CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sun Dec 31 09:03:56 UTC 2023

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk
        pkgsrc/www/firefox/files: node-wrapper.sh

Log Message:
firefox: Update to 121.0

* CXXFLAGS has all CFLAGS values. Remove duplicated CXXFLAGS.

Changelog:
121.0
New

  * Firefox now prompts Windows users to install the Microsoft AV1 Video
    Extension to enable hardware decoding support for the AV1 video codec from
    about:support if not already installed.

  * Firefox now supports Voice Control commands on macOS systems.

  * On Linux, Firefox now defaults to the Wayland compositor when available
    instead of XWayland. This brings support for touchpad & touchscreen
    gestures, swipe-to-nav, per-monitor DPI settings, better graphics
    performance, and more.

    Note that due to Wayland protocol limitations, Picture-in-Picture windows
    require an extra user interaction (generally right-click on the window) or
    a shell / desktop-environment tweak. See bug 1621261 for related discussion
    and tracking, this post for a KDE configuration, and this extension for
    GNOME. It is also a known issue that windows are not correctly placed when
    restoring a previous session on launch.

  * Firefox can now force links to always be underlined. This option can be
    enabled in the Browsing section of the Firefox Settings menu.

  * The PDF viewer now includes a floating button to simplify deleting
    drawings, text, and images added in PDFs.

Fixed

  * Various security fixes.

  * Ubuntu Firefox Snap builds did not default to Wayland compositing on some
    systems as expected when Firefox 121 was first released. This is now fixed
    and updated builds can be installed with the Ubuntu Software Updater.

Security fixes:
Mozilla Foundation Security Advisory 2023-56
#CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced
 method with Mesa VM driver
#CVE-2023-6135: NSS susceptible to "Minerva" attack
#CVE-2023-6865: Potential exposure of uninitialized data in
 EncryptingOutputStream
#CVE-2023-6857: Symlinks may resolve to smaller than expected buffers
#CVE-2023-6858: Heap buffer overflow in nsTextFragment
#CVE-2023-6859: Use-after-free in PR_GetIdentitiesLayer
#CVE-2023-6866: TypedArrays lack sufficient exception handling
#CVE-2023-6860: Potential sandbox escape due to VideoBridge lack of texture
 validation
#CVE-2023-6867: Clickjacking permission prompts using the popup transition
#CVE-2023-6861: Heap buffer overflow affected nsWindow::PickerOpen(void) in
 headless mode
#CVE-2023-6868: WebPush requests on Firefox for Android did not require VAPID
 key
#CVE-2023-6869: Content can paint outside of sandboxed iframe
#CVE-2023-6870: Android Toast notifications may obscure fullscreen event
 notifications
#CVE-2023-6871: Lack of protocol handler warning in some instances
#CVE-2023-6872: Browsing history leaked to syslogs via GNOME
#CVE-2023-6863: Undefined behavior in ShutdownObserver()
#CVE-2023-6864: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and
 Thunderbird 115.6
#CVE-2023-6873: Memory safety bugs fixed in Firefox 121


To generate a diff of this commit:
cvs rdiff -u -r1.583 -r1.584 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.517 -r1.518 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.272 -r1.273 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.13 -r1.14 pkgsrc/www/firefox/files/node-wrapper.sh

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.583 pkgsrc/www/firefox/Makefile:1.584
--- pkgsrc/www/firefox/Makefile:1.583   Fri Dec 29 17:18:38 2023
+++ pkgsrc/www/firefox/Makefile Sun Dec 31 09:03:55 2023
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.583 2023/12/29 17:18:38 he Exp $
+# $NetBSD: Makefile,v 1.584 2023/12/31 09:03:55 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            120.0
-MOZ_BRANCH_MINOR=      .1
-PKGREVISION=           1
+MOZ_BRANCH=            121.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
@@ -12,7 +11,7 @@ MASTER_SITES+=        ${MASTER_SITE_MOZILLA:=fi
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
 
