CVSROOT:        /cvs
Module name:    ports
Changes by:     lan...@cvs.openbsd.org  2021/07/13 09:25:30

Modified files:
        www/mozilla-firefox: Makefile distinfo 
        www/mozilla-firefox/files: unveil.content unveil.gpu unveil.main 
        www/mozilla-firefox/patches: patch-dom_ipc_ContentChild_cpp 
                                     patch-media_libcubeb_src_cubeb_sndio_c 
                                     
patch-third_party_libwebrtc_webrtc_rtc_base_platform_thread_cc 
                                     
patch-toolkit_system_gnome_nsGIOService_cpp 
        www/mozilla-firefox/pkg: PLIST README 
        www/firefox-i18n: Makefile.inc distinfo 
Added files:
        www/mozilla-firefox/files: pledge.rdd pledge.socket unveil.rdd 
                                   unveil.socket 
        www/mozilla-firefox/patches: 
                                     patch-dom_media_ipc_RDDProcessImpl_cpp 
                                     
patch-modules_libpref_init_StaticPrefList_yaml 
                                     patch-netwerk_ipc_SocketProcessImpl_cpp 
                                     
patch-security_sandbox_common_SandboxSettings_h 
                                     patch-toolkit_moz_configure 

Log message:
www/mozilla-firefox: update to firefox 90.0.

See https://www.mozilla.org/en-US/firefox/90.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-28/

most of the added patches are already upstreamed and will go away in 91:
- build forkserver (#1713742, not enabled by default upstream yet, but
decreases memory usage, enable with dom.ipc.forkserver.enable)
- enable the remote data decoder process, and sandbox it (#1713745) -
tested with a wide variety of video/audio files.
- sandbox the new socket process (#1713999). Not enabled by default
upstream yet, but at least can be tested.
- add pledge/unveil config files for rdd & socket processes
- drop /dev/drm0 from unveil config files
- drop the Gtk2 lib/dependency
- amend README wrt debug-firefox package

tested by at least tb@ & naddy@, thanks !

Reply via email to