Sun Dec 16 07:38:47 2018 UTC ()
Update to 60.4.0

Changelog:
New
  Updated list of currency codes to include Unidad Previsional (UYW) (Bug 1499028)

Fixed
  Various security fixes

Security fixes:
#CVE-2018-17466: Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
#CVE-2018-18492: Use-after-free with select element
#CVE-2018-18493: Buffer overflow in accelerated 2D canvas with Skia
#CVE-2018-18494: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
#CVE-2018-18498: Integer overflow when calculating buffer sizes for images
#CVE-2018-12405: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4


(ryoon)
diff -r1.11 -r1.12 pkgsrc/www/firefox60/Makefile
diff -r1.3 -r1.4 pkgsrc/www/firefox60/distinfo
cvs diff -r1.11 -r1.12 pkgsrc/www/firefox60/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/www/firefox60/Attic/Makefile 2018/12/09 18:52:49 1.11
+++ pkgsrc/www/firefox60/Attic/Makefile 2018/12/16 07:38:47 1.12
@@ -1,22 +1,21 @@ @@ -1,22 +1,21 @@
1# $NetBSD: Makefile,v 1.11 2018/12/09 18:52:49 adam Exp $ 1# $NetBSD: Makefile,v 1.12 2018/12/16 07:38:47 ryoon Exp $
2 2
3FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR} 3FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
4MOZ_BRANCH= 60.3 4MOZ_BRANCH= 60.4
5MOZ_BRANCH_MINOR= .0esr 5MOZ_BRANCH_MINOR= .0esr
6 6
7DISTNAME= firefox-${FIREFOX_VER}.source 7DISTNAME= firefox-${FIREFOX_VER}.source
8PKGNAME= ${DISTNAME:S/firefox-/firefox60-/:S/.source//:S/b/beta/:S/esr//} 8PKGNAME= ${DISTNAME:S/firefox-/firefox60-/:S/.source//:S/b/beta/:S/esr//}
9PKGREVISION= 4 
10CATEGORIES= www 9CATEGORIES= www
11MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/} 10MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
12EXTRACT_SUFX= .tar.xz 11EXTRACT_SUFX= .tar.xz
13 12
14MAINTAINER= ryoon@NetBSD.org 13MAINTAINER= ryoon@NetBSD.org
15HOMEPAGE= http://www.mozilla.com/en-US/firefox/ 14HOMEPAGE= http://www.mozilla.com/en-US/firefox/
16COMMENT= Web browser with support for extensions (version ${FIREFOX_VER:C/\..*//}) 15COMMENT= Web browser with support for extensions (version ${FIREFOX_VER:C/\..*//})
17LICENSE= mpl-1.1 16LICENSE= mpl-1.1
18 17
19WRKSRC= ${WRKDIR}/firefox-${FIREFOX_VER:S/esr//} 18WRKSRC= ${WRKDIR}/firefox-${FIREFOX_VER:S/esr//}
20 19
21MOZILLA_DIR= # empty 20MOZILLA_DIR= # empty
22 21
cvs diff -r1.3 -r1.4 pkgsrc/www/firefox60/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/www/firefox60/Attic/distinfo 2018/10/29 01:16:58 1.3
+++ pkgsrc/www/firefox60/Attic/distinfo 2018/12/16 07:38:47 1.4
@@ -1,19 +1,19 @@ @@ -1,19 +1,19 @@
1$NetBSD: distinfo,v 1.3 2018/10/29 01:16:58 maya Exp $ 1$NetBSD: distinfo,v 1.4 2018/12/16 07:38:47 ryoon Exp $
2 2
3SHA1 (firefox-60.3.0esr.source.tar.xz) = bac0745b6abdd5887ec0a46041a8252c344cdc64 3SHA1 (firefox-60.4.0esr.source.tar.xz) = 0fa5a71ce2cb90ea4be719a92645aa09dff3721f
