CVS Repository/ ports/ www/ firefox-esr/ Makefile

add various py-standard-pkg-resources deps, and relax some version pins.
with tb@

www/firefox-esr: update to 153.4.0.

see https://www.firefox.com/en-US/firefox/153.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/

ok naddy@

www/firefox-esr: allocated WebAssembly stack memory with MAP_STACK

Backpoprt: https://bugzilla.mozilla.org/show_bug.cgi?id=2074025

OK: landry@ (maintainer)

www/firefox-esr: update to 153.3.0.

see https://www.firefox.com/en-US/firefox/153.3.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-93/

www/mozilla (& consumers): add --enable-rust-simd to CONFIGURE_ARGS

from a larger diff by Leah Rowe, thanks !

this option has been turned on in upstream CI since #1261841 (but only
on x86/arm64), and allows to use simd acceleration in encoding functions
(and probably other features in rust crates..)

runtime-tested with seamonkey, firefox, firefox-esr & thunderbird on
amd64, and firefox on arm64. jca@ made sure MOZ_RUST_SIMD wasnt enabled
on riscv64.

since i'm bumping REVISION on all consumers, might aswell bump nss
dependency to 3.128.

www/firefox-esr: update to 153.2.0.

see https://www.firefox.com/en-US/firefox/153.2.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-85/

www/firefox-esr: majot update from 140 to 153.1.0.

see https://www.firefox.com/en-US/firefox/153.1.0/releasenotes/
and https://www.firefox.com/en-US/firefox/153.0esr/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-77/

merges most of the changes that happened in www/mozilla-firefox, that is:
- patches from matthieu for xshm 1.2 support for screen sharing (#1702919)
- patch to fix arrow keys in js terminals (Proxmox/ESXi for example)
- ship policies.json to neuter the AI madness
- drop patches for icu 78, python 3.14, llvm22, ffmpeg8...

www/firefox-esr: update to 140.13.0.

see https://www.firefox.com/en-US/firefox/140.13.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/

drop patch from #2046162, backported upstream

www/firefox-esr: update to 140.12.0

see https://www.firefox.com/en-US/firefox/140.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/

www/firefox-esr: switch to build with ports-clang 22

add a jumbo distpatch backporting https://phabricator.services.mozilla.com/D262840
to esr140, plus assorted fixes on top like
https://skia-review.googlesource.com/c/skcms/+/1038217, cf #2038504

esr will move to 153 mid-august with the release of 154, and those
patches will go away at that point.

www/firefox-esr: update to 140.11.0.

see https://www.firefox.com/en-US/firefox/140.11.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/

www/firefox-esr: drop now unneeded distpatch for ffmpeg8

seems #2036244 adds support for ffmpeg8 in the esr140 branch, i've been
able to play video from various streaming sites without issues.
patch failure reported by ajacoutot@

www/firefox-esr: update to 140.10.2.

see https://www.firefox.com/en-US/firefox/140.10.2/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-41/

www/firefox-esr: update to 140.10.0.

see https://www.firefox.com/en-US/firefox/140.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-32/

ok naddy@

Make ffmpeg a RUN_DEPENDS so firefox-esr can play html5 audio and video
right after install.

Previously, users had to read the README and install ffmpeg themselves
or else wonder why firefox-esr wouldn't play video.

ok landry, tb, rsadowski, phessler

www/firefox-esr: update to 140.9.1.

see https://www.firefox.com/en-US/firefox/140.9.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-27/

www/firefox-esr: update to 140.9.0.

see https://www.firefox.com/en-US/firefox/140.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-22/

www/firefox-esr:  add some missing unveils

- content process already accesses /etc/localtime, add /usr/share/zoneinfo
- main process already has /usr/share/zoneinfo, add /etc/localtime
- main process sometimes parses /etc/hosts (mostly on network.trr.mode
changes ?) so unveil it.
- unveil.socket is wrong but time is running out, and the socket process
isnt used much anyway (network.http.network_access_on_socket_process.enabled defaults to false)

required by upcoming changes to pledge/unveil

www/firefox-esr: update to 140.8.0.

see https://www.firefox.com/en-US/firefox/140.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/

www/firefox-esr: replace tmppath by rpath/wpath/cpath, it is going away

utility and rdd processes only have rwc access to /tmp anyway
requested by deraadt@

www/firefox-esr: security update to 140.7.1

see https://www.firefox.com/en-US/firefox/140.7.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-10/
CVE-2026-2447: Heap buffer overflow in libvpx

www/firefox-esr: update to 140.7.0.

see https://www.firefox.com/en-US/firefox/140.7.0/releasenotes/
fixes https://www.firefox.com/en-US/firefox/140.7.0/releasenotes/

drop patch from #1999324, merged upstream

www/firefox-esr: update to 140.6.0

see https://www.firefox.com/en-US/firefox/140.6.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/

add patch from #1999324 so that notifications default to libnotify, for
consistency with www/mozilla-firefox

www/firefox-esr: update to 140.5.0.

see https://www.firefox.com/en-US/firefox/140.5.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/

- enable d-bus support, allows to open links in an existing browser
instance on wayland. on x11 it worked so far because that feature
relied on low-level X primitives, which arent available on wayland.
- backport ffmpeg8 jumbo patch to fix video playback. Being untangled
  upstream.

www/firefox-esr: update to 140.4.0.

see https://www.firefox.com/en-US/firefox/140.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-83/

Move CONFIGURE+=--enable-official-branding from mozilla.port.mk
to Mozilla ports that really need it. Tor Browser uses mozilla.port.mk
but for a future release, it is important that this configure flag is
not specified.

Input sthen@, input and OK landry@

www/firefox-esr: bugfix update to 140.3.1.

see https://www.firefox.com/en-US/firefox/140.3.1/releasenotes/
fixes #1980812

www/firefox-esr:  switch arm64 back to llvm 19

disable retguard via -fno-ret-protector, thanks robert@ for the hint.
apparently retguard on arm64 does something that xpcom doesnt like,
leading to the startup crashes seen and reported in #1973016.

this is not needed on amd64, where retguard stays enabled by default,
and -fno-ret-protector can be removed once arm64 is analyzed/fixed.

www/firefox-esr: update to 140.3.0.

see https://www.firefox.com/en-US/firefox/140.3.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-75/
drop patch from #1874059, merged upstream

www/firefox-esr: update to 140.2.0.

see https://www.firefox.com/en-US/firefox/140.2.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-67/
drop patch from #1973336, merged upstream

www/firefox-esr:add patch from #1973336 to fix building with tests enabled

www/firefox-esr: major update to 140.1.0.

see https://www.mozilla.org/en-US/firefox/140.1.0/releasenotes/
(and https://www.mozilla.org/en-US/firefox/140.0/releasenotes/)
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-59/

- build against system av1
- locally add a desktop file, upstream one disappeared
- drop deprecated icu patch from #1862601

the 128esr branch will be EOL mid-september with 128.15, time to move on..

www/firefox-esr: update to 128.12.0.

see https://www.mozilla.org/en-US/firefox/128.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-53/

this port will probably move to the 140esr branch in the next cycle

firefox-esr: use -fvisibility=hidden rather than prepending a
gcc_hidden.h header containing '#pragma GCC visibility push(hidden)'
to every single C++ source file. Unbreaks build with libc++ 19

ok landry

https://bugzilla.mozilla.org/show_bug.cgi?id=1874059
https://github.com/llvm/llvm-project/issues/79027
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=276746

www/firefox-esr: revert back to devel/llvm/16 on arm64

mozillas: drop now unneeded USE_LLD=ports / MODCLANG_VERSION=19

/usr/bin/ld.lld is now at version 19.1.7, and MODCLANG_VERSION defaults to 19

www/firefox-esr: switch to build with ports-clang 19

use lld from ports, drop build dependency on wasi-libcxxabi

while here copy the snippet from www/mozila-firefox/Makefile r1.612
limiting lld threads to 5.

www/firefox-esr: update to 128.11.0.

see https://www.mozilla.org/en-US/firefox/128.11.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/

www/firefox-esr: security update to 128.10.1.

see https://www.mozilla.org/en-US/firefox/128.10.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-37/
CVE-2025-4920: Out-of-bounds access when resolving Promise objects
CVE-2025-4921: Out-of-bounds access when optimizing linear sums

www/firefox-esr: update to 128.10.0

see https://www.mozilla.org/en-US/firefox/128.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/

www/firefox-esr: update to 128.9.0.

see https://www.mozilla.org/en-US/firefox/128.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-22/

www/firefox-esr: security update to 128.8.1.

fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-19/

www/firefox-esr: update to 128.8.0.

see https://www.mozilla.org/en-US/firefox/128.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/

www/firefox-esr: update to 128.7.0.

see https://www.mozilla.org/en-US/firefox/128.7.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/

www/firefox-esr: allow access to all /dev/video?

