CVS commit: [pkgsrc-2024Q3] pkgsrc/www/firefox128

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Thu Oct 31 21:15:23 UTC 2024

Modified Files:
        pkgsrc/www/firefox128 [pkgsrc-2024Q3]: Makefile distinfo

Log Message:
Pullup ticket #6911 - requested by gutteridge
Security fix

Revisions pulled up:
- www/firefox128/Makefile                                       1.6
- www/firefox128/distinfo                                       1.6

---
   Module Name:    pkgsrc
   Committed By:   gutteridge
   Date:           Wed Oct 30 16:29:43 UTC 2024

   Modified Files:
            pkgsrc/www/firefox128: Makefile distinfo

   Log Message:
   firefox128: update to 128.4.0

   Fixes for Mozilla Foundation Security Advisory 2024-56

   CVE-2024-10458: Permission leak via embed or object elements
   CVE-2024-10459: Use-after-free in layout with accessibility
   CVE-2024-10460: Confusing display of origin for external protocol
   handler prompt
   CVE-2024-10461: XSS due to Content-Disposition being ignored in
   multipart/x-mixed-replace response
   CVE-2024-10462: Origin of permission prompt could be spoofed by long URL
   CVE-2024-10463: Cross origin video frame leak
   CVE-2024-10464: History interface could have been used to cause a Denial
   of Service condition in the browser
   CVE-2024-10465: Clipboard "paste" button persisted across tabs
   CVE-2024-10466: DOM push subscription message could hang Firefox
   CVE-2024-10467: Memory safety bugs fixed in Firefox 132, Thunderbird
   132, Firefox ESR 128.4, and Thunderbird 128.4


To generate a diff of this commit:
cvs rdiff -u -r1.2.2.2 -r1.2.2.3 pkgsrc/www/firefox128/Makefile
cvs rdiff -u -r1.3.2.2 -r1.3.2.3 pkgsrc/www/firefox128/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox128/Makefile
diff -u pkgsrc/www/firefox128/Makefile:1.2.2.2 pkgsrc/www/firefox128/Makefile:1.2.2.3
--- pkgsrc/www/firefox128/Makefile:1.2.2.2      Fri Oct 11 18:05:20 2024
+++ pkgsrc/www/firefox128/Makefile      Thu Oct 31 21:15:23 2024
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.2.2.2 2024/10/11 18:05:20 bsiegert Exp $
+# $NetBSD: Makefile,v 1.2.2.3 2024/10/31 21:15:23 maya Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            128.3
-MOZ_BRANCH_MINOR=      .1esr
+MOZ_BRANCH=            128.4
+MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//:S/firefox-/firefox128-/}

Index: pkgsrc/www/firefox128/distinfo
diff -u pkgsrc/www/firefox128/distinfo:1.3.2.2 pkgsrc/www/firefox128/distinfo:1.3.2.3
--- pkgsrc/www/firefox128/distinfo:1.3.2.2      Fri Oct 11 18:05:20 2024
+++ pkgsrc/www/firefox128/distinfo      Thu Oct 31 21:15:23 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.3.2.2 2024/10/11 18:05:20 bsiegert Exp $
+$NetBSD: distinfo,v 1.3.2.3 2024/10/31 21:15:23 maya Exp $
 
-BLAKE2s (firefox-128.3.1esr.source.tar.xz) = c9ff7c347389bd747654ee3b3d3e443589b617ec7a372f89f10cf9dcdc7347d5
-SHA512 (firefox-128.3.1esr.source.tar.xz) = c5c1a2e951e0dbb1259a0f77a26b8678bfa4a4c7e909f8fcd5c6d0f807625926824ed235e114d9bab5e289232efaaf4c6691764db64860161ebc9bece9200f0c
-Size (firefox-128.3.1esr.source.tar.xz) = 562947536 bytes
+BLAKE2s (firefox-128.4.0esr.source.tar.xz) = 7f17d3d1549964fb8dac1d89b67d6a884cf7db29b7d2f6aabaa2b82ac264a5e8
+SHA512 (firefox-128.4.0esr.source.tar.xz) = e720b1f993926d73f5a5727648f753176ac2fd093fb0b71393946bbc5919ce5fc7b88b82960bd1aa427b5663c7f659828dc6702485fc0c1e7a6961571c67faa3
+Size (firefox-128.4.0esr.source.tar.xz) = 558619512 bytes
 BLAKE2s (nodejs-output-128.0.tgz) = a55b907ebe308948b99b9150d2530204c8fe2a5fda5ac371dd1163a6db43bcbc
 SHA512 (nodejs-output-128.0.tgz) = fba59ec14c43556749cac7a9233278e8dcd7779d5ba530ede67009bf1887c5d72dd31e3f440164b646738b465d852b882522caf7ed9aa4f81f53e588bdd3adec
 Size (nodejs-output-128.0.tgz) = 227482 bytes