summaryrefslogtreecommitdiff
path: root/www/firefox/PLIST
AgeCommit message (Collapse)AuthorFilesLines
2016-06-16Update to 47.0ryoon1-89/+173
* Remove macOS patches, because I cannot confirm them sadly Changelog: New Support for Google’s Widevine CDM on Windows and Mac OS X so streaming services like Amazon Video can switch from Silverlight to encrypted HTML5 video. Enable VP9 video codec for users with fast machines Embedded YouTube videos now play with HTML5 video if Flash is not installed. View and search open tabs from your smartphone or another computer in a sidebar Allow no-cache on back/forward navigations for https resources Latgalu [ltg] locale added. Wikipedia tells us there are 164,500 daily speakers. Fixed Various security fixes Changed FUEL (Firefox User Extension Library) has been removed. Add-ons relying on it will stop working. The browser.sessionstore.restore_on_demand preference has been reset to its default value (true) to avoid e10s performance problems. Because faster is better! The Firefox click-to-activate plugin whitelist has been removed. XRender is no longer used for rendering web content on Linux as this may cause a regression in remote X performance Developer Web platform changes View, start,and debug registered Service Workers in the Service Workers developer tool Simulate Push messages in the Service Workers developer tool 'Start' button for service workers in about:debugging to start registered Service Workers Changes that can affect add-on compatibility Added support for ChaCha20/Poly1305 cipher suites Custom user agents supported in Responsive Design Mode Smart multi-line input in the Web Console Developer Information HTML5 cuechange events are now available on TextTrack objects WebCrypto: PBKDF2 supports SHA-2 hash algorithms WebCrypto: RSA-PSS signature support Fixed in Firefox 47 2016-61 Network Security Services (NSS) vulnerabilities 2016-60 Java applets bypass CSP protections 2016-59 Information disclosure of disabled plugins through CSS pseudo-classes 2016-58 Entering fullscreen and persistent pointerlock without user permission 2016-57 Incorrect icon displayed on permissions notifications 2016-56 Use-after-free when textures are used in WebGL operations after recycle pool destruction 2016-55 File overwrite and privilege escalation through Mozilla Windows updater 2016-54 Partial same-origin-policy through setting location.host through data URI 2016-53 Out-of-bounds write with WebGL shader 2016-52 Addressbar spoofing though the SELECT element 2016-51 Use-after-free deleting tables from a contenteditable document 2016-50 Buffer overflow parsing HTML5 fragments 2016-49 Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
2016-04-27Update to 46.0ryoon1-133/+218
* Drop buildlink to gstreamer1 Changelog: New Improved security of the JavaScript Just In Time (JIT) Compiler GTK3 integration (GNU/Linux only) Fixed Correct rendering for scaled SVGs that use a clip and a mask Various security fixes Screen reader behavior with blank spaces in Google Docs corrected Changed WebRTC fixes to improve performance and stability Developer Display dominator trees in Memory tool Allocation and garbage collection pause profiling in the performance panel Launch responsive mode from the Style Editor @media sidebar HTML5 Added support for document.elementsFromPoint Added HKDF support for Web Crypto API Fixed in Firefox 46 2016-48 Firefox Health Reports could accept events from untrusted domains 2016-47 Write to invalid HashMap entry through JavaScript.watch() 2016-46 Elevation of privilege with chrome.tabs.update API in web extensions 2016-45 CSP not applied to pages sent with multipart/x-mixed-replace 2016-44 Buffer overflow in libstagefright with CENC offsets 2016-43 Disclosure of user actions through JavaScript with motion and orientation sensors 2016-42 Use-after-free and buffer overflow in Service Workers 2016-41 Content provider permission bypass allows malicious application to access data 2016-40 Privilege escalation through file deletion by Maintenance Service updater 2016-39 Miscellaneous memory safety hazards (rv:46.0 / rv:45.1 / rv:38.8)
2016-04-13Update to 45.0.2ryoon1-3/+24
Changelog: Fixed: Fix an issue impacting the cookie header when third-party cookies are blocked (1257861) Fix a web compatibility regression impacting the srcset attribute of the image tag (1259482) Fix a regression with the copy and paste with some old versions of some Gecko applications like Thunderbird (1254980) Fix a crash impacting the video playback with Media Source Extension (1258562) Fix a regression impacting some specific uploads (1255735)
2016-03-08Update to 45.0ryoon1-328/+403
