Subject: CVS commit: [pkgsrc-2006Q2] pkgsrc/www/firefox-bin
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 07/27/2006 12:46:37
Module Name:	pkgsrc
Committed By:	salo
Date:		Thu Jul 27 12:46:37 UTC 2006

Modified Files:
	pkgsrc/www/firefox-bin [pkgsrc-2006Q2]: Makefile distinfo

Log Message:
Pullup ticket 1755 - requested by tron
security update for firefox-bin

Revisions pulled up:
- pkgsrc/www/firefox-bin/Makefile		1.19
- pkgsrc/www/firefox-bin/distinfo		1.18

   Module Name:		pkgsrc
   Committed By:	tron
   Date:		Thu Jul 27 10:34:33 UTC 2006

   Modified Files:
   	pkgsrc/www/firefox-bin: Makefile distinfo

   Log Message:
   Update "firefox-bin" package to version 1.5.0.5. Changes since 1.5.0.4:
   - Improvements to product stability
   - Several security fixes:
     MFSA 2006-56 chrome: scheme loading remote content
     MFSA 2006-55 Crashes with evidence of memory corruption (rv:1.8.0.5)
     MFSA 2006-54 XSS with XPCNativeWrapper(window).Function(...)
     MFSA 2006-53 UniversalBrowserRead privilege escalation
     MFSA 2006-52 PAC privilege escalation using Function.prototype.call
     MFSA 2006-51 Privilege escalation using named-functions and redefined
                  "new Object()"
     MFSA 2006-50 JavaScript engine vulnerabilities
     MFSA 2006-48 JavaScript new Function race condition
     MFSA 2006-47 Native DOM methods can be hijacked across domains
     MFSA 2006-46 Memory corruption with simultaneous events
     MFSA 2006-45 Javascript navigator Object Vulnerability
     MFSA 2006-44 Code execution through deleted frame reference


To generate a diff of this commit:
cvs rdiff -r1.18 -r1.18.2.1 pkgsrc/www/firefox-bin/Makefile
cvs rdiff -r1.17 -r1.17.2.1 pkgsrc/www/firefox-bin/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.