summaryrefslogtreecommitdiff
path: root/mail/thunderbird/Makefile
AgeCommit message (Collapse)AuthorFilesLines
2014-08-10Avoid warning storing a size_t in an unsigned int on LP64 - fixabs1-1/+2
build on at least NetBSD 6.x/amd64
2014-07-27Update to 31.0ryoon1-10/+8
* Update enigmail to 1.7 Changelog: NEW Autocompleting email addresses now matches against any part of the name or email (bug 529584) NEW Composing a mail to a newsgroup will now autocomplete newsgroup names (bug 61491) FIXED Insecure NTLM (pre-NTLMv2) authentication disabled (see 828183) Fixed in Thunderbird 31 MFSA 2014-66 IFRAME sandbox same-origin access through redirect MFSA 2014-65 Certificate parsing broken by non-standard character encoding MFSA 2014-64 Crash in Skia library when scaling high quality images MFSA 2014-63 Use-after-free while when manipulating certificates in the trusted cache MFSA 2014-62 Exploitable WebGL crash with Cesium JavaScript library MFSA 2014-61 Use-after-free with FireOnStateChange event MFSA 2014-59 Use-after-free in DirectWrite font handling MFSA 2014-58 Use-after-free in Web Audio due to incorrect control message ordering MFSA 2014-57 Buffer overflow during Web Audio buffering for playback MFSA 2014-56 Miscellaneous memory safety hazards (rv:31.0 / rv:24.7)
2014-06-13Update to 24.6.0ryoon1-2/+2
Changelog: Fixed in Thunderbird 24.6 MFSA 2014-52 Use-after-free with SMIL Animation Controller MFSA 2014-49 Use-after-free and out of bounds issues found using Address Sanitizer MFSA 2014-48 Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
2014-05-06Update "thunderbird" package to version 24.5.0.tron1-3/+2
The following security problems were fixed in this release: - MFSA 2014-46 Use-after-free in nsHostResolve - MFSA 2014-44 Use-after-free in imgLoader while resizing images - MFSA 2014-43 Cross-site scripting (XSS) using history navigations - MFSA 2014-42 Privilege escalation through Web Notification API - MFSA 2014-38 Buffer overflow when using non-XBL object as XBL - MFSA 2014-37 Out of bounds read while decoding JPG images - MFSA 2014-35 Privilege escalation through Mozilla Maintenance Service Installer - MFSA 2014-34 Miscellaneous memory safety hazards
2014-05-05Recursive revbump from x11/pixmanryoon1-2/+2
Fix PR pkg/48777
2014-04-09recursive bump from icu shlib major bump.obache1-1/+2
2014-03-21Update to 24.4.0ryoon1-2/+2
Changelog: Fixed in Thunderbird 24.4 MFSA 2014-32 Out-of-bounds write through TypedArrayObject after neutering MFSA 2014-31 Out-of-bounds read/write through neutering ArrayBuffer objects MFSA 2014-30 Use-after-free in TypeObject MFSA 2014-29 Privilege escalation using WebIDL-implemented APIs MFSA 2014-28 SVG filters information disclosure through feDisplacementMap MFSA 2014-27 Memory corruption in Cairo during PDF font rendering MFSA 2014-26 Information disclosure through polygon rendering in MathML MFSA 2014-17 Out of bounds read during WAV file decoding MFSA 2014-16 Files extracted during updates are not always read only MFSA 2014-15 Miscellaneous memory safety hazards (rv:28.0 / rv:24.4)
2014-02-13Update "thunderbird" package to version 24.3.0. Changes since 24.2.0:tron1-3/+2
- MFSA 2014-13 Inconsistent JavaScript handling of access to Window objects - MFSA 2014-12 NSS ticket handling issues - MFSA 2014-09 Cross-origin information leak through web workers - MFSA 2014-08 Use-after-free with imgRequestProxy and image proccessing - MFSA 2014-04 Incorrect use of discarded images by RasterImage - MFSA 2014-02 Clone protected content with XBL scopes - MFSA 2014-01 Miscellaneous memory safety hazards (rv:27.0 / rv:24.3) - Improved handling of reply-to (bug 933555)
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-2/+2
2014-01-01Recursive PKGREVISION bump for libgcrypt-1.6.0 shlib major bump.wiz1-1/+2
2013-12-15Update to 24.2.0ryoon1-2/+2
Changelog: FIXED Security fixes can be found here FIXED Fixed an issue where long messages with multiple signatures could end up unreadable (bug 929006) FIXED Fixed an issue where editing account settings was not possible in some non-standard configurations of local folder set-ups (bug 921371) Fixed in Thunderbird 24.2 MFSA 2013-117 Mis-issued ANSSI/DCSSI certificate MFSA 2013-116 JPEG information leak MFSA 2013-115 GetElementIC typed array stubs can be generated outside observed typesets MFSA 2013-114 Use-after-free in synthetic mouse movement MFSA 2013-113 Trust settings for built-in roots ignored during EV certificate validation MFSA 2013-111 Segmentation violation when replacing ordered list elements MFSA 2013-109 Use-after-free during Table Editing MFSA 2013-108 Use-after-free in event listeners MFSA 2013-104 Miscellaneous memory safety hazards (rv:26.0 / rv:24.2)
2013-12-02Update to Thunderbird and Thunderbird-l10n 24.1.1.richard1-3/+2
Fixed in Thunderbird 24.1.1 MFSA 2013-103 Miscellaneous Network Security Services (NSS) vulnerabilities TODO: put sdk common files into their own PLIST in order to simplify updates to PLIST.enigmail and PLIST.lightning.
