Subject: CVS commit: pkgsrc/www/firefox
From: Ryo ONODERA
Date: 2022-04-03 02:22:30
Message id: 20220403002231.0FF14FB24@cvs.NetBSD.org

Log Message:
firefox: Update to 98.0.2

Changelog:
98.0.2:
Fixed

  * Fixed an issue preventing users from typing in Address Bar after opening
    new tab and pressing cmd + enter (bug 1757376)

  * Fixed an issue causing some users to crash in out-of-memory conditions (bug
    1757618)

  * Fixed an issue in session history which caused some sites to fail to load (
    bug 1758664)

  * Fixed an add-on specific compatibility issue (bug 1759162)

98.0.1:
Changed

  * Yandex and Mail.ru have been removed as optional search providers in the
    drop-down search menu in Firefox.

    If you previously installed a customized version of Firefox with Yandex or
    Mail.ru, offered through partner distribution channels, this release
    removes those customizations, including add-ons and default bookmarks.
    Where applicable, your browser will revert back to default settings, as
    offered by Mozilla. All other releases of Firefox remain unaffected by the
    change.

98.0:
New

  * Firefox has a new optimized download flow. Instead of prompting every time,
    files will download automatically. However, they can still be opened from
    the downloads panel with just one click. Easy! More information

    You'll find you have a number of options, including:

      + Always Open Similar Files: Make Firefox automatically open downloaded
        files of the same type with the system default application.
      + Show In Folder: Open the folder that contains your downloaded files.
      + Go To Download Page: Surfaces the download reference page even after
        leaving the site or closing the tab.
      + Copy Download Link: Copy the download link to share it, save it, or for
        any applicable use.
      + Delete: You can now delete downloaded files directly from the download
        panel and other download views using the context menu.
      + Remove From History: Remove a file from your list of downloaded files.
      + Clear Preview Panel: Clear the list of downloaded items in the preview
        panel that opens when you start a download.

    In this release, you'll also see that Firefox no longer asks what to do
    for each file by default. You won't be prompted to choose a helper
    application or save to disk before downloading a file unless you have
    changed your download action setting for that type of file.

    And now, every time you start a download, Firefox will automatically bring
    up the Downloads panel by default. This means you'll experience minimal
    interruptions and easily find your downloaded files. Plus, to avoid having
    to close it several times, the panel won't show if there are multiple
    downloads in progress.

    You can now click on a file in the Downloads panel to open it even before
    it has finished downloading. Firefox will open the file as soon as it is
    available. Firefox: saving you time and helping you get back to what you
    care about!

    Any files you download will be immediately saved on your disk. Depending on
    the current configuration, they'll be saved in your preferred download
    folder, or you'll be asked to select a location for each download. Windows
    and Linux users will find their downloaded files in the destination folder.
    They'll no longer be put in the Temp folder.

  * Firefox allows users to choose from a number of built-in search engines to
    set as their default. In this release, some users who had previously
    configured a default engine might notice their default search engine has
    changed since Mozilla was unable to secure formal permission to continue
    including certain search engines in Firefox.

Fixed

  * Now, you can set a default app to open a file type. Choose the application
    you want to use to open files of a specific type in your Firefox settings.

  * After updating to Firefox version 98, "Always ask" download \ 
actions will
    now be reset.

  * Various security fixes.

Security fixes:
#CVE-2022-26383: Browser window spoof using fullscreen mode
#CVE-2022-26384: iframe allow-scripts sandbox bypass
#CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures
#CVE-2022-26381: Use-after-free in text reflows
#CVE-2022-26382: Autofill Text could be exfiltrated via side-channel attacks
#CVE-2022-26385: Use-after-free in thread shutdown
#CVE-2022-0843: Memory safety bugs fixed in Firefox 98

Files:
RevisionActionfile
1.515modifypkgsrc/www/firefox/Makefile
1.463modifypkgsrc/www/firefox/distinfo
1.1addpkgsrc/www/firefox/patches/patch-js_src_jit_GenerateAtomicOperations.py