Sun Dec 8 20:09:41 2019 UTC ()
firefox68: Update to 68.3.0

pkgsrc changes:

- Fixed building with wayland libs installed

Security fixes:

- CVE-2019-17008: Use-after-free in worker destruction
- CVE-2019-13722: Stack corruption due to incorrect number of arguments in WebRTC code
- CVE-2019-11745: Out of bounds write in NSS when encrypting with a block cipher
- CVE-2019-17009: Updater temporary files accessible to unprivileged processes
- CVE-2019-17010: Use-after-free when performing device orientation checks
- CVE-2019-17005: Buffer overflow in plain text serializer
- CVE-2019-17011: Use-after-free when retrieving a document in antitracking
- CVE-2019-17012: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3


(nia)
diff -r1.4 -r1.5 pkgsrc/www/firefox68/Makefile
diff -r1.4 -r1.5 pkgsrc/www/firefox68/distinfo
diff -r1.4 -r1.5 pkgsrc/www/firefox68/mozilla-common.mk
diff -r1.2 -r1.3 pkgsrc/www/firefox68/PLIST
cvs diff -r1.4 -r1.5 pkgsrc/www/firefox68/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/www/firefox68/Attic/Makefile 2019/11/18 12:09:15 1.4
+++ pkgsrc/www/firefox68/Attic/Makefile 2019/12/08 20:09:41 1.5
@@ -1,22 +1,21 @@ @@ -1,22 +1,21 @@
1# $NetBSD: Makefile,v 1.4 2019/11/18 12:09:15 ryoon Exp $ 1# $NetBSD: Makefile,v 1.5 2019/12/08 20:09:41 nia Exp $
2 2
3FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR} 3FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
4MOZ_BRANCH= 68.2 4MOZ_BRANCH= 68.3
5MOZ_BRANCH_MINOR= .0esr 5MOZ_BRANCH_MINOR= .0esr
6 6
7DISTNAME= firefox-${FIREFOX_VER}.source 7DISTNAME= firefox-${FIREFOX_VER}.source
8PKGNAME= ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox68-/} 8PKGNAME= ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox68-/}
9PKGREVISION= 1 
10CATEGORIES= www 9CATEGORIES= www
11MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/} 10MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
12EXTRACT_SUFX= .tar.xz 11EXTRACT_SUFX= .tar.xz
13 12
14MAINTAINER= ryoon@NetBSD.org 13MAINTAINER= ryoon@NetBSD.org
15HOMEPAGE= https://www.mozilla.com/en-US/firefox/ 14HOMEPAGE= https://www.mozilla.com/en-US/firefox/
16COMMENT= Web browser with support for extensions (version ${FIREFOX_VER:C/\..*//}) 15COMMENT= Web browser with support for extensions (version ${FIREFOX_VER:C/\..*//})
17LICENSE= mpl-1.1 16LICENSE= mpl-1.1
18 17
19WRKSRC= ${WRKDIR}/firefox-${FIREFOX_VER:S/esr//} 18WRKSRC= ${WRKDIR}/firefox-${FIREFOX_VER:S/esr//}
20 19
21MOZILLA_DIR= # empty 20MOZILLA_DIR= # empty
22 21
cvs diff -r1.4 -r1.5 pkgsrc/www/firefox68/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/www/firefox68/Attic/distinfo 2019/11/27 16:22:27 1.4
+++ pkgsrc/www/firefox68/Attic/distinfo 2019/12/08 20:09:41 1.5
@@ -1,19 +1,19 @@ @@ -1,19 +1,19 @@
1$NetBSD: distinfo,v 1.4 2019/11/27 16:22:27 jakllsch Exp $ 1$NetBSD: distinfo,v 1.5 2019/12/08 20:09:41 nia Exp $
2 2
3SHA1 (firefox-68.2.0esr.source.tar.xz) = 19815556c558a99ea76b4abb357eddb684cfd05a 3SHA1 (firefox-68.3.0esr.source.tar.xz) = 220c262c5cb2ee81d29c58a5afe4522c9880cf2b