OK: kn@ landry@

www/firefox-esr: update to 128.6.0.

see https://www.mozilla.org/en-US/firefox/128.6.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-02/

handle py3.12 switchover in www

www/firefox-esr: update to 128.5.2 (windows-only)

see https://www.mozilla.org/en-US/firefox/128.5.2/releasenotes/

www/firefox-esr: update to 128.5.1.

see https://www.mozilla.org/en-US/firefox/128.5.1/releasenotes/
Fixes an issue that prevented some websites from loading when using SSL Inspection

www/firefox-esr: update to 128.5.0.

see https://www.mozilla.org/en-US/firefox/128.5.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-64/

bump REVISION for all mozilla.port.mk consumers after the --with-system-ffi switch.

www/firefox-esr: sync README from www/mozilla-firefox

thanks Raf Czlonka for the reminder

www/firefox-esr: update to 128.4.0.

see https://www.mozilla.org/en-US/firefox/128.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-56/

www/firefox-esr: security update to 128.3.1.

see https://www.mozilla.org/en-US/firefox/128.3.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/
(CVE-2024-9680)

www/firefox-esr: update to 128.3.0.

see https://www.mozilla.org/en-US/firefox/128.3.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-47/

www/firefox-esr: update to 128.2.0.

see https://www.mozilla.org/en-US/firefox/128.2.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-40/

www/firefox-esr: (probably) unbreak runtime on IBT-enabled hardware

make sure ${WRKDIR}/bin/ld is used when linking so that -z,nobtcfi
is used when linking libxul, as done in www/mozilla-firefox/Makefile
r1.568 & r1.570 and was just backported to mail/mozilla-thunderbird

www/firefox-esr: major update to 128.1.0

see https://www.mozilla.org/en-US/firefox/128.1.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-35/

- enable the build on riscv64 (from jca in www/mozilla-firefox)
- sync unveil configs
- drop patches merged upstream

www/firefox-esr: update to 115.13.0.

see https://www.mozilla.org/en-US/firefox/115.13.0/releasenotes/
fixes https://www.mozilla.org/fr/security/advisories/mfsa2024-30/

that this port will get upgraded to 128esr when www/mozilla-firefox is
updated to 129.0 in a month.

www/firefox-esr: update to 115.12.0.

see https://www.mozilla.org/en-US/firefox/115.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-26/

drop patch from #1882291, merged upstream

www/firefox-esr: update to 115.11.0.

see https://www.mozilla.org/en-US/firefox/115.11.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-22/

www/firefox-esr: update to 115.10.0.

see https://www.mozilla.org/en-US/firefox/115.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/

www/firefox-esr: update to 115.9.1.

see https://www.mozilla.org/en-US/firefox/115.9.1esr/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-16/

www/firefox-esr: update to 115.9.0.

see https://www.mozilla.org/en-US/firefox/115.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/

www/firefox-esr: update to 115.8.0.

see https://www.mozilla.org/en-US/firefox/115.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-06/

www/firefox-esr: update to 115.7.0.

see https://www.mozilla.org/en-US/firefox/115.7.0/releasenotes/
fixes https://www.mozilla.org/security/advisories/mfsa2024-02/

www/firefox-esr: update to 115.6.0.

see https://www.mozilla.org/en-US/firefox/115.6.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-54/

www/firefox-esr: enable wayland support

www/firefox-esr: update to 115.5.0.

see https://www.mozilla.org/en-US/firefox/115.5.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/

www/firefox-esr: fix build with ICU 74.1.

from #1859752 via #1862601

firefox-esr: prepare for syscall(2) removal

Avoid syscall(SYS_write) in libwebrtc's bundled abseil's logging facility.
Just call write(2).

www/firefox-esr: update to 115.4.0.

see https://www.mozilla.org/en-US/firefox/115.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/

www/firefox-esr: security update to 115.3.1.

see https://www.mozilla.org/en-US/firefox/115.3.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/
CVE-2023-5217: Heap buffer overflow in libvpx

www/firefox-esr: update to 115.3.0.

see https://www.mozilla.org/en-US/firefox/115.3.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-42/

firefox-esr: sync DRM unveil with mozilla-firefox

Instead of unveiling /dev/dri/card0 only, unveil the entire directory.
It only contains four card* and and four renderD* with tight permissions.
This is also the approach taken by the chromium based browsers.

According to kettenis, acceleration on rare multi-graphics card setups
can require multiple renderD* devices. Starting with firefox 118, if the
directory isn't present, fallback code can exercise ioctls that aren't
permitted by the kernel, leading to crashes.

ok landry

www/firefox-esr: security update to 115.2.1.

see https://www.mozilla.org/en-US/firefox/115.2.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/
(CVE-2023-4863: Heap buffer overflow in WebP.)

www/firefox-esr: fix typo in libclang-path, spotted by espie@

www/{firefox-esr,mozilla-firefox,tor-browser}: point at the new libclang-path

www/firefox-esr: update to 115.2.0.

see https://www.mozilla.org/en-US/firefox/115.2.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/

Unveil /etc/localtime r in firefox's content process

This fixes dst (daylight saving time, summer time) in JavaScript.
Firefox turns off dst in libc, then applies its dst rules.  It fails
to apply dst if it can't realpath(3) /etc/localtime.  This failure
might cause local times to be off by an hour.

ok landry@ (maintainer)

Unveil AT SPI2 path to enable screen readers

In there is a D-Bus socket used to communicate with tools like orca(1), e.g.
'orca -s' and ticking the 'Speak object under mouse' box would read out text
and elements in programs except our pledged+unveiled browsers.

https://www.freedesktop.org/wiki/Accessibility/AT-SPI2/
OK landry robert

www/firefox-esr: major update to 115.1.0

see https://www.mozilla.org/en-US/firefox/115.1.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-31/

port changes:
- drop utility-audioDecoder pledge/unveil configs
- drop post-patch
- more or less merges what was in www/mozilla-firefox, including a
  pkg/README update

Do the same thing as www/mozilla-firefox, and pass MAKE_JOBS to the linker.
Unlike mozilla-firefox, always do it (by request from MAINTAINER),

OK MAINTAINER landry@

www/firefox-esr: update to 102.13.0.

see https://www.mozilla.org/en-US/firefox/102.13.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/

note that in a month this port will switch to 115esr, 102esr will be EOL
at the end of august

disable branch target control flow enforcement on various mozilla ports

prepare firefox-esr, thunderbird, and tor-browser for rust 1.70.0

backport a change for mp4parse

discussed with landry@

www/firefox-esr: update to 102.12.0.

see https://www.mozilla.org/en-US/firefox/102.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-19/

www/firefox-esr: update to 102.11.0.

see https://www.mozilla.org/en-US/firefox/102.11.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/

www/firefox-esr: improve icons/desktop file handling

- use firefox-flatpak for desktop file source, it's ways better than the
  firefox-snap one.
- patch the desktop file to differentiate it from www/mozilla-firefox
  and use the right Name/Exec/Icon/StartupWMClass
- install all icon sizes and an svg version to hicolor standard dirs
- use org.mozilla.firefox-esr standard name for the icon
- run gtk-update-icon-cache

www/firefox-esr: update to 102.10.0.

see https://www.mozilla.org/en-US/firefox/102.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/

www/firefox-esr: update to 102.9.0.

see https://www.mozilla.org/en-US/firefox/102.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/

www/firefox-esr: add missing BDEP on py-setuptools

backports www/mozilla-firefox/Makefile r1.524
fixes build failure when py-setuptools is junked during build, reported
again by naddy@.

www/firefox-esr: fixup previous and use $XDG_CACHE_HOME

Mesa respects XDG_CACHE_HOME in line 860 of
lib/mesa/src/util/disk_cache_os.c

noted by tb@, thanks!

www/firefox-esr: add ~/.cache/mesa_shader_cache rwc to
unveil.{main,content}

should allow for mesa shader cache to work once its enabled in mesa.
im not sure at all the gpu process is still used/started, so dont add
it to unveil.gpu for now. rwc perms to be checked once i've found time
to properly test that.

from jsg@

www/firefox-esr: update to 102.8.0.

see https://www.mozilla.org/en-US/firefox/102.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/

firefox-esr: backport kettenis's fft.asm fix from ffmpeg. Fixes an x-only
crash reported by ratchov.

www/firefox-esr: update to 102.7.0.

see https://www.mozilla.org/en-US/firefox/102.7.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-02/

www/firefox-esr: update to 102.6.0.

see https://www.mozilla.org/en-US/firefox/102.6.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-52/
- drop patch from #1773259, fixed upstream

www/firefox-esr: update to 102.5.0.

see https://www.mozilla.org/en-US/firefox/102.5.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-48/

Unbreak cups printing.

ok landry@ sdk@

bump REVISION for ports using rust, so that pkg_add -u for i386 users
updates to packages without -znotext (i.e. with text relocations disabled)
makes sense to phessler, semarie, tb

www/firefox-esr: update to 102.4.0.

see https://www.mozilla.org/en-US/firefox/102.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-45/

- bring CPPFLAGS=-Wno-backend-plugin to silence warnings from clang
  profiling
- tidy up WANTLIB

Unveil /var/run/pcscd/pcscd.comm to make smart cards work

OK landry

Bump REVISION of ports depending on security/openssl/{1.1,3.0}

www/firefox-esr: update to 102.3.0.

See https://www.mozilla.org/en-US/firefox/102.3.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-41/

Bump potential struct ifnet consumers

sys/net/if_var.h r1.116 "Remove struct ifnet's unused if_switchport member"
should be of no concern in ports land, but some actively do

- define _KERNEL and/or
  https://codesearch.debian.net/search?q=%23%5Cs*define%5Cs%2B_KERNEL%5Cb+filetype%3Ac&literal=0
  curl -s https://codesearch.debian.net/results/a710598a524e63cb/packages.txt
- include 
  https://codesearch.debian.net/search?q=%3Cnet%2Fif_var.h%3E+filetype%3Ac&literal=1
  curl -s https://codesearch.debian.net/results/3264f4d6c8ec573a/packages.txt

Running the packages.txt files through 'sort -u' and 'comm -12', filtering
for ports we actually have and further limiting it down to individual
packages rather than the whole port (thanks sthen) leaves us with

	$ infrastructure/bin/portbump -r \
	    devel/libgtop2 \
	    games/warzone2100 \
	    mail/mozilla-thunderbird \
	    multimedia/gstreamer1/plugins-bad \
	    net/miniupnp/miniupnpd \
	    net/net-snmp,-main \
	    net/usrsctp \
	    net/zabbix,-main \
	    security/aircrack-ng \
	    www/firefox-esr \
	    www/mozilla-firefox

Bump them all to pick up the new header/struct.

