pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/pkgsrc-2005Q1]: pkgsrc/www Pullup ticket 392 - requested by Shin'ichi...



details:   https://anonhg.NetBSD.org/pkgsrc/rev/6cdba1cda60d
branches:  pkgsrc-2005Q1
changeset: 490872:6cdba1cda60d
user:      snj <snj%pkgsrc.org@localhost>
date:      Sun Mar 27 05:32:19 2005 +0000

description:
Pullup ticket 392 - requested by Shin'ichiro TAYA
security fix for mozilla and mozilla-gtk2

Revisions pulled up:
- pkgsrc/www/mozilla/Makefile           1.142
- pkgsrc/www/mozilla/PLIST              1.16
- pkgsrc/www/mozilla/buildlink3.mk      1.8, 1.9
- pkgsrc/www/mozilla/distinfo           1.73
- pkgsrc/www/mozilla-gtk2/Makefile      1.17
- pkgsrc/www/mozilla-gtk2/PLIST         1.6
- pkgsrc/www/mozilla-gtk2/buildlink3.mk 1.6, 1.7


   Module Name:    pkgsrc
   Committed By:   taya
   Date:           Thu Mar 24 14:08:29 UTC 2005

   Modified Files:
           pkgsrc/www/mozilla: Makefile PLIST buildlink3.mk distinfo
           pkgsrc/www/mozilla-gtk2: Makefile PLIST buildlink3.mk

   Log Message:
   Update mozilla & mozilla-gtk2 to 1.7.6

   This is a security fix release.
   Fixed bugs are follows.

   MFSA 2005-32  Drag and drop loading of privileged XUL
   MFSA 2005-30 GIF heap overflow parsing Netscape extension 2
   MFSA 2005-29 Internationalized Domain Name (IDN) homograph spoofing
   MFSA 2005-28 Unsafe /tmp/plugtmp directory exploitable to erase user's files
   MFSA 2005-27 Plugins can be used to load privileged content
   MFSA 2005-26 Cross-site scripting by dropping javascript: link on tab
   MFSA 2005-25 Image drag and drop executable spoofing
   MFSA 2005-24 HTTP auth prompt tab spoofing
   MFSA 2005-23 Download dialog source spoofing
   MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice
   MFSA 2005-20 XSLT can include stylesheets from arbitrary hosts
   MFSA 2005-18 Memory overwrite in string library
   MFSA 2005-17 Install source spoofing with user:pass@host
   MFSA 2005-16 Spoofing download and security dialogs with overlapping windows
   MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion
   MFSA 2005-14 SSL "secure site" indicator spoofing
   MFSA 2005-13 Window Injection Spoofing

   see changelog for detail.
   http://www.mozilla.org/releases/mozilla1.7.6/changelog.html
---
   Module Name:         pkgsrc
   Committed By:        taya
   Date:                Sat Mar 26 13:49:31 UTC 2005

   Modified Files:
        pkgsrc/www/mozilla: buildlink3.mk
        pkgsrc/www/mozilla-gtk2: buildlink3.mk

   Log Message:
   ABI did not change, add BUILDLINK_RECOMMENDED instead of updating
   BUILDLINK_DEPENDS.

diffstat:

 www/mozilla-gtk2/Makefile      |  4 ++--
 www/mozilla-gtk2/PLIST         |  5 ++++-
 www/mozilla-gtk2/buildlink3.mk |  4 ++--
 www/mozilla/Makefile           |  4 ++--
 www/mozilla/PLIST              |  5 ++++-
 www/mozilla/buildlink3.mk      |  3 ++-
 www/mozilla/distinfo           |  8 ++++----
 7 files changed, 20 insertions(+), 13 deletions(-)

diffs (121 lines):

diff -r 69366f3d7248 -r 6cdba1cda60d www/mozilla-gtk2/Makefile
--- a/www/mozilla-gtk2/Makefile Sat Mar 26 11:00:11 2005 +0000
+++ b/www/mozilla-gtk2/Makefile Sun Mar 27 05:32:19 2005 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.16 2004/12/25 15:39:42 taya Exp $
+# $NetBSD: Makefile,v 1.16.2.1 2005/03/27 05:32:19 snj Exp $
 