4RMD160 (firefox-68.2.0esr.source.tar.xz) = 25c7447814adb99efea7632b539312becd3b9096 4RMD160 (firefox-68.3.0esr.source.tar.xz) = 7cf26bd69a7414cdd78ab196e9add78b7235ef7c
5SHA512 (firefox-68.2.0esr.source.tar.xz) = f6522ca6b9efa3fdeb866912ab9cb904eaace5806c606d5721cba23aebd679885670011c743ca8d381b579b728077182dc766f9b6d3b31ccf51c3eb583c547ee 5SHA512 (firefox-68.3.0esr.source.tar.xz) = f99a4a18aa1b4472152fc6de68ef56ee071c1adfc70a907c10943f8436758c9adc0fe05a90b894ea521cc0c30782e6e2c29f04747d7edf3e55080fa0c4ebf8c3
6Size (firefox-68.2.0esr.source.tar.xz) = 312103756 bytes 6Size (firefox-68.3.0esr.source.tar.xz) = 312378276 bytes
7SHA1 (patch-aa) = 1f292aae7d37bd480ba834324b737bfebee52503 7SHA1 (patch-aa) = 1f292aae7d37bd480ba834324b737bfebee52503
8SHA1 (patch-browser_app_profile_firefox.js) = 076cc2892547bac07fe907533f4e821f13f5738e 8SHA1 (patch-browser_app_profile_firefox.js) = 076cc2892547bac07fe907533f4e821f13f5738e
9SHA1 (patch-build_moz.configure_old.configure) = 05963b12fd908d90e3378b30cff7e48291b8a447 9SHA1 (patch-build_moz.configure_old.configure) = 05963b12fd908d90e3378b30cff7e48291b8a447
10SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49 10SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49
11SHA1 (patch-dom_media_CubebUtils.cpp) = b1b4f981c4bede877e3bd092d2648d4b8cbc73a5 11SHA1 (patch-dom_media_CubebUtils.cpp) = b1b4f981c4bede877e3bd092d2648d4b8cbc73a5
12SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993 12SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993
13SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = 2f73c76c48852613e0c55c1680fcc2a9eb3cf4ef 13SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = 2f73c76c48852613e0c55c1680fcc2a9eb3cf4ef
14SHA1 (patch-gfx_gl_GLContextProviderGLX.cpp) = 2c909a10a341e600392417240ad0c556f495d6ba 14SHA1 (patch-gfx_gl_GLContextProviderGLX.cpp) = 2c909a10a341e600392417240ad0c556f495d6ba
15SHA1 (patch-gfx_skia_skia_src_core_SkCpu.cpp) = 36218819254f3681b9c717d652ea78c9f20d49ad 15SHA1 (patch-gfx_skia_skia_src_core_SkCpu.cpp) = 36218819254f3681b9c717d652ea78c9f20d49ad
16SHA1 (patch-ipc_chromium_src_base_lock__impl__posix.cc) = d84d9b4d416e049423120dcbf9199644ce1c93ab 16SHA1 (patch-ipc_chromium_src_base_lock__impl__posix.cc) = d84d9b4d416e049423120dcbf9199644ce1c93ab
17SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 4a6606da590cfb8d855bde58b9c6f90e98d0870c 17SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 4a6606da590cfb8d855bde58b9c6f90e98d0870c
18SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 35d20981d33ccdb1d8ffb8039e48798777f11658 18SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 35d20981d33ccdb1d8ffb8039e48798777f11658
19SHA1 (patch-ipc_chromium_src_chrome_common_ipc__channel__posix.cc) = d634805bf3b02475081cb2f263e91e3f4c481a29 19SHA1 (patch-ipc_chromium_src_chrome_common_ipc__channel__posix.cc) = d634805bf3b02475081cb2f263e91e3f4c481a29
cvs diff -r1.4 -r1.5 pkgsrc/www/firefox68/Attic/mozilla-common.mk (expand / switch to unified diff)