Feedback OK sthen

www/firefox-esr: update to 102.2.0.

see https://www.mozilla.org/en-US/firefox/102.2.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-34/

enable LTO & PGO as done in www/mozilla-firefox

www/firefox-esr: mention sysctl kern.video.record in pkg-readme
since sysctl kern.audio.record is already mentioned.

OK landry@

www/firefox-esr: major update to 102.1.0.

see https://www.mozilla.org/en-US/firefox/102.1.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-30/

basically merges what was in www/mozilla-firefox, adding pledge/unveil
configs for the utility/audioDecoder process (#1769033) and patches from
#1776713 & #1772090.

this allows us to track an esr branch that will be maintained upstream
for 7.2-stable lifetime.

www/firefox-esr: update to 91.11.0.

see https://www.mozilla.org/en-US/firefox/91.11.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-25/

firefox-esr: fix build with newer cbindgen

www/firefox-esr: update to 91.10.0

see https://www.mozilla.org/en-US/firefox/91.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-21/

www/firefox-esr: fix webgl on amdgpu

in the content process, unveil /dev/dri instead of only /dev/dri/card0,
as reported and debugged by gkoehler@. Something in mesa apparently
fallbacks to swrast if /dev/dri isn't found, and then fails hard/crashes
because of shmget().

strangely, i haven't been able to reproduce the failure with firefox 101.

www/firefox-esr: use an awk oneliner to append 'ESR' suffix to Name lines in desktop file

this way one can differentiate firefox from firefox-esr in desktop
environments.
while here also fix Exec lines for alternate Desktop Actions.
patch from Juan Picca, thanks !

www/firefox-esr: security update to 91.9.1

see https://www.mozilla.org/en-US/firefox/91.9.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/

www/firefox-esr: update to 91.9.0.

see https://www.mozilla.org/en-US/firefox/91.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-17/

www/firefox-esr: update to 91.8.0.

see https://www.mozilla.org/en-US/firefox/91.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-14/

ok naddy@

www/firefox-esr: fix emoji displays

move TwemojiMozilla.ttf to a dir known by fontconfig and annotate it
with @fontdir.

Should fix emoji displays in some situations - some websites arent
completely fixed because they rely on user-agent, but that's a different
dead horse to beat.

https://unicode.org/Public/emoji/14.0/emoji-test.txt should now display
emojis.

prompted by a report by Yifei Zhan

www/firefox-esr: update to 91.7.1.

see https://www.mozilla.org/en-US/firefox/91.7.1/releasenotes/

drop RCS Ids

www/firefox-esr: update to 91.7.0.

See https://www.mozilla.org/en-US/firefox/91.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-11/

www/firefox-esr: security update to 91.6.1.

see https://www.mozilla.org/en-US/firefox/91.6.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/

www/firefox-esr: update to 91.6.0.

See https://www.mozilla.org/en-US/firefox/91.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-05/

www/{firefox-esr,seamonkey},mail/mozilla-thunderbird: add --disable-necko-wifi to CONFIGURE_ARGS

its going away from mozilla.port.mk with firefox 97.

reminded by a report from naddy@, thanks

www/firefox-esr: update to 91.5.1.

see https://www.mozilla.org/en-US/firefox/91.5.1/releasenotes/

www/firefox-esr: update to 91.5.0.

See https://www.mozilla.org/en-US/firefox/91.5.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-02/

www/firefox-esr: update to 91.4.1.

see https://www.mozilla.org/en-US/firefox/91.4.1/releasenotes/

www/firefox-esr: update to 91.4.0

See https://www.mozilla.org/en-US/firefox/91.4.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-53/

www/firefox-esr: update to 91.3.0.

See https://www.mozilla.org/en-US/firefox/91.3.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-49/

www/firefox-esr: update to 91.2.0.

See https://www.mozilla.org/en-US/firefox/91.2.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-45/

www/firefox-esr: major update from 78.13.0 to 91.1.0

See https://www.mozilla.org/en-US/firefox/91.1.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-40/

merges what was in www/mozilla-firefox before the 92.0 update:
- add unveil/pledge for socket & rdd processes
- sync download dir patches

allows 7.0 to ship with a maintained esr branch for its lifetime

www/firefox-esr: update to 78.13.0.

See https://www.mozilla.org/en-US/firefox/78.13.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-34/

www/firefox-esr: update to 78.12.0.

See https://www.mozilla.org/en-US/firefox/78.12.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-29/

www/firefox-esr: update to 78.11.0.

See https://www.mozilla.org/en-US/firefox/78.11.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-24/

disable on i386: mozilla-related ports appear to run out of memory in
rust compilation; chromium has a "reference to type XX could not bind
to an lvalue of type YY" error

www/firefox-esr: update to 78.10.1.

See https://www.mozilla.org/en-US/firefox/78.10.1/releasenotes/
Fixes windows-only
https://www.mozilla.org/en-US/security/advisories/mfsa2021-18/

www/firefox-esr: update to 78.10.0

See https://www.mozilla.org/en-US/firefox/78.10.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-15/ (not there yet)

discussed with/ok naddy@ sthen@

www/firefox-esr: update to 78.9.0.

See https://www.mozilla.org/en-US/firefox/78.9.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/

Reverse the polarity of MODPY_VERSION; default is now 3.x,
if a port needs 2.x then set MODPY_VERSION=${MODPY_DEFAULT_VERSION_2}.

This commit doesn't change any versions currently used; it may be that
some ports have MODPY_DEFAULT_VERSION_2 but don't require it, those
should be cleaned up in the course of updating ports where possible.

Python module ports providing py3-* packages should still use
FLAVOR=python3 so that we don't have a mixture of dependencies some
using ${MODPY_FLAVOR} and others not.

www/firefox-esr: update to 78.8.0.

See https://www.mozilla.org/en-US/firefox/78.8.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-08/

allow /dev/dri/card0 where /dev/drm0 was allowed

ok landry@

www/firefox-esr: update to 78.7.1

See https://www.mozilla.org/en-US/firefox/78.7.1/releasenotes/
Fixes https://www.mozilla.org/fr/security/advisories/mfsa2021-06/
(Windows-only 'Prevent access to NTFS special paths that could lead to
filesystem corruption.')

www/firefox-esr: update to 78.7.0.

See https://www.mozilla.org/en-US/firefox/78.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-04/

Add /etc/resolv.conf to files allowed by unveil for all Firefox-based ports.
Normally this file is exempted from unveil by "pledge dns", but if the user
has disabled pledge (which is required for using some features) it will no
longer be exempted, so must be handled explicitly by unveil.

Problem reported by Stefan Hagen, ok jcs landry

www/firefox-esr: security update to 78.6.1.

See https://www.mozilla.org/en-US/firefox/78.6.1/releasenotes/
Fixes CVE-2020-16044 / https://www.mozilla.org/en-US/security/advisories/mfsa2021-01/

Remove patch from #1684180, merged upstream

www/firefox-esr{,-18n}: update to 78.6.0.

See https://www.mozilla.org/en-US/firefox/78.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-55/

Update to firefox-esr 78.5.0.

See https://www.mozilla.org/en-US/firefox/78.5.0/releasenotes/
Fixes https://www.mozilla.org/security/advisories/mfsa2020-51/

* remove all the MOZILLA_USE_* and the common BUILD_DEPENDS bits that
were removed from mozilla.port.mk
* properly install share/pixmaps/firefox-esr.png and point at it in the
desktop file, should ease icon overriding by third-party themes
* drop jumbo patch from #1663715 fixing build with rust 1.47, merged upstream

Security update to firefox-esr 78.4.1.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-49/

Update to firefox-esr 78.4.0.

See https://www.mozilla.org/en-US/firefox/78.4.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-46/

Use 'ln -f' to ensure "make repackage" works.

ok landry

Bugfix update to firefox-esr 78.3.1.

See https://www.mozilla.org/en-US/firefox/78.3.1/releasenotes/

Update to firefox-esr 78.3.0.

See https://www.mozilla.org/en-US/firefox/78.3.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/

Update to firefox-esr 78.2.0.

See https://www.mozilla.org/en-US/firefox/78.2.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-38/

Assorted tweaks/cleanups to reduce differences with www/mozilla-firefox:

- properly set MOZILLA_PROJECT to firefox-esr, and cleanup PLIST
- use MOZILLA_PROJECT where appropriate instead of adding -esr
  everywhere, now the Makefile are easily diffables

Major update to firefox-esr 78.1.0 (from esr68 branch)

See https://www.mozilla.org/en-US/firefox/78.1.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-32/

More or less a copy of what was in www/mozilla-firefox before the 79.0
upgrade, including:
- enable unveil integration
- move to /etc/firefox-esr/{pledge,unveil}.{main,gpu,content}
  instead of about:config knobs (maybe warrants current.html entry ?)
- bring in the jumbo patch fixing 'open with' mime handling
- stop building with systemwide sqlite3, unsupported upstream
- ditch old patches merged upstream in the 68->78 cycles
- use the shipped desktop file instead of our own
- sync README

briefly tested opening a pdf, an flv file and an archive with an
external handler, and accessed webcam with webrtc.

Update to firefox-esr 68.10.0

See https://www.mozilla.org/en-US/firefox/68.10.0/releasenotes/
Fixes https://www.mozilla.org/fr/security/advisories/mfsa2020-25/

note that www/firefox-esr will move to 78 when www/mozilla-firefox moves
to 79 in a month, so that 6.8 ships with a supported branch.

Update to firefox-esr 68.9.0.

See https://www.mozilla.org/en-US/firefox/68.9.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-21/

Fix webrtc audio/video on bigbluebutton, broken by the nss 3.52 update on some sites.

* From FreeBSD via jbeich@, cf
* https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=246363
* backports https://hg.mozilla.org/mozilla-central/rev/463069687b3d from
https://bugzilla.mozilla.org/show_bug.cgi?id=1624128

ratchov@ confirms that the issue was also present in -esr, and that
backporting this commit fixes it - many thanks !

