISTNAME= firefox-${FIREFOX_VER}.source 7DISTNAME= firefox-${FIREFOX_VER}.source
8PKGNAME= ${DISTNAME:S/firefox-/firefox60-/:S/.source//:S/b/beta/:S/esr//} 8PKGNAME= ${DISTNAME:S/firefox-/firefox60-/:S/.source//:S/b/beta/:S/esr//}
9PKGREVISION= 3 
10CATEGORIES= www 9CATEGORIES= www
11MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/} 10MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
12EXTRACT_SUFX= .tar.xz 11EXTRACT_SUFX= .tar.xz
13 12
14MAINTAINER= ryoon@NetBSD.org 13MAINTAINER= ryoon@NetBSD.org
15HOMEPAGE= http://www.mozilla.com/en-US/firefox/ 14HOMEPAGE= http://www.mozilla.com/en-US/firefox/
16COMMENT= Web browser with support for extensions (version ${FIREFOX_VER:C/\..*//}) 15COMMENT= Web browser with support for extensions (version ${FIREFOX_VER:C/\..*//})
17LICENSE= mpl-1.1 16LICENSE= mpl-1.1
18 17
19WRKSRC= ${WRKDIR}/firefox-${FIREFOX_VER:S/esr//} 18WRKSRC= ${WRKDIR}/firefox-${FIREFOX_VER:S/esr//}
20 19
21MOZILLA_DIR= # empty 20MOZILLA_DIR= # empty
22 21
cvs diff -r1.1 -r1.2 pkgsrc/www/firefox60/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/www/firefox60/Attic/distinfo 2018/06/28 14:04:10 1.1
+++ pkgsrc/www/firefox60/Attic/distinfo 2018/09/15 06:04:04 1.2
@@ -1,22 +1,23 @@ @@ -1,22 +1,23 @@
1$NetBSD: distinfo,v 1.1 2018/06/28 14:04:10 ryoon Exp $ 1$NetBSD: distinfo,v 1.2 2018/09/15 06:04:04 ryoon Exp $
2 2
3SHA1 (firefox-60.1.0esr.source.tar.xz) = e7b9c954fdba527404b9b371f25890ec03d6a0ad 3SHA1 (firefox-60.2.0esr.source.tar.xz) = 62f542bea08ba39965fe5179404a2a8b336e6358
4RMD160 (firefox-60.1.0esr.source.tar.xz) = 3c8f71acc6e534069e5cd27d768ff5dff55d22a1 4RMD160 (firefox-60.2.0esr.source.tar.xz) = e5cac1a241279e6a4dadcd7ea860ebe2e2983626
5SHA512 (firefox-60.1.0esr.source.tar.xz) = 06c2d6d02086b77cc243eb4438d643cbc51fb766f1be8d5002bf77587d5c14145c6e26c1496c654b8ed1cc325cad29b049aac55a32f757d167d183bf73fff396 5SHA512 (firefox-60.2.0esr.source.tar.xz) = 672632ad7868a013250ec9540287e9fee30a890b1357dd1c475877d8917273d31135c38607e20c8232a890ba7b273055454b05f612a994c46fa7fe665edbe36c
6Size (firefox-60.1.0esr.source.tar.xz) = 268770652 bytes 6Size (firefox-60.2.0esr.source.tar.xz) = 267132936 bytes
7SHA1 (patch-aa) = fdabcc9b055f6439fdbda9b38ab7cec08ff3e231 7SHA1 (patch-aa) = fdabcc9b055f6439fdbda9b38ab7cec08ff3e231
8SHA1 (patch-browser_app_profile_firefox.js) = 9a43095d94f83f315b9a3ce4a7b0a4301e9c40e6 8SHA1 (patch-browser_app_profile_firefox.js) = 9a43095d94f83f315b9a3ce4a7b0a4301e9c40e6
9SHA1 (patch-build_moz.configure_old.configure) = 1df6867eaf73a350fbe8fcd5bd34e1fcab09d707 9SHA1 (patch-build_moz.configure_old.configure) = 1df6867eaf73a350fbe8fcd5bd34e1fcab09d707
 10SHA1 (patch-build_moz.configure_rust.configure) = 2818454ba4df3cbd85174edc4828206b3bf0a82b
10SHA1 (patch-dom_fetch_FetchConsumer.cpp) = a164b68b968633e2f2e29c1c3917a77ac55a886b 11SHA1 (patch-dom_fetch_FetchConsumer.cpp) = a164b68b968633e2f2e29c1c3917a77ac55a886b
