summaryrefslogtreecommitdiff
path: root/www/firefox-gtk1
AgeCommit message (Collapse)AuthorFilesLines
2007-07-26Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.5.ghen1-1/+3
Security fixes in this version: MFSA 2007-25 XPCNativeWrapper pollution MFSA 2007-24 Unauthorized access to wyciwyg:// documents MFSA 2007-23 Remote code execution by launching Firefox from Internet Explorer MFSA 2007-22 File type confusion due to %00 in name MFSA 2007-21 Privilege escalation using an event handler attached to an element not in the document MFSA 2007-20 Frame spoofing while window is loading MFSA 2007-19 XSS using addEventListener and setTimeout MFSA 2007-18 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.5/releasenotes/
2007-05-31Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.4.ghen2-3/+3
Security fixes in this version: MFSA 2007-17 XUL Popup Spoofing MFSA 2007-16 XSS using addEventListener MFSA 2007-14 Path Abuse in Cookies MFSA 2007-13 Persistent Autocomplete Denial of Service MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.4/releasenotes/
2007-05-12Update to Firefox 2.0.0.3 (nb1), from www/firefox2* (see there for historyghen4-33/+153
and change notes). Firefox 1.5.0.x will be maintained in www/firefox15*, as discussed on tech-pkg.
2007-05-12Update EOL notice.ghen1-2/+2
2007-03-21Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.11. Fixed in this version:ghen2-2/+5
* Security update: MFSA 2007-11 (FTP PASV port-scanning) has been fixed. * Website Compatibility: Fixed various web compatibility regressions. For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.11.html
2007-03-07Dynamically generate the part of the PLIST for libfreebl. This is becausedmcmahill2-4/+5
the exact names of the freebl libraries depends on the platform and they have a habit of changing even on minor releases. This causes these mozilla packages to be broken quite a lot on platforms other than NetBSD/i386. Hopefully this fix will last longer than previous ones. pkgrevision bumps all around.
2007-02-25Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.10. Fixed in this version:ghen1-3/+3
Fixed in Firefox 1.5.0.10 MFSA 2007-07 Embedded nulls in location.hostname confuse same-domain checks MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow MFSA 2007-05 XSS and local file access by opening blocked popups MFSA 2007-04 Spoofing using custom cursor and CSS3 hotspot MFSA 2007-03 Information disclosure through cache collisions MFSA 2007-02 Improvements to help protect against Cross-Site Scripting attacks MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.10.html
2006-11-08Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.8. Fixed in this version:ghen1-2/+1
MFSA 2006-67 Running Script can be recompiled MFSA 2006-66 RSA signature forgery (variant) MFSA 2006-65 Crashes with evidence of memory corruption (rv:1.8.0.8) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.8.html
2006-10-23thunderbird's ldap doesn't work talking to an ipv4 ldap server ifmarkd1-1/+3
talking to ipv4 addresses using ipv6 addresses isn't allowed, which is the default on NetBSD. Patch to use a v4 socket when talking to an ipv4 ldap server. Fixes my PR 33511. seamonkey/firefox/sunbird have the same code so make the same patch. OKed ghen. Bump PKGREVISION.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-06-07Add some additional headers introduced with ff1504/tb1504/sm102. Not worthghen1-1/+3
bumping PKGREVISION for.
2006-05-04Update Firefox to 1.5.0.3, which is identical to our 1.5.0.2nb2 (except for theghen1-2/+1
advertized version), so there's no reason to upgrade. :-) Fixes a denial of service vulnerability (MFSA 2006-30).
2006-05-02PKGREVISION bump for firefox security fix, pointed out by Lubomir Sedlacikdrochner1-2/+2
2006-04-17More PKGREVISION bumps for png-1.2.9nb2 update.wiz1-1/+2
2006-04-15Update to Firefox 1.5.0.2.ghen1-2/+1
Firefox 1.5.0.2 offers improved stability, and several security fixes: MFSA 2006-29 Spoofing with translucent windows (pkgsrc vulnid. 1818) MFSA 2006-28 Security check of js_ValueToFunctionObject() can be circumvented (vulnid. 1819) MFSA 2006-25 Privilege escalation through Print Preview (vulnid. 1820) MFSA 2006-24 Privilege escalation using crypto.generateCRMFRequest (vulnid. 1821) MFSA 2006-23 File stealing by changing input type (vulnid. 1822) MFSA 2006-22 CSS Letter-Spacing Heap Overflow Vulnerability (vulnid. 1823) MFSA 2006-20 Crashes with evidence of memory corruption (rv:1.8.0.2) (vulnid. 1824) For a detailed ChangeLog, see: http://www.squarefree.com/burningedge/releases/1.5.0.2.html
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-3/+4
2006-02-05Bump BUILDLINK_RECOMMENDED to 1.5.0.1.ghen1-2/+2
2006-02-05Update to Firefox 1.5.0.1, a bug fix release for Firefox 1.5.ghen2-4/+3
What's new: * Improved stability. * Improved support for Mac OS X. * International Domain Name support for Iceland (.is) is now enabled. * Fixes for several memory leaks. * Several security enhancements. For a more detailed list changes, see http://www.squarefree.com/burningedge/releases/1.5.0.1.html Ok with wiz.
2006-01-24Bump BUILDLINK_RECOMMENDED of textproc/expat to 2.0.0 becausewiz2-4/+4
of the shlib major bump. PKGREVISION++ for the dependencies.
2005-12-23Disable usage of symbol visibility, Firefox is definitely not there yet.joerg1-1/+2
Since the build with DragonFly's system gcc was successful before, but segilled on startup, a revision bump is necessary.