68.8.0esrrc2 has been promoted to 68.8.0esr on the mirrors, same distfile

discussed with sthen@ & naddy@

Update to firefox-esr 68.8.0rc2

Relnotes will be at
https://www.mozilla.org/en-US/firefox/68.8.0/releasenotes/, and MFSAs will
be listed on https://www.mozilla.org/en-US/security/advisories/

commiting now to make sure this gets in 6.7 as discussed with sthen@ and
naddy@

Update to firefox-esr 68.7.0.

See https://www.mozilla.org/en-US/firefox/68.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-13/

Security update to firefox-esr 68.6.1.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/

neuter dwz preventively since it doesn't work with those 4 ports
(it's likely the debug info is bogus)

Update to firefox-esr 68.6.0.

See https://www.mozilla.org/en-US/firefox/68.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/

Fix path to dbus pkg-readme.

ok landry (maintainer)

Update to firefox-esr 68.5.0.

See https://www.mozilla.org/en-US/firefox/68.5.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/

Update to firefox-esr 68.4.2.

See https://www.mozilla.org/en-US/firefox/68.4.2/releasenotes/

Update to firefox-esr 68.4.1.

See https://www.mozilla.org/en-US/firefox/68.4.1/releasenotes/
Fixes https://www.mozilla.org/security/advisories/mfsa2020-03/

Update to firefox-esr 68.4.0.

See https://www.mozilla.org/en-US/firefox/68.4.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-02/

Remove patches fixing build with rust 1.39, bindgen was upgraded in #1583471

Backport auxv.h header inclusion fix. okay landry@

Add 'uses pledge()' comments, from Caspar Schutijser.

Build adjustments:
* remove patch that was applied upstream
* devel/nasm is only a build depend on i386/amd64
* build verbosely
* limit cargo to MAKE_JOBS

okay landry@

Update to firefox-esr 68.3.0.

See https://www.mozilla.org/en-US/firefox/68.3.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-37/

Add patches to fix build with upcoming rust 1.39, from semarie@

Provide debug package for firefox-esr.

Update to firefox-esr 68.2.0.

See https://www.mozilla.org/en-US/firefox/68.2.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-33/

Remove patch from #1579323 to reenable sandboxing by default & patch
from #1585099 to fix build with rust 1.38, both merged upstream in the
esr branch.

*** empty log message ***

unbreak www/firefox-esr and mail/mozilla-thunderbird after lang/rust upgrade
mark www/tor-browser/browser as BROKEN (too outdated and not easily unbreakable)

ok landry@

factor some common parts into mozilla.port.mk and fix DPB_PROPERTIES which
is supposed to be "lonesome" on i386 because parts of the build take a lot of
ram, but actually ended up as "lonesome parallel" due to a +=. hoping this
will reduce the frequent build failures on i386.  ok landry

Sync pkg-readme with the one from mozilla-firefox.
Prompted by a mail from gjones5555 at netscape dot net

Apply jcs@'s sandboxing fix to esr too.

Update firefox-esr to 68.1.0.

See https://www.mozilla.org/en-US/firefox/68.1.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/

Basically a copy of what was under www/mozilla-firefox, as 60esr will
soon be EOL, and we want to track 68esr in 6.6-stable.

As a side-effect, esr now uses pledge like mainline firefox.

The bn-BD & bn-IN lackpacks were merged into bn.

replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes

Update to firefox-esr 60.8.0.

See https://www.mozilla.org/en-US/firefox/60.8.0/releasenotes/
Fixes https://www.mozilla.org/security/advisories/mfsa2019-22/

Fix build with upcoming rust 1.36.

found by semarie@ in
https://reviews.freebsd.org/D20810#change-K68aYoUXfAu1, regression in
rust itself tracked in https://github.com/rust-lang/rust/issues/62301

Builds fine with rust 1.35.

bump REVISION in a bunch of ports known or likely to use struct kinfo_proc,
there may be some missing as my unpacked ports source is a little out of date
but this should catch the main things people might run into

the struct was reordered a second time in sysctl.h r1.192 to improve
compatibility but amd64 snapshot packages made it out before that happened
so the bumps are still needed

Update to firefox-esr 60.7.2.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/

Same diff sent by Henry Jensen.

Update to firefox-esr 60.7.1.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/

Update to firefox-esr 60.7.0.

See https://www.mozilla.org/en-US/firefox/60.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/

Update to firefox-esr 60.6.3.

See https://www.mozilla.org/en-US/firefox/60.6.3/releasenotes/

Update to firefox 60.6.2.

See https://www.mozilla.org/en-US/firefox/60.6.2/releasenotes/
Fixes the addons issue seen all around, cf
https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/

Repackage i18n langpacks from 60.6.1 as they're not available for this
release.

Update to firefox-esr 60.6.1.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-10/

Update to firefox-esr 60.6.0.

See https://www.mozilla.org/en-US/firefox/60.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-08/

prepare firefox (all versions) to be compiled using rust-1.33

ok landry@

Bugfix update to firefox-esr 60.5.2.

See https://www.mozilla.org/en-US/firefox/60.5.2/releasenotes/
Fixes crashes when reading Reuters news, cf https://bugzilla.mozilla.org/1505844

Update to firefox-esr 60.5.1.

See https://www.mozilla.org/en-US/firefox/60.5.1/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-05/

Update to firefox-esr 60.5.0.

See https://www.mozilla.org/en-US/firefox/60.5.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-02/

Update to firefox-esr 60.4.0.

See https://www.mozilla.org/en-US/firefox/60.4.0/releasenotes/

Bump requirement to nss 3.40.1 to ensure consumers pick it up.

Will be a hard requirement for upcoming 64 anyway.

Update to firefox-esr 60.3.0.

See https://www.mozilla.org/en-US/firefox/60.3.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/

Bump all ports using rust to ensure they get rebuilt/updated.

Update to firefox-esr 60.2.2.

See https://www.mozilla.org/en-US/firefox/60.2.2/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/
Removes rust 1.29 build fix patch, merged.

bump REVISION on ports using rust, to ensure that they pick up the fix
for out of bounds write due to integer overflow that was fixed in rust's
libstd (which is statically linked).

Update to firefox-esr 60.2.1

Cf https://www.mozilla.org/en-US/firefox/60.2.1/releasenotes/
Fixes https://www.mozilla.org/security/advisories/mfsa2018-23/

Update to firefox-esr 60.2.0.

See https://www.mozilla.org/en-US/firefox/60.2.0esr/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-21/

convert to PKGSTEM

first tag: update-desktop-database

Update to firefox-esr 60.1.0. The 52 branch will die soon.

See https://www.mozilla.org/en-US/firefox/60.1.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/

Now builds against bundled icu, cairo & hunspell, and build-requires
rust and llvm. This is more or less what was in www/mozilla-firefox
before the update to 61.

Add patch from #1470961 to fix build with system sqlite. Note that the
install directory is renamed from lib/firefox-esr-${VERSION} to
lib/firefox-esr to follow mainline firefox.

Update to firefox-esr 52.8.1.

See https://www.mozilla.org/en-US/firefox/52.8.1/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-14/

Bump the remaining ports to trigger updates following cpu stats
changes (CPUSTATES/etc). Last part.

- some of these might be in code that's not actually built or rarely
used but it's not worth the hassle evaluating that, i'm just bumping &
moving on.

- as mentioned before, there might still be runtime problems relating
to the addition or renumbering.

Update to firefox-esr 52.8.0.

See https://www.mozilla.org/en-US/firefox/52.8.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/

Note that 60 is now the new ESR branch, so this port will probably
be updated to it at the next cycle.

Update to firefox-esr 52.7.3.

See https://www.mozilla.org/en-US/firefox/52.7.3/releasenotes/
(security advisories not up yet)

Update to firefox-esr 52.7.2.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
from Pwn2own - "Out of bounds memory write while processing Vorbis audio
data".

Update to firefox-esr 52.7.0.

See https://www.mozilla.org/en-US/firefox/52.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/

Update to firefox-esr 52.6.0.

See https://www.mozilla.org/en-US/firefox/52.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/
(spectre mitigations) and
https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/

Bugfix update to firefox-esr 52.5.3.

See https://www.mozilla.org/en-US/firefox/52.5.3/releasenotes/ (not there yet)
Same as main, probably doesnt affect us..

Update to firefox-esr 52.5.2.

See https://www.mozilla.org/en-US/firefox/52.5.2/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2017-28/
(one windows-only, the other might affect other platforms)

note that 52.5.1 was skipped upstream.

switch COMPILER from the old, confusing shortcuts to the more explicit format

Update to firefox-esr 52.5.0.

See https://www.mozilla.org/en-US/firefox/52.5.0/releasenotes/
Fixes MFSA2017-25, see https://www.mozilla.org/en-US/security/advisories/mfsa2017-25/

Add missing @exec/@unexec-delete update-desktop-database calls while
here.. and remove gettext MODULE.

Handle pthread-stubs removal.

Update to firefox-esr 52.4.0.

- see https://www.mozilla.org/en-US/firefox/52.4.0/releasenotes/
- fixes https://www.mozilla.org/en-US/security/advisories/mfsa2017-22/

ok naddy@

bump; textproc/icu4c now uses multi-packages for -wwwdata

Update to firefox-esr 52.3.0.

See https://www.mozilla.org/en-US/firefox/52.3.0/releasenotes/ (not up yet)

bump LIBCXX/LIBECXX/COMPILER_LIBCXX ports.

use COMPILER_LIBCXX where applicable

Update to firefox-esr 52.2.1.

See https://www.mozilla.org/en-US/firefox/52.2.1/releasenotes/

Update to firefox-esr 52.2.0.

