[pkgsrc/pkgsrc-2005Q1]: pkgsrc/www/firefox-gtk2-bin Pullup ticket 446 - reque...

[salo <salo%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/7c08698ed49c
branches:  pkgsrc-2005Q1
changeset: 490949:7c08698ed49c
user:      salo <salo%pkgsrc.org@localhost>
date:      Sat Apr 16 14:10:21 2005 +0000

description:
Pullup ticket 446 - requested by Matthias Scheler
security fix for firefox-gtk2-bin

Revisions pulled up:
- pkgsrc/www/firefox-gtk2-bin/Makefile  1.9
- pkgsrc/www/firefox-gtk2-bin/distinfo  1.10

   Module Name:         pkgsrc
   Committed By:        tron
   Date:                Sat Apr 16 12:47:22 UTC 2005

   Modified Files:
        pkgsrc/www/firefox-gtk2-bin: Makefile distinfo

   Log Message:
   Update "firefox-gtk2-bin" package to version 1.0.3. The new version fixes
   the following security issues:

   MFSA 2005-33 Javascript "lambda" replace exposes memory contents
   MFSA 2005-34 javascript: PLUGINSPAGE code execution
   MFSA 2005-35 Showing blocked javascript: popup uses wrong privilege context
   MFSA 2005-36 Cross-site scripting through global scope pollution
   MFSA 2005-37 Code execution through javascript: favicons
   MFSA 2005-38 Search plugin cross-site scripting
   MFSA 2005-39 Arbitrary code execution from Firefox sidebar panel II
   MFSA 2005-40 Missing Install object instance checks
   MFSA 2005-41 Privilege escalation via DOM property overrides

diffstat:

 www/firefox-gtk2-bin/Makefile |  4 ++--
 www/firefox-gtk2-bin/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (26 lines):

diff -r 2488bf922ce0 -r 7c08698ed49c www/firefox-gtk2-bin/Makefile
--- a/www/firefox-gtk2-bin/Makefile     Sat Apr 16 13:50:04 2005 +0000
+++ b/www/firefox-gtk2-bin/Makefile     Sat Apr 16 14:10:21 2005 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.6.2.2 2005/03/24 17:38:49 snj Exp $
+# $NetBSD: Makefile,v 1.6.2.3 2005/04/16 14:10:21 salo Exp $
 
 MOZILLA=       firefox
-MOZ_VER=       1.0.2
+MOZ_VER=       1.0.3
 MOZ_DISTVER=   ${MOZ_VER}
 
 HOMEPAGE=      http://www.mozilla.org/projects/firefox/
diff -r 2488bf922ce0 -r 7c08698ed49c www/firefox-gtk2-bin/distinfo
--- a/www/firefox-gtk2-bin/distinfo     Sat Apr 16 13:50:04 2005 +0000
+++ b/www/firefox-gtk2-bin/distinfo     Sat Apr 16 14:10:21 2005 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.7.2.2 2005/03/24 17:38:49 snj Exp $
+$NetBSD: distinfo,v 1.7.2.3 2005/04/16 14:10:21 salo Exp $
 
-SHA1 (firefox-gtk2/releases/1.0.2/linux-i686/en-US/firefox-1.0.2.tar.gz) = 67bba8599608fe67aa46f15b88ee2323908532fe
-RMD160 (firefox-gtk2/releases/1.0.2/linux-i686/en-US/firefox-1.0.2.tar.gz) = ebebf00c17e645087c4c1ab6fc61825f30fb6b1f
-Size (firefox-gtk2/releases/1.0.2/linux-i686/en-US/firefox-1.0.2.tar.gz) = 8241659 bytes
+SHA1 (firefox-gtk2/releases/1.0.3/linux-i686/en-US/firefox-1.0.3.tar.gz) = b7e21bbff750706b6154ce5630960813f4379c8b
+RMD160 (firefox-gtk2/releases/1.0.3/linux-i686/en-US/firefox-1.0.3.tar.gz) = 0f2e02bf3064c922fc85ab7935d6f8a2fa5976c7
+Size (firefox-gtk2/releases/1.0.3/linux-i686/en-US/firefox-1.0.3.tar.gz) = 8251239 bytes