 MOZILLA=       mozilla-gtk2
 MOZILLA_BIN=   mozilla-bin
-MOZ_VER=       1.7.5
+MOZ_VER=       1.7.6
 EXTRACT_SUFX=  .tar.bz2
 
 DISTFILES=     ${DISTNAME}${EXTRACT_SUFX}
diff -r 69366f3d7248 -r 6cdba1cda60d www/mozilla-gtk2/PLIST
--- a/www/mozilla-gtk2/PLIST    Sat Mar 26 11:00:11 2005 +0000
+++ b/www/mozilla-gtk2/PLIST    Sun Mar 27 05:32:19 2005 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2004/12/25 15:39:42 taya Exp $
+@comment $NetBSD: PLIST,v 1.5.2.1 2005/03/27 05:32:19 snj Exp $
 bin/${MOZILLA}
 @comment begin PROGRAMS
 lib/${MOZILLA}/${MOZILLA_BIN}
@@ -911,8 +911,11 @@
 include/${MOZILLA}/docshell/nsIDocShellHistory.h
 include/${MOZILLA}/docshell/nsIDocShellLoadInfo.h
 include/${MOZILLA}/docshell/nsIDocShellTreeItem.h
+include/${MOZILLA}/docshell/nsIDocShellTreeItemTmp.h
 include/${MOZILLA}/docshell/nsIDocShellTreeNode.h
+include/${MOZILLA}/docshell/nsIDocShellTreeNodeTmp.h
 include/${MOZILLA}/docshell/nsIDocShellTreeOwner.h
+include/${MOZILLA}/docshell/nsIDocShellTreeOwnerTmp.h
 include/${MOZILLA}/docshell/nsIEditorDocShell.h
 include/${MOZILLA}/docshell/nsIGlobalHistory.h
 include/${MOZILLA}/docshell/nsIGlobalHistory2.h
diff -r 69366f3d7248 -r 6cdba1cda60d www/mozilla-gtk2/buildlink3.mk
--- a/www/mozilla-gtk2/buildlink3.mk    Sat Mar 26 11:00:11 2005 +0000
+++ b/www/mozilla-gtk2/buildlink3.mk    Sun Mar 27 05:32:19 2005 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.5 2004/12/25 15:39:42 taya Exp $
+# $NetBSD: buildlink3.mk,v 1.5.2.1 2005/03/27 05:32:19 snj Exp $
 
 BUILDLINK_DEPTH:=              ${BUILDLINK_DEPTH}+
 MOZILLA_GTK2_BUILDLINK3_MK:=   ${MOZILLA_GTK2_BUILDLINK3_MK}+
@@ -11,7 +11,7 @@
 BUILDLINK_PACKAGES+=   mozilla-gtk2
 
 .if !empty(MOZILLA_GTK2_BUILDLINK3_MK:M+)
-BUILDLINK_DEPENDS.mozilla-gtk2+=       mozilla-gtk2>=1.7.5
+BUILDLINK_DEPENDS.mozilla-gtk2+=       mozilla-gtk2>=1.7.6
 BUILDLINK_PKGSRCDIR.mozilla-gtk2?=     ../../www/mozilla-gtk2
 .endif # MOZILLA_GTK2_BUILDLINK3_MK
 
diff -r 69366f3d7248 -r 6cdba1cda60d www/mozilla/Makefile
--- a/www/mozilla/Makefile      Sat Mar 26 11:00:11 2005 +0000
+++ b/www/mozilla/Makefile      Sun Mar 27 05:32:19 2005 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.141 2004/12/25 15:39:42 taya Exp $
+# $NetBSD: Makefile,v 1.141.2.1 2005/03/27 05:32:19 snj Exp $
 
 MOZILLA=       mozilla
 MOZILLA_BIN=   mozilla-bin
-MOZ_VER=       1.7.5
+MOZ_VER=       1.7.6
 EXTRACT_SUFX=  .tar.bz2
 