2013-11-13Fix PR pkg/48240, bump PKGREVISION, and remove obsolete patchesryoon1-1/+2
* Use *30 instead of *50. Restore session is recovered on NetBSD/amd64 5.2. Based on martin@'s patch on pkgsrc-users@.
2013-11-12Update to 24.1.0ryoon1-9/+22
Changelog: 24.1. FIXED Fixed an issue where signatures were shown in too lighter grey making them difficult to read (bug 917906) FIXED Fixed an issue where Auto CC for reply might not work if the cc address is the same as the sending address (bug 917231) FIXED Security fixes can be found here Fixed in Thunderbird 24.0 MFSA 2013-92 GC hazard with default compartments and frame chain restoration MFSA 2013-91 User-defined properties on DOM proxies get the wrong "this" object MFSA 2013-90 Memory corruption involving scrolling MFSA 2013-89 Buffer overflow with multi-column, lists, and floats MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes MFSA 2013-85 Uninitialized data in IonMonkey MFSA 2013-83 Mozilla Updater does not lock MAR file after signature verification MFSA 2013-82 Calling scope for new Javascript objects can lead to memory corruption MFSA 2013-81 Use-after-free with select element MFSA 2013-80 NativeKey continues handling key messages after widget is destroyed MFSA 2013-79 Use-after-free in Animation Manager during stylesheet cloning MFSA 2013-77 Improper state in HTML5 Tree Builder with templates MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 / rv:17.0.9) 24.0 NEW Message threads can now be ignored or watched NEW Emails can now be sent to IDN based email addresses NEW Zoom functionality is now available in the compose window CHANGED In the Compose window, ctrl/cmd + and ctrl/cmd - now change the zoom setting rather than the font size CHANGED In Twitter, replying to a tweet now replies to all users, just like on the Twitter website FIXED Interactions in the filter list dialogs have been improved FIXED In Chat user nicknames are now highlighted when mentioned FIXED In IRC, long messages will now be sent in multiple parts instead of being cut off FIXED Various security fixes Fixed in Thunderbird 24.1 MFSA 2013-102 Use-after-free in HTML document templates MFSA 2013-101 Memory corruption in workers MFSA 2013-100 Miscellaneous use-after-free issues found through ASAN fuzzing MFSA 2013-98 Use-after-free when updating offline cache MFSA 2013-97 Writing to cycle collected object during image decoding MFSA 2013-96 Improperly initialized memory and overflows in some JavaScript functions MFSA 2013-95 Access violation with XSLT and uninitialized data MFSA 2013-94 Spoofing addressbar though SELECT element MFSA 2013-93 Miscellaneous memory safety hazards (rv:25.0 / rv:24.1 / rv:17.0.10)
2013-10-21Bump PKGREVISION for icu shlib major bump.wiz1-3/+2
2013-10-18Fix a common mistake in many different packages: POSIX says that when usingbsiegert1-1/+2
pax -rw, the destination directory must exist. pax in NetBSD creates it if not, pax in MirBSD complains. I read through all pkgsrc Makefiles that use pax and added an entry to INSTALLATION_DIRS, or an INSTALL_DATA_DIR invocation. I did not test all the changes but they should be fairly safe. If you notice any breakage because of this change, please contact me.