--- pkgsrc/www/firefox68/Attic/mozilla-common.mk 2019/11/18 12:08:10 1.4
+++ pkgsrc/www/firefox68/Attic/mozilla-common.mk 2019/12/08 20:09:41 1.5
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1# $NetBSD: mozilla-common.mk,v 1.4 2019/11/18 12:08:10 ryoon Exp $ 1# $NetBSD: mozilla-common.mk,v 1.5 2019/12/08 20:09:41 nia Exp $
2# 2#
3# common Makefile fragment for mozilla packages based on gecko 2.0. 3# common Makefile fragment for mozilla packages based on gecko 2.0.
4# 4#
5# used by www/firefox/Makefile 5# used by www/firefox/Makefile
6 6
7GCC_REQD+= 6.1 7GCC_REQD+= 6.1
8 8
9.include "../../mk/bsd.prefs.mk" 9.include "../../mk/bsd.prefs.mk"
10 10
11# Python 2.7 and Python 3.6 or later are required simultaneously. 11# Python 2.7 and Python 3.6 or later are required simultaneously.
12PYTHON_VERSIONS_ACCEPTED= 27 12PYTHON_VERSIONS_ACCEPTED= 27
13PYTHON_FOR_BUILD_ONLY= tool 13PYTHON_FOR_BUILD_ONLY= tool
14.if !empty(PYTHON_VERSION_DEFAULT:M3[6789]) 14.if !empty(PYTHON_VERSION_DEFAULT:M3[6789])
@@ -155,26 +155,33 @@ PLIST.ffvpx= yes # see media/ffvpx/ffvpx @@ -155,26 +155,33 @@ PLIST.ffvpx= yes # see media/ffvpx/ffvpx
155PLIST.throwwrapper= yes 155PLIST.throwwrapper= yes
156.endif 156.endif
157 157
158.if !empty(MACHINE_PLATFORM:S/i386/x86/:MLinux-*-x86*) 158.if !empty(MACHINE_PLATFORM:S/i386/x86/:MLinux-*-x86*)
159PLIST.sps= yes 159PLIST.sps= yes
160.endif 160.endif
161 161
162.if !empty(MACHINE_PLATFORM:MLinux-*-arm*) 162.if !empty(MACHINE_PLATFORM:MLinux-*-arm*)
163PLIST.tremor= yes 163PLIST.tremor= yes
164.else 164.else
165PLIST.vorbis= yes 165PLIST.vorbis= yes
166.endif 166.endif
167 167
 168.include "../../mk/pkg-build-options.mk"
 169
 170PLIST_VARS+= wayland
 171.if !empty(PKG_BUILD_OPTIONS.gtk3:Mwayland)
 172PLIST.wayland= yes
 173.endif
 174
168# See ${WRKSRC}/mozglue/build/moz.build: libmozglue is built and 175# See ${WRKSRC}/mozglue/build/moz.build: libmozglue is built and
169# installed as a shared library on these platforms. 176# installed as a shared library on these platforms.
170.if ${OPSYS} == "Cygwin" || ${OPSYS} == "Darwin" # or Android 177.if ${OPSYS} == "Cygwin" || ${OPSYS} == "Darwin" # or Android
171PLIST.mozglue= yes 178PLIST.mozglue= yes
172.endif 179.endif
173 180
174# See ${WRKSRC}/security/sandbox/mac/Sandbox.mm: On Darwin, sandboxing 181# See ${WRKSRC}/security/sandbox/mac/Sandbox.mm: On Darwin, sandboxing
175# support is only available when the toolkit is cairo-cocoa. 182# support is only available when the toolkit is cairo-cocoa.
176CONFIGURE_ARGS.Darwin+= --disable-sandbox 183CONFIGURE_ARGS.Darwin+= --disable-sandbox
177 184
178# See ${WRKSRC}/configure.in: It tries to use MacOS X 10.6 SDK by 185# See ${WRKSRC}/configure.in: It tries to use MacOS X 10.6 SDK by
179# default, which is not always possible. 186# default, which is not always possible.
180.if !empty(MACHINE_PLATFORM:MDarwin-8.*-*) 187.if !empty(MACHINE_PLATFORM:MDarwin-8.*-*)
cvs diff -r1.2 -r1.3 pkgsrc/www/firefox68/Attic/PLIST (expand / switch to unified diff)

