CVS commit: pkgsrc/www/firefox115

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Thu Nov 23 12:47:01 UTC 2023

Modified Files:
        pkgsrc/www/firefox115: Makefile distinfo mozilla-common.mk
Added Files:
        pkgsrc/www/firefox115/patches: patch-intl_lwbrk_LineBreaker.cpp

Log Message:
firefox115: Update to 115.5.0

Changelog:
Fixed
    Various security fixes and other quality improvements.

Security fixes:
Mozilla Foundation Security Advisory 2023-50
#CVE-2023-6204: Out-of-bound memory access in WebGL2 blitFramebuffer
#CVE-2023-6205: Use-after-free in MessagePort::Entangled
#CVE-2023-6206: Clickjacking permission prompts using the fullscreen transition
#CVE-2023-6207: Use-after-free in ReadableByteStreamQueueEntry::Buffer
#CVE-2023-6208: Using Selection API would copy contents into X11 primary
 selection.
#CVE-2023-6209: Incorrect parsing of relative URLs starting with "///"
#CVE-2023-6212: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and
 Thunderbird 115.5


To generate a diff of this commit:
cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/firefox115/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/firefox115/distinfo
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/firefox115/mozilla-common.mk
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/www/firefox115/patches/patch-intl_lwbrk_LineBreaker.cpp

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox115/Makefile
diff -u pkgsrc/www/firefox115/Makefile:1.8 pkgsrc/www/firefox115/Makefile:1.9
--- pkgsrc/www/firefox115/Makefile:1.8  Tue Nov 14 14:03:04 2023
+++ pkgsrc/www/firefox115/Makefile      Thu Nov 23 12:47:01 2023
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.8 2023/11/14 14:03:04 wiz Exp $
+# $NetBSD: Makefile,v 1.9 2023/11/23 12:47:01 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            115.3
-MOZ_BRANCH_MINOR=      .1esr
+MOZ_BRANCH=            115.5
+MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox115-/}
-PKGREVISION=   6
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}

Index: pkgsrc/www/firefox115/distinfo
diff -u pkgsrc/www/firefox115/distinfo:1.2 pkgsrc/www/firefox115/distinfo:1.3
--- pkgsrc/www/firefox115/distinfo:1.2  Sun Oct 15 07:47:59 2023
+++ pkgsrc/www/firefox115/distinfo      Thu Nov 23 12:47:01 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.2 2023/10/15 07:47:59 ryoon Exp $
+$NetBSD: distinfo,v 1.3 2023/11/23 12:47:01 ryoon Exp $
 
-BLAKE2s (firefox-115.3.1esr.source.tar.xz) = 5b4076a017c80f161353afce1aed9716424a8369719df7b0534bc1ea91ec6dec
-SHA512 (firefox-115.3.1esr.source.tar.xz) = 65cb6fc46bba03eed742bd67f8e36b63b19f2ad7b85d2f503595704a4e88f554758a1e66ba548c8efe97a76322fb2514db72e6ff4bb2992d1aaa86edc3af85f1
-Size (firefox-115.3.1esr.source.tar.xz) = 515785920 bytes
+BLAKE2s (firefox-115.5.0esr.source.tar.xz) = edbc13615a536e474331226d60eaa1dea53e7c71a6461cadc5a058ecb85062a7
+SHA512 (firefox-115.5.0esr.source.tar.xz) = 5ee722884cd545cf5146f414526b4547286625f4f5996a409d7f64f115633fb7eb74d202e82f175fd5b2d24cce88deee70020fcb284055fcdea3d39da182074e
+Size (firefox-115.5.0esr.source.tar.xz) = 512244040 bytes
 BLAKE2s (nodejs-output-115.0.tgz) = 95d25628b865aa71e85c63001f4054d03ff58b273ca05784a021fa176b2b1425
 SHA512 (nodejs-output-115.0.tgz) = 345108033cfbff90e3244bb5591b307e1fcf56c7290b5112e949d400bdadf08c1e4a6d109b5f7264ac417c2cc4e76371cc14678417f6cb017649cc883bdbb4d4
 Size (nodejs-output-115.0.tgz) = 221458 bytes
@@ -17,6 +17,7 @@ SHA1 (patch-gfx_angle_checkout_src_compi
 SHA1 (patch-gfx_skia_skia_src_core_SkCpu.cpp) = 36218819254f3681b9c717d652ea78c9f20d49ad
 SHA1 (patch-gfx_skia_skia_src_core_SkVM.cpp) = 11d8084e933f68496fc4d2f57d1eb1065483bf9c
 SHA1 (patch-gfx_wr_swgl_build.rs) = df6ebfaabb4d27994e59a9d0eaf12c7cf08415fb
+SHA1 (patch-intl_lwbrk_LineBreaker.cpp) = e2eaf7d66f1255ba5baf7f7edadbb1fa8cb39b13
 SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 298642a3527804115b398fb7904a3596962932e3
 SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 35d20981d33ccdb1d8ffb8039e48798777f11658
 SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 6cdd0fe60455eab8f9846257c2bfea207f19478b

