CVS commit: pkgsrc/www

[Geert Hendrickx <ghen%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ghen
Date:           Wed Sep 24 14:34:36 UTC 2008

Modified Files:
        pkgsrc/www/firefox: Makefile Makefile-firefox.common PLIST distinfo
        pkgsrc/www/firefox-bin: Makefile distinfo
        pkgsrc/www/firefox-gtk1: Makefile PLIST

Log Message:
Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.17.
(ok during freeze agc@)

Security fixes in this version:

MFSA 2008-45 XBM image uninitialized memory reading
MFSA 2008-44 resource: traversal vulnerabilities
MFSA 2008-43 BOM characters stripped from JavaScript before execution
MFSA 2008-42 Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17)
MFSA 2008-41 Privilege escalation via XPCnativeWrapper pollution
MFSA 2008-40 Forced mouse drag
MFSA 2008-39 Privilege escalation using feed preview page and XSS flaw
MFSA 2008-38 nsXMLDocument::OnChannelRedirect() same-origin violation
MFSA 2008-37 UTF-8 URL stack buffer overflow

For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.17/releasenotes/


To generate a diff of this commit:
cvs rdiff -r1.47 -r1.48 pkgsrc/www/firefox/Makefile
cvs rdiff -r1.59 -r1.60 pkgsrc/www/firefox/Makefile-firefox.common
cvs rdiff -r1.30 -r1.31 pkgsrc/www/firefox/PLIST
cvs rdiff -r1.81 -r1.82 pkgsrc/www/firefox/distinfo
cvs rdiff -r1.44 -r1.45 pkgsrc/www/firefox-bin/Makefile \
    pkgsrc/www/firefox-bin/distinfo
cvs rdiff -r1.20 -r1.21 pkgsrc/www/firefox-gtk1/Makefile
cvs rdiff -r1.15 -r1.16 pkgsrc/www/firefox-gtk1/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.