Subject: CVS commit: [pkgsrc-2009Q3] pkgsrc
From: Matthias Scheler
Date: 2009-10-28 19:13:24
Message id: 20091028181324.88A70175DA@cvs.netbsd.org

Log Message:
Pullup ticket #2923 - requested by tnn
xulrunner: security update
firefox: security update

Revisions pulled up:
- devel/xulrunner/Makefile			1.24-1.25
- devel/xulrunner/PLIST				1.17-1.18
- devel/xulrunner/distinfo			1.13-1.14
- devel/xulrunner/mozilla-common.mk		1.2
- devel/xulrunner/patches/patch-aa		1.2
- devel/xulrunner/patches/patch-aq		1.3
- devel/xulrunner/patches/patch-ay		1.1
- devel/xulrunner/patches/patch-mf		1.2
- devel/xulrunner/patches/patch-mn		1.2
- devel/xulrunner/patches/patch-nb		delete
- devel/xulrunner/patches/patch-nc		delete
- devel/xulrunner/patches/patch-pd		1.2
- devel/xulrunner/patches/patch-ra		1.1
- devel/xulrunner/patches/patch-rb		1.1
- devel/xulrunner/patches/patch-rc		1.1
- www/firefox/Makefile				1.60-1.61
- www/firefox/PLIST				1.39
- www/firefox/distinfo				delete
- www/firefox/patches/patch-aa			delete
- www/firefox/patches/patch-ao			delete
- www/firefox/patches/patch-ma			delete
- www/firefox/patches/patch-mi			delete
- www/firefox/patches/patch-mk			delete
- www/firefox/patches/patch-mm			delete
- www/firefox/patches/patch-ra			delete
- www/firefox/patches/patch-rb			delete
- www/firefox/patches/patch-rc			delete
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Sun Oct 11 10:49:57 UTC 2009

Modified Files:
	pkgsrc/devel/xulrunner: Makefile PLIST distinfo
	pkgsrc/devel/xulrunner/patches: patch-aa
	pkgsrc/www/firefox: Makefile
Added Files:
	pkgsrc/devel/xulrunner/patches: patch-ay patch-ra patch-rb
patch-rc Removed Files:
	pkgsrc/www/firefox: distinfo
	pkgsrc/www/firefox/patches: patch-aa patch-ao patch-ma patch-mi
	    patch-mk patch-mm patch-ra patch-rb patch-rc

Log Message:
- allow firefox and xulrunner to share some infrastructure
- install headers for plugin and liveconnect (needed by openjdk7-icedtea-plugin)
- bump revision for both packages
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Wed Oct 28 11:36:36 UTC 2009

Modified Files:
	pkgsrc/devel/xulrunner: Makefile PLIST distinfo
mozilla-common.mk pkgsrc/devel/xulrunner/patches: patch-aq patch-mf
patch-mn patch-pd pkgsrc/www/firefox: Makefile PLIST
Removed Files:
	pkgsrc/devel/xulrunner/patches: patch-nb patch-nc

Log Message:
Security and bugfix update of firefox (to 3.5.4) and xulrunner (to
1.9.1.4) Also fix broken DESTDIR support.

Fixes the following security issues:
MFSA 2009-64 Crashes with evidence of memory corruption (rv:1.9.1.4/
1.9.0.15) MFSA 2009-63 Upgrade media libraries to fix memory safety bugs
MFSA 2009-62 Download filename spoofing with RTL override
MFSA 2009-61 Cross-origin data theft through document.getSelection()
MFSA 2009-59 Heap buffer overflow in string to number conversion
MFSA 2009-57 Chrome privilege escalation in XPCVariant::VariantDataToJS
() MFSA 2009-56 Heap buffer overflow in GIF color map parser
MFSA 2009-55 Crash in proxy auto-configuration regexp parsing
MFSA 2009-54 Crash with recursive web-worker calls
MFSA 2009-53 Local downloaded file tampering
MFSA 2009-52 Form history vulnerable to stealing

Files:
RevisionActionfile
1.23.2.1modifypkgsrc/devel/xulrunner/Makefile
1.16.2.1modifypkgsrc/devel/xulrunner/PLIST
1.12.2.1modifypkgsrc/devel/xulrunner/distinfo
1.1.2.1modifypkgsrc/devel/xulrunner/mozilla-common.mk
1.1.1.1.2.1modifypkgsrc/devel/xulrunner/patches/patch-aa
1.2.2.1modifypkgsrc/devel/xulrunner/patches/patch-aq
1.1.1.1.2.1modifypkgsrc/devel/xulrunner/patches/patch-mf
1.1.1.1.2.1modifypkgsrc/devel/xulrunner/patches/patch-mn
1.1.1.1.2.1modifypkgsrc/devel/xulrunner/patches/patch-pd
1.62.2.1modifypkgsrc/print/scribus/Makefile
1.59.2.1modifypkgsrc/www/firefox/Makefile
1.38.2.1modifypkgsrc/www/firefox/PLIST
1.1.2.2addpkgsrc/devel/xulrunner/patches/patch-ay
1.1.2.2addpkgsrc/devel/xulrunner/patches/patch-ra
1.1.2.2addpkgsrc/devel/xulrunner/patches/patch-rb
1.1.2.2addpkgsrc/devel/xulrunner/patches/patch-rc
1.1removepkgsrc/devel/xulrunner/patches/patch-nb
1.1removepkgsrc/devel/xulrunner/patches/patch-nc
1.98removepkgsrc/www/firefox/distinfo
1.8removepkgsrc/www/firefox/patches/patch-aa
1.7removepkgsrc/www/firefox/patches/patch-ao
1.1.1.1removepkgsrc/www/firefox/patches/patch-ma
1.1.1.1removepkgsrc/www/firefox/patches/patch-mi
1.1.1.1removepkgsrc/www/firefox/patches/patch-mk
1.1.1.1removepkgsrc/www/firefox/patches/patch-mm
1.1removepkgsrc/www/firefox/patches/patch-ra
1.1removepkgsrc/www/firefox/patches/patch-rb
1.1removepkgsrc/www/firefox/patches/patch-rc