CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sat May 18 00:22:38 UTC 2024

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo
        pkgsrc/www/firefox/files: node-wrapper.sh

Log Message:
www/firefox: Update to 126.0

CHangelog:
126.0:
New

  * The Copy Without Site Tracking option can now remove parameters from nested
    URLs. It also includes expanded support for blocking over 300 tracking
    parameters from copied links, including those from major shopping websites.
    Keep those trackers away when sharing links!

  * Firefox now supports Content-encoding: zstd (zstandard compression). This
    is an alternative to broti and gzip compression for web content, and can
    provide higher compression levels for the same CPU used, or conversely
    lower server CPU use to get the same compression. This is heavily used on
    sites such as Facebook.

  * Catalan is now available in Firefox Translations.

  * Enabled AV1 hardware decode acceleration on macOS for M3 Macs.

  * Telemetry was added to create an aggregate count of searches by category to
    broadly inform search feature development. These categories are based on 20
    high-level content types, such as "sports,?? "business," and "travel". This
    data will not be associated with specific users and will be collected using
    OHTTP to remove IP addresses as potentially identifying metadata. No
    profiling will be performed, and no data will be shared with third parties.
    (read more)

  * NVIDIA RTX Video Super Resolution (??VSR??) is now available in Firefox.
    RTX VSR enhances and sharpens lower resolution video when upscaled to
    higher resolutions and also removes blocky artifacts commonly visible on
    low bitrate streamed video. VSR requires at least a 20-series or higher
    NVIDIA RTX GPU, Microsoft Windows 10/11 64-bit, and NVIDIA driver version
    R530 or higher. The feature can be enabled in the NVIDIA control panel.

  * NVIDIA RTX Video HDR is now available in Firefox. RTX Video HDR
    automatically converts SDR video to vibrant HDR10 in real time, letting you
    enjoy video with improved clarity on your HDR10 panel. It requires at least
    a 20-series NVIDIA RTX GPU, Microsoft Windows 10/11 64-bit, and NVIDIA
    driver version 550 or higher. The feature can be enabled in the NVIDIA
    control panel.

Fixed

  * Various security fixes.

Changed

  * The URL Paste Suggestion feature added in Fx125 was temporarily disabled
    while the team investigates a potential performance issue. The feature will
    be re-enabled in a future release once the performance issue is addressed.

Security fixes:
Mozilla Foundation Security Advisory 2024-21
#CVE-2024-4764: Use-after-free when audio input connected with multiple
 consumers
#CVE-2024-4367: Arbitrary JavaScript execution in PDF.js
#CVE-2024-4765: Web application manifests could have been overwritten via hash
 collision
#CVE-2024-4766: Fullscreen notification could have been obscured on Firefox for
#CVE-2024-4767: IndexedDB files retained in private browsing mode
#CVE-2024-4768: Potential permissions request bypass via clickjacking
#CVE-2024-4769: Cross-origin responses could be distinguished between script
 and non-script content-types
#CVE-2024-4770: Use-after-free could occur when printing to PDF
#CVE-2024-4771: Failed allocation could lead to use-after-free
#CVE-2024-4772: Use of insecure rand() function to generate nonce
#CVE-2024-4773: URL bar could be cleared after network error
#CVE-2024-4774: Undefined behavior in ShmemCharMapHashEntry()
#CVE-2024-4775: Invalid memory access in the built-in profiler
#CVE-2024-4776: Window may remain disabled after file dialog is shown in
 full-screen
#CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
 and Thunderbird 115.11
#CVE-2024-4778: Memory safety bugs fixed in Firefox 126


To generate a diff of this commit:
cvs rdiff -u -r1.599 -r1.600 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.530 -r1.531 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.17 -r1.18 pkgsrc/www/firefox/files/node-wrapper.sh

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.599 pkgsrc/www/firefox/Makefile:1.600
--- pkgsrc/www/firefox/Makefile:1.599   Fri May  3 18:36:13 2024
+++ pkgsrc/www/firefox/Makefile Sat May 18 00:22:38 2024
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.599 2024/05/03 18:36:13 ryoon Exp $
+# $NetBSD: Makefile,v 1.600 2024/05/18 00:22:38 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            125.0
-MOZ_BRANCH_MINOR=      .3
+MOZ_BRANCH=            126.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
@@ -11,7 +11,7 @@ MASTER_SITES+=        ${MASTER_SITE_MOZILLA:=fi
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
 
-NODEJSKIT=             nodejs-output-125.0.1.tgz
+NODEJSKIT=             nodejs-output-126.0.tgz
 DISTFILES=             ${DEFAULT_DISTFILES} ${NODEJSKIT}
 SITES.${NODEJSKIT}=    ${MASTER_SITE_LOCAL}
 

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.530 pkgsrc/www/firefox/distinfo:1.531
--- pkgsrc/www/firefox/distinfo:1.530   Fri May 10 09:14:07 2024
+++ pkgsrc/www/firefox/distinfo Sat May 18 00:22:38 2024
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.530 2024/05/10 09:14:07 jperkin Exp $
+$NetBSD: distinfo,v 1.531 2024/05/18 00:22:38 ryoon Exp $
 
-BLAKE2s (firefox-125.0.3.source.tar.xz) = eccdb81aa8ff1abfc867604676dd2cfdff9c3a65192ecb3c645a47a0a2aae1d7
-SHA512 (firefox-125.0.3.source.tar.xz) = 18e705a3093290311ccb5f27f01e43fe243ece94c1769a9ccc4fa53d370e32a1ec6a107cdeb531e9468b9aca1a1fe668161adb7acc1ec65fd383837882c7d484
-Size (firefox-125.0.3.source.tar.xz) = 551590872 bytes
-BLAKE2s (nodejs-output-125.0.1.tgz) = d71ccbe962c933929c1d60c16932ffeced62f2bbf89a9747f701294423391ff2
-SHA512 (nodejs-output-125.0.1.tgz) = 008bbb4b7ec535d5144f0bba2eba174f05487063c34f4a5b6b544fca2f91b8d2cea50503cce57d948448f60ab7d5aa58480887b03047ea3b03bdf19345197aa3
-Size (nodejs-output-125.0.1.tgz) = 224740 bytes
+BLAKE2s (firefox-126.0.source.tar.xz) = c648d4a7ff8983a6b7e07575e2c9ff34775f7b7320c6c2121524c077745f147b
+SHA512 (firefox-126.0.source.tar.xz) = 56025b051d544ca294911a1d6a66f09945f71012131881b64313dafb579730810a4b091950c90a21d4fd3f393ba23670d8409086e1677d80d0bbbe347c303527
+Size (firefox-126.0.source.tar.xz) = 552065476 bytes
+BLAKE2s (nodejs-output-126.0.tgz) = 25f99a80ee2eb42ccf9f79f6909698ba2411dd83726acdfcefd31570f8aa461e
+SHA512 (nodejs-output-126.0.tgz) = 6f4e7111947e74464dd7a99330b81641a0c3d9e0aa47430ebb06602a3451b518974002968fbc7ba329fc4730b0d09e1639d938b935e68006586c5a5ac0fc47b9
+Size (nodejs-output-126.0.tgz) = 226081 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.17 pkgsrc/www/firefox/files/node-wrapper.sh:1.18
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.17       Tue Apr 16 20:10:33 2024
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Sat May 18 00:22:38 2024
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v21.7.3
+VERS=v22.1.0
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"