--- pkgsrc/www/firefox68/Attic/PLIST 2019/11/05 17:14:30 1.2
+++ pkgsrc/www/firefox68/Attic/PLIST 2019/12/08 20:09:41 1.3
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1@comment $NetBSD: PLIST,v 1.2 2019/11/05 17:14:30 ryoon Exp $ 1@comment $NetBSD: PLIST,v 1.3 2019/12/08 20:09:41 nia Exp $
2bin/firefox68 2bin/firefox68
3lib/firefox68/actors/AudioPlaybackChild.jsm 3lib/firefox68/actors/AudioPlaybackChild.jsm
4lib/firefox68/actors/AutoplayChild.jsm 4lib/firefox68/actors/AutoplayChild.jsm
5lib/firefox68/actors/BrowserChild.jsm 5lib/firefox68/actors/BrowserChild.jsm
6lib/firefox68/actors/ControllersChild.jsm 6lib/firefox68/actors/ControllersChild.jsm
7lib/firefox68/actors/DateTimePickerChild.jsm 7lib/firefox68/actors/DateTimePickerChild.jsm
8lib/firefox68/actors/ExtFindChild.jsm 8lib/firefox68/actors/ExtFindChild.jsm
9lib/firefox68/actors/FindBarChild.jsm 9lib/firefox68/actors/FindBarChild.jsm
10lib/firefox68/actors/FinderChild.jsm 10lib/firefox68/actors/FinderChild.jsm
11lib/firefox68/actors/FormSubmitChild.jsm 11lib/firefox68/actors/FormSubmitChild.jsm
12lib/firefox68/actors/KeyPressEventModelCheckerChild.jsm 12lib/firefox68/actors/KeyPressEventModelCheckerChild.jsm
13lib/firefox68/actors/PictureInPictureChild.jsm 13lib/firefox68/actors/PictureInPictureChild.jsm
14lib/firefox68/actors/PopupBlockingChild.jsm 14lib/firefox68/actors/PopupBlockingChild.jsm
@@ -5257,26 +5257,27 @@ lib/firefox68/hyphenation/hyph_nn.dic @@ -5257,26 +5257,27 @@ lib/firefox68/hyphenation/hyph_nn.dic
5257lib/firefox68/hyphenation/hyph_pl.dic 5257lib/firefox68/hyphenation/hyph_pl.dic
5258lib/firefox68/hyphenation/hyph_pt.dic 5258lib/firefox68/hyphenation/hyph_pt.dic
5259lib/firefox68/hyphenation/hyph_ru.dic 5259lib/firefox68/hyphenation/hyph_ru.dic
5260lib/firefox68/hyphenation/hyph_sh.dic 5260lib/firefox68/hyphenation/hyph_sh.dic
5261lib/firefox68/hyphenation/hyph_sl.dic 5261lib/firefox68/hyphenation/hyph_sl.dic
5262lib/firefox68/hyphenation/hyph_sv.dic 5262lib/firefox68/hyphenation/hyph_sv.dic
5263lib/firefox68/hyphenation/hyph_tr.dic 5263lib/firefox68/hyphenation/hyph_tr.dic
5264lib/firefox68/hyphenation/hyph_uk.dic 5264lib/firefox68/hyphenation/hyph_uk.dic
5265lib/firefox68/liblgpllibs.so 5265lib/firefox68/liblgpllibs.so
5266${PLIST.ffvpx}lib/firefox68/libmozavcodec.so 5266${PLIST.ffvpx}lib/firefox68/libmozavcodec.so
5267${PLIST.ffvpx}lib/firefox68/libmozavutil.so 5267${PLIST.ffvpx}lib/firefox68/libmozavutil.so
5268lib/firefox68/libmozgtk.so 5268lib/firefox68/libmozgtk.so
5269lib/firefox68/libmozsqlite3.so 5269lib/firefox68/libmozsqlite3.so
 5270${PLIST.wayland}lib/firefox68/libmozwayland.so
5270lib/firefox68/libxul.so 5271lib/firefox68/libxul.so
5271lib/firefox68/localization/en-US/crashreporter/aboutcrashes.ftl 5272lib/firefox68/localization/en-US/crashreporter/aboutcrashes.ftl
5272lib/firefox68/localization/en-US/security/certificates/certManager.ftl 5273lib/firefox68/localization/en-US/security/certificates/certManager.ftl
5273lib/firefox68/localization/en-US/security/certificates/deviceManager.ftl 5274lib/firefox68/localization/en-US/security/certificates/deviceManager.ftl
5274lib/firefox68/localization/en-US/toolkit/about/aboutAbout.ftl 5275lib/firefox68/localization/en-US/toolkit/about/aboutAbout.ftl
5275lib/firefox68/localization/en-US/toolkit/about/aboutAddons.ftl 5276lib/firefox68/localization/en-US/toolkit/about/aboutAddons.ftl
5276lib/firefox68/localization/en-US/toolkit/about/aboutCompat.ftl 5277lib/firefox68/localization/en-US/toolkit/about/aboutCompat.ftl
5277lib/firefox68/localization/en-US/toolkit/about/aboutConfig.ftl 5278lib/firefox68/localization/en-US/toolkit/about/aboutConfig.ftl
5278lib/firefox68/localization/en-US/toolkit/about/aboutNetworking.ftl 5279lib/firefox68/localization/en-US/toolkit/about/aboutNetworking.ftl
5279lib/firefox68/localization/en-US/toolkit/about/aboutPerformance.ftl 5280lib/firefox68/localization/en-US/toolkit/about/aboutPerformance.ftl
5280lib/firefox68/localization/en-US/toolkit/about/aboutPlugins.ftl 5281lib/firefox68/localization/en-US/toolkit/about/aboutPlugins.ftl
5281lib/firefox68/localization/en-US/toolkit/about/aboutProfiles.ftl 5282lib/firefox68/localization/en-US/toolkit/about/aboutProfiles.ftl
5282lib/firefox68/localization/en-US/toolkit/about/aboutRights.ftl 5283lib/firefox68/localization/en-US/toolkit/about/aboutRights.ftl