-NODEJSKIT=             nodejs-output-119.0.1.tgz
+NODEJSKIT=             nodejs-output-121.0.tgz
 DISTFILES=             ${DEFAULT_DISTFILES} ${NODEJSKIT}
 SITES.${NODEJSKIT}=    ${MASTER_SITE_LOCAL}
 

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.517 pkgsrc/www/firefox/distinfo:1.518
--- pkgsrc/www/firefox/distinfo:1.517   Fri Dec  1 15:05:28 2023
+++ pkgsrc/www/firefox/distinfo Sun Dec 31 09:03:55 2023
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.517 2023/12/01 15:05:28 ryoon Exp $
+$NetBSD: distinfo,v 1.518 2023/12/31 09:03:55 ryoon Exp $
 
-BLAKE2s (firefox-120.0.1.source.tar.xz) = 81443dea462b8f0e988c60832dfc371f3686c89b54ec585642c47f17f2fcc4ca
-SHA512 (firefox-120.0.1.source.tar.xz) = dd0e3eb234d58c39431d1f100834ef4bcc8cfb89ff471a37b948eda4dd3874b63b1979cda39a0db0dd3b4a579b5f09a7d2d1f39d26fd9f2b8d5635e4b8738b6c
-Size (firefox-120.0.1.source.tar.xz) = 529206136 bytes
-BLAKE2s (nodejs-output-119.0.1.tgz) = 81bc6931d0f8a83258ee57b2c81ff41eff114fe8d65f6ce129a597e7ba85103c
-SHA512 (nodejs-output-119.0.1.tgz) = 09f86bc2cf706487feaf9e29e7927479a7c2c99299ff84a61dbf32b3d075a48e1f1ac43ecbdc38cd848978dc8105c3022972a6d14068649628d0bc5026e5b52a
-Size (nodejs-output-119.0.1.tgz) = 220307 bytes
+BLAKE2s (firefox-121.0.source.tar.xz) = f24fdf7f667c8fc3bdac826724c59d71b26eee04abb6518bd1648c597271973c
+SHA512 (firefox-121.0.source.tar.xz) = 52e9e21ce825c4e58f09fd2c7347f1ac4efbca47e119136a712f0d4ee80c769ef80a43bad74a4c88cd377f804f5780b07f7af5b779f3fb5d244fa095e6b3b18a
+Size (firefox-121.0.source.tar.xz) = 530302784 bytes
+BLAKE2s (nodejs-output-121.0.tgz) = d72cbb56a198649975ad3c89ae4fdb0d6a186fba955c4d930aaa00ae019482b6
+SHA512 (nodejs-output-121.0.tgz) = abb27c08e0ec037a7066d13628f6edf983317715e64c3a4d7c3ad2775d0d8df00e6b1cfe56721141e58b68e0993c5dc0940f64aa4943aff48a1d7da6db6e3ea6
+Size (nodejs-output-121.0.tgz) = 224776 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = a0a3d429f9eb5e0c95a94efed407a18e5e12328d
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 9d1f15ff487efa9202114d19ed5668b4e7aa032a

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.272 pkgsrc/www/firefox/mozilla-common.mk:1.273
--- pkgsrc/www/firefox/mozilla-common.mk:1.272  Fri Dec 29 17:18:38 2023
+++ pkgsrc/www/firefox/mozilla-common.mk        Sun Dec 31 09:03:55 2023
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.272 2023/12/29 17:18:38 he Exp $
+# $NetBSD: mozilla-common.mk,v 1.273 2023/12/31 09:03:55 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -69,7 +69,6 @@ USE_TOOLS+=           tar
 
 .if ${MACHINE_ARCH} == "i386"
 # This is required for SSE2 code under i386.
-CXXFLAGS+=     -mstackrealign
 CFLAGS+=       -mstackrealign
 .endif
 

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.13 pkgsrc/www/firefox/files/node-wrapper.sh:1.14
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.13       Wed Nov 22 13:32:12 2023
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Sun Dec 31 09:03:55 2023
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v21.2.0
+VERS=v21.5.0
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"