CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sun Apr  5 12:54:12 UTC 2015

Modified Files:
        pkgsrc/www/firefox: Makefile PLIST distinfo mozilla-common.mk
        pkgsrc/www/firefox/patches: patch-aa patch-config_external_moz.build
            patch-config_system-headers patch-dom_media_moz.build
            patch-dom_plugins_ipc_PluginModuleChild.cpp
            patch-extensions_spellcheck_hunspell_src_mozHunspell.cpp
            patch-gfx_layers_basic_BasicCompositor.cpp
            patch-gfx_layers_basic_BasicLayerManager.cpp
            patch-intl_unicharutil_util_moz.build patch-js_src_jit_MIR.cpp
            patch-media_libcubeb_src_cubeb__alsa.c
            patch-media_webrtc_trunk_webrtc_system__wrappers_source_spreadsortlib_spreadsort.hpp
            patch-memory_build_mozjemalloc__compat.c
            patch-memory_jemalloc_src_configure patch-mfbt_Attributes.h
            patch-toolkit_modules_GMPInstallManager.jsm
            patch-widget_gtk_gtk3drawing.c
            patch-xpcom_reflect_xptcall_md_unix_moz.build
Added Files:
        pkgsrc/www/firefox/patches: patch-accessible_atk_Platform.cpp
            patch-memory_volatile_VolatileBufferOSX.cpp
            patch-toolkit_mozapps_extensions_internal_GMPProvider.jsm
            patch-widget_gtk_gtk2drawing.c patch-widget_gtk_gtkdrawing.h
            patch-widget_gtk_nsNativeThemeGTK.cpp
Removed Files:
        pkgsrc/www/firefox/patches: patch-js_src_dtoa.c
            patch-js_src_jit_none_Lowering-none.h
            patch-media_webrtc_signaling_signaling.gyp
            patch-memory_mozalloc_VolatileBufferOSX.cpp
            patch-netwerk_wifi_moz.build
            patch-netwerk_wifi_nsWifiScannerFreeBSD.cpp
            patch-toolkit_mozapps_extensions_internal_OpenH264Provider.jsm
            patch-widget_gtk_nsLookAndFeel.cpp patch-widget_gtk_nsLookAndFeel.h

Log Message:
Update to 37.0

* Bump nspr requirement.

Changelog:
New Heartbeat user rating system - your feedback about Firefox
New Yandex set as default search provider for the Turkish locale
New Bing search now uses HTTPS for secure searching
New Improved protection against site impersonation via OneCRL centralized certificate revocation
New Opportunistically encrypt HTTP traffic where the server supports HTTP/2 AltSvc
Changed Disabled insecure TLS version fallback for site security
Changed Extended SSL error reporting for reporting non-certificate errors
Changed TLS False Start optimization now requires a cipher suite using AEAD construction
Changed Improved certificate and TLS communication security by removing support for DSA
Changed Improved performance of WebGL rendering on Windows
HTML5 Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube (Windows only)
HTML5 Added support for CSS display:contents
HTML5 IndexedDB now accessible from worker threads
HTML5 New SDP/JSEP implementation in WebRTC
Developer Debug tabs opened in Chrome Desktop, Chrome for Android, and Safari for iOS
Developer New Inspector animations panel to control element animations
Developer New Security Panel included in Network Panel
Developer Debugger panel support for chrome:// and about:// URIs
Developer Added logging of weak ciphers to the web console
Fixed Various security fixes

Fixed in Firefox 37
    2015-42 Windows can retain access to privileged content on navigation to unprivileged pages
    2015-41 PRNG weakness allows for DNS poisoning on Android
    2015-40 Same-origin bypass through anchor navigation
    2015-39 Use-after-free due to type confusion flaws
    2015-38 Memory corruption crashes in Off Main Thread Compositing
    2015-37 CORS requests should not follow 30x redirections after preflight
    2015-36 Incorrect memory management for simple-type arrays in WebRTC
    2015-35 Cursor clickjacking with flash and images
    2015-34 Out of bounds read in QCMS library
    2015-33 resource:// documents can load privileged pages
    2015-32 Add-on lightweight theme installation approval bypassed through MITM attack
    2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin
    2015-30 Miscellaneous memory safety hazards (rv:37.0 / rv:31.6)


