head	1.4;
access;
symbols
	pkgsrc-2026Q1:1.3.0.28
	pkgsrc-2026Q1-base:1.3
	pkgsrc-2025Q4:1.3.0.26
	pkgsrc-2025Q4-base:1.3
	pkgsrc-2025Q3:1.3.0.24
	pkgsrc-2025Q3-base:1.3
	pkgsrc-2025Q2:1.3.0.22
	pkgsrc-2025Q2-base:1.3
	pkgsrc-2025Q1:1.3.0.20
	pkgsrc-2025Q1-base:1.3
	pkgsrc-2024Q4:1.3.0.18
	pkgsrc-2024Q4-base:1.3
	pkgsrc-2024Q3:1.3.0.16
	pkgsrc-2024Q3-base:1.3
	pkgsrc-2024Q2:1.3.0.14
	pkgsrc-2024Q2-base:1.3
	pkgsrc-2024Q1:1.3.0.12
	pkgsrc-2024Q1-base:1.3
	pkgsrc-2023Q4:1.3.0.10
	pkgsrc-2023Q4-base:1.3
	pkgsrc-2023Q3:1.3.0.8
	pkgsrc-2023Q3-base:1.3
	pkgsrc-2023Q2:1.3.0.6
	pkgsrc-2023Q2-base:1.3
	pkgsrc-2023Q1:1.3.0.4
	pkgsrc-2023Q1-base:1.3
	pkgsrc-2022Q4:1.3.0.2
	pkgsrc-2022Q4-base:1.3
	pkgsrc-2022Q3:1.1.0.8
	pkgsrc-2022Q3-base:1.1
	pkgsrc-2022Q2:1.1.0.6
	pkgsrc-2022Q2-base:1.1
	pkgsrc-2022Q1:1.1.0.4
	pkgsrc-2022Q1-base:1.1
	pkgsrc-2021Q4:1.1.0.2
	pkgsrc-2021Q4-base:1.1;
locks; strict;
comment	@ * @;


1.4
date	2026.05.30.17.06.09;	author ryoon;	state dead;
branches;
next	1.3;
commitid	JlaN9VFGqDqbqRHG;

1.3
date	2022.12.11.13.49.09;	author ryoon;	state Exp;
branches;
next	1.2;
commitid	6KfYZJgA5FaI195E;

1.2
date	2022.10.08.21.18.55;	author ryoon;	state Exp;
branches;
next	1.1;
commitid	RHb00lnqGgHxzXWD;

1.1
date	2021.10.29.16.46.04;	author ryoon;	state Exp;
branches;
next	;
commitid	gdo9885tJpvv7JeD;


desc
@@


1.4
log
@www/firefox: Update to 151.0.2

* Broken builds on NetBSD 9. I should revisit later.
* Fix WebRTC Webcam support under NetBSD.

Changelog:
151.0.2:
Fixed

  * Fixed an issue on macOS where smart cards and security keys could fail to load certificates automatically. (
    Bug 2041208)

  * Fixed an issue where adding another tab to an existing Split View could unexpectedly close it. (Bug 2039795)

  * Fixed an issue where Split View would close instead of switching tabs when using the "Switch to Tab" option
    from the address bar. (Bug 2039787)

  * Fixed a crash on Windows that occurred when using the Sogou input method to type Simplified Chinese. (Bug
    2039203)

  * Fixed an issue where Firefox stopped caching new content once the disk cache was full, causing pages and
    resources to be re-downloaded from the network on every visit. (Bug 2031577)

  * Fixed an issue where some websites could render incorrectly or fail to load when they used JavaScript to
    insert WebKit-specific style rules. (Bug 2040693)

  * Fixed an issue where clicking and selecting text in some input fields and text areas did not work on pages
    that styled them with certain CSS rules. (Bug 2039504)

  * Fixed an issue where the up and down buttons on number input fields could overlap and hide the value when
    sites sized the field to fit its contents. (Bug 2039315)

  * Fixed an issue where sorting strings that include numbers could produce an incorrect order on some websites
    and web applications. (Bug 2027078)

  * Fixed an issue where dropdown menus would not open for <select> elements created inside an iframe and then
    moved into the parent page. (Bug 2041720)


151.0.1:
Fixed

  * Fixed a crash experienced by users with Intel Raptor Lake CPUs. (Bug 1950764)

  * Fixed an issue on Windows where some websites using WebSerial to flash device firmware could fail
    unexpectedly. (Bug 2040754)


151.0:
New

  * Firefox Home (New Tab) has a fresh, new look and feel. The layout and design will enable upcoming features,
    from widgets to shortcuts improvements, launching between 151 and 152. Included are some new and exciting
    Wallpapers, such as the one below. Use the pencil icon in the lower right to check them out.

