summaryrefslogtreecommitdiff
path: root/www/firefox/Makefile
AgeCommit message (Collapse)AuthorFilesLines
2007-08-07Add INSTALLATION_DIRS=lib/pkgconfig for destdir support, requested by joerg.ghen1-1/+3
2007-05-31Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.4.ghen1-2/+1
Security fixes in this version: MFSA 2007-17 XUL Popup Spoofing MFSA 2007-16 XSS using addEventListener MFSA 2007-14 Path Abuse in Cookies MFSA 2007-13 Persistent Autocomplete Denial of Service MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.4/releasenotes/
2007-05-12Update to Firefox 2.0.0.3 (nb1), from www/firefox2* (see there for historyghen1-1/+2
and change notes). Firefox 1.5.0.x will be maintained in www/firefox15*, as discussed on tech-pkg.
2007-03-21Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.11. Fixed in this version:ghen1-2/+1
* Security update: MFSA 2007-11 (FTP PASV port-scanning) has been fixed. * Website Compatibility: Fixed various web compatibility regressions. For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.11.html
2007-03-07Dynamically generate the part of the PLIST for libfreebl. This is becausedmcmahill1-1/+2
the exact names of the freebl libraries depends on the platform and they have a habit of changing even on minor releases. This causes these mozilla packages to be broken quite a lot on platforms other than NetBSD/i386. Hopefully this fix will last longer than previous ones. pkgrevision bumps all around.
2007-02-25Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.10. Fixed in this version:ghen1-2/+1
Fixed in Firefox 1.5.0.10 MFSA 2007-07 Embedded nulls in location.hostname confuse same-domain checks MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow MFSA 2007-05 XSS and local file access by opening blocked popups MFSA 2007-04 Spoofing using custom cursor and CSS3 hotspot MFSA 2007-03 Information disclosure through cache collisions MFSA 2007-02 Improvements to help protect against Cross-Site Scripting attacks MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.10.html
2007-02-04Get these mozilla clients to work on Solaris-2.9/sparc. There weredmcmahill1-2/+2
two issues. The PLIST was incorrect and since the PLIST is used by the "moz-install" script, anything missing from the PLIST is never installed even when building from source. When libfreebl* were not installed it caused the clients to fail to load the security component and fail with "The browser failed to load its security component". The second issue is that many installations of solaris-2.9 include various glib/gtk/gnome libraries in /usr/lib. This causes failures because the pkgsrc ones were used at link time and the /usr/lib ones at run time. Work around this by setting a LD_LIBRARY_PATH that includes the pkgsrc lib directory first. pkgrevision bumps all around.
2006-11-08Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.8. Fixed in this version:ghen1-2/+1
MFSA 2006-67 Running Script can be recompiled MFSA 2006-66 RSA signature forgery (variant) MFSA 2006-65 Crashes with evidence of memory corruption (rv:1.8.0.8) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.8.html
2006-10-23thunderbird's ldap doesn't work talking to an ipv4 ldap server ifmarkd1-2/+2
talking to ipv4 addresses using ipv6 addresses isn't allowed, which is the default on NetBSD. Patch to use a v4 socket when talking to an ipv4 ldap server. Fixes my PR 33511. seamonkey/firefox/sunbird have the same code so make the same patch. OKed ghen. Bump PKGREVISION.
2006-10-19Fix crash after printing caused by trying to destroy the same charsetmarkd1-1/+3
structure multiple times. Bump PKGREVISION.
2006-09-15EXTRACT_SUFX is defined in Makefile-firefox.common.ghen1-2/+1
2006-05-04Update Firefox to 1.5.0.3, which is identical to our 1.5.0.2nb2 (except for theghen1-2/+1
advertized version), so there's no reason to upgrade. :-) Fixes a denial of service vulnerability (MFSA 2006-30).
