Subject: CVS commit: pkgsrc/www/firefox
From: Ryo ONODERA
Date: 2018-01-24 17:52:08
Message id: 20180124165208.C4902FBDE@cvs.NetBSD.org

Log Message:
Update to 58.0

Changelog:
New
    Performance improvements, including:
        Rendering graphics for Windows users by using Off-Main-Threa
           Painting (OMTP)
        Loading pages faster by changing how Firefox caches and retrieves
           JavaScript

    Improvements to Firefox Screenshots:
        Copy and paste screenshots directly to your clipboard
        Firefox Screenshots now works in Private Browsing mode

    Added Nepali (ne-NP) locale

    In case you missed it--57 Release privacy and performance feature:
      Users can enable Tracking Protection at all times. Learn how to turn
      Tracking Protection on.

Fixed
    Fonts installed in non-standard directories will no longer appear
      blank for Linux users

    Various security fixes

Changed
    User profiles created in Firefox 58 (and in future releases) are not
    supported in previous versions of Firefox. Users who downgrade to
    a previous version should create a new profile for that version.
    Learn about alternatives to downgrading on our support site.

    Added a warning to alert users and site owners of planned security
    changes to sites affected by the gradual distrust plan for
    the Symantec certificate authority

#CVE-2018-5091: Use-after-free with DTMF timers
#CVE-2018-5092: Use-after-free in Web Workers
#CVE-2018-5093: Buffer overflow in WebAssembly during Memory/Table resizing
#CVE-2018-5094: Buffer overflow in WebAssembly with garbage collection on
 uninitialized memory
#CVE-2018-5095: Integer overflow in Skia library during edge builder allocation
#CVE-2018-5097: Use-after-free when source document is manipulated during XSLT
#CVE-2018-5098: Use-after-free while manipulating form input elements
#CVE-2018-5099: Use-after-free with widget listener
#CVE-2018-5100: Use-after-free when IsPotentiallyScrollable arguments are
 freed from memory
#CVE-2018-5101: Use-after-free with floating first-letter style elements
#CVE-2018-5102: Use-after-free in HTML media elements
#CVE-2018-5103: Use-after-free during mouse event handling
#CVE-2018-5104: Use-after-free during font face manipulation
#CVE-2018-5105: WebExtensions can save and execute files on local file
 system without user prompts
#CVE-2018-5106: Developer Tools can expose style editor information
 cross-origin through service worker
#CVE-2018-5107: Printing process will follow symlinks for local file access
#CVE-2018-5108: Manually entered blob URL can be accessed by subsequent
 private browsing tabs
#CVE-2018-5109: Audio capture prompts and starts with incorrect origin
 attribution
#CVE-2018-5110: Cursor can be made invisible on OS X
#CVE-2018-5117: URL spoofing with right-to-left text aligned left-to-right
#CVE-2018-5118: Activity Stream images can attempt to load local content
 through file:
#CVE-2018-5119: Reader view will load cross-origin content in violation
 of CORS headers
#CVE-2018-5121: OS X Tibetan characters render incompletely in the addressbar
#CVE-2018-5122: Potential integer overflow in DoCrypt
#CVE-2018-5090: Memory safety bugs fixed in Firefox 58
#CVE-2018-5089: Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6

Files:
RevisionActionfile
1.318modifypkgsrc/www/firefox/Makefile
1.126modifypkgsrc/www/firefox/PLIST
1.306modifypkgsrc/www/firefox/distinfo
1.104modifypkgsrc/www/firefox/mozilla-common.mk
1.55modifypkgsrc/www/firefox/patches/patch-aa
1.8modifypkgsrc/www/firefox/patches/patch-dom_media_moz.build
1.7modifypkgsrc/www/firefox/patches/patch-intl_unicharutil_util_moz.build
1.2modifypkgsrc/www/firefox/patches/patch-js_src_build_moz.build
1.26modifypkgsrc/www/firefox/patches/patch-media_libcubeb_src_cubeb__alsa.c
1.7modifypkgsrc/www/firefox/patches/patch-netwerk_dns_moz.build
1.4modifypkgsrc/www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_stubs_atomicops.h
1.9modifypkgsrc/www/firefox/patches/patch-toolkit_moz.configure
1.1addpkgsrc/www/firefox/patches/patch-config_system-headers.mozbuild
1.1addpkgsrc/www/firefox/patches/patch-dom_media_flac_FlacDecoder.cpp
1.1addpkgsrc/www/firefox/patches/patch-ipc_glue_MessageChannel.cpp
1.1addpkgsrc/www/firefox/patches/patch-servo_components_style_properties_helpers_animated__properties.mako.rs
1.3addpkgsrc/www/firefox/patches/patch-third__party_python_futures_concurrent_futures_process.py
1.1addpkgsrc/www/firefox/patches/patch-toolkit_mozapps_installer_packager.mk
1.3removepkgsrc/www/firefox/patches/patch-build_moz.configure_keyfiles.configure
1.11removepkgsrc/www/firefox/patches/patch-config_Makefile.in
1.25removepkgsrc/www/firefox/patches/patch-config_system-headers
1.6removepkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_process__util.h
1.5removepkgsrc/www/firefox/patches/patch-media_libsoundtouch_src_cpu__detect__x86.cpp
1.1removepkgsrc/www/firefox/patches/patch-servo_components_gfx_font.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_net__traits_response.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_net_fetch_cors__cache.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_net_fetch_methods.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_net_websocket__loader.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_bindings_str.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_blob.rs
1.3removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_cssstyledeclaration.rs
1.3removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_document.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_element.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_htmlelement.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_htmllinkelement.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_htmlmetaelement.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_htmlscriptelement.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_macros.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_namednodemap.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_serviceworkercontainer.rs
1.3removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_servoparser_async__html.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_websocket.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_window.rs
1.3removepkgsrc/www/firefox/patches/patch-servo_components_script_dom_xmlhttprequest.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_selectors_attr.rs
1.3removepkgsrc/www/firefox/patches/patch-servo_components_selectors_parser.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style__traits_viewport.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_attr.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_counter__style_mod.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_custom__properties.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_gecko__string__cache_mod.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_gecko_generated_pseudo__element__definition.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_gecko_pseudo__element__definition.mako.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_properties_longhand_font.mako.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_properties_longhand_pointing.mako.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_servo_selector__parser.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_str.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_stylesheets_viewport__rule.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_mod.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_align.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_angle.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_calc.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_grid.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_length.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_mod.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_percentage.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_text.rs
1.1removepkgsrc/www/firefox/patches/patch-servo_components_style_values_specified_time.rs
1.3removepkgsrc/www/firefox/patches/patch-xpcom_reflect_xptcall_md_unix_Makefile.in