CVS commit: pkgsrc/www/firefox115

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Jan 10 15:38:44 UTC 2024

Modified Files:
        pkgsrc/www/firefox115: Makefile distinfo mozilla-common.mk

Log Message:
firefox115: Update to 115.6.0

Changelog:
115.6.0:
* Security fixes.

Mozilla Foundation Security Advisory 2023-54
#CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced
 method with Mesa VM driver
#CVE-2023-6865: Potential exposure of uninitialized data in
 EncryptingOutputStream
#CVE-2023-6857: Symlinks may resolve to smaller than expected buffers
#CVE-2023-6858: Heap buffer overflow in nsTextFragment
#CVE-2023-6859: Use-after-free in PR_GetIdentitiesLayer
#CVE-2023-6860: Potential sandbox escape due to VideoBridge lack of texture
 validation
#CVE-2023-6867: Clickjacking permission prompts using the popup transition
#CVE-2023-6861: Heap buffer overflow affected nsWindow::PickerOpen(void) in
 headless mode
#CVE-2023-6862: Use-after-free in nsDNSService
#CVE-2023-6863: Undefined behavior in ShutdownObserver()
#CVE-2023-6864: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and
 Thunderbird 115.6


To generate a diff of this commit:
cvs rdiff -u -r1.12 -r1.13 pkgsrc/www/firefox115/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/firefox115/distinfo
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/firefox115/mozilla-common.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox115/Makefile
diff -u pkgsrc/www/firefox115/Makefile:1.12 pkgsrc/www/firefox115/Makefile:1.13
--- pkgsrc/www/firefox115/Makefile:1.12 Mon Jan  8 17:39:44 2024
+++ pkgsrc/www/firefox115/Makefile      Wed Jan 10 15:38:44 2024
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.12 2024/01/08 17:39:44 leot Exp $
+# $NetBSD: Makefile,v 1.13 2024/01/10 15:38:44 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            115.5
+MOZ_BRANCH=            115.6
 MOZ_BRANCH_MINOR=      .0esr
-PKGREVISION=           2
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox115-/}

Index: pkgsrc/www/firefox115/distinfo
diff -u pkgsrc/www/firefox115/distinfo:1.3 pkgsrc/www/firefox115/distinfo:1.4
--- pkgsrc/www/firefox115/distinfo:1.3  Thu Nov 23 12:47:01 2023
+++ pkgsrc/www/firefox115/distinfo      Wed Jan 10 15:38:44 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.3 2023/11/23 12:47:01 ryoon Exp $
+$NetBSD: distinfo,v 1.4 2024/01/10 15:38:44 ryoon Exp $
 
-BLAKE2s (firefox-115.5.0esr.source.tar.xz) = edbc13615a536e474331226d60eaa1dea53e7c71a6461cadc5a058ecb85062a7
-SHA512 (firefox-115.5.0esr.source.tar.xz) = 5ee722884cd545cf5146f414526b4547286625f4f5996a409d7f64f115633fb7eb74d202e82f175fd5b2d24cce88deee70020fcb284055fcdea3d39da182074e
-Size (firefox-115.5.0esr.source.tar.xz) = 512244040 bytes
+BLAKE2s (firefox-115.6.0esr.source.tar.xz) = 36a05ee81148f9b6ff6c0efdbc7a91447400e243b419008bd6f9120eb918929c
+SHA512 (firefox-115.6.0esr.source.tar.xz) = 9fe23b5f715e35b788d9c8fefe6b7be8785789b4ae6f5649b05a54221934101c6e1b9580319145f9bcaebfbd00fcc33e97afb63f7d57ba102a6b02c874d324af
+Size (firefox-115.6.0esr.source.tar.xz) = 511017732 bytes
 BLAKE2s (nodejs-output-115.0.tgz) = 95d25628b865aa71e85c63001f4054d03ff58b273ca05784a021fa176b2b1425
 SHA512 (nodejs-output-115.0.tgz) = 345108033cfbff90e3244bb5591b307e1fcf56c7290b5112e949d400bdadf08c1e4a6d109b5f7264ac417c2cc4e76371cc14678417f6cb017649cc883bdbb4d4
 Size (nodejs-output-115.0.tgz) = 221458 bytes

Index: pkgsrc/www/firefox115/mozilla-common.mk
diff -u pkgsrc/www/firefox115/mozilla-common.mk:1.5 pkgsrc/www/firefox115/mozilla-common.mk:1.6
--- pkgsrc/www/firefox115/mozilla-common.mk:1.5 Fri Dec 29 17:29:14 2023
+++ pkgsrc/www/firefox115/mozilla-common.mk     Wed Jan 10 15:38:44 2024
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.5 2023/12/29 17:29:14 he Exp $
+# $NetBSD: mozilla-common.mk,v 1.6 2024/01/10 15:38:44 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -69,7 +69,6 @@ USE_TOOLS+=           tar
 
 .if ${MACHINE_ARCH} == "i386"
 # This is required for SSE2 code under i386.
-CXXFLAGS+=     -mstackrealign
 CFLAGS+=       -mstackrealign
 .endif