Changelog: New Instant browser tab sharing through Hello Tabs synced via Firefox Accounts from other devices are now shown in dropdown area of Awesome Bar when searching Synced Tabs button in button bar Introduce a new preference (network.dns.blockDotOnion) to allow blocking .onion at the DNS level Guarani [gn] locale added Fixed URLs containing a Unicode-format Internationalized Domain Name (IDN) are now properly redirected Various security fixes Fixed in Firefox 45 2016-37 Font vulnerabilities in the Graphite 2 library 2016-36 Use-after-free during processing of DER encoded keys in NSS 2016-35 Buffer overflow during ASN.1 decoding in NSS 2016-34 Out-of-bounds read in HTML parser following a failed allocation 2016-33 Use-after-free in GetStaticInstance in WebRTC 2016-32 WebRTC and LibVPX vulnerabilities found through code inspection 2016-31 Memory corruption with malicious NPAPI plugin 2016-30 Buffer overflow in Brotli decompression 2016-29 Same-origin policy violation using perfomance.getEntries and history navigation with session restore 2016-28 Addressbar spoofing though history navigation and Location protocol property 2016-27 Use-after-free during XML transformations 2016-26 Memory corruption when modifying a file being read by FileReader 2016-25 Use-after-free when using multiple WebRTC data channels 2016-24 Use-after-free in SetBody 2016-23 Use-after-free in HTML5 string parser 2016-22 Service Worker Manager out-of-bounds read in Service Worker Manager 2016-21 Displayed page address can be overridden 2016-20 Memory leak in libstagefright when deleting an array during MP4 processing 2016-19 Linux video memory DOS with Intel drivers 2016-18 CSP reports fail to strip location information for embedded iframe pages 2016-17 Local file overwriting and potential privilege escalation through CSP reports 2016-16 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7)
2016-01-27Update to 44.0ryoon1-808/+895
Changelog: New Improved warning pages for certificate errors and untrusted connections Enable H.264 if system decoder is available Enable WebM/VP9 video support on systems that don't support MP4/H.264 In the animation-inspector timeline, lightning bolt icon next to animations running on the compositor thread Support the brotli compression format via HTTPS content-encoding Screenshot commands allow user choice of pixel ratio in Developer Tools Fixed Windows XP and Vista screensaver doesn't disable when watching videos (Bug 1193610) Various security fixes Changed To support unicode-range descriptor for webfonts, font matching under Linux now uses the same font matching code as other platforms Use a SHA-256 signing certificate for Windows builds, to meet new signing requirements Firefox has removed support for the RC4 decipher Firefox will no longer trust the Equifax Secure Certificate Authority 1024-bit root certificate or the UTN - DATACorp SGC to validate secure website certificates Stricter validation of web fonts On-screen keyboard support temporarily turned off for Windows 8 and Windows 8.1 Developer Right click on a logged object in the console to store it as a global variable on the page Visual tools for Animation: View/Edit CSS animation keyframe rules directly in the inspector Visually modify the cubic-bezier curve that drives the way animations progress through time Discover and scrub through all CSS animations and transitions playing on the page Learn more: http://devtoolschallenger.com/ Visual tools for Layout and Styles: Display rulers along the viewport to verify size and position and use the measurement tool to easily detect spacing and alignment problems Use CSS filters to preview and create real-time effects like drop-shadows, sepia, etc Learn more: http://devtoolschallenger.com/ New memory tool for inspecting the memory heap Service Workers API Built-in JSON reader to intuitively view, search, copy and save data without extensions Jump to function definitions in the debugger with Cmd-Click WebSocket Debugging API and add-on The rule view now displays styles using their authored text, and edits in the rule view are now linked to the style editor Security bugs: Fixed in Firefox 44 2016-12 Lightweight themes on Firefox for Android do not verify a secure connection 2016-11 Application Reputation service disabled in Firefox 43 2016-10 Unsafe memory manipulation found through code inspection 2016-09 Addressbar spoofing attacks 2016-08 Delay following click events in file download dialog too short on OS X 2016-07 Errors in mp_div and mp_exptmod cryptographic functions in NSS 2016-06 Missing delay following user click events in protocol handler dialog 2016-05 Addressbar spoofing through stored data url shortcuts on Firefox for Android 2016-04 Firefox allows for control characters to be set in cookie names 2016-03 Buffer overflow in WebGL after out of memory allocation 2016-02 Out of Memory crash when parsing GIF format images 2016-01 Miscellaneous memory safety hazards (rv:44.0 / rv:38.6)
2015-12-16Update to 43.0ryoon1-45/+119