To generate a diff of this commit:
cvs rdiff -u -r1.203 -r1.204 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.93 -r1.94 pkgsrc/www/firefox/PLIST
cvs rdiff -u -r1.197 -r1.198 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.51 -r1.52 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.35 -r1.36 pkgsrc/www/firefox/patches/patch-aa
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/www/firefox/patches/patch-accessible_atk_Platform.cpp \
    pkgsrc/www/firefox/patches/patch-memory_volatile_VolatileBufferOSX.cpp \
    pkgsrc/www/firefox/patches/patch-toolkit_mozapps_extensions_internal_GMPProvider.jsm
cvs rdiff -u -r1.6 -r1.7 \
    pkgsrc/www/firefox/patches/patch-config_external_moz.build \
    pkgsrc/www/firefox/patches/patch-dom_plugins_ipc_PluginModuleChild.cpp \
    pkgsrc/www/firefox/patches/patch-media_webrtc_trunk_webrtc_system__wrappers_source_spreadsortlib_spreadsort.hpp
cvs rdiff -u -r1.11 -r1.12 \
    pkgsrc/www/firefox/patches/patch-config_system-headers
cvs rdiff -u -r1.1 -r1.2 pkgsrc/www/firefox/patches/patch-dom_media_moz.build \
    pkgsrc/www/firefox/patches/patch-gfx_layers_basic_BasicCompositor.cpp \
    pkgsrc/www/firefox/patches/patch-gfx_layers_basic_BasicLayerManager.cpp \
    pkgsrc/www/firefox/patches/patch-intl_unicharutil_util_moz.build \
    pkgsrc/www/firefox/patches/patch-js_src_jit_MIR.cpp \
    pkgsrc/www/firefox/patches/patch-memory_jemalloc_src_configure \
    pkgsrc/www/firefox/patches/patch-toolkit_modules_GMPInstallManager.jsm
cvs rdiff -u -r1.8 -r1.9 \
    pkgsrc/www/firefox/patches/patch-extensions_spellcheck_hunspell_src_mozHunspell.cpp \
    pkgsrc/www/firefox/patches/patch-media_libcubeb_src_cubeb__alsa.c
cvs rdiff -u -r1.1 -r0 pkgsrc/www/firefox/patches/patch-js_src_dtoa.c \
    pkgsrc/www/firefox/patches/patch-js_src_jit_none_Lowering-none.h \
    pkgsrc/www/firefox/patches/patch-memory_mozalloc_VolatileBufferOSX.cpp \
    pkgsrc/www/firefox/patches/patch-toolkit_mozapps_extensions_internal_OpenH264Provider.jsm \
    pkgsrc/www/firefox/patches/patch-widget_gtk_nsLookAndFeel.cpp \
    pkgsrc/www/firefox/patches/patch-widget_gtk_nsLookAndFeel.h
cvs rdiff -u -r1.5 -r0 \
    pkgsrc/www/firefox/patches/patch-media_webrtc_signaling_signaling.gyp
cvs rdiff -u -r1.2 -r1.3 \
    pkgsrc/www/firefox/patches/patch-memory_build_mozjemalloc__compat.c \
    pkgsrc/www/firefox/patches/patch-mfbt_Attributes.h \
    pkgsrc/www/firefox/patches/patch-widget_gtk_gtk3drawing.c \
    pkgsrc/www/firefox/patches/patch-xpcom_reflect_xptcall_md_unix_moz.build
cvs rdiff -u -r1.8 -r0 \
    pkgsrc/www/firefox/patches/patch-netwerk_wifi_moz.build
cvs rdiff -u -r1.6 -r0 \
    pkgsrc/www/firefox/patches/patch-netwerk_wifi_nsWifiScannerFreeBSD.cpp
cvs rdiff -u -r0 -r1.3 \
    pkgsrc/www/firefox/patches/patch-widget_gtk_gtk2drawing.c \
    pkgsrc/www/firefox/patches/patch-widget_gtk_gtkdrawing.h \
    pkgsrc/www/firefox/patches/patch-widget_gtk_nsNativeThemeGTK.cpp

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.