11SHA1 (patch-dom_media_CubebUtils.cpp) = 3632cd0dd4b95f53f01050b8898b33fe198916b6 12SHA1 (patch-dom_media_CubebUtils.cpp) = 3632cd0dd4b95f53f01050b8898b33fe198916b6
12SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = f1d0adae2873545818072adb4e8599267bc4e6c5 13SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = f1d0adae2873545818072adb4e8599267bc4e6c5
13SHA1 (patch-gfx_webrender_src_query.rs) = 6434b0fc1d6441ddb555a2a3b199564b488ec336 14SHA1 (patch-gfx_webrender_src_query.rs) = 6434b0fc1d6441ddb555a2a3b199564b488ec336
14SHA1 (patch-image_decoders_nsJPEGDecoder.cpp) = ed86c3fbb3aef753eec6f6a97940594aac5f3f2f 15SHA1 (patch-image_decoders_nsJPEGDecoder.cpp) = ed86c3fbb3aef753eec6f6a97940594aac5f3f2f
15SHA1 (patch-ipc_chromium_src_base_lock__impl__posix.cc) = 16e37fe54ba1d8d233f6b04dbd06e248305d7f6e 16SHA1 (patch-ipc_chromium_src_base_lock__impl__posix.cc) = 16e37fe54ba1d8d233f6b04dbd06e248305d7f6e
16SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 99b9f3f9dd88f1c8008d2fb6058450695394f5cf 17SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 99b9f3f9dd88f1c8008d2fb6058450695394f5cf
17SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 5b0bfe78e105cc3f395d5afda25a50afc6289f03 18SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 5b0bfe78e105cc3f395d5afda25a50afc6289f03
18SHA1 (patch-ipc_glue_CrossProcessSemaphore.h) = 778a569887d8ad082abc2fa2fe89a0a943e84d64 19SHA1 (patch-ipc_glue_CrossProcessSemaphore.h) = 778a569887d8ad082abc2fa2fe89a0a943e84d64
19SHA1 (patch-ipc_glue_CrossProcessSemaphore__posix.cpp) = 3052338871447cedaeafe8369afe82233183c884 20SHA1 (patch-ipc_glue_CrossProcessSemaphore__posix.cpp) = 3052338871447cedaeafe8369afe82233183c884
20SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 260c29bacd8bf265951b7a412f850bf2b292c836 21SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 260c29bacd8bf265951b7a412f850bf2b292c836
21SHA1 (patch-js_src_gc_Memory.cpp) = 40d8285d3f5a060e68a2884dd81b39950f45ff95 22SHA1 (patch-js_src_gc_Memory.cpp) = 40d8285d3f5a060e68a2884dd81b39950f45ff95
22SHA1 (patch-js_src_threading_posix_Thread.cpp) = 47e612a676e614fd6dd43b8a3140218a3fbdc7fa 23SHA1 (patch-js_src_threading_posix_Thread.cpp) = 47e612a676e614fd6dd43b8a3140218a3fbdc7fa
File Added: pkgsrc/www/firefox60/patches/Attic/patch-build_moz.configure_rust.configure
$NetBSD: patch-build_moz.configure_rust.configure,v 1.1 2018/09/15 06:04:04 ryoon Exp $

* Fix configure with Rust 1.29.0

--- build/moz.configure/rust.configure.orig	2018-09-03 06:30:53.000000000 +0000
+++ build/moz.configure/rust.configure
@@ -119,6 +119,8 @@ def rust_supported_targets(rustc):
     ambiguous = set()
     per_raw_os = {}
     for t in out:
+        if t == 'aarch64-fuchsia' or t == 'x86_64-fuchsia':
+            t = t.replace('-', '--')
         t = split_triplet(t, allow_unknown=True)
         key = (t.cpu, t.endianness, t.os)
         if key in per_os: