Commit Graph

319 Commits

Author SHA1 Message Date
landry
c7dd7cad19 www/mozilla-firefox: update to 109.0.
see https://www.mozilla.org/en-US/firefox/109.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-01/
2023-01-17 14:33:28 +00:00
landry
3ed758d4a8 www/mozilla-firefox: update to 108.0.2.
see https://www.mozilla.org/en-US/firefox/108.0.2/releasenotes/
2023-01-05 14:14:03 +00:00
landry
5f201fed31 www/mozilla-firefox: update to 108.0.1.
see https://www.mozilla.org/en-US/firefox/108.0.1/releasenotes/
fixes Bug 1805883 - Default search engine may be reset when upgrading to
108 if profile was previously copied.
2022-12-16 17:58:50 +00:00
landry
8c7f9b033f www/mozilla-firefox: update to 108.0.
see https://www.mozilla.org/en-US/firefox/108.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-51/

- drop patch from #1772090, merged upstream in 105 and useless since then
- replace patch-toolkit_components_downloads_DownloadUIHelper_jsm by
  patch-toolkit_components_downloads_DownloadIntegration_sys_mjs to
enforce 'Downloads' for the download folder (because unveil)
2022-12-13 15:00:13 +00:00
landry
feb39de995 www/mozilla-firefox: update to 107.0.1.
see https://www.mozilla.org/en-US/firefox/107.0.1/releasenotes/
2022-11-29 14:42:10 +00:00
landry
0c3e48f7b6 www/mozilla-firefox: update to 107.0.
see https://www.mozilla.org/en-US/firefox/107.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-47/

- drop pledge/unveil configs for utility-audioDecoder process, the process
  now uses the utility class. from upstream
- drop patches from #1790419, merged upstream
- drop arm64 patch from tb@, merged upstream via #1796893
2022-11-15 14:56:53 +00:00
landry
61e781dc90 www/mozilla-firefox: update to 106.0.2.
see https://www.mozilla.org/en-US/firefox/106.0.2/releasenotes/
2022-10-26 13:51:23 +00:00
landry
aa28b35ba8 www/mozilla-firefox: update to 106.0.
see https://www.mozilla.org/en-US/firefox/106.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-44/

- tidy up WANTLIB
- update patch from #1790419 with what was upstreamed, this way
  sysctl(KERN_PROC_ARGS) is called before pledge() and cached for later
use. No change in pledge configs sadly since ps is still needed for
other cases..
2022-10-18 14:35:25 +00:00
tb
2a3e346bdb Bump REVISION of ports depending on security/openssl/{1.1,3.0} 2022-10-12 16:15:02 +00:00
landry
98c7754fc6 www/mozilla-firefox: update to 105.0.2.
see https://www.mozilla.org/en-US/firefox/105.0.2/releasenotes/
2022-10-05 07:57:52 +00:00
landry
10e4893b73 www/mozilla-firefox: update to 105.0.1.
see https://www.mozilla.org/en-US/firefox/105.0.1/releasenotes/
fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1784692
2022-09-23 13:24:15 +00:00
landry
08e4f768bc www/mozilla-firefox: update to 105.0.
see https://www.mozilla.org/en-US/firefox/105.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-41/

- add CPPFLAGS=-Wno-backend-plugin to CONFIGURE_ENV to silence all pgo
  mismatch warnings from clang
- update patch-toolkit_system_gnome_nsGIOService_cpp from #1714919 to
  use what was upstreamed
- update README wrt process types
2022-09-20 13:02:32 +00:00
landry
04165b92ca www/mozilla-firefox: update to 104.0.2.
see https://www.mozilla.org/en-US/firefox/104.0.2/releasenotes/
2022-09-06 13:21:00 +00:00
landry
b5ca23d332 www/mozilla-firefox: update to 104.0.1.
see https://www.mozilla.org/en-US/firefox/104.0.1/releasenotes/
2022-08-30 13:08:09 +00:00
landry
17de65c213 www/mozilla-firefox: update to 104.0.
see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-33/

- enable LTO (link-time-optimization) & PGO (profile-guided-optimization),
  link time is much longer but the resulting binaries gives between 7%
and 10% speed improvements in various browserbench.org tests.

- the next step is being able to generate our own profiling data
  natively, but even after hacking lld to stop discarding some profiling
sections, so far our llvm tooling only generates invalid data. wip
tracked in #1782340, help welcome.

- remove patch from #1696958, the fix from #1697721 seems to have fixed
  the underlying issue (missing ~/Downloads wasnt created due to unveil)
2022-08-23 17:22:09 +00:00
landry
97a404faa7 www/mozilla-firefox: update to 103.0.2.
see https://www.mozilla.org/en-US/firefox/103.0.2/releasenotes/
2022-08-09 13:05:37 +00:00
landry
49321d6ecc www/mozilla-firefox: update to 103.0.1.
see https://www.mozilla.org/en-US/firefox/103.0.1/releasenotes/
2022-08-01 13:42:28 +00:00
landry
71b356e219 www/mozilla-firefox: update to 103.0.
see https://www.mozilla.org/en-US/firefox/103.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-28/

remove patches from #1773259 & #1760484, merged upstream.
2022-07-26 13:17:30 +00:00
landry
3f98d2781f www/mozilla-firefox: update to 102.0.
see https://www.mozilla.org/en-US/firefox/102.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-24/

- add pledge/unveil configs for the new 'audioDecoder' subprocess.
- add patch from gkoehler@ implementing about:processes (#1772090)
- add patch from #1776713 to silence gfx hw lookup via libpci.so we
  don't have, resulting in msgs on stderr:
Crash Annotation GraphicsCriticalError: |[0][GFX1-]: glxtest: libpci
missing (t=0.795265) [GFX1-]: glxtest: libpci missing

as a side effect, somehow improves amdgpu situation when in some
circumstances we the gpu is now properly detected instead of going
through llvmpipe/software rendering. No regression on intel.
2022-06-28 13:13:15 +00:00
landry
6c77809648 www/mozilla-firefox: bugfix release to 101.0.1.
see https://www.mozilla.org/en-US/firefox/101.0.1/releasenotes/
2022-06-09 15:42:27 +00:00
landry
6ac0c835e0 www/mozilla-firefox: update to 101.0.
see https://www.mozilla.org/en-US/firefox/101.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-20/

enable wasm sandboxing for bundled libs (eg
graphite/hunspell/ogg/expat/woff2) via wasi-sdk/libc/rlbox, cf
https://hacks.mozilla.org/2021/12/webassembly-and-back-again-fine-grained-sandboxing-in-firefox-95/

bump cbindgen BDEP to 0.23 (#1765746) - as a consequence, no backport to
7.1-stable unless cbindgen is updated there.
2022-05-31 14:10:57 +00:00
landry
add07d3561 www/mozilla-firefox: security update to 100.0.2.
see https://www.mozilla.org/en-US/firefox/100.0.2/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/
2022-05-20 16:57:00 +00:00
landry
bf96f3a0aa www/mozilla-firefox: update to 100.0.1.
see https://www.mozilla.org/en-US/firefox/100.0.1/releasenotes/
2022-05-16 14:11:31 +00:00
landry
5330a4c084 www/mozilla-firefox: update to 100.0.
see https://www.mozilla.org/en-US/firefox/100.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-16/
2022-05-03 13:34:58 +00:00
landry
9d592a123a www/mozilla-firefox: update to 99.0.1.
see https://www.mozilla.org/en-US/firefox/99.0.1/releasenotes/
2022-04-13 07:24:06 +00:00
landry
63d5321b39 www/mozilla-firefox: update to 99.0.
see https://www.mozilla.org/en-US/firefox/99.0/releasenotes/
fixes https://www.mozilla.org/fr/security/advisories/mfsa2022-13/

add 'dns' to pledge.content to allow sndio forwarding on a fqdn,
reported by naddy@
ok naddy@
2022-04-05 13:08:35 +00:00
landry
4d68f460fe www/mozilla-firefox: update to 98.0.2.
see https://www.mozilla.org/en-US/firefox/98.0.2/releasenotes/
2022-03-23 15:48:24 +00:00
landry
f723e3de9c www/mozilla-firefox: update to 98.0.1.
see https://www.mozilla.org/en-US/firefox/98.0.1/releasenotes/
2022-03-15 12:42:34 +00:00
naddy
ec14803114 drop RCS Ids 2022-03-11 20:09:36 +00:00
landry
e30f1b0654 www/mozilla-firefox: update to 98.0.
See https://www.mozilla.org/en-US/firefox/98.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-10/
2022-03-08 14:07:29 +00:00
landry
e124b2b25e www/mozilla-firefox: security update to 97.0.2.
see https://www.mozilla.org/en-US/firefox/97.0.2/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/
2022-03-05 08:14:25 +00:00
landry
b8108aff7a www/mozilla-firefox: update to 97.0.1.
see https://www.mozilla.org/en-US/firefox/97.0.1/releasenotes/
2022-02-17 14:43:36 +00:00
landry
af13c37251 www/mozilla-firefox: update to 97.0.
See https://www.mozilla.org/en-US/firefox/97.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-04/

drop webrtc-related patches from #1654448, merged upstream
2022-02-08 14:02:28 +00:00
landry
0388a83ae8 www/mozilla-firefox: update to 96.0.3.
see https://www.mozilla.org/en-US/firefox/96.0.3/releasenotes/
2022-01-27 15:55:12 +00:00
landry
8e8ee047a2 www/mozilla-firefox: update to 96.0.2.
see https://www.mozilla.org/en-US/firefox/96.0.2/releasenotes/
2022-01-20 14:31:52 +00:00
landry
9b4eee5792 www/mozilla-firefox: update to 96.0.1.
See https://www.mozilla.org/en-US/firefox/96.0.1/releasenotes/
2022-01-14 17:19:55 +00:00
landry
cc7f4ca84c www/mozilla-firefox: update to 96.0.
See https://www.mozilla.org/en-US/firefox/96.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-01/

- webrtc stack was updated, build integration needed a complete redoing.
  add patches from #1654448 that got commited upstream for 97, including
patch-third_party_libwebrtc_all_moz_build as a jumbo patch. I've done
some webrtc testing, ymmv.
- it might build on arm64, or not. someone interested in firefox on
  OpenBSD/arm64 should look into it.
- remove patch from #1739078, merged upstream

note that this update wont get backported to 7.0-stable as it requires
icu4c >= 70.
2022-01-11 15:18:00 +00:00
landry
269794aace www/mozilla-firefox: update to 95.0.1.
See https://www.mozilla.org/en-US/firefox/95.0.1/releasenotes/
2021-12-16 15:07:59 +00:00
landry
a364c0f002 www/mozilla-firefox: update to 95.0.
See https://www.mozilla.org/en-US/firefox/95.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-52/

- add patch from #1739078 to fix build with external icu4c
- disable rlbox/wasm sandboxing for now, needs a port of wasi libc/sysroot
2021-12-07 15:00:17 +00:00
landry
a979adeb52 www/mozilla-firefox: rerolled distfile for 94.0.2 (rc1->rc2)
rc2 includes #1741997, final release was postponed for tomorrow.
2021-11-21 08:04:52 +00:00
landry
3abfba4bf5 www/mozilla-firefox: update to 94.0.2.
See https://www.mozilla.org/en-US/firefox/94.0.2/releasenotes/
note that 94.0.1 was skipped for being macos-bugfix only
2021-11-19 07:36:24 +00:00
landry
cab7dd31ff www/mozilla-firefox: update to 94.0.
See https://www.mozilla.org/en-US/firefox/94.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-48/
2021-11-02 15:07:59 +00:00
landry
517de2c831 www/mozilla-firefox: update to 93.0.
See https://www.mozilla.org/en-US/firefox/93.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-43/

add a patch to prevent a sysctl call with KERN_PROC_ARGV triggering
pledge violations.
2021-10-05 13:08:43 +00:00
landry
7fd72e88cc www/mozilla-firefox: update to firefox 92.0.
See https://www.mozilla.org/en-US/firefox/92.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-38/

tested by (at least) naddy@
2021-09-07 13:37:55 +00:00
landry
c5763a5e56 www/mozilla-firefox: update to 91.0.2.
See https://www.mozilla.org/en-US/firefox/91.0.2/releasenotes/
2021-08-24 13:28:35 +00:00
landry
08b584bd88 www/mozilla-firefox: update to 91.0.1.
See https://www.mozilla.org/en-US/firefox/91.0.1/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-37/
2021-08-17 14:04:46 +00:00
landry
a9c53d0d2a www/mozilla-firefox: update to 91.0.
See https://www.mozilla.org/en-US/firefox/91.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-33/

remove patches from #1713742, #1713745, #1713999, #1623086, #1706261 and
#1633769, all pushed/merged upstream.

tested at least by naddy@
2021-08-15 06:39:26 +00:00
landry
c4dbb3a7e1 www/mozilla-firefox: update to 90.0.2.
See https://www.mozilla.org/en-US/firefox/90.0.2/releasenotes/
2021-07-22 13:06:25 +00:00
landry
82287ffbdf www/mozilla-firefox: update to 90.0.1.
See https://www.mozilla.org/en-US/firefox/90.0.1/releasenotes/
2021-07-19 13:58:12 +00:00
landry
0200061238 www/mozilla-firefox: update to firefox 90.0.
See https://www.mozilla.org/en-US/firefox/90.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-28/

most of the added patches are already upstreamed and will go away in 91:
- build forkserver (#1713742, not enabled by default upstream yet, but
  decreases memory usage, enable with dom.ipc.forkserver.enable)
- enable the remote data decoder process, and sandbox it (#1713745) -
  tested with a wide variety of video/audio files.
- sandbox the new socket process (#1713999). Not enabled by default
  upstream yet, but at least can be tested.
- add pledge/unveil config files for rdd & socket processes
- drop /dev/drm0 from unveil config files
- drop the Gtk2 lib/dependency
- amend README wrt debug-firefox package

tested by at least tb@ & naddy@, thanks !
2021-07-13 15:25:29 +00:00