2006-04-28Fix a memory management / refcount problem which can lead to a DOS ordrochner1-2/+2
possible code injection, affecting nested iframes. See https://bugzilla.mozilla.org/show_bug.cgi?id=334515 and http://www.securident.com/vuln/ff.txt bump PKGREVISION
2006-04-17More PKGREVISION bumps for png-1.2.9nb2 update.wiz1-1/+2
2006-04-15Update to Firefox 1.5.0.2.ghen1-2/+1
Firefox 1.5.0.2 offers improved stability, and several security fixes: MFSA 2006-29 Spoofing with translucent windows (pkgsrc vulnid. 1818) MFSA 2006-28 Security check of js_ValueToFunctionObject() can be circumvented (vulnid. 1819) MFSA 2006-25 Privilege escalation through Print Preview (vulnid. 1820) MFSA 2006-24 Privilege escalation using crypto.generateCRMFRequest (vulnid. 1821) MFSA 2006-23 File stealing by changing input type (vulnid. 1822) MFSA 2006-22 CSS Letter-Spacing Heap Overflow Vulnerability (vulnid. 1823) MFSA 2006-20 Crashes with evidence of memory corruption (rv:1.8.0.2) (vulnid. 1824) For a detailed ChangeLog, see: http://www.squarefree.com/burningedge/releases/1.5.0.2.html
2006-02-06s/_MOZILLA_USE_GTK2/MOZILLA_USE_GTK2/g, as to silent pkglint (WARN: Variableghen1-2/+2
names starting with an underscore are reserved for internal pkgsrc use). Ok with wiz.
2006-02-06Reindent + fix some pkglint warnings.ghen1-6/+6
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg1-1/+2
2006-02-05Update to Firefox 1.5.0.1, a bug fix release for Firefox 1.5.ghen1-2/+1
What's new: * Improved stability. * Improved support for Mac OS X. * International Domain Name support for Iceland (.is) is now enabled. * Fixes for several memory leaks. * Several security enhancements. For a more detailed list changes, see http://www.squarefree.com/burningedge/releases/1.5.0.1.html Ok with wiz.
2006-01-24Bump BUILDLINK_RECOMMENDED of textproc/expat to 2.0.0 becausewiz1-2/+2
of the shlib major bump. PKGREVISION++ for the dependencies.
2005-12-28Install the .pc files again, removed during the update to 1.5 (thus breakingjmmv1-2/+2
packages needing them, e.g., epiphany). Bump PKGREVISION to 2.
2005-12-23Disable usage of symbol visibility, Firefox is definitely not there yet.joerg1-1/+2
Since the build with DragonFly's system gcc was successful before, but segilled on startup, a revision bump is necessary.
2005-12-10one more file to update...taya1-2/+1
2005-12-10Update firefox & firefox-gtk1 to 1.5taya1-7/+1
Including fix for long title & history file problem. http://www.mozilla.org/security/history-title.html https://bugzilla.mozilla.org/show_bug.cgi?id=319004 What's New in Firefox 1.5 Firefox 1.5 is the next version of our award-winning Web browser. Here's what's new in Firefox 1.5: * Automated update to streamline product upgrades. Notification of an update is more prominent, and updates to Firefox may now be half a megabyte or smaller. Updating extensions has also improved. * Faster browser navigation with improvements to back and forward button performance. * Drag and drop reordering for browser tabs. * Improvements to popup blocking. * Clear Private Data feature provides an easy way to quickly remove personal data through a menu item or keyboard shortcut. * Answers.com is added to the search engine list. * Improvements to product usability including descriptive error pages, redesigned options menu, RSS discovery, and "Safe Mode" experience. * Better accessibility including support for DHTML accessibility and assistive technologies such as the Window-Eyes 5.5 beta screen reader for Microsoft Windows. Screen readers read aloud all available information in applications and documents or show the information on a Braille display, enabling blind and visually impaired users to use equivalent software functionality as their sighted peers. * Report a broken Web site wizard to report Web sites that are not working in Firefox. * Better support for Mac OS X (10.2 and greater) including profile migration from Safari and Mac Internet Explorer. * New support for Web Standards including SVG, CSS 2 and CSS 3, and JavaScript 1.6. * Many security enhancements. The Burning Edge has more detailed lists of new features and notable bug fixes. http://www.squarefree.com/burningedge/releases/1.5-comprehensive.html
2005-12-08Bumped the PKGREVISION of the packages that have been broken by the recentrillig1-1/+2
"pkglint --autofix" change.