Changelog: New Private Browsing with Tracking Protection offers choice of blocking additional trackers New Improved API support for m4v video playback New Firefox 64-bit for Windows is now available via the Firefox download page New Users can choose search suggestions from the Awesome Bar New On-screen keyboard displayed on selecting input field on devices running Windows 8 or greater New Firefox Health Report has switched to use the same data collection mechanism as telemetry Developer Markup view shows indicators for pseudo-classes locked for elements Developer Bind F1 key to open the settings when the toolbox is focused Developer New 'Use in Console' context menu item in Inspector to store selected element in a temporary variable Developer Search button next to overridden CSS properties to find similar properties in the rules view Developer Ability to filter styles from their property names in the rules view Developer Stack traces are now shown for exceptions inside the console Developer Added ability to display server-side logs in the console Developer Ability to choose resolution for the GCLI screenshot command Developer Subresource integrity allows developers to make their sites more secure Developer Network requests in Console now link to Network panel instead of opening in a popup Developer Unprefixed 'hyphens' property is now supported Developer WebIDE now has a sidebar-based UI Developer The 'transform-origin' property is now supported on SVG elements Developer Animation inspector now displays animations in a timeline Developer Single-process mode is no longer supported for NPAPI plugins Fixed Eyedropper tool does not work as expected when page is zoomed Fixed Various security fixes Fixed in Firefox 43 2015-149 Cross-site reading attack through data and view-source URIs 2015-148 Privilege escalation vulnerabilities in WebExtension APIs 2015-147 Integer underflow and buffer overflow processing MP4 metadata in libstagefright 2015-146 Integer overflow in MP4 playback in 64-bit versions 2015-145 Underflow through code inspection 2015-144 Buffer overflows found through code inspection 2015-143 Linux file chooser crashes on malformed images due to flaws in Jasper library 2015-142 DOS due to malformed frames in HTTP/2 2015-141 Hash in data URI is incorrectly parsed 2015-140 Cross-origin information leak through web workers error events 2015-139 Integer overflow allocating extremely large textures 2015-138 Use-after-free in WebRTC when datachannel is used after being destroyed 2015-137 Firefox allows for control characters to be set in cookies 2015-136 Same-origin policy violation using perfomance.getEntries and history navigation 2015-135 Crash with JavaScript variable assignment with unboxed objects 2015-134 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5)
2015-11-03Update to 42.0ryoon1-89/+115
Changelog: New Private Browsing with Tracking Protection blocks certain Web elements that could be used to record your behavior across sites New Control Center that contains site security and privacy controls New Indicator added to tabs that play audio with one-click muting New WebRTC improvements: IPV6 support Preferences for controlling ICE candidate generation and IP exposure Hooks for extensions to allow/deny createOffer/Answer Improved ability for applications to monitor and control which devices are used in getUserMedia New Login Manager improvements: Improved heuristics to save usernames and passwords Edit and show all logins in line, Copy/Paste usernames/passwords from the Context menu Migration imports your passwords to Firefox from Google Chrome for Windows and Internet Explorer; import anytime from the Login Manager Changed Improved performance on interactive websites that trigger a lot of restyles HTML5 Media Source Extension for HTML5 video available for all sites HTML5 Support ImageBitmap and createImageBitmap() HTML5 Implemented ES6 Reflect Developer Ability to save filter presets inside CSS Filter Tooltip Developer CSS filter presets in the Inspector Developer Configurable Firefox OS Simulator in WebIDE, to simulate reference devices like phones, tablets, even TVs Developer Asynchronous call stacks now allow web developers to follow the code flow through setTimeout, DOM event handlers, and Promise handlers. Developer Remote website debugging over WiFi (no USB cable or ADB needed) Developer View HTML source in a tab
2015-09-23Update to 41.0ryoon1-52/+95
Changelog: New Enhance IME support on Windows (Vista +) using TSF (Text Services Framework) New Ability to set a profile picture for your Firefox Account New Firefox Hello now includes instant messaging New SVG images can be used as favicons New Improved box-shadow rendering performance Changed WebRTC now requires perfect forward secrecy Changed WARP is disabled on Windows 7 Changed Updates to image decoding process Changed Support for running animations of 'transform' and 'opacity' on the compositor thread HTML5 MessageChannel and MessagePort API enabled by default HTML5 Added support for the transform-origin property on SVG elements HTML5 CSS Font Loading API enabled by default HTML5 Navigator.onLine now varies with actual internet connectivity (Windows