2013-10-10Recursive revbump from pango-1.36.0ryoon1-2/+2
2013-10-09recursive bump for libmng-2.0.2 shlib major bump and dependency changewiz1-1/+2
2013-09-27Update to 17.0.9ryoon1-12/+11
Changelog: The following security bug fixes should be applied to thunderbird-17.0.9. But I cannot find any documents. MFSA 2013-91 User-defined properties on DOM proxies get the wrong "this" object MFSA 2013-90 Memory corruption involving scrolling MFSA 2013-89 Buffer overflow with multi-column, lists, and floats MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes MFSA 2013-83 Mozilla Updater does not lock MAR file after signature verification MFSA 2013-82 Calling scope for new Javascript objects can lead to memory corruption MFSA 2013-79 Use-after-free in Animation Manager during stylesheet cloning MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 / rv:17.0.9) MFSA 2013-65 Buffer underflow when generating CRMF requests
2013-09-02Revbump after cairo updateadam1-1/+2
2013-08-10Update to 17.0.8ryoon1-2/+2
Changelog: Security bugfixes. MFSA 2013-75 Local Java applets may read contents of local file system MFSA 2013-73 Same-origin bypass with web workers and XMLHttpRequest MFSA 2013-72 Wrong principal used for validating URI for some Javascript components MFSA 2013-71 Further Privilege escalation through Mozilla Updater MFSA 2013-69 CRMF requests allow for code execution and XSS attacks MFSA 2013-68 Document URI misrepresentation and masquerading MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater MFSA 2013-63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8)
2013-07-09Update to 17.0.7ryoon1-3/+2
Changelog: FIXED Security fixes can be found here Fixed in Thunderbird 17.0.7 MFSA 2013-59 XrayWrappers can be bypassed to run user defined methods in a privileged context MFSA 2013-56 PreserveWrapper has inconsistent behavior MFSA 2013-55 SVG filters can lead to information disclosure MFSA 2013-54 Data in the body of XHR HEAD requests leads to CSRF attacks MFSA 2013-53 Execution of unmapped memory through onreadystatechange event MFSA 2013-51 Privileged content access and execution via XBL MFSA 2013-50 Memory corruption found using Address Sanitizer MFSA 2013-49 Miscellaneous memory safety hazards (rv:22.0 / rv:17.0.7)
2013-06-06Bump PKGREVISION for libXft changes for NetBSD native X support onwiz1-2/+2
NetBSD 6, requested by tron.
2013-06-04Try to fix the fallout caused by the fix for PR pkg/47882. Part 3:tron1-2/+2
Recursively bump package revisions again after the "freetype2" and "fontconfig" handling was fixed.
2013-06-03Bump freetype2 and fontconfig dependencies to current pkgsrc versions,wiz1-1/+2
to address issues with NetBSD-6(and earlier)'s fontconfig not being new enough for pango. While doing that, also bump freetype2 dependency to current pkgsrc version. Suggested by tron in PR 47882
2013-05-20Update to 17.0.6ryoon1-3/+3
Changelog: FIXED Security fixes can be found here FIXED Thunderbird now supports the Twitter API version 1.1 ahead of Twitter closing the 1.0 version (Bug 857049) Fixed in Thunderbird 17.0.6 MFSA 2013-48 Memory corruption found using Address Sanitizer MFSA 2013-47 Uninitialized functions in DOMSVGZoomEvent MFSA 2013-46 Use-after-free with video and onresize event MFSA 2013-44 Local privilege escalation through Mozilla Maintenance Service MFSA 2013-42 Privileged access for content level constructor MFSA 2013-41 Miscellaneous memory safety hazards (rv:21.0 / rv:17.0.6)
2013-04-09Update to 17.0.5ryoon1-2/+2
Changelog: FIXED Security fixes can be found here FIXED Adjusting font size when composing emails should be easier (Bug 824926) Fixed in Thunderbird 17.0.5 MFSA 2013-40 Out-of-bounds array read in CERT_DecodeCertPackage MFSA 2013-38 Cross-site scripting (XSS) using timed history navigations MFSA 2013-36 Bypass of SOW protections allows cloning of protected nodes MFSA 2013-35 WebGL crash with Mesa graphics driver on Linux MFSA 2013-34 Privilege escalation through Mozilla Updater MFSA 2013-32 Privilege escalation through Mozilla Maintenance Service MFSA 2013-31 Out-of-bounds write in Cairo library MFSA 2013-30 Miscellaneous memory safety hazards (rv:20.0 / rv:17.0.5)
2013-03-10Update to 17.0.4ryoon1-2/+2
Changelog: Not available.