  * Private Browsing Mode now allows you to instantly clear all data from your current session without closing
    the entire window. When you select the End Private Session button (the fire icon) to the right of the URL
    bar, Firefox will ask you to confirm to clear your session. Once confirmed, it will wipe all of your private
    browsing data and open a fresh new Private Browsing Mode session for you.

  * Firefox now strengthens protection against fingerprinting in Standard Enhanced Tracking Protection, making
    it harder for websites to track you across sites by limiting the amount of information revealed about your
    device and browser. This reduces the number of users uniquely identifiable by common fingerprinting
    techniques by an average of ~14%, and by ~49% on macOS.

  * You can now merge multiple PDFs directly in Firefox PDF. Combine separate PDF files into a single document
    without ever leaving Firefox or relying on third-party tools.

  * The Translations page (about:translations) is now accessible through the More Tools section of the
    Application Menu.

  * Local Firefox profile backups are now available on Linux in addition to Windows, and you can restore them
    across platforms.

  * On macOS, URLs copied from iOS devices using Apple’s Universal Clipboard now paste correctly in Firefox.

  * On macOS, dropdown menus on web pages now use the native macOS menu style, matching the look and behavior of
    the rest of the system.

  * Address Autofill is enabled for users in the Netherlands.

  * Firefox’s built-in VPN now lets you choose your browsing location, giving you more control over how and
    where your traffic appears online. You can select from available countries or use Recommended to
    automatically choose the best connection for your network.

Fixed

  * Fixed incorrect screen resolution reporting to websites in multi-monitor setups.

  * Fixed an issue on macOS where maximized Firefox windows could reopen on the wrong monitor after relaunching
    in multi-monitor setups.

  * Improved color management for copied and pasted images on macOS.

  * Various security fixes.

Security fixes:
Mozilla Foundation Security Advisory 2026-46
#CVE-2026-8945: Sandbox escape in Firefox and Firefox Focus for Android
#CVE-2026-8946: Incorrect boundary conditions in the Audio/Video: Web Codecs component
#CVE-2026-8947: Use-after-free in the DOM: Bindings (WebIDL) component
#CVE-2026-8948: Same-origin policy bypass in the DOM: Networking component
#CVE-2026-8949: Integer overflow in the Widget: Win32 component
#CVE-2026-8950: Same-origin policy bypass in the Networking: HTTP component
#CVE-2026-8951: Spoofing issue in the Toolbar component in Firefox for Android
#CVE-2026-8952: Privilege escalation in the Application Update component
#CVE-2026-8953: Sandbox escape due to use-after-free in the Disability Access APIs component
#CVE-2026-8954: Incorrect boundary conditions, integer overflow in the Audio/Video component
#CVE-2026-8955: Privilege escalation in the DOM: Workers component
#CVE-2026-8956: Integer overflow in the Networking: JAR component
#CVE-2026-8957: Privilege escalation in the Enterprise Policies component
#CVE-2026-8958: Information disclosure, sandbox escape in the Security: Process Sandboxing component
#CVE-2026-8959: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
#CVE-2026-8960: Spoofing issue in WebExtensions
#CVE-2026-8961: Spoofing issue in the Form Autofill component
#CVE-2026-8962: Mitigation bypass in the DOM: Security component
#CVE-2026-8963: Spoofing issue in the Web Speech component
#CVE-2026-8964: Spoofing issue in the Popup Blocker component
#CVE-2026-8965: Information disclosure in the DOM: Security component
#CVE-2026-8966: Information disclosure in the IP Protection component
#CVE-2026-8967: Information disclosure in the Graphics: WebGPU component
#CVE-2026-8968: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component
#CVE-2026-8969: Mitigation bypass in the DOM: Security component
#CVE-2026-8970: Privilege escalation in the Security component
#CVE-2026-8971: Same-origin policy bypass in the Networking: JAR component
#CVE-2026-8972: Privilege escalation in the WebRTC: Audio/Video component
#CVE-2026-8973: Memory safety bugs fixed in Firefox 151
#CVE-2026-8974: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151
#CVE-2026-8975: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151
@
text
@$NetBSD: patch-modules_fdlibm_src_math__private.h,v 1.3 2022/12/11 13:49:09 ryoon Exp $

* Fix PR pkg/56457, build failure on NetBSD/i386.
  Do not use FreeBSD-specific definition.

--- modules/fdlibm/src/math_private.h.orig	2022-11-03 21:19:39.000000000 +0000
+++ modules/fdlibm/src/math_private.h
@@@@ -30,9 +30,9 @@@@
  * Adapted from https://github.com/freebsd/freebsd-src/search?q=__double_t
  */
 
-typedef double      __double_t;
-typedef __double_t  double_t;
-typedef float       __float_t;
+#include <math.h>
+typedef double_t __double_t;
+typedef float_t __float_t;
 
 /*
  * The original fdlibm code used statements like:
@


1.3
log
@firefox: Update to 107.0.1

107.0.1:
Fixed

  * Fixed an issue with accessing some sites reliably in Private Browsing mode
    or Strict ETP due to anti-adblockers (bug 1717806).