See https://www.mozilla.org/en-US/firefox/52.2.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/

switch everything to new COMPILER idiom, even stuff that won't build with clang
yet, but at least that part is done.

let it build with base clang, be explicit about the c++ lib

Bugfix update to firefox-esr 52.1.2.

See https://www.mozilla.org/en-US/firefox/52.1.2/releasenotes/

Bugfix update to firefox-esr 52.1.1.

See https://www.mozilla.org/en-US/firefox/52.1.1/releasenotes/

I screwed up in previous commit (commited to both ports..), so remove
REVISION churn, and here's the intended commit msg for firefox-esr:

Update to firefox-esr 52.1.0.

See https://www.mozilla.org/en-US/firefox/52.1.0/releasenotes/ and
https://www.mozilla.org/en-US/security/advisories/mfsa2017-12/
- Ship a small distribution.ini to show package source in about dialog
- Remove patch-browser_installer_allowed-dupes_mn, was fixed by #1315309

Update to firefox 53.0.

See https://www.mozilla.org/en-US/firefox/53.0/releasenotes/ and
https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/.

- Now depends on rust and cargo to build.
- Remove patch-browser_installer_Makefile_in, sdk was removed in #1333826
- Ship a small distribution.ini to show package source in about dialog
- Add a blurb from Michael Reed about installing ffmpeg package to play
HTML5 audio/video.

Tested by several

Fix WANTLIB and bump REVISION for all ports depending on hunspell.

While here enforce dependency on hunspell 1.6 in mozilla.port.mk, as
it's a requirement for 53.

Bugfix update to firefox-esr 52.0.2.

See https://www.mozilla.org/en-US/firefox/52.0.2esr/releasenotes/

Update to firefox-esr 52.0.1.

Fixes MFSA 2017-08/CVE-2017-5428, see
https://www.mozilla.org/en-US/security/advisories/mfsa2017-08/

While here, add a patch from semarie@ (tested by and ok danj@) to tweak
a last-minute change in the jit engine memory allocator that happened to
fix a security issue in 52 branch (bug #1334933/CVE-2017-5400) - see
https://hg.mozilla.org/releases/mozilla-esr52/rev/6b35bbf96b67.

Sadly, this change resulted in a browser crashing at startup
on OpenBSD with the default limits, because the jit engine tried to
allocate 1Gb (previously 640Mb in #1334933, then 1Gb because of
#1337561, see
https://hg.mozilla.org/releases/mozilla-esr52/rev/65bb26d07408) and hit
the default datasize ulimit of 768Mb. The patch makes it allocate 128Mb
instead (as it's done on 32bit architectures), while a better (?) fix
might be devised in bug #1347139.

Generally speaking, if you see firefox crashing with ENOMEM errors,
raise the datasize limit for your login class, write your own wrapper
script to temporarly raise the limit when starting firefox, or stop
using the modern web. Websites are ginormous, deal with it.

Update firefox-esr to 52.0.

See https://www.mozilla.org/en-US/firefox/52.0esr/releasenotes/

This release switches to Gtk3 by default, following upstream. It also
still supports NPAPI plugins (java etc..) for the 52esr lifetime (around
1 year).

This way, 6.1 will ship with a supported branch of esr instead of the
soon-to-be-dead 45 branch.

Discussed with naddy@

Consolidate textproc/icu4c common dependency into mozilla.port.mk, and
allow to build against bundled icu4c by setting MOZILLA_USE_BUNDLED_ICU.

Update to firefox-esr 45.7.0.

See https://www.mozilla.org/en-US/firefox/45.7.0/releasenotes/ and MFSA
2017-02 (https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/)

Remove patch-netwerk_protocol_http_Http2Session_cpp (#1290037)

Fix NS_ERROR_NET_INADEQUATE_SECURITY error messages on
wikipedia|google|cnn|various sites (http/2?) broken by the nss 3.28
update, my bad - totally forgot about this when updating.

Backport https://hg.mozilla.org/mozilla-central/rev/361ac226da2a

See https://bugzilla.mozilla.org/show_bug.cgi?id=1290037 &
https://bugzilla.mozilla.org/show_bug.cgi?id=1323209

Reported by Solene Rapenne and others, fix tested by danj@

Update to firefox-esr 45.6.0.

See https://www.mozilla.org/en-US/firefox/45.6.0/releasenotes/ and
https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/

Security update to firefox-esr 45.5.1.

See https://www.mozilla.org/en-US/firefox/45.5.1/releasenotes/ and
https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/ (link not
up yet). A javascript exploit for windows was found in the wild, and the
vulnerability could technically be exploited on other platforms..

Update to firefox-esr 45.5.0.

See https://www.mozilla.org/en-US/firefox/45.5.0/releasenotes/ and
https://www.mozilla.org/en-US/security/advisories/mfsa2016-90/

Update to firefox-esr 45.4.0.

See https://www.mozilla.org/en-US/firefox/45.4.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2016-86/

Cope with moving sqlite3 back to ports.

Update to firefox-esr 45.3.0.

- See https://www.mozilla.org/en-US/firefox/45.3.0/releasenotes/
- Fixes MFSA-2016-62->65,67,70,72,73,76->80

Update to firefox-esr 45.2.0.

- See https://www.mozilla.org/en-US/firefox/45.2.0/releasenotes/
- Fixes MFSA 2016-49->53, 55, 56, 58

Bugfix update to firefox-esr 45.1.1.

- See https://www.mozilla.org/en-US/firefox/45.1.1/releasenotes/

Update firefox-esr to 45 branch with 45.1.0.

- See https://www.mozilla.org/en-US/firefox/45.1.0/releasenotes/
- Fixes MFSA 2016-39, 44 & 47
- Stays with Gtk2 for now, will probably move to Gtk3 with 52 at the end
  of the year
- Bring some patches from www/mozilla-firefox to fix build issues/enable
  W^X/etc
- Disable gstreamer, now uses ffmpeg at runtime of found like firefox
- Use bundled libevent

Bugfix update to firefox-esr 38.7.1.

See https://www.mozilla.org/en-US/firefox/38.7.1/releasenotes/

Update to firefox-esr 38.7.0.

- See https://www.mozilla.org/en-US/firefox/38.7.0/releasenotes/
- Fixes MFSA 2015-81, 2015-136, 2016-16, 17, 20, 21, 23, 24, 25, 27, 28,
  31, 34, 35 & 37

Heads-up ! This port will switch to the 45 branch within the 6 coming weeks.

Bump REVISION for lang/clang MODULE changes.

Security update to firefox-esr 38.6.1.

See https://www.mozilla.org/en-US/firefox/38.6.1/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2016-14/
ok sthen@ naddy@

Update to firefox-esr 38.6.0.

* See https://www.mozilla.org/en-US/firefox/38.6.0/releasenotes/
* Fixes MFSA 2015-150, 2016-01 & 2016-03

Note that with esr45 around the corner, esr38 will only be supported for
two more point releases.

Update to firefox-esr 38.5.2.

See https://www.mozilla.org/en-US/firefox/38.5.2/releasenotes/
No binary change for us since this is only to force updates for poor
windows users, because microsoft now requires SHA256 certs. But ppl wont
complain that OpenBSD doesn't ship the latest and greatest!

Update to firefox-esr 38.5.0.

See https://www.mozilla.org/en-US/firefox/38.5.0/releasenotes/
Fixes MFSA 2015-134,138,139,145,146,147,149

Update to firefox-esr 38.4.0.

- See https://www.mozilla.org/en-US/firefox/38.4.0/releasenotes/
- Fixes MFSA 2015-116, 122, 123, 127, 128, 130 -> 133

Update to firefox-esr 38.3.0.

- See https://www.mozilla.org/en-US/firefox/38.3/releasenotes/
- Fixes MFSA 2015-96, 100, 101, 105, 106, 110, 111, 112 & 113

Update to firefox-esr 38.2.1.

- See https://www.mozilla.org/en-US/firefox/38.2.1/releasenotes/
- Fixes MFSA-2015-94 & 95.

Update to firefox-esr{,-i18n} 38.2.0.

- See https://www.mozilla.org/en-US/firefox/40.0/releasenotes/
- Fixes MFSA-2015-79, 80, 82, 83, 84, 85, 87, 88, 89, 90 & 92

SECURITY update to firefox 39.0.3 & firefox-esr 38.1.1.

Fixes MFSA2015-78, see
https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/
and https://www.mozilla.org/en-US/security/advisories/mfsa2015-78/

ok naddy@ sthen@

Face reality, mark as BROKEN-sparc64. xpcshell SIGBUSes during fake, and
nobody cares. No point in wasting hours during bulk builds....
If you want a graphical browser on sparc64, try netsurf.

Update to firefox-esr{,-i18n} 38.1.0.

- See https://www.mozilla.org/en-US/firefox/38.1.0/releasenotes/
- Fixes MFSA 2015-59 -> 71 (unaffected by 2015-68)

gcc4 bumps, reminded by aja@

Sync in the GStreamer related changes and the README from the mainstream
Firefox to the Firefox ESR port.

from brad
"don't care" landry@

Update to firefox-esr 38.0.1.

- See https://www.mozilla.org/en-US/firefox/38.0.1/releasenotes/ and
  https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
- Fixes MFSA 2015-46->58
- switch i386 back to use clang.
- use system icu4c
- remove bunch of now useless/merged patches

Update to firefox-esr 31.6.0.

- See https://www.mozilla.org/en-US/firefox/31.6.0/releasenotes/
- Fixes MFSA 2015-30, 31, 33, 37, 40

Security update to firefox-esr 31.5.3.

- See https://www.mozilla.org/en-US/firefox/31.5.2/releasenotes/
- Fixes MFSA-2015-28/29 (Pwn2Own)

Update to firefox-esr 31.5.0.

