CVS commit: pkgsrc/www

[Geert Hendrickx <ghen%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ghen
Date:           Wed Jul  2 09:03:35 UTC 2008

Modified Files:
        pkgsrc/www/firefox: Makefile-firefox.common PLIST distinfo
        pkgsrc/www/firefox-bin: Makefile distinfo
        pkgsrc/www/firefox/patches: patch-af patch-ap patch-de

Log Message:
Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.15.

Part of patch-af has been fixed upstream.

Security fixes in this version:

MFSA 2008-33 Crash and remote code execution in block reflow
MFSA 2008-32 Remote site run as local file via Windows URL shortcut
MFSA 2008-31 Peer-trusted certs can use alt names to spoof
MFSA 2008-30 File location URL in directory listings not escaped properly
MFSA 2008-29 Faulty .properties file results in uninitialized memory being used
MFSA 2008-28 Arbitrary socket connections with Java LiveConnect on Mac OS X
MFSA 2008-27 Arbitrary file upload via originalTarget and DOM Range
MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript()
MFSA 2008-24 Chrome script loading from fastload file
MFSA 2008-23 Signed JAR tampering
MFSA 2008-22 XSS through JavaScript same-origin violation
MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15)

For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.15/releasenotes/


To generate a diff of this commit:
cvs rdiff -r1.57 -r1.58 pkgsrc/www/firefox/Makefile-firefox.common
cvs rdiff -r1.28 -r1.29 pkgsrc/www/firefox/PLIST
cvs rdiff -r1.77 -r1.78 pkgsrc/www/firefox/distinfo
cvs rdiff -r1.42 -r1.43 pkgsrc/www/firefox-bin/Makefile \
    pkgsrc/www/firefox-bin/distinfo
cvs rdiff -r1.5 -r1.6 pkgsrc/www/firefox/patches/patch-af
cvs rdiff -r1.8 -r1.9 pkgsrc/www/firefox/patches/patch-ap
cvs rdiff -r1.1 -r1.2 pkgsrc/www/firefox/patches/patch-de

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.