  * Fixed an issue where Color Management was not available for some users (bug
    1799391).

  * Fixed an issue with text overlapping in the Settings Menu for some locales
    (bug 1800379).

  * Fixed an incompatibility with the new Windows 11 22H2 Suggested Actions
    feature resulting in hangs when copying phone number links (bug 1798098).

  * Fixed an issue where the DevTools UI is not accessible when an alert dialog
    is displayed (bug 1801840).

107.0:
New

  * Improved the performance of the instance when Microsoft's IME and Defender
    retrieve the URL of a focused document in Windows 11 version 22H2.

  * Power profiling -- visualizing performance data recorded from web browsers
    -- is now also supported on Linux and Mac with Intel CPUs, in addition to
    Windows 11 and Apple Silicon.

Fixed

  * Various security fixes.

Security fixes:
#CVE-2022-45403: Service Workers might have learned size of cross-origin media
 files
#CVE-2022-45404: Fullscreen notification bypass
#CVE-2022-45405: Use-after-free in InputStream implementation
#CVE-2022-45406: Use-after-free of a JavaScript Realm
#CVE-2022-45407: Loading fonts on workers was not thread-safe
#CVE-2022-45408: Fullscreen notification bypass via windowName
#CVE-2022-45409: Use-after-free in Garbage Collection
#CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie
 policy
#CVE-2022-45411: Cross-Site Tracing was possible via non-standard override
 headers
#CVE-2022-45412: Symlinks may resolve to partially uninitialized buffers
#CVE-2022-45413: SameSite=Strict cookies could have been sent cross-site via
 intent URLs
#CVE-2022-40674: Use-after-free vulnerability in expat
#CVE-2022-45415: Downloaded file may have been saved with malicious extension
#CVE-2022-45416: Keystroke Side-Channel Leakage
#CVE-2022-45417: Service Workers in Private Browsing Mode may have been written
 to disk
#CVE-2022-45418: Custom mouse cursor could have been drawn over browser UI
#CVE-2022-45419: Deleting a security exception did not take effect immediately
#CVE-2022-45420: Iframe contents could be rendered outside the iframe
#CVE-2022-45421: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5

106.0.5:
Fixed

  * Addresses a crash experienced by users with Intel Gemini Lake CPUs.

106.0.4:
Fixed

  * Fixed an issue with DRM Video playback (bug 1797292).

  * Fixed broken layout of datetime input when switching types (bug 1797139).

  * Fixes Firefox hanging when there is a Direct3D device reset (bug 1792115).

106.0.3:
Fixed

  * Fix a startup crash for some users on Windows (bug 1797464).

  * Fixed an incompatibility with the new Windows 11 22H2 Suggested Actions
    feature resulting in hangs when copying text on a web page (bug 1774285).

106.0.2:
Fixed

  * Fix missing content on some PDF forms (bug 1794351).

  * Fix column width for the Notification sub-panel in Settings (bug 1793558).

  * Fix a browser freeze with accessibility enabled on some sites such as the
    Proxmox Web UI (bug 1793748).

  * Fix page reloading not working with Firefox View and not refreshing synced
    data (bug 1792680 and bug 1794474).

  * Fix browser not opening if installed from the Windows Store (Bug 1796391).

106.0.1:
Fixed

  * Addresses a crash experienced by users with AMD Zen 1 CPUs. (bug 1796126)

106.0:
New

  * It is now possible to edit PDFs: including writing text, drawing, and
    adding signatures.

  * Setting Firefox as your default browser now also makes it the default PDF
    application on Windows systems.

  * You can now pin private windows to your Windows taskbar on Window 10 and
    Windows 11 for simpler access. Also, private windows have been redesigned
    to increase the feeling of privacy.

  * Swipe-to-navigate (two fingers on a touchpad swiped left or right to
    perform history back or forward) now works for Linux users on Wayland.

  * Text Recognition in images allows users on macOS 10.15 and higher to
    extract text from the selected image (such as a meme or screenshot).

    Extracted text is copied to the clipboard in order to share, store, or
    search -- without needing to manually retype everything.

      + This feature is compatible with "VoiceOver," the built-in macOS
        screen reader.
      + For more information, check out our SUMO article.

  * "Firefox View" helps you get back to content you previously discovered. A
    pinned tab allows you to find and open recently closed tabs on your current
    device, access tabs from other devices (via our "Tab Pickup" feature),
    and change the look of the browser (with Colorways).