2005-09-22Update www/firefox and www/firefox-gtk1 to version 1.0.7. Changes fromjlam1-9/+3
version 1.0.6 include: * Fix for a potential buffer overflow vulnerability when loading a hostname with all soft-hyphens * Fix to prevent URLs passed from external programs from being parsed by the shell (Linux only) * Fix to prevent a crash when loading a Proxy Auto-Config (PAC) script that uses an "eval" statement * Fix to restore InstallTrigger.getVersion() for Extension authors * Other stability and security fixes Approved by taya.
2005-09-17For the native firefox and mozilla packages, move the module/extensionjlam1-2/+3
registration out of the installation step and into the INSTALL script. Also, remove the registration commands from the PLIST as well. Putting them into the INSTALL script allows for the same commands to be run in the same way, so that there are fewer differences between installing from source and installing from a binary package. Also, this makes these packages pass CHECK_FILES=yes. Bump the PKGREVISION of firefox, firefox-gtk1, mozilla, and mozilla-gtk2. Also, include bsd.pkg.mk from the package Makefiles, not from within Makefile.common. This is a style issue and allows for appending to variables originally defined in Makefile.common from the package Makefile.
2005-09-08Update patches for mozilla applications to handle the fact that onabs1-2/+2
NetBSD the thread safe resolver is only available on __NetBSD_Version__ >= 299000900. Fixes runtime usage on NetBSD 2.1. New Versions: - firefox-1.0.6nb2 - firefox-gtk1-1.0.6nb2 - mozilla-1.7.11nb1 - mozilla-gtk2-1.7.11nb1 - thunderbird-1.0.6nb1 - thunderbird-gtk1-1.0.6nb1
2005-08-03Fix typo.hira1-2/+2
2005-08-03Compile without optimization if GCC <4.0 (4.0 not tested) is used ontron1-1/+2
a powerpc architecture (e.g. NetBSD-mapcppc). This cures display glitches (e.g. text appearing at the wrong location). Bump package revision because of this change.
2005-06-03MOZILLA_USE_GTK2 is a pkgsrc-internal variable -- prefix it withwiz1-2/+2
an underscore.
2005-05-14Update firefox & firefox-gtk1 to 1.0.4.taya1-1/+11
This is a security fix release. Fixed vulnerabilities are follows: MFSA 2005-44 Privilege escalation via non-DOM property overrides MFSA 2005-43 "Wrapped" javascript: urls bypass security checks MFSA 2005-42 Code execution via javascript: IconURL
2005-04-02MOZILLA_USE_GTK2 needs --disable-gnomevfs, so make this so inabs1-2/+1
mozilla/Makefile.common, rather than adding it into each Makefile (also fixes thunderbird-gtk2).