 DISTFILES=     ${DISTNAME}${EXTRACT_SUFX}
diff -r 69366f3d7248 -r 6cdba1cda60d www/mozilla/PLIST
--- a/www/mozilla/PLIST Sat Mar 26 11:00:11 2005 +0000
+++ b/www/mozilla/PLIST Sun Mar 27 05:32:19 2005 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.15 2004/12/25 15:39:42 taya Exp $
+@comment $NetBSD: PLIST,v 1.15.2.1 2005/03/27 05:32:19 snj Exp $
 bin/${MOZILLA}
 @comment begin PROGRAMS
 lib/${MOZILLA}/${MOZILLA_BIN}
@@ -894,8 +894,11 @@
 include/${MOZILLA}/docshell/nsIDocShellHistory.h
 include/${MOZILLA}/docshell/nsIDocShellLoadInfo.h
 include/${MOZILLA}/docshell/nsIDocShellTreeItem.h
+include/${MOZILLA}/docshell/nsIDocShellTreeItemTmp.h
 include/${MOZILLA}/docshell/nsIDocShellTreeNode.h
+include/${MOZILLA}/docshell/nsIDocShellTreeNodeTmp.h
 include/${MOZILLA}/docshell/nsIDocShellTreeOwner.h
+include/${MOZILLA}/docshell/nsIDocShellTreeOwnerTmp.h
 include/${MOZILLA}/docshell/nsIEditorDocShell.h
 include/${MOZILLA}/docshell/nsIGlobalHistory.h
 include/${MOZILLA}/docshell/nsIGlobalHistory2.h
diff -r 69366f3d7248 -r 6cdba1cda60d www/mozilla/buildlink3.mk
--- a/www/mozilla/buildlink3.mk Sat Mar 26 11:00:11 2005 +0000
+++ b/www/mozilla/buildlink3.mk Sun Mar 27 05:32:19 2005 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.7 2004/12/25 15:39:42 taya Exp $
+# $NetBSD: buildlink3.mk,v 1.7.2.1 2005/03/27 05:32:19 snj Exp $
 
 BUILDLINK_DEPTH:=      ${BUILDLINK_DEPTH}+
 MOZILLA_BUILDLINK3_MK:=        ${MOZILLA_BUILDLINK3_MK}+
@@ -12,6 +12,7 @@
 
 .if !empty(MOZILLA_BUILDLINK3_MK:M+)
 BUILDLINK_DEPENDS.mozilla+=    mozilla>=1.7.5
+BUILDLINK_RECOMMENDED.mozilla+=        mozilla>=1.7.6
 BUILDLINK_PKGSRCDIR.mozilla?=  ../../www/mozilla
 .endif # MOZILLA_BUILDLINK3_MK
 
diff -r 69366f3d7248 -r 6cdba1cda60d www/mozilla/distinfo
--- a/www/mozilla/distinfo      Sat Mar 26 11:00:11 2005 +0000
+++ b/www/mozilla/distinfo      Sun Mar 27 05:32:19 2005 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.72 2005/02/24 14:08:33 wiz Exp $
+$NetBSD: distinfo,v 1.72.2.1 2005/03/27 05:32:19 snj Exp $
 
-SHA1 (mozilla-source-1.7.5.tar.bz2) = 29c90cb72cc1ad71783cecb112427a848aa07f64
-RMD160 (mozilla-source-1.7.5.tar.bz2) = 2b86dfeb85bc242aa2241a3650837196dc4d1281
-Size (mozilla-source-1.7.5.tar.bz2) = 30440393 bytes
+SHA1 (mozilla-source-1.7.6.tar.bz2) = 3c47a28173c912098ab37d3fc844451320463d00
+RMD160 (mozilla-source-1.7.6.tar.bz2) = 3352d9a67213664bbe72bf1075420837028b3db4
+Size (mozilla-source-1.7.6.tar.bz2) = 30448120 bytes
 SHA1 (patch-aa) = be62070f062e8ae13f06bd7b3f4f0d4a9ee67bef
 SHA1 (patch-ab) = 77038a3dee47573782d912a928327d046c6d3c7f
 SHA1 (patch-ac) = 32aa4b92eea19aca07077a292cb759d074026642



Home | Main Index | Thread Index | Old Index