From e5b714dc5f751dc1b2739bff8b4e7623d1962f40 Mon Sep 17 00:00:00 2001 From: ryoon Date: Sat, 12 Mar 2016 03:47:20 +0000 Subject: Update to 38.7.0 Changelog: Fixed in Firefox ESR 38.7 2016-37 Font vulnerabilities in the Graphite 2 library 2016-35 Buffer overflow during ASN.1 decoding in NSS 2016-34 Out-of-bounds read in HTML parser following a failed allocation 2016-31 Memory corruption with malicious NPAPI plugin 2016-28 Addressbar spoofing though history navigation and Location protocol property 2016-27 Use-after-free during XML transformations 2016-25 Use-after-free when using multiple WebRTC data channels 2016-24 Use-after-free in SetBody 2016-23 Use-after-free in HTML5 string parser 2016-21 Displayed page address can be overridden 2016-20 Memory leak in libstagefright when deleting an array during MP4 processing 2016-17 Local file overwriting and potential privilege escalation through CSP reports 2016-16 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7) 2015-136 Same-origin policy violation using performance.getEntries and history navigation 2015-81 Use-after-free in MediaStream playback --- www/firefox38/Makefile | 7 +++---- www/firefox38/distinfo | 10 +++++----- .../patches/patch-gfx_graphite2_moz-gr-update.sh | 20 -------------------- 3 files changed, 8 insertions(+), 29 deletions(-) delete mode 100644 www/firefox38/patches/patch-gfx_graphite2_moz-gr-update.sh diff --git a/www/firefox38/Makefile b/www/firefox38/Makefile index 2bc506e233a..532276b11ec 100644 --- a/www/firefox38/Makefile +++ b/www/firefox38/Makefile @@ -1,12 +1,11 @@ -# $NetBSD: Makefile,v 1.15 2016/03/05 11:29:37 jperkin Exp $ +# $NetBSD: Makefile,v 1.16 2016/03/12 03:47:20 ryoon Exp $ FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR} -MOZ_BRANCH= 38.6 -MOZ_BRANCH_MINOR= .1esr +MOZ_BRANCH= 38.7 +MOZ_BRANCH_MINOR= .0esr DISTNAME= firefox-${FIREFOX_VER}.source PKGNAME= firefox38-${MOZ_BRANCH}${MOZ_BRANCH_MINOR:S/b/beta/:S/esr//} -PKGREVISION= 1 CATEGORIES= www MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/} MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/} diff --git a/www/firefox38/distinfo b/www/firefox38/distinfo index cb896fd6115..e0227f09d1b 100644 --- a/www/firefox38/distinfo +++ b/www/firefox38/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.14 2016/02/19 14:42:33 ryoon Exp $ +$NetBSD: distinfo,v 1.15 2016/03/12 03:47:20 ryoon Exp $ -SHA1 (firefox-38.6.1esr.source.tar.bz2) = b3b5712ba27e70536cd589ec212b42518819871b -RMD160 (firefox-38.6.1esr.source.tar.bz2) = f28f8245f5bfc197f9fd931520eab42a0ec6b441 -SHA512 (firefox-38.6.1esr.source.tar.bz2) = e80161a8cf95ab46cf49018c1105c986a412405e3bdb7535fc7ad5e68195f8ebe799624ed482576538a785ff2a4fdad5d1cf594566180035c2bfc9a4eb9b790c -Size (firefox-38.6.1esr.source.tar.bz2) = 181332690 bytes +SHA1 (firefox-38.7.0esr.source.tar.bz2) = 42dbd9ef7e3b5b4aabd2dee602e982146b457d18 +RMD160 (firefox-38.7.0esr.source.tar.bz2) = b638c2020d6130f013f51ea6fcb272a9b7e37e95 +SHA512 (firefox-38.7.0esr.source.tar.bz2) = edb8cdb06d82a58c3dca216402a4df0afb21bcaf97cbf3ebc3857249b281283f099267284f025fb724f47eff9c3b7569f6ae000003332c47264ca254f73e65ca +Size (firefox-38.7.0esr.source.tar.bz2) = 181313049 bytes SHA1 (patch-aa) = e9e8400fa86ae8d6910b49e3a98127122e714f1a SHA1 (patch-accessible_atk_Platform.cpp) = c2deb81b300de44c4500328589185bbd4b6b02fb SHA1 (patch-al) = cca5df21d018bb9f428ad26d00718f33afe88ec5 diff --git a/www/firefox38/patches/patch-gfx_graphite2_moz-gr-update.sh b/www/firefox38/patches/patch-gfx_graphite2_moz-gr-update.sh deleted file mode 100644 index 6783523e8b1..00000000000 --- a/www/firefox38/patches/patch-gfx_graphite2_moz-gr-update.sh +++ /dev/null @@ -1,20 +0,0 @@ -$NetBSD: patch-gfx_graphite2_moz-gr-update.sh,v 1.1 2015/07/09 14:13:52 ryoon Exp $ - ---- gfx/graphite2/moz-gr-update.sh.orig 2014-11-21 03:37:30.000000000 +0000 -+++ gfx/graphite2/moz-gr-update.sh -@@ -23,8 +23,14 @@ echo "\nSee" $0 "for update procedure.\n - find gfx/graphite2/ -name "*.cpp" -exec perl -p -i -e "s///;s/Windows.h/windows.h/;" {} \; - find gfx/graphite2/ -name "*.h" -exec perl -p -i -e "s///;s/Windows.h/windows.h/;" {} \; - -+# closest tag/release to require for system version -+TAG=$(cd ../graphitedev/ && hg parents --template {latesttag}) -+ -+perl -p -i -e "s/[0-9]+\,[0-9]+\,[0-9]+/$TAG/ and tr/./,/ \ -+ if /GR2_VERSION_REQUIRE/" configure.in -+ - # summarize what's been touched --echo Updated to $CHANGESET. -+echo Updated to $CHANGESET \($TAG for --with-system-graphite2\) - echo Here is what changed in the gfx/graphite2 directory: - echo - -- cgit v1.2.3