- See https://www.mozilla.org/en-US/firefox/31.5.0/releasenotes/
- Fixes MFSA 2015-11, 12, 16, 19 & 24

Update to firefox-esr 31.4.0

- See https://www.mozilla.org/en-US/firefox/31.4.0/releasenotes/
- Fixes MFSA 2015-01, 03, 04 & 06

Update to firefox-esr 31.3.0.

- See https://www.mozilla.org/en-US/firefox/31.3.0/releasenotes/
- Fixes MFSA-2014-83,85,87->90

Bugfix update to firefox-esr 31.2.0.

- See https://www.mozilla.org/en-US/firefox/31.2.0/releasenotes/
- Fixes MFSA 2013-74,75,76,77,79,81,82.

Update to firefox-esr 31.1.0.

See https://www.mozilla.org/en-US/firefox/31.1.0/releasenotes/

use more specific version of SUBST_* where appropriate

Update to firefox-esr 31 (technically the same as firefox 31).

The reasoning to update www/firefox-esr is simple: the esr31 branch will
be supported for the next 56 weeks, while the esr24 branch will die in
12 weeks - this way, 5.6-stable will receive updates.

- See https://www.mozilla.org/en-US/firefox/31.0/releasenotes/
- Fixes MFSA 2014-56->66
- Add libvpx hack for clang build (#982693)
- Build against gstreamer1
- Add skia patches for i386/sse3 (#1028827)
- Add intl install patch (#990196)
- Remove patch-ipc_chromium_src_base_debug_util_posix_cc, merged (#927810)
- Remove patch-ipc_chromium_src_base_dir_reader_bsd_h, merged (#909005)
- Remove patch-js_src_ctypes_libffi_src_x86_freebsd_S, merged (#928381)

ok sthen@ jasper@ naddy@

Bump REVISIONs after mozilla.port.mk changes. Note that seamonkey 2.27
will miss the trains due to infrastructure issue, a 2.26.1 is in the
pipe, and 2.28 should be released in line with ffx/gecko 31.

- update to firefox-esr-24.6.0
* see: http://www.mozilla.org/en-US/firefox/24.6.0/releasenotes/
* fixes MFSA-2014-48, 49 and 52

ok landry@

Update to firefox-esr 24.5.0.

- See http://www.mozilla.org/en-US/firefox/24.5.0/releasenotes/
- Fixes MFSA-2014-34,35,37,38,42,43,44 & 46
- add a default prefs all-openbsd.js file, pointing
  spellchecker.dictionary_path to ${LOCALBASE}/share/mozilla-dicts/ so
that systemwide dictionaries are looked for by default.
- while here the same file disables safebrowsing feature, as is already
  done in www/mozilla-firefox.

Update to firefox-esr 24.4.0.

- See http://www.mozilla.org/en-US/firefox/24.4.0/releasenotes/
- Fixes MFSA-2014-15->17,26->32

Bump REVISION for gcc4 & www/mozilla MODULES changes.

- update firefox-esr to 24.3.0

ok landry@

Set StartupNotify=true in desktop files for nicer startup integration.
From ajacoutot@, thx

Update to firefox-esr 24.2.0.

- Fixes MFSA 2013-104, 108, 109, 111, 113 -> 117

Initial revision

Import firefox ESR 24.1.1.

Firefox ESR is intended for groups who deploy and maintain the desktop
environment in large organizations such as universities and other
schools, county or city governments and businesses. During the extended
cycle, no new features will be added to a Firefox ESR; only
high-risk/high-impact security vulnerabilities or major stability fixes
will be corrected.

Note that using it on OpenBSD is NOT supported by mozilla. People
willing to deploy it should subscribe to the EWG mailing list.

http://www.mozilla.org/en-US/firefox/organizations/faq/

Installs as firefox-esr and doesnt conflict with mainline www/mozilla-firefox.
Learn to use several profiles if you plan to use both.

req'd by several.

security update to firefox-24.8.0esr
- note, this will be the last release of the 24ESR series

update to firefox-24.7.0esr

- update to firefox-esr-24.6.0
* see: http://www.mozilla.org/en-US/firefox/24.6.0/releasenotes/
* fixes MFSA-2014-48, 49 and 52

update to firefox-esr-24.5.0, original commit by landry@

http://www.mozilla.org/en-US/firefox/24.5.0/releasenotes/

update to firefox-24.4.0esr

update to firefox-31.6.0esr

update to firefox-esr-31.5.3esr

update to firefox-esr-31.5.0

update to firefox-31.4.0esr

- update to firefox-esr-31.3.0
https://www.mozilla.org/en-US/firefox/31.3.0/releasenotes/

update to firefox-esr-31.2.0:

https://www.mozilla.org/en-US/firefox/31.2.0/releasenotes/

Security update to firefox-esr-31.1.0esr

https://www.mozilla.org/en-US/firefox/31.1.0/releasenotes/

update to firefox-31.6.0esr

update to firefox-esr-31.5.3esr

update to firefox-esr-31.5.0

update to firefox-esr-38.7.1

- update to firefox-esr-38.6.1
https://www.mozilla.org/en-US/firefox/38.6.1/releasenotes/

update to firefox-esr-38.6.0

update to firefox-esr-35.2.0

update to firefox-38.3.0esr

update to firefox-38.2.1esr

update to firefox-esr-38.8.0
https://www.mozilla.org/en-US/firefox/38.8.0/releasenotes/

update to firefox-esr-38.7.1

MFC: update to firefox-esr 52.4.0.

- see https://www.mozilla.org/en-US/firefox/52.4.0/releasenotes/
- fixes https://www.mozilla.org/en-US/security/advisories/mfsa2017-22/

MFC: update to firefox-esr 52.3.0.

See https://www.mozilla.org/en-US/firefox/52.3.0/releasenotes/ (not yet up)

"Stable" packages for i386 and amd64 available at
https://packages.rhaalovely.net/
signed with https://packages.rhaalovely.net/landry-mozilla-pkg.pub

MFC: update to firefox-esr 52.2.1.

See https://www.mozilla.org/en-US/firefox/52.2.1/releasenotes/

"Stable" packages for i386 and amd64 available at https://packages.rhaalovely.net/
signed with https://packages.rhaalovely.net/landry-mozilla-pkg.pub

MFC: update to firefox-esr 52.2.0.

See https://www.mozilla.org/en-US/firefox/52.2.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/

"Stable" packages for i386 and amd64 available at https://packages.rhaalovely.net/
signed with https://packages.rhaalovely.net/landry-mozilla-pkg.pub

MFC: bugfix update to firefox-esr 52.1.2.

See https://www.mozilla.org/en-US/firefox/52.1.2/releasenotes/

Packages for -stable available at
https://packages.rhaalovely.net/pub/OpenBSD/6.1/packages/${ARCH}

MFC: update to firefox-esr 52.1.1.

Stable packages for i386 and amd64 available at https://packages.rhaalovely.net/

MFC: update to firefox-esr 52.1.0.

Over time i'll see if i maintain this or give up.
Stable packages for i386 and amd64 available at https://packages.rhaalovely.net/
signed with https://packages.rhaalovely.net/landry-mozilla-pkg.pub

MFC: Update to firefox-esr 52.7.3.

See https://www.mozilla.org/en-US/firefox/52.7.3/releasenotes/
(packages still being built)

MFC: update to firefox-esr 52.7.2.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
from Pwn2own - "Out of bounds memory write while processing Vorbis audio
data".

i386 & amd64 -stable pkgs might come once they're built. Or not. Given
the tremendous amount of replies i got from my call for testing email
about 59.0....

MFC: update to firefox-esr 52.7.0.

See https://www.mozilla.org/en-US/firefox/52.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/

amd64 & i386 packages soon to hit the usual spot. Still fighting for
59.0.

MFC: update to firefox-esr 52.6.0.

See https://www.mozilla.org/en-US/firefox/52.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/
(spectre mitigations) and
https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/

6.2 packages for i386 & amd64 at the usual place.

MFC: Update to firefox-esr 52.5.3.

See https://www.mozilla.org/en-US/firefox/52.5.3/releasenotes/
6.2 packages for i386 & amd64 at the usual place.

MFC: Update to firefox-esr 52.5.2.

See https://www.mozilla.org/en-US/firefox/52.5.2/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2017-28/
(one windows-only, the other might affect other platforms)

"Stable" packages for i386 and amd64 available at https://packages.rhaalovely.net/
signed with https://packages.rhaalovely.net/landry-mozilla-pkg.pub

note that 52.5.1 was skipped upstream.

MFC: update to firefox-esr 52.5.0.

See https://www.mozilla.org/en-US/firefox/52.5.0/releasenotes, fixes
MFSA2017-25 (cf https://www.mozilla.org/en-US/security/advisories/mfsa2017-25/)

"Stable" packages for i386 and amd64 (6.2 only!) available at https://packages.rhaalovely.net/
signed with https://packages.rhaalovely.net/landry-mozilla-pkg.pub

Update to firefox-esr 52.9.0.

See https://www.mozilla.org/en-US/firefox/52.9.0/releasenotes/
See https://www.mozilla.org/en-US/security/advisories/mfsa2018-17/

Note that the 52 esr branch is going to die soon, -stable users will be
encouraged to switch from firefox-esr to firefox which will follow the
60 esr branch for 6.3 lifecycle. I hope this is not too confusing :)

6.3 -stable packages for i386 & amd64 at the usual spot.

MFC: Update to firefox-esr 52.8.1.

See https://www.mozilla.org/en-US/firefox/52.8.1/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-14/
-stable package at the usual spot

MFC: update to firefox-esr 52.8.0.

See https://www.mozilla.org/en-US/firefox/52.8.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/

Packages for 6.3 at the usual spot.

MFC:Update to firefox-esr 60.6.1.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-10/
6.4-stable packages will be available tmrw late, still building.

MFC: Update to firefox-esr 60.6.0.

See https://www.mozilla.org/en-US/firefox/60.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-08/

6.4-stable packages at the usual spot.