2013-02-24Update to 17.0.3ryoon1-3/+2
Changelog: FIXED Security fixes can be found here FIXED Attachments sometimes could not be removed from the composition window using the keyboard, this is now fixed (799451) Fixed in Thunderbird 17.0.3 MFSA 2013-28 Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer MFSA 2013-27 Phishing on HTTPS connection through malicious proxy MFSA 2013-26 Use-after-free in nsImageLoadingContent MFSA 2013-25 Privacy leak in JavaScript Workers MFSA 2013-24 Web content bypass of COW and SOW security wrappers MFSA 2013-21 Miscellaneous memory safety hazards (rv:19.0 / rv:17.0.3)
2013-02-16Recursive bump for png-1.6.wiz1-2/+2
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-2/+2
2013-02-01Reset MAINTAINER/OWNER (became observers)wiz1-2/+2
2013-01-26Revbump after graphics/jpeg and textproc/icuadam1-1/+2
2013-01-19Update to 17.0.2ryoon1-3/+2
Changelog: FIXED Security fixes can be found here FIXED Pressing the 'x' button on Windows now closes only one window rather than the whole application (805185) FIXED An issue that caused occasional corruption in local folders after filtering is now fixed (815012) FIXED An issue that caused deletion of drafts saved in IMAP folders whilst in offline mode is now fixed (805626) For security fix, see http://www.mozilla.org/en-US/thunderbird/17.0.2/releasenotes/ .
2012-12-12Bump PKGREVISION.ryoon1-1/+2
Fix another _res multi-thread error. Patch is provided by Dave Tyson on pkgsrc-users@.
2012-11-23Update to 17.0ryoon1-11/+12
Changelog: NEW A Menu Button is now shown to new users by default NEW Tabs are now drawn in the title bar on Windows FIXED An issue causing spell-checking only parts of words in Thunderbird 16 is now fixed (790475) FIXED An issue causing Thunderbird 16 to repeatedly download emails is now fixed (806760) FIXED RSS feeds can now be viewed in the Wide View Layout (531397) FIXED Various fixes and performance improvements FIXED Various security fixes CHANGED Mac OS X 10.5 is no longer supported Security fixes: Fixed in Thunderbird 17 MFSA 2012-106 Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer MFSA 2012-105 Use-after-free and buffer overflow issues found using Address Sanitizer MFSA 2012-103 Frames can shadow top.location MFSA 2012-101 Improper character decoding in HZ-GB-2312 charset MFSA 2012-100 Improper security filtering for cross-origin wrappers MFSA 2012-99 XrayWrappers exposes chrome-only properties when not in chrome compartment MFSA 2012-97 XMLHttpRequest inherits incorrect principal within sandbox MFSA 2012-96 Memory corruption in str_unescape MFSA 2012-94 Crash when combining SVG text on path with CSS MFSA 2012-93 evalInSanbox location context incorrectly applied MFSA 2012-92 Buffer overflow while rendering GIF images MFSA 2012-91 Miscellaneous memory safety hazards (rv:17.0/ rv:10.0.11)
2012-11-03Update to 16.0.2ryoon1-2/+2
Changelog: Fixed in Thunderbird 16.0.2 MFSA 2012-90 Fixes for Location object issues MFSA 2012-67 Installer will launch incorrect executable following new installation
2012-10-12Update to 16.0.1ryoon1-8/+7
Changelog: FIXED 16.0.1: Vulnerability outlined here https://blog.mozilla.org/security/2012/10/10/security-vulnerability-in-firefox-16/ NEW We have now added box.com to the list of online storage services that are available for use with Thunderbird Filelink NEW Silent, background updates. Thunderbird will now download and apply updates in the background allowing you to start quickly the next time Thunderbird starts up. FIXED Various fixes and performance improvements FIXED Various security fixes Fixed in Thunderbird 16.0.1 MFSA 2012-89 defaultValue security checks not applied MFSA 2012-88 Miscellaneous memory safety hazards (rv:16.0.1) Fixed in Thunderbird 16 MFSA 2012-87 Use-after-free in the IME State Manager MFSA 2012-86 Heap memory corruption issues found using Address Sanitizer MFSA 2012-85 Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer MFSA 2012-84 Spoofing and script injection through location.hash MFSA 2012-83 Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties MFSA 2012-82 top object and location property accessible by plugins MFSA 2012-81 GetProperty function can bypass security checks MFSA 2012-80 Crash with invalid cast when using instanceof operator MFSA 2012-79 DOS and crash with full screen and history navigation MFSA 2012-77 Some DOMWindowUtils methods bypass security checks MFSA 2012-76 Continued access to initial origin after setting document.domain MFSA 2012-75 select element persistance allows for attacks MFSA 2012-74 Miscellaneous memory safety hazards (rv:16.0/ rv:10.0.8)
2012-10-08Revbump after updating graphics/pangoadam1-2/+2
2012-10-08Drop PKG_DESTDIR_SUPPORT setting, "user-destdir" is default these days.asau1-3/+1
2012-10-02Mass recursive bump after the dependence fix of the "cairo" packagetron1-2/+2
requested by Thomas Klausner.