2005-12-10Update firefox & firefox-gtk1 to 1.5taya2-232/+459
Including fix for long title & history file problem. http://www.mozilla.org/security/history-title.html https://bugzilla.mozilla.org/show_bug.cgi?id=319004 What's New in Firefox 1.5 Firefox 1.5 is the next version of our award-winning Web browser. Here's what's new in Firefox 1.5: * Automated update to streamline product upgrades. Notification of an update is more prominent, and updates to Firefox may now be half a megabyte or smaller. Updating extensions has also improved. * Faster browser navigation with improvements to back and forward button performance. * Drag and drop reordering for browser tabs. * Improvements to popup blocking. * Clear Private Data feature provides an easy way to quickly remove personal data through a menu item or keyboard shortcut. * Answers.com is added to the search engine list. * Improvements to product usability including descriptive error pages, redesigned options menu, RSS discovery, and "Safe Mode" experience. * Better accessibility including support for DHTML accessibility and assistive technologies such as the Window-Eyes 5.5 beta screen reader for Microsoft Windows. Screen readers read aloud all available information in applications and documents or show the information on a Braille display, enabling blind and visually impaired users to use equivalent software functionality as their sighted peers. * Report a broken Web site wizard to report Web sites that are not working in Firefox. * Better support for Mac OS X (10.2 and greater) including profile migration from Safari and Mac Internet Explorer. * New support for Web Standards including SVG, CSS 2 and CSS 3, and JavaScript 1.6. * Many security enhancements. The Burning Edge has more detailed lists of new features and notable bug fixes. http://www.squarefree.com/burningedge/releases/1.5-comprehensive.html
2005-09-22Update www/firefox and www/firefox-gtk1 to version 1.0.7. Changes fromjlam3-6/+5
version 1.0.6 include: * Fix for a potential buffer overflow vulnerability when loading a hostname with all soft-hyphens * Fix to prevent URLs passed from external programs from being parsed by the shell (Linux only) * Fix to prevent a crash when loading a Proxy Auto-Config (PAC) script that uses an "eval" statement * Fix to restore InstallTrigger.getVersion() for Extension authors * Other stability and security fixes Approved by taya.
2005-09-17For the native firefox and mozilla packages, move the module/extensionjlam2-6/+4
registration out of the installation step and into the INSTALL script. Also, remove the registration commands from the PLIST as well. Putting them into the INSTALL script allows for the same commands to be run in the same way, so that there are fewer differences between installing from source and installing from a binary package. Also, this makes these packages pass CHECK_FILES=yes. Bump the PKGREVISION of firefox, firefox-gtk1, mozilla, and mozilla-gtk2. Also, include bsd.pkg.mk from the package Makefiles, not from within Makefile.common. This is a style issue and allows for appending to variables originally defined in Makefile.common from the package Makefile.
2005-09-08Update patches for mozilla applications to handle the fact that onabs1-1/+2
NetBSD the thread safe resolver is only available on __NetBSD_Version__ >= 299000900. Fixes runtime usage on NetBSD 2.1. New Versions: - firefox-1.0.6nb2 - firefox-gtk1-1.0.6nb2 - mozilla-1.7.11nb1 - mozilla-gtk2-1.7.11nb1 - thunderbird-1.0.6nb1 - thunderbird-gtk1-1.0.6nb1
2005-07-20update firefox & firefox-gtk1 to 1.0.6taya1-2/+2
Firefox 1.0.6 is a stability update. We recommend that users upgrade to this latest version. Here's what's new in Firefox 1.0.6: * Restore API compatibility for extensions and web applications that did not work in Firefox 1.0.5.
2005-07-14Update firefox & firefox-gtk1 to 1.0.5.taya1-2/+3
Firefox 1.0.5 is a security update. Fixed vulnerabilities are: 2005-56 Code execution through shared function objects MFSA 2005-55 XHTML node spoofing MFSA 2005-54 Javascript prompt origin spoofing MFSA 2005-53 Standalone applications can run arbitrary code through the browser MFSA 2005-52 Same origin violation: frame calling top.focus() MFSA 2005-51 The return of frame-injection spoofing MFSA 2005-50 Possibly exploitable crash in InstallVersion.compareTo() MFSA 2005-49 Script injection from Firefox sidebar panel using data: MFSA 2005-48 Same-origin violation with InstallTrigger callback MFSA 2005-47 Code execution via "Set as Wallpaper" MFSA 2005-46 XBL scripts ran even when Javascript disabled MFSA 2005-45 Content-generated event vulnerabilities
2005-05-14Update firefox & firefox-gtk1 to 1.0.4.taya1-2/+2
This is a security fix release. Fixed vulnerabilities are follows: MFSA 2005-44 Privilege escalation via non-DOM property overrides MFSA 2005-43 "Wrapped" javascript: urls bypass security checks MFSA 2005-42 Code execution via javascript: IconURL
2005-04-15Add an @exec ${MKDIR} line for an empty directory which has a @dirrm line,wiz1-1/+2
to fix binary packages.
2005-04-13change extensions list as same as Linux official build.taya1-42/+1
bump PKGREVISION. fix PR pkg/29595
2005-03-25Bump BUILDLINK_RECOMMENDED, not BUIDLINK_DEPENDS for security fixes.salo1-2/+3
2005-03-24Update firefox & firefox-gtk1 to 1.0.2taya1-2/+2
Firefox 1.0.2 is a security and stability update. Followings bugs are fixed in this release. MFSA 2005-32 Drag and drop loading of privileged XUL MFSA 2005-31 Arbitrary code execution from Firefox sidebar panel MFSA 2005-30 GIF heap overflow parsing Netscape extension 2
2005-02-27Oops, previous commit was using gtk2.taya2-29/+7
switch to use gtk1.
2005-02-27Import gtk1 version of www/firefox.taya4-0/+2455
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-25 05:11:12 +0000