CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Nov 22 13:32:12 UTC 2023

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk
        pkgsrc/www/firefox/files: node-wrapper.sh

Log Message:
firefox: Update to 120.0

Changelog:
120.0
New

  * Firefox supports a new "Copy Link Without Site Tracking" feature in the
    context menu which ensures that copied links no longer contain tracking
    information.

    Screenshot showing Copy Link feature

  * Firefox now supports a setting (in Preferences -> Privacy & Security) to
    enable Global Privacy Control. With this opt-in feature, Firefox informs
    the websites that the user doesn't want their data to be shared or sold.

    Screenshot showing GPC preference

  * Firefox's private windows and ETP-Strict privacy configuration now enhance
    the Canvas APIs with Fingerprinting Protection, thereby continuing to
    protect our users' online privacy.

  * Firefox has enabled Cookie Banner Blocker by default in private windows for
    all users in Germany. Firefox will now auto-refuse cookies and dismiss
    annoying cookie banners for supported sites.

  * Firefox has enabled URL Tracking Protection by default in private windows
    for all users in Germany. Firefox will remove non-essential URL query
    parameters that are often used to track users across the web.

  * Firefox now imports TLS trust anchors (e.g., certificates) from the
    operating system root store. This will be enabled by default on Windows,
    macOS, and Android, and if needed, can be turned off in settings
    (Preferences -> Privacy & Security -> Certificates).

  * Keyboard shortcuts have now been added for editing and deleting a selected
    credential on about:logins. For editing - Alt + enter (Option + return on
    macOS) and for deleting - Alt + Backspace (Option + Delete on macOS).

  * Users on Ubuntu Linux now have the ability to import from Chromium when
    both are installed as Snap packages.

  * Picture-in-Picture now supports corner snapping on Windows and Linux - just
    hold Ctrl as you move the PiP window.

Fixed

  * Various security fixes.

Security fixes:
Mozilla Foundation Security Advisory 2023-49
#CVE-2023-6204: Out-of-bound memory access in WebGL2 blitFramebuffer
#CVE-2023-6205: Use-after-free in MessagePort::Entangled
#CVE-2023-6206: Clickjacking permission prompts using the fullscreen transition
#CVE-2023-6207: Use-after-free in ReadableByteStreamQueueEntry::Buffer
#CVE-2023-6208: Using Selection API would copy contents into X11 primary
 selection.
#CVE-2023-6209: Incorrect parsing of relative URLs starting with "///"
#CVE-2023-6210: Mixed-content resources not blocked in a javascript: pop-up
#CVE-2023-6211: Clickjacking to load insecure pages in HTTPS-only mode
#CVE-2023-6212: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and
 Thunderbird 115.5
#CVE-2023-6213: Memory safety bugs fixed in Firefox 120


To generate a diff of this commit:
cvs rdiff -u -r1.580 -r1.581 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.515 -r1.516 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.269 -r1.270 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.12 -r1.13 pkgsrc/www/firefox/files/node-wrapper.sh

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.580 pkgsrc/www/firefox/Makefile:1.581
--- pkgsrc/www/firefox/Makefile:1.580   Fri Nov 17 03:20:47 2023
+++ pkgsrc/www/firefox/Makefile Wed Nov 22 13:32:12 2023
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.580 2023/11/17 03:20:47 ryoon Exp $
+# $NetBSD: Makefile,v 1.581 2023/11/22 13:32:12 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            119.0
-MOZ_BRANCH_MINOR=      .1
+MOZ_BRANCH=            120.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.515 pkgsrc/www/firefox/distinfo:1.516
--- pkgsrc/www/firefox/distinfo:1.515   Fri Nov 17 03:20:47 2023
+++ pkgsrc/www/firefox/distinfo Wed Nov 22 13:32:12 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.515 2023/11/17 03:20:47 ryoon Exp $
+$NetBSD: distinfo,v 1.516 2023/11/22 13:32:12 ryoon Exp $
 
-BLAKE2s (firefox-119.0.1.source.tar.xz) = 7496afeed0f8b04c44e82bf36fb5772320a42b3f62048b232e7164c200d78d71
-SHA512 (firefox-119.0.1.source.tar.xz) = 4f3201aee10e7b831cc384b2c7430a24f4de81f703115a917f9eb7acecb2ae1725f11af56c41257a056bb9d7a4d749d590cc9baffcd6e13852be45aaecf8163a
-Size (firefox-119.0.1.source.tar.xz) = 524717896 bytes
+BLAKE2s (firefox-120.0.source.tar.xz) = 9c6e5bb8b755b54df2e828dc63da01bc26e8c58a37b32c3fe3fbb6f9ec794519
+SHA512 (firefox-120.0.source.tar.xz) = 31d5f9e1d4173280c8de6d9b8551bc6bba5e2c49b84f944f50d42002d5b39c2fb743bc130f26c81160388a102b8301b94a0a378ecdfa6f943860f971a860df8c
+Size (firefox-120.0.source.tar.xz) = 534394880 bytes
 BLAKE2s (nodejs-output-119.0.1.tgz) = 81bc6931d0f8a83258ee57b2c81ff41eff114fe8d65f6ce129a597e7ba85103c
 SHA512 (nodejs-output-119.0.1.tgz) = 09f86bc2cf706487feaf9e29e7927479a7c2c99299ff84a61dbf32b3d075a48e1f1ac43ecbdc38cd848978dc8105c3022972a6d14068649628d0bc5026e5b52a
 Size (nodejs-output-119.0.1.tgz) = 220307 bytes

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.269 pkgsrc/www/firefox/mozilla-common.mk:1.270
--- pkgsrc/www/firefox/mozilla-common.mk:1.269  Thu Nov  9 00:04:43 2023
+++ pkgsrc/www/firefox/mozilla-common.mk        Wed Nov 22 13:32:12 2023
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.269 2023/11/09 00:04:43 wiz Exp $
+# $NetBSD: mozilla-common.mk,v 1.270 2023/11/22 13:32:12 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -6,7 +6,7 @@
 
 .include "../../mk/bsd.prefs.mk"
 
-PYTHON_VERSIONS_INCOMPATIBLE=  27 312 # 120.0 will accept Python 3.12.
+PYTHON_VERSIONS_INCOMPATIBLE=  27
 PYTHON_FOR_BUILD_ONLY=         tool
 ALL_ENV+=                      PYTHON3=${PYTHONBIN}
 
@@ -15,7 +15,7 @@ REPLACE_PYTHON=               build/cargo-linker
 HAS_CONFIGURE=         yes
 CONFIGURE_ARGS+=       --prefix=${PREFIX}
 USE_TOOLS+=            pkg-config perl gmake gm4 unzip zip # autoconf213
-UNLIMIT_RESOURCES+=    datasize virtualsize
+UNLIMIT_RESOURCES+=    datasize stacksize virtualsize
 
 USE_LANGUAGES+=                c c++
 

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.12 pkgsrc/www/firefox/files/node-wrapper.sh:1.13
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.12       Fri Nov 17 03:20:47 2023
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Wed Nov 22 13:32:12 2023
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v21.1.0
+VERS=v21.2.0
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"