and Mac OS X only) HTML5 Copy/Cut Web content from JavaScript to the OS clipboard with document.execCommand("cut"/"copy") HTML5 Implemented Cache API for querying named caches that are accessible Window, Worker, and ServiceWorker Developer Removed support for binary XPCOM components in extensions, use addon SDK "system/child_process" pipe mechanism for native binaries instead Developer Network requests can be exported in HAR format Developer Quickly add new CSS rule with New Rule button in the Inspector Developer Screenshot a node or element from markup view with the Screenshot Node context menu item Developer Copy element CSS rule declarations with the Copy Rule Declaration context menu item in the Inspector Developer Pseudo-Class panel in the Inspector Fixed Picture element does not react to resize/viewport changes Fixed Various security fixes Security fixes: Fixed in Firefox 41 2015-114 Information disclosure via the High Resolution Time API 2015-113 Memory safety errors in libGLES in the ANGLE graphics library 2015-112 Vulnerabilities found through code inspection 2015-111 Errors in the handling of CORS preflight request headers 2015-110 Dragging and dropping images exposes final URL after redirects 2015-109 JavaScript immutable property enforcement can be bypassed 2015-108 Scripted proxies can access inner window 2015-107 Out-of-bounds read during 2D canvas display on Linux 16-bit color depth systems 2015-106 Use-after-free while manipulating HTML media content 2015-105 Buffer overflow while decoding WebM video 2015-104 Use-after-free with shared workers and IndexedDB 2015-103 URL spoofing in reader mode 2015-102 Crash when using debugger with SavedStacks in JavaScript 2015-101 Buffer overflow in libvpx while parsing vp9 format video 2015-100 Arbitrary file manipulation by local user through Mozilla updater 2015-99 Site attribute spoofing on Android by pasting URL with unknown scheme 2015-98 Out of bounds read in QCMS library with ICC V4 profile attributes 2015-97 Memory leak in mozTCPSocket to servers 2015-96 Miscellaneous memory safety hazards (rv:41.0 / rv:38.3)
2015-08-11Update to 40.0ryoon1-110/+186
Changelog: New Support for Windows 10 New Added protection against unwanted software downloads New User can receive suggested tiles in the new tab page based on categories Firefox matches to browsing history (en-US only). New Hello allows adding a link to conversations to provide context on what the conversation will be about New New style for add-on manager based on the in-content preferences style New Improved scrolling, graphics, and video playback performance with off main thread compositing (GNU/Linux only) New Graphic blocklist mechanism improved: Firefox version ranges can be specified, limiting the number of devices blocked Changed Add-on extensions that are not signed by Mozilla will display a warning Changed NPAPI Plug-in performance improved via asynchronous initialization Changed Smoother animation and scrolling with hardware vsync (Windows only) Changed JPEG images use less memory when scaled and can be painted faster Changed Sub-resources can no longer request HTTP authentication, thus protecting users from inadvertently disclosing login data HTML5 IndexedDB transactions are now non-durable by default HTML5 Implemented AudioBufferSourceNode.detune to modulate playback rate in cents, a logarithmic unit of measure used for musical intervals Developer Improved Performance tools in the developer tools: Waterfall view, Call Tree view and a Flame Chart view Developer New rules view tooltip in the Inspector to tweak CSS Filter values Developer Console API messages from SharedWorker and ServiceWorker are now displayed in web console Developer New page ruler highlighting tool that displays lightweight horizontal and vertical rules on a page Developer Inspector now searches across all content frames in a page Fixed Kannada text does not display properly in built-in pdf viewer Fixed Various security fixes Known Issues unresolved If Firefox is restarted from an add-on install notification, on-going private browsing downloads might be canceled without warning (1185294) Fixed in Firefox 40 2015-92 Use-after-free in XMLHttpRequest with shared workers 2015-91 Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification 2015-90 Vulnerabilities found through code inspection 2015-89 Buffer overflows on Libvpx when decoding WebM video 2015-88 Heap overflow in gdk-pixbuf when scaling bitmap images 2015-87 Crash when using shared memory in JavaScript 2015-86 Feed protocol with POST bypasses mixed content protections 2015-85 Out-of-bounds write with Updater and malicious MAR file 2015-84 Arbitrary file overwriting through Mozilla Maintenance Service with hard links 2015-83 Overflow issues in libstagefright 2015-82 Redefinition of non-configurable JavaScript object properties 2015-81 Use-after-free in MediaStream playback 2015-80 Out-of-bounds read with malformed MP3 file 2015-79 Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)