4RMD160 (firefox-60.3.0esr.source.tar.xz) = ff553704aad2911adbce4e4590d87861d1a1e188 4RMD160 (firefox-60.4.0esr.source.tar.xz) = f0b67654864aadb454923cd1ac9abffe0ac20c7c
5SHA512 (firefox-60.3.0esr.source.tar.xz) = 7ded25a38835fbd73a58085e24ad83308afee1784a3bf853d75093c1500ad46988f5865c106abdae938cfbd1fb10746cc1795ece7994fd7eba8a002158cf1bcd 5SHA512 (firefox-60.4.0esr.source.tar.xz) = 8119f52b2fc06f76868bf0781fec9d46c8551f0a3ca832ac9bdef6aa6d77c1d785e50d35059f0df5e3586f3396b912af06e448d65e7f5d1f468338eebe8b2cd4
6Size (firefox-60.3.0esr.source.tar.xz) = 268340600 bytes 6Size (firefox-60.4.0esr.source.tar.xz) = 268425148 bytes
7SHA1 (patch-aa) = fdabcc9b055f6439fdbda9b38ab7cec08ff3e231 7SHA1 (patch-aa) = fdabcc9b055f6439fdbda9b38ab7cec08ff3e231
8SHA1 (patch-browser_app_profile_firefox.js) = 9a43095d94f83f315b9a3ce4a7b0a4301e9c40e6 8SHA1 (patch-browser_app_profile_firefox.js) = 9a43095d94f83f315b9a3ce4a7b0a4301e9c40e6
9SHA1 (patch-build_moz.configure_old.configure) = 1df6867eaf73a350fbe8fcd5bd34e1fcab09d707 9SHA1 (patch-build_moz.configure_old.configure) = 1df6867eaf73a350fbe8fcd5bd34e1fcab09d707
10SHA1 (patch-build_moz.configure_rust.configure) = 2818454ba4df3cbd85174edc4828206b3bf0a82b 10SHA1 (patch-build_moz.configure_rust.configure) = 2818454ba4df3cbd85174edc4828206b3bf0a82b
11SHA1 (patch-dom_fetch_FetchConsumer.cpp) = a164b68b968633e2f2e29c1c3917a77ac55a886b 11SHA1 (patch-dom_fetch_FetchConsumer.cpp) = a164b68b968633e2f2e29c1c3917a77ac55a886b
12SHA1 (patch-dom_media_CubebUtils.cpp) = 3632cd0dd4b95f53f01050b8898b33fe198916b6 12SHA1 (patch-dom_media_CubebUtils.cpp) = 3632cd0dd4b95f53f01050b8898b33fe198916b6
13SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = f1d0adae2873545818072adb4e8599267bc4e6c5 13SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = f1d0adae2873545818072adb4e8599267bc4e6c5
14SHA1 (patch-gfx_webrender_src_query.rs) = 6434b0fc1d6441ddb555a2a3b199564b488ec336 14SHA1 (patch-gfx_webrender_src_query.rs) = 6434b0fc1d6441ddb555a2a3b199564b488ec336
15SHA1 (patch-image_decoders_nsJPEGDecoder.cpp) = ed86c3fbb3aef753eec6f6a97940594aac5f3f2f 15SHA1 (patch-image_decoders_nsJPEGDecoder.cpp) = ed86c3fbb3aef753eec6f6a97940594aac5f3f2f
16SHA1 (patch-ipc_chromium_src_base_lock__impl__posix.cc) = 16e37fe54ba1d8d233f6b04dbd06e248305d7f6e 16SHA1 (patch-ipc_chromium_src_base_lock__impl__posix.cc) = 16e37fe54ba1d8d233f6b04dbd06e248305d7f6e
17SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 99b9f3f9dd88f1c8008d2fb6058450695394f5cf 17SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 99b9f3f9dd88f1c8008d2fb6058450695394f5cf
18SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 5b0bfe78e105cc3f395d5afda25a50afc6289f03 18SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 5b0bfe78e105cc3f395d5afda25a50afc6289f03
19SHA1 (patch-ipc_glue_CrossProcessSemaphore.h) = 778a569887d8ad082abc2fa2fe89a0a943e84d64 19SHA1 (patch-ipc_glue_CrossProcessSemaphore.h) = 778a569887d8ad082abc2fa2fe89a0a943e84d64