Subject: CVS commit: pkgsrc/www/firefox
From: Ryo ONODERA
Date: 2016-03-08 22:32:52
Message id: 20160308213252.70EEFFBB7@cvs.NetBSD.org

Log Message:
Update to 45.0

Changelog:
New
    Instant browser tab sharing through Hello

    Tabs synced via Firefox Accounts from other devices are now shown in \ 
dropdown area of Awesome Bar when searching

    Synced Tabs button in button bar

    Introduce a new preference (network.dns.blockDotOnion) to allow blocking \ 
.onion at the DNS level

    Guarani [gn] locale added

Fixed
    URLs containing a Unicode-format Internationalized Domain Name (IDN) are now \ 
properly redirected

    Various security fixes

Fixed in Firefox 45
    2016-37 Font vulnerabilities in the Graphite 2 library
    2016-36 Use-after-free during processing of DER encoded keys in NSS
    2016-35 Buffer overflow during ASN.1 decoding in NSS
    2016-34 Out-of-bounds read in HTML parser following a failed allocation
    2016-33 Use-after-free in GetStaticInstance in WebRTC
    2016-32 WebRTC and LibVPX vulnerabilities found through code inspection
    2016-31 Memory corruption with malicious NPAPI plugin
    2016-30 Buffer overflow in Brotli decompression
    2016-29 Same-origin policy violation using perfomance.getEntries and history \ 
navigation with session restore
    2016-28 Addressbar spoofing though history navigation and Location protocol \ 
property
    2016-27 Use-after-free during XML transformations
    2016-26 Memory corruption when modifying a file being read by FileReader
    2016-25 Use-after-free when using multiple WebRTC data channels
    2016-24 Use-after-free in SetBody
    2016-23 Use-after-free in HTML5 string parser
    2016-22 Service Worker Manager out-of-bounds read in Service Worker Manager
    2016-21 Displayed page address can be overridden
    2016-20 Memory leak in libstagefright when deleting an array during MP4 \ 
processing
    2016-19 Linux video memory DOS with Intel drivers
    2016-18 CSP reports fail to strip location information for embedded iframe pages
    2016-17 Local file overwriting and potential privilege escalation through \ 
CSP reports
    2016-16 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7)

Files:
RevisionActionfile
1.246modifypkgsrc/www/firefox/Makefile
1.104modifypkgsrc/www/firefox/PLIST
1.239modifypkgsrc/www/firefox/distinfo
1.72modifypkgsrc/www/firefox/mozilla-common.mk
1.7modifypkgsrc/www/firefox/patches/patch-config_baseconfig.mk
1.7modifypkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_platform__thread__posix.cc
1.3modifypkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_process__util__bsd.cc
1.3modifypkgsrc/www/firefox/patches/patch-js_src_jsdate.cpp
1.2modifypkgsrc/www/firefox/patches/patch-media_libcubeb_src_cubeb.c
1.13modifypkgsrc/www/firefox/patches/patch-media_libcubeb_src_cubeb__alsa.c
1.6modifypkgsrc/www/firefox/patches/patch-media_libcubeb_src_moz.build
1.5modifypkgsrc/www/firefox/patches/patch-media_mtransport_third__party_nICEr_src_util_mbslen.c
1.9modifypkgsrc/www/firefox/patches/patch-media_webrtc_trunk_webrtc_modules_video__capture_linux_video__capture__linux.cc
1.8modifypkgsrc/www/firefox/patches/patch-media_webrtc_trunk_webrtc_modules_video__capture_video__capture.gypi
1.4modifypkgsrc/www/firefox/patches/patch-netwerk_dns_moz.build
1.7removepkgsrc/www/firefox/patches/patch-ipc_chromium_Makefile.in
1.1removepkgsrc/www/firefox/patches/patch-media_libcubeb_AUTHORS
1.3removepkgsrc/www/firefox/patches/patch-media_webrtc_trunk_webrtc_modules_audio__coding_codecs_opus_opus.gypi
1.1removepkgsrc/www/firefox/patches/patch-mozglue_misc_StackWalk.cpp
1.5removepkgsrc/www/firefox/patches/patch-netwerk_protocol_http_Http2Session.cpp
1.1removepkgsrc/www/firefox/patches/patch-security_manager_ssl_nsNSSComponent.cpp
1.1removepkgsrc/www/firefox/patches/patch-storage_mozStorageConnection.cpp