MFC: Bugfix update to firefox-esr 60.5.2.

See https://www.mozilla.org/en-US/firefox/60.5.2/releasenotes/
Fixes crashes when reading Reuters news, cf https://bugzilla.mozilla.org/1505844

MFC: Update to firefox-esr 60.5.1.

See https://www.mozilla.org/en-US/firefox/60.5.1/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-05/

6.4-stable packages available at https://packages.rhaalovely.net/%m as usual.

MFC: Update to firefox-esr 60.5.0.

See https://www.mozilla.org/en-US/firefox/60.5.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-02/

-stable pkgs at https://packages.rhaalovely.net/ as usual.

MFC: update to firefox-esr 60.4.0.

See https://www.mozilla.org/en-US/firefox/60.4.0/releasenotes/

-stable packages at the usual spot.

MFC: Update to firefox-esr 60.3.0.

See https://www.mozilla.org/en-US/firefox/60.3.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/

6.4-stable packages available at https://packages.rhaalovely.net/%m as usual.

Update to firefox-esr 60.9.0.

See https://www.mozilla.org/en-US/firefox/60.9.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/

That this will probably be the last update in the 60esr branch.

Note that i'm not providing binary packages updates for -stable anymore
on my repo, as solene@ took over that task. Thanks !

MFC: Update to firefox-esr 60.8.0.

See https://www.mozilla.org/en-US/firefox/60.8.0/releasenotes/
Fixes https://www.mozilla.org/security/advisories/mfsa2019-22/

packages at the usual spot. ppl wanting 68.0 should use -current.

MFC: update to firefox-esr 60.7.2.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/

6.5-stable packages being built..

MFC: update to firefox-esr 60.7.1.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/

MFC: update to firefox-esr 60.7.0.

See https://www.mozilla.org/en-US/firefox/60.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/

6.5 amd64 & i386 pkgs at the usual spot.

Update to firefox 60.6.3.

See https://www.mozilla.org/en-US/firefox/60.6.3/releasenotes/

6.5-stable packages at the usual spot (in some hours).

Update to firefox-esr 60.6.2.

See https://www.mozilla.org/en-US/firefox/60.6.2/releasenotes/
Fixes the addons issue seen all around, cf
https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/

6.5-stable packages available at https://packages.rhaalovely.net, signed
with https://packages.rhaalovely.net/landry-mozilla-pkg.pub. i386 still
building.

ppl running 6.5-release not wanting to install 3rd-party packages from a
potentially untrusted source (ie, me) can temporarly enable studies to
get the hotfix, or manually install
https://storage.googleapis.com/moz-fx-normandy-prod-addons/extensions/hotfix-update-xpi-intermediate%40mozilla.com-1.0.2-signed.xpi

Update 6.6-stable to firefox-esr 68.8.0.

See https://www.mozilla.org/en-US/firefox/68.8.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-17/

MFC: Update to firefox-esr 68.7.0.

See https://www.mozilla.org/en-US/firefox/68.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-13/

MFC: Security update to firefox-esr 68.6.1.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/

MFC: Update to firefox-esr 68.6.0.

See https://www.mozilla.org/en-US/firefox/68.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/

MFC: Update to firefox-esr 68.5.0.

See https://www.mozilla.org/en-US/firefox/68.5.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/

MFC: update to firefox-esr 68.4.2.

See https://www.mozilla.org/en-US/firefox/68.4.2/releasenotes/

MFC: update to firefox-esr 68.4.1.

See https://www.mozilla.org/en-US/firefox/68.4.1/releasenotes/
Fixes https://www.mozilla.org/security/advisories/mfsa2020-03/

MFC: Update to firefox-esr 68.4.0.

See https://www.mozilla.org/en-US/firefox/68.4.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-02/

MFC: update to firefox-esr 68.3.0.

See https://www.mozilla.org/en-US/firefox/68.3.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-37/

MFC: Update to firefox-esr 68.2.0.

See https://www.mozilla.org/en-US/firefox/68.2.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2019-33/

Remove patch from #1579323 to reenable sandboxing by default & patch
from #1585099 to fix build with rust 1.38, both merged upstream in the
esr68 branch.

Note that firefox 70 might get backported to 6.6, or not. Dependency hell..

Update to firefox-esr 68.12.0.

See https://www.mozilla.org/en-US/firefox/68.12.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-37/

the esr68 branch is now EOL upstream and will receive no more updates.

Update to firefox-esr 68.11.0.

See https://www.mozilla.org/en-US/firefox/68.11.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-31/

MFC: Update to firefox-esr 68.10.0

See https://www.mozilla.org/en-US/firefox/68.10.0/releasenotes/
Fixes https://www.mozilla.org/fr/security/advisories/mfsa2020-25/

MFC: Update to firefox-esr 68.9.0.

See https://www.mozilla.org/en-US/firefox/68.9.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-21/

www/firefox-esr: MFC update to 78.10.0

See https://www.mozilla.org/en-US/firefox/78.10.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-15/ (not there yet)

www/firefox-esr: MFC update to 78.9.0.

See https://www.mozilla.org/en-US/firefox/78.9.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/

www/firefox-esr: MFC update to 78.8.0.

See https://www.mozilla.org/en-US/firefox/78.8.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-08/

www/firefox-esr: MFC update to 78.7.1

See https://www.mozilla.org/en-US/firefox/78.7.1/releasenotes/
Fixes https://www.mozilla.org/fr/security/advisories/mfsa2021-06/
(Windows-only 'Prevent access to NTFS special paths that could lead to
filesystem corruption.')

www/firefox-esr: MFC update to 78.7.0.

See https://www.mozilla.org/en-US/firefox/78.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-04/

www/firefox-esr: MFC security update to 78.6.1.

See https://www.mozilla.org/en-US/firefox/78.6.1/releasenotes/
Fixes CVE-2020-16044 / https://www.mozilla.org/en-US/security/advisories/mfsa2021-01/

www/firefox-esr{,-18n}: MFC update to 78.6.0.

See https://www.mozilla.org/en-US/firefox/78.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-55/

MFC(sortof): Update to firefox-esr 78.5.0.

See https://www.mozilla.org/en-US/firefox/78.5.0/releasenotes/
Fixes https://www.mozilla.org/security/advisories/mfsa2020-51/

MFC: Security update to firefox-esr 78.4.1.

Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-49/

MFC: Update to firefox-esr 78.4.0.

See https://www.mozilla.org/en-US/firefox/78.4.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-46/

MFC: Update to firefox-esr 78.3.1

See https://www.mozilla.org/en-US/firefox/78.3.1/releasenotes/

www/firefox-esr: update to 78.14.0.

See https://www.mozilla.org/en-US/firefox/78.14.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-39/

www/firefox-esr: MFC update to 78.13.0.

See https://www.mozilla.org/en-US/firefox/78.13.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-34/

www/firefox-esr: MFC update to 78.12.0.

See https://www.mozilla.org/en-US/firefox/78.12.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-29/

www/firefox-esr: MFC update to 78.11.0.

See https://www.mozilla.org/en-US/firefox/78.11.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-24/

www/firefox-esr: MFC update to 78.10.1.

See https://www.mozilla.org/en-US/firefox/78.10.1/releasenotes/
Fixes windows-only https://www.mozilla.org/en-US/security/advisories/mfsa2021-18/

www/firefox-esr: MFC update to 91.8.0.

see https://www.mozilla.org/en-US/firefox/91.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-14/

www/firefox-esr: MFC update to 91.7.0.

See https://www.mozilla.org/en-US/firefox/91.7.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-11/

www/firefox-esr: MFC security update to 91.6.1.

see https://www.mozilla.org/en-US/firefox/91.6.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/

www/firefox-esr: MFC update to 91.6.0.

See https://www.mozilla.org/en-US/firefox/91.6.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-05/

www/firefox-esr: MFC update to 91.5.1.

see https://www.mozilla.org/en-US/firefox/91.5.1/releasenotes/

www/firefox-esr: MFC update to 91.5.0.

See https://www.mozilla.org/en-US/firefox/91.5.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-02/

www/firefox-esr: MFC update to 91.4.1.

See https://www.mozilla.org/en-US/firefox/91.4.1/releasenotes/

www/firefox-esr: MFC update to 91.4.0

See https://www.mozilla.org/en-US/firefox/91.4.0/releasenotes/
Fixes https://www.mozilla.org/security/advisories/mfsa2021-53/

www/firefox-esr: MFC update to 91.3.0.

See https://www.mozilla.org/en-US/firefox/91.3.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-49/

www/firefox-esr: MFC update to 91.2.0.