      + For more information, read our SUMO article.

  * With the launch of the "Independent Voices" collection, Firefox is
    introducing 18 new "Colorways." You can now access a "Colorways" modal
    experience via "Firefox View"; each new color is accompanied with a
    bespoke graphic and a text description that speaks to its deeper meaning.
    The collection will be available through Jan 16.

      + For more information, check out our SUMO article.

Fixed

  * Various security fixes.

Security fixes:
#CVE-2022-42927: Same-origin policy violation could have leaked cross-origin
 URLs
#CVE-2022-42928: Memory Corruption in JS Engine
#CVE-2022-42929: Denial of Service via window.print
#CVE-2022-42930: Race condition in DOM Workers
#CVE-2022-42931: Username saved to a plaintext file on disk
#CVE-2022-42932: Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
@
text
@d1 1
a1 1
$NetBSD: patch-modules_fdlibm_src_math__private.h,v 1.2 2022/10/08 21:18:55 ryoon Exp $
@


1.2
log
@firefox: Update to 105.0.3

* Add --enable-new-pass-manager.
* Disable sysutils/dbus dependency for non-Linux platforms by default.

Changelog:
105.0.3:
Fixed
  * Mitigated frequent crashes for Windows users with Avast or AVG Antivirus
    software installed (bug 1794064)

105.0.2:
Fixed
  * Fixed poor contrast on various menu items with certain themes on Linux
    systems (bug 1792063)

  * Fixed the scrollbar appearing on the wrong side of select elements in
    right-to-left locales (bug 1791219)

  * Fixed a possible deadlock when loading some sites in Troubleshoot Mode (bug
    1786259)

  * Fixed a bug causing some dynamic appearance changes to not appear when
    expected (bug 1786521)

  * Fixed a bug causing theme styling to not be properly applied to sidebars
    for some add-ons in Private Browsing Mode (bug 1787543)

105.0.1:
Fixed
  * Reverted focus behavior for new windows back to the content area
    instead of the address bar (bug 1784692)

105.0:
New
  * Added an option to print only the current page from the print preview
    dialog.

  * Firefox now supports partitioned service workers in third-party contexts.
    You can register service workers in a third-party iframe and it will be
    partitioned under the top-level domain.

  * Swipe to navigate (two fingers on a touchpad swiped left or right to
    perform history back or forward) on Windows is now enabled.

  * Firefox is now compliant with the User Timing L3 specification, which adds
    additional optional arguments to the performance.mark and
    performance.measure methods to provide custom start times, end times,
    duration, and attached details.

  * Searching in large lists for individual items is now 2x faster. This
    performance enhancement replaces array.includes and array.indexOf with an
    optimized SIMD version.

Fixed
  * Stability on Windows is significantly improved as Firefox handles
    low-memory situations much better.

  * Touchpad scrolling on macOS was made more accessible by reducing unintended
    diagonal scrolling opposite of the intended scroll axis.

  * Firefox is less likely to run out of memory on Linux and performs more
    efficiently for the rest of the system when memory runs low.

  * Various security fixes.

Web Platform
  * Support for the Offscreen Canvas DOM API with full context and font
    support. The OffscreenCanvas API provides a canvas that can be rendered
    off-screen in both Window and Web Worker contexts.

Security fixes:
#CVE-2022-40959: Bypassing FeaturePolicy restrictions on transient pages
#CVE-2022-40960: Data-race when parsing non-UTF-8 URLs in threads
#CVE-2022-40958: Bypassing Secure Context restriction for cookies with __Host
 and __Secure prefix
#CVE-2022-40961: Stack-buffer overflow when initializing Graphics
#CVE-2022-40956: Content-Security-Policy base-uri bypass
#CVE-2022-40957: Incoherent instruction cache when building WASM on ARM64
#CVE-2022-40962: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
@
text
@d1 1
a1 1
$NetBSD: patch-modules_fdlibm_src_math__private.h,v 1.1 2021/10/29 16:46:04 ryoon Exp $
d6 1
a6 1
--- modules/fdlibm/src/math_private.h.orig	2022-10-07 15:25:41.000000000 +0000
d8 1
a8 1
@@@@ -30,10 +30,9 @@@@
a14 1
-typedef __float_t   float_t;
d17 1
a17 1
+typedef float_t  __float_t;
@


1.1
log
@firefox: Fix PR pkg/56457. Fix build under NetBSD/i386
@
text
@d1 1
a1 1
$NetBSD$
d6 1
a6 1
--- modules/fdlibm/src/math_private.h.orig	2021-09-27 22:47:42.000000000 +0000
d8 1
a8 1
@@@@ -30,8 +30,8 @@@@
d14 2
d18 1
@