[pkgsrc/pkgsrc-2009Q1]: pkgsrc/www/firefox3 Pullup ticket 2796 - requested by...

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/1d8e40144965
branches:  pkgsrc-2009Q1
changeset: 556870:1d8e40144965
user:      spz <spz%pkgsrc.org@localhost>
date:      Sun Jun 14 10:59:44 2009 +0000

description:
Pullup ticket 2796 - requested by tron
Security update

Revisions pulled up:
- pkgsrc/www/firefox3/Makefile                  1.33
- pkgsrc/www/firefox3/PLIST                     1.9
- pkgsrc/www/firefox3/distinfo                  1.25

   Module Name: pkgsrc
   Committed By:        tron
   Date:                Fri Jun 12 10:08:28 UTC 2009

   Modified Files:
        pkgsrc/www/firefox3: Makefile PLIST distinfo

   Log Message:
   Update "firefox3" package to version 3.0.11. Changes since version 3.0.10:
   - Fixed several security issues:
     MFSA 2009-32 JavaScript chrome privilege escalation
     MFSA 2009-31 XUL scripts bypass content-policy checks
     MFSA 2009-30 Incorrect principal set for file: resources loaded via
                  location bar
     MFSA 2009-29 Arbitrary code execution using event listeners attached
                  to an element whose owner document is null
     MFSA 2009-28 Race condition while accessing the private data of a
                  NPObject JS wrapper class object
     MFSA 2009-27 SSL tampering via non-200 responses to proxy
                  CONNECT requests
     MFSA 2009-26 Arbitrary domain cookie access by local file: resources
     MFSA 2009-25 URL spoofing with invalid unicode characters
     MFSA 2009-24 Crashes with evidence of memory corruption (rv:1.9.0.11)
   - Fixed several stability issues.
   - Several issues were reported with the internal database, SQLite, which
     have now been fixed by upgrading to a newer version.
   - Fixed an issue where, in some specific cases, the bookmarks database
     would become corrupt. (bug 464486)


   To generate a diff of this commit:
   cvs rdiff -u -r1.32 -r1.33 pkgsrc/www/firefox3/Makefile
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/firefox3/PLIST
   cvs rdiff -u -r1.24 -r1.25 pkgsrc/www/firefox3/distinfo

diffstat:

 www/firefox3/Makefile |  4 ++--
 www/firefox3/PLIST    |  3 +--
 www/firefox3/distinfo |  8 ++++----
 3 files changed, 7 insertions(+), 8 deletions(-)

diffs (51 lines):

diff -r ad19d15a373d -r 1d8e40144965 www/firefox3/Makefile
--- a/www/firefox3/Makefile     Fri Jun 12 21:40:05 2009 +0000
+++ b/www/firefox3/Makefile     Sun Jun 14 10:59:44 2009 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.26.2.2 2009/04/28 10:47:59 tron Exp $
+# $NetBSD: Makefile,v 1.26.2.3 2009/06/14 10:59:44 spz Exp $
 
 MOZILLA=               firefox3        # allow coexisting with firefox2
 COMMENT=               Lightweight gecko-based web browser
@@ -18,7 +18,7 @@
 .include "../../www/firefox/Makefile-firefox.common"
 
 MAINTAINER=            tnn%NetBSD.org@localhost
-MOZ_VER=               3.0.10
+MOZ_VER=               3.0.11
 
 XPTCFILES:=            ${XPTCFILES:C,^,../../firefox3/files/,}
 DESCR_SRC=             ${.CURDIR}/../../www/firefox/DESCR
diff -r ad19d15a373d -r 1d8e40144965 www/firefox3/PLIST
--- a/www/firefox3/PLIST        Fri Jun 12 21:40:05 2009 +0000
+++ b/www/firefox3/PLIST        Sun Jun 14 10:59:44 2009 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2009/03/06 08:37:02 ghen Exp $
+@comment $NetBSD: PLIST,v 1.8.2.1 2009/06/14 10:59:44 spz Exp $
 bin/${MOZILLA}
 @comment begin PROGRAMS
 lib/${MOZILLA}/${MOZILLA_BIN}
@@ -152,7 +152,6 @@
 lib/${MOZILLA}/modules/debug.js
 lib/${MOZILLA}/modules/distribution.js
 lib/${MOZILLA}/modules/utils.js
-lib/${MOZILLA}/old-homepage-default.properties
 lib/${MOZILLA}/platform.ini
 lib/${MOZILLA}/res/EditorOverride.css
 lib/${MOZILLA}/res/arrow.gif
diff -r ad19d15a373d -r 1d8e40144965 www/firefox3/distinfo
--- a/www/firefox3/distinfo     Fri Jun 12 21:40:05 2009 +0000
+++ b/www/firefox3/distinfo     Sun Jun 14 10:59:44 2009 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.18.2.2 2009/04/28 10:47:59 tron Exp $
+$NetBSD: distinfo,v 1.18.2.3 2009/06/14 10:59:44 spz Exp $
 
-SHA1 (firefox-3.0.10-source.tar.bz2) = 67f74cac153d37aa6aff8d5c62042fb76e197481
-RMD160 (firefox-3.0.10-source.tar.bz2) = 301ecfe77eef5d0b698b1f1d340b952b1a59ab39
-Size (firefox-3.0.10-source.tar.bz2) = 37081374 bytes
+SHA1 (firefox-3.0.11-source.tar.bz2) = ca792dcdb67af40c91a4fcece25d6adfb6fef2c3
+RMD160 (firefox-3.0.11-source.tar.bz2) = d07a97e0a309bb7a872ba256bc270ee47b2c938b
+Size (firefox-3.0.11-source.tar.bz2) = 37214869 bytes
 SHA1 (patch-aa) = f995b5e53fa11ecb659ab2dd10551db1c71cc5f3
 SHA1 (patch-ab) = dd388a040f99f71a79cf03a328de810e8d623374
 SHA1 (patch-ac) = c814530c1a8574739b7557d007563232b6070c51