Index: pkgsrc/www/firefox115/mozilla-common.mk
diff -u pkgsrc/www/firefox115/mozilla-common.mk:1.3 pkgsrc/www/firefox115/mozilla-common.mk:1.4
--- pkgsrc/www/firefox115/mozilla-common.mk:1.3 Thu Nov 23 05:03:38 2023
+++ pkgsrc/www/firefox115/mozilla-common.mk     Thu Nov 23 12:47:01 2023
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.3 2023/11/23 05:03:38 snj Exp $
+# $NetBSD: mozilla-common.mk,v 1.4 2023/11/23 12:47:01 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -6,7 +6,7 @@
 
 .include "../../mk/bsd.prefs.mk"
 
-PYTHON_VERSIONS_INCOMPATIBLE=  27
+PYTHON_VERSIONS_INCOMPATIBLE=  27 312
 PYTHON_FOR_BUILD_ONLY=         tool
 ALL_ENV+=                      PYTHON3=${PYTHONBIN}
 

Added files:

Index: pkgsrc/www/firefox115/patches/patch-intl_lwbrk_LineBreaker.cpp
diff -u /dev/null pkgsrc/www/firefox115/patches/patch-intl_lwbrk_LineBreaker.cpp:1.1
--- /dev/null   Thu Nov 23 12:47:01 2023
+++ pkgsrc/www/firefox115/patches/patch-intl_lwbrk_LineBreaker.cpp      Thu Nov 23 12:47:01 2023
@@ -0,0 +1,21 @@
+$NetBSD: patch-intl_lwbrk_LineBreaker.cpp,v 1.1 2023/11/23 12:47:01 ryoon Exp $
+
+icu 74.1 support.
+
+--- intl/lwbrk/LineBreaker.cpp.orig    2023-10-19 19:54:30.000000000 +0000
++++ intl/lwbrk/LineBreaker.cpp
+@@ -448,7 +448,13 @@ static int8_t GetClass(uint32_t u, LineB
+       /* REGIONAL_INDICATOR = 39,           [RI] */ CLASS_CHARACTER,
+       /* E_BASE = 40,                       [EB] */ CLASS_BREAKABLE,
+       /* E_MODIFIER = 41,                   [EM] */ CLASS_CHARACTER,
+-      /* ZWJ = 42,                          [ZWJ]*/ CLASS_CHARACTER};
++      /* ZWJ = 42,                          [ZWJ]*/ CLASS_CHARACTER,
++      /* AKSARA = 43,                       [AK] */ CLASS_CHARACTER,
++      /* AKSARA_PREBASE = 44,               [AP] */ CLASS_CHARACTER,
++      /* AKSARA_START = 45,                 [AS] */ CLASS_CHARACTER,
++      /* VIRAMA_FINAL = 46,                 [VF] */ CLASS_CHARACTER,
++      /* VIRAMA = 47,                       [VI] */ CLASS_CHARACTER,
++};
+ 
+   static_assert(U_LB_COUNT == mozilla::ArrayLength(sUnicodeLineBreakToClass),
+                 "Gecko vs ICU LineBreak class mismatch");