2012-09-15recursive bump from libffi shlib major bumpobache1-2/+2
(additionaly, reset PKGREVISION of qt4-* sub packages from base qt4 update)
2012-09-07Revbump after updating graphics/cairoadam1-1/+2
2012-09-02Update to 15.0ryoon1-7/+7
* Update Mozilla Lightning to 1.7 * Update Enigmail to 1.4.4 (functionality is not tested yet; should be updated) * Regen patches Changelog: NEW Multi-Channel Chat: You now can enjoy real time conversation with your contacts, right from your favorite messaging application. NEW Do Not Track: This option has been implemented as an addition to Search the Web. NEW Ubuntu One is now supported in Filelink - the option to upload large attachments to online storage services. NEW New User Interface: Thunderbird is replicating the new look and feel of Mozilla Firefox in an effort to provide a similar user experience across all Mozilla software desktop or mobile and all platforms. FIXED Various fixes and performance improvements FIXED Various security fixes MFSA 2012-72 Web console eval capable of executing chrome-privileged code MFSA 2012-70 Location object security checks bypassed by chrome code MFSA 2012-68 DOMParser loads linked resources in extensions when parsing text/html MFSA 2012-67 Installer will launch incorrect executable following new installation MFSA 2012-65 Out-of-bounds read in format-number in XSLT MFSA 2012-64 Graphite 2 memory corruption MFSA 2012-63 SVG buffer overflow and use-after-free issues MFSA 2012-62 WebGL use-after-free and memory corruption MFSA 2012-61 Memory corruption with bitmap format images with negative height MFSA 2012-59 Location object can be shadowed using Object.defineProperty MFSA 2012-58 Use-after-free issues found using Address Sanitizer MFSA 2012-57 Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7)
2012-07-19Update to 14.0ryoon1-8/+7
* Use Lightning 1.6 release * Enigmail is not tested fully Changelog: from http://www.mozilla.org/en-US/products/thunderbird/14.0/releasenotes/ FIXED Various fixes and performance improvements FIXED Various security fixes
2012-06-14Recursive PKGREVISION bump for libxml2 buildlink addition.sbd1-1/+2
2012-06-12Update to 13.0ryoon1-6/+11
* Update enigmail to 1.4.2 * Update Lightning to 1.5 Changelog: * Filelink: Upload your files to an online storage service and send links to your friends, avoiding bounce back due to large attachments. We have partnered with YouSendIt to bring this feature, but additional partners will be added in the near future. * In partnership with Gandi and Hover, you can now sign up for a personalized email address from within Thunderbird. Along with your new email address, Thunderbird will be automatically set up and ready to send and receive messages. We are working with additional suppliers to cover more areas of the world and to provide more options in the future. * Various security fixes MFSA 2012-40 Buffer overflow and use-after-free issues found using Address Sanitizer MFSA 2012-39 NSS parsing errors with zero length items MFSA 2012-38 Use-after-free while replacing/inserting a node in a document MFSA 2012-37 Information disclosure though Windows file shares and shortcut files MFSA 2012-36 Content Security Policy inline-script bypass MFSA 2012-35 Privilege escalation through Mozilla Updater and Windows Updater Service MFSA 2012-34 Miscellaneous memory safety hazards * The minimum system requirements for Windows are now Windows XP Service Pack 2 or later.
2012-05-11Update to 12.0.1ryoon1-2/+2
Fix PR pkg/46427 Changelog: * Fix various issues relating to new mail notifications and filtering on POP3 based accounts * Fixes an occasional startup crash seen in TB 12.0 * Fixes an issue with corrrupted message bodies when using movemail
2012-04-28Update to 12.0ryoon1-5/+3
* Remove unused option. * Update enigmail to 1.4.1 Changelog: * Global Search results now include message extracts in the results * Various security fixes * Various improvements to RSS feed subscription and general feed handling * Thunderbird now supports add-ons that provide different types of local mail storage
2012-03-16Bump PKGREVISION.ryoon1-3/+5
* Update Lightning to 1.3 from 1.3b1 Changelog: * Support for Apple iCloud and Chandler servers improved * Support for high contrast themes (needs to be enabled in the preferences) * New toolbar to adapt to Thunderbird's Tabs-on-Top
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-10 05:11:36 +0000