2005-03-31explicitely --disable-gnomevfs; otherwise gnome stuff will be founddrochner1-1/+2
and some extension tried to be built which fails because not buildlink'd
2005-02-27Update firefox to 1.0.1.taya1-1/+4
And switched to use gtk2. Changes from release notes: * Improved stability * International Domain Names are now displayed as punycode. (To show International Domain Names in Unicode, set the "network.IDN_show_punycode" preference to false.) * Several security fixes. MFSA 2005-29 Internationalized Domain Name (IDN) homograph spoofing MFSA 2005-28 Unsafe /tmp/plugtmp directory exploitable to erase user's files MFSA 2005-27 Plugins can be used to load privileged content MFSA 2005-26 Cross-site scripting by dropping javascript: link on tab MFSA 2005-25 Image drag and drop executable spoofing MFSA 2005-24 HTTP auth prompt tab spoofing MFSA 2005-23 Download dialog source spoofing MFSA 2005-22 Download dialog spoofing using Content-Disposition header MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice MFSA 2005-20 XSLT can include stylesheets from arbitrary hosts MFSA 2005-19 Autocomplete data leak MFSA 2005-18 Memory overwrite in string library MFSA 2005-17 Install source spoofing with user:pass@host MFSA 2005-16 Spoofing download and security dialogs with overlapping windows MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion MFSA 2005-14 SSL "secure site" indicator spoofing MFSA 2005-13 Window Injection Spoofing
2004-08-10Update firefox & firefox-gtk2 to 0.9.3taya1-27/+2
firefox 0.9.3 is a security fix release. Fixed bugs are: - lock icon and certificate spoof with onunload document.write (Bugzilla#253121) - Malicious certificates can permanently break HTTPS/SSL (Bugzilla#249004) See the page below. http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.2
2004-07-05- correct MESSAGEtaya1-1/+2
- add patch to fix compilation problem on NetBSD-1.6.2 - bump PKGREVISION
2004-07-03Update firefox to 0.9.1taya1-2/+2
From the article from mozillazine.org: mozilla.org today released upgrades to both Firefox 0.9 (0.9.1) and Thunderbird 0.7 (0.7.1) to fix some minor bugs present in both releases. Both releases correct some flaws in the extension system that some users may have been experiencing, as well as a new icon set for the navigation toolbar on Windows and Linux in Firefox 0.9.1. All users of both products should get this upgrade.
2004-06-24correct typotaya1-2/+2
post-install -> pre-install
2004-06-23Update firefox to 0.9taya1-4/+9
Here's what's new in this release of Firefox: * New Default Theme An updated Default Theme now presents a uniform appearance across all three platforms - a new crisp, clear look for Windows users. Finetuning for GNOME will follow in future releases. * Comprehensive Data Migration Switching to Firefox has never been easier now that Firefox imports data like Favorites, History, Settings, Cookies and Passwords from Internet Explorer. Firefox can also import from Mozilla 1.x, Netscape 4.x, 6.x and 7.x, and Opera. MacOS X and Linux migrators for browsers like Safari, OmniWeb, Konqueror etc. will arrive in future releases. * Extension/Theme Manager New Extension and Theme Managers provide a convenient way to manage and update your add-ons. SmartUpdate also notifies you of updates to Firefox. * Help A new online help system is available. * Lots of bug fixes and improvements Copy Image, the ability to delete individual items from Autocomplete lists, SMB/SFTP support on GNOME via gnome-vfs, better Bookmarks, Search and many other refinements fine tune the browsing experience. For Linux/GTK2 Users * Look and Feel Updates Ongoing improvements have been made to improve the way Firefox adheres to your GTK2 themes, such as menus. * Talkback for GTK2 Help us nail down crashes by submitting talkback reports with this crash reporting tool.
2004-06-19Undo my previous commit to install pkgconfig (.pc) files, we should toxtraeme1-2/+2
use CONFLICTS, because they are installing the same files...
2004-06-18Install the .pc (pkgconfig) files, which were disabled in PLIST, theyxtraeme1-2/+2
are required to build some packages. Bump PKGREVISION.
2004-06-02- copy amd64 support patch from www/mozillataya1-2/+3
- correct ARM architecture handling - add g++-3.0 support for xpcom module on alpha - bump PKGREVISION
2004-04-24catch up to current statvfs supporttaya1-2/+2
2004-03-10correct PLISTtaya1-1/+2
remove non-exist file & not needed file bump PKGREVISION
2004-02-29Initial import of firefox-0.8, provided by Kouichirou Hiratsuka xtraeme1-0/+25
in PR pkg/24603. Mozilla Firefox is a free, open-source and cross-platform web browser for Windows, Linux, MacOS X and many other operating systems. It is small, fast and easy to use, and offers many advantages over other web browsers, such as tabbed browsing and the ability to block pop-up windows. Firefox also offers excellent bookmark and history management, and it can be extended by developers using industry standards such as XML, CSS, JavaScript, C++, etc. Many extensions are available.