See https://www.mozilla.org/en-US/firefox/91.2.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-45/

www/firefox-esr: update to 91.13.0.

see https://www.mozilla.org/en-US/firefox/91.13.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-35/
this is the final release in the esr91 branch.

www/firefox-esr: update to 91.12.0.

see https://www.mozilla.org/en-US/firefox/91.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-29/

note that there will be a last release from the esr91 branch in a month,
then it's unsupported upstream in favor of esr102 per
https://wiki.mozilla.org/Release_Management/Calendar

www/firefox-esr: MFC update to 91.11.0.

see https://www.mozilla.org/en-US/firefox/91.11.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-25/

www/firefox-esr: MFC update to 91.10.0

see https://www.mozilla.org/en-US/firefox/91.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-21/

www/firefox-esr: MFC fix webgl on amdgpu

in the content process, unveil /dev/dri instead of only /dev/dri/card0,
as reported and debugged by gkoehler@. Something in mesa apparently
fallbacks to swrast if /dev/dri isn't found, and then fails hard/crashes
because of shmget().

www/firefox-esr: use an awk oneliner to append 'ESR' suffix to Name lines in desktop file

this way one can differentiate firefox from firefox-esr in desktop environments.
while here also fix Exec lines for alternate Desktop Actions.

backports commitid cEoi6lnDiVILauuu from -current, patch from Juan Picca, thanks !

www/firefox-esr: MFC security update to 91.9.1.

see https://www.mozilla.org/en-US/firefox/91.9.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/

www/firefox-esr: MFC update to 91.9.0.

see https://www.mozilla.org/en-US/firefox/91.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-17/

www/firefox-esr: MFC update to 102.10.0.

see https://www.mozilla.org/en-US/firefox/102.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/

www/firefox-esr: MFC update to 102.9.0

see https://www.mozilla.org/en-US/firefox/102.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/

www/firefox-esr: MFC update to 102.8.0.

see https://www.mozilla.org/en-US/firefox/102.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/

www/firefox-esr: MFC update to 102.7.0.

see https://www.mozilla.org/en-US/firefox/102.7.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-02/

www/firefox-esr: MFC update to 102.6.0.

see https://www.mozilla.org/en-US/firefox/102.6.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-52/
- drop patch from #1773259, fixed upstream

www/firefox-esr: MFC update to 102.5.0.

see https://www.mozilla.org/en-US/firefox/102.5.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-48/

while here merge ajacoutot's unveil addition to fix printing via cups

www/firefox-esr: MFC update to 102.4.0.

see https://www.mozilla.org/en-US/firefox/102.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2022-45/

MFC: firefox-esr: sync DRM unveil with mozilla-firefox

Instead of unveiling /dev/dri/card0 only, unveil the entire directory.
It only contains four card* and and four renderD* with tight permissions.
This is also the approach taken by the chromium based browsers.

According to kettenis, acceleration on rare multi-graphics card setups
can require multiple renderD* devices. Starting with firefox 118, if the
directory isn't present, fallback code can exercise ioctls that aren't
permitted by the kernel, leading to crashes.

ok landry

www/firefox-esr: security update to 102.15.1.

see https://www.mozilla.org/en-US/firefox/102.15.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/
(CVE-2023-4863: Heap buffer overflow in WebP)

www/firefox-esr: update to 102.15.0.

see https://www.mozilla.org/en-US/firefox/102.15.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-35/

note that this should be the last release of the 102esr branch.

www/firefox-esr: update to 102.14.0.

see https://www.mozilla.org/en-US/firefox/102.14.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-30/

note that 102.15.0 next month will be the last release from this branch

www/firefox-esr: MFC update to 102.13.0.

see https://www.mozilla.org/en-US/firefox/102.13.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/

the 102esr branch will be EOL at the end of august with 102.15.0.

www/firefox-esr: update to 102.12.0.

see https://www.mozilla.org/en-US/firefox/102.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-19/

www/firefox-esr: MFC update to 102.11.0.

see https://www.mozilla.org/en-US/firefox/102.11.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/

www/firefox-esr: MFC update to 102.10.0.

see https://www.mozilla.org/en-US/firefox/102.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/

www/firefox-esr: MFC update to 115.9.1.

see https://www.mozilla.org/en-US/firefox/115.9.1esr/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-16/

www/firefox-er: MFC update to 115.9.0.

see https://www.mozilla.org/en-US/firefox/115.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/

www/firefox-esr: MFC update to 115.8.0.

see https://www.mozilla.org/en-US/firefox/115.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-06/

www/firefox-esr: MFC update to 115.7.0

see https://www.mozilla.org/en-US/firefox/115.7.0/releasenotes/
fixes https://www.mozilla.org/security/advisories/mfsa2024-02/

www/firefox-esr: MFC update to 115.6.0.

see https://www.mozilla.org/en-US/firefox/115.6.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-54/

www/firefox-esr: MFC update to 115.5.0.

see https://www.mozilla.org/en-US/firefox/115.5.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/

www/firefox-esr: MFC update to 115.4.

see https://www.mozilla.org/en-US/firefox/115.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/

www/firefox-esr: update to 115.15.0

see https://www.mozilla.org/en-US/firefox/115.15.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-41/

note that this should be the last release of the esr115 branch, users
are advised to move to www/mozilla-firefox which ships esr128 now.

www/firefox-esr: update to 115.14.0.

see https://www.mozilla.org/en-US/firefox/115.14.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/

the esr115 will see a last release next months, from that point users of
firefox-esr should consider migrating to firefox which will be
maintained on the esr128 branch.

www/firefox-esr: MFC update to 115.13.0.

See https://www.mozilla.org/en-US/firefox/115.13.0/releasenotes/
Fixes https://www.mozilla.org/fr/security/advisories/mfsa2024-30/

www/firefox-esr: MFC update to 115.12.0.

see https://www.mozilla.org/en-US/firefox/115.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-26/

www/firefox-esr: MFC update to 115.11.0.

see https://www.mozilla.org/en-US/firefox/115.11.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-22/

www/firefox-esr: MFC update to 115.10.0.

see https://www.mozilla.org/en-US/firefox/115.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/

www/firefox-esr: update to 115.9.1.

see https://www.mozilla.org/en-US/firefox/115.9.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-16/
and https://www.mozilla.org/en-US/security/advisories/mfsa2024-16/

www/firefox-esr: MFC update to 128.9.0.

see https://www.mozilla.org/en-US/firefox/128.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-22/

www/firefox-esr: MFC security update to 128.8.1.

fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-19/

www/firefox-esr: MFC update to 128.8.0.

see https://www.mozilla.org/en-US/firefox/128.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/

www/firefox-esr: MFC update to 128.7.0

see https://www.mozilla.org/en-US/firefox/128.7.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/

www/firefox-esr: MFC update to 128.6.0.

see https://www.mozilla.org/en-US/firefox/128.6.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-02/

www/firefox-esr: MFC update to 128.5.2 (windows-only)

see https://www.mozilla.org/en-US/firefox/128.5.2/releasenotes/

www/firefox-esr: MFC update to 128.5.1.

see https://www.mozilla.org/en-US/firefox/128.5.1/releasenotes/
Fixes an issue that prevented some websites from loading when using SSL Inspection

www/firefox-esr: MFC update to 128.5.0.

see https://www.mozilla.org/en-US/firefox/128.5.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-64/

and while here merge the README tweaks from Raf Czlonka.

www/firefox-esr: MFC update to 128.4.0.

see https://www.mozilla.org/en-US/firefox/128.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-56/

www/firefox-esr: security update to 128.3.1.

see https://www.mozilla.org/en-US/firefox/128.3.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/

www/firefox-esr: update to 128.14.0.

see https://www.firefox.com/en-US/firefox/128.14.0/releasenotes
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-66/

www/firefox-esr: update to 128.13.0.

see https://www.mozilla.org/en-US/firefox/128.13.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-58/

www/firefox-esr: MFC update to 128.12.0.

see https://www.mozilla.org/en-US/firefox/128.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-53/

www/firefox-esr: MFC update to 128.11.0.

see https://www.mozilla.org/en-US/firefox/128.11.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/

www/firefox-esr: MFC security update to 128.10.1.

see https://www.mozilla.org/en-US/firefox/128.10.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-37/
CVE-2025-4920: Out-of-bounds access when resolving Promise objects
CVE-2025-4921: Out-of-bounds access when optimizing linear sums

www/firefox-esr: MFC update to 128.10.0.

see https://www.mozilla.org/en-US/firefox/128.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/

www/firefox-esr: MFC update to 140.10.0.

see https://www.firefox.com/en-US/firefox/140.10.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-32/

www/firefox-esr: MFC update to 140.9.1.

see https://www.firefox.com/en-US/firefox/140.9.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-27/

www/firefox-esr: MFC update to 140.9.0.

see https://www.firefox.com/en-US/firefox/140.9.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-22/

www/firefox-esr: MFC update to 140.8.0.

see https://www.firefox.com/en-US/firefox/140.8.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/

www/firefox-esr: MFC security update to 140.7.1

see https://www.firefox.com/en-US/firefox/140.7.1/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-10/
CVE-2026-2447: Heap buffer overflow in libvpx

www/firefox-esr: MFC update to 140.7.0.

see https://www.firefox.com/en-US/firefox/140.7.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-03/

drop patch from #1999324, merged upstream

www/firefox-esr: MFC update to 140.6.0

see https://www.firefox.com/en-US/firefox/140.6.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/

add patch from #1999324 so that notifications default to libnotify, for
consistency with www/mozilla-firefox

www/firefox-esr: MFC update to 140.5.0.

see https://www.firefox.com/en-US/firefox/140.5.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/

www/firefox-esr: MFC update to 140.4.0.

see https://www.firefox.com/en-US/firefox/140.4.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2025-83/

www/firefox-esr: update to 140.17.0.

see https://www.firefox.com/en-US/firefox/140.17.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-99/

last planned release in esr140 branch

www/firefox-esr: update to 140.16.0.

see https://www.firefox.com/en-US/firefox/140.16.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-92/

www/firefox-esr: update to 140.15.0.

see https://www.firefox.com/en-US/firefox/140.15.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-84/

www/firefox-esr: update to 140.14.0.

see https://www.firefox.com/en-US/firefox/140.14.0/releasenotes/
fixes https://www.firefox.com/en-US/firefox/140.14.0/releasenotes/

note that the esr140 branch will be EOL in october

www/firefox-esr: MFC update to 140.13.0.

see https://www.firefox.com/en-US/firefox/140.13.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/

drop patch from #2046162 to fix build with latest cbindgen, backported upstream

www/firefox-esr: MFC update to 140.12.0.

see https://www.firefox.com/en-US/firefox/140.12.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/
add patch from #2046162 to fix build with cbindgen 0.29.4, should get
merged for the next esr

drop bug-1962139-ffmpeg8-140esr.patch from -stable as well, it breaks patching

www/firefox-esr: MFC update to 140.11.0.

see https://www.firefox.com/en-US/firefox/140.11.0/releasenotes/
fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/