Subject: CVS commit: [pkgsrc-2005Q2] pkgsrc/www/firefox-bin
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 09/22/2005 17:29:04
Module Name: pkgsrc
Committed By: salo
Date: Thu Sep 22 17:29:04 UTC 2005
Modified Files:
pkgsrc/www/firefox-bin [pkgsrc-2005Q2]: Makefile distinfo
Log Message:
Pullup ticket 768 - requested by Matthias Scheler
security update for firefox-bin
Revisions pulled up:
- pkgsrc/www/firefox-bin/Makefile 1.10
- pkgsrc/www/firefox-bin/distinfo 1.12
Module Name: pkgsrc
Committed By: tron
Date: Wed Sep 21 10:07:39 UTC 2005
Modified Files:
pkgsrc/www/firefox-bin: Makefile distinfo
Log Message:
Update "firefox-bin" package to version 1.0.7. Changes since version 1.0.6:
- Fix for a potential buffer overflow vulnerability when loading a
hostname with all soft-hyphens
- Fix to prevent URLs passed from external programs from being parsed
by the shell
- Fix to prevent a crash when loading a Proxy Auto-Config (PAC) script
that uses an "eval" statement
- Fix to restore InstallTrigger.getVersion() for Extension authors
- Other stability and security fixes
To generate a diff of this commit:
cvs rdiff -r1.7.2.2 -r1.7.2.3 pkgsrc/www/firefox-bin/Makefile
cvs rdiff -r1.9.2.2 -r1.9.2.3 pkgsrc/www/firefox-bin/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.