2015-07-03Update to 39.0ryoon1-20/+68
Changelog: New Share Hello URLs with social networks New Project Silk: Smoother animation and scrolling (Mac OS X) New Support for 'switch' role in ARIA 1.1 (web accessibility) New SafeBrowsing malware detection lookups enabled for downloads (Mac OS X and Linux) New Support for new Unicode 8.0 skin tone emoji Changed Removed support for insecure SSLv3 for network communications Changed Disable use of RC4 except for temporarily whitelisted hosts Changed The malware detection service for downloads now covers common Mac file types (Bug 1138721) Changed of displaying dashed lines is improved (Mac OS X) (Bug 1123019) HTML5 List-style-type now accepts a string value HTML5 Enable the Fetch API for network requests from dedicated, shared and service workers HTML5 Cascading of CSS transitions and animations now matches the current spec HTML5 Implement <link rel="preconnect">allowing anticipation of a future connection without revealing any information HTML5 Added support for CSS Scroll Snap Points Developer Drag and drop enabled for nodes in Inspector markup view Developer Webconsole input history persists even after closing the toolbox Developer Cubic bezier tooltip now shows a gallery of timing-function presets for use with CSS animations Developer localhost is now available offline for WebSocket connections Fixed Improve performance for IPv6 fallback to IPv4 Fixed Fix incomplete downloads being marked as complete by detecting broken HTTP1.1 transfers Fixed The Security state indicator on a page now correctly ignores loads caused by previous pages Fixed Fixed an issue where a Hello conversation window would sometimes fail to open Fixed A regression that could lead to Flash not displaying has been fixed Fixed Update to NSS 3.19.2 Fixed Various security fixes Fixed in Firefox 39 2015-71 NSS incorrectly permits skipping of ServerKeyExchange 2015-70 NSS accepts export-length DHE keys with regular DHE cipher suites 2015-69 Privilege escalation in PDF.js 2015-68 OS X crash reports may contain entered key press information 2015-67 Key pinning is ignored when overridable errors are encountered 2015-66 Vulnerabilities found through code inspection 2015-65 Use-after-free in workers while using XMLHttpRequest 2015-64 ECDSA signature validation fails to handle some signatures correctly 2015-63 Use-after-free in Content Policy due to microtask execution error 2015-62 Out-of-bound read while computing an oscillator rendering range in Web Audio 2015-61 Type confusion in Indexed Database Manager 2015-60 Local files or privileged URLs in pages can be opened into new tabs 2015-59 Miscellaneous memory safety hazards (rv:39.0 / rv:31.8 / rv:38.1)
2015-06-03Update to 38.0.5ryoon1-1/+56
Changelog: New: Keep track of articles and videos with Pocket New: Clean formatting for articles and blog posts with Reader View New: Share the active tab or window in a Hello conversation Fixed: A race condition that would cause Firefox to stop painting when switching tabs (bug 1067470) Fixed: Fixed graphics performance when using the built-in VGA driver on Windows 7 (Bug 1165732)
2015-05-12Update to 38.0ryoon1-35/+110
Changelog: New New tab-based preferences New Ruby annotation support New Base for the next ESR release. Changed autocomplete=off is no longer supported for username/password fields Changed URL parser avoids doing percent encoding when setting the Fragment part of the URL, and percent decoding when getting the Fragment in line with the URL spec Changed RegExp.prototype.source now returns "(?:)" instead of the empty string for empty regular expressions Changed Improved page load times via speculative connection warmup HTML5 WebSocket now available in Web Workers HTML5 BroadcastChannel API implemented HTML5 Implemented srcset attribute and <picture> element for responsive images HTML5 Implemented DOM3 Events KeyboardEvent.code HTML5 Mac OS X: Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube HTML5 Implemented Encrypted Media Extensions (EME) API to support encrypted HTML5 video/audio playback (Windows Vista or later only) HTML5 Automatically download Adobe Primetime Content Decryption Module (CDM) for DRM playback through EME (Windows Vista or later only) Developer Optimized-out variables are now visible in Debugger UI Developer XMLHttpRequest logs in the web console are now visually labelled and can be filtered separately from regular network requests Developer WebRTC now has multistream and renegotiation support Developer copy command added to console Fixed Various security fixes Fixed in Firefox 38 2015-58 Mozilla Windows updater can be run outside of application directory 2015-57 Privilege escalation through IPC channel messages 2015-56 Untrusted site hosting trusted page can intercept webchannel responses 2015-55 Buffer overflow and out-of-bounds read while parsing MP4 video metadata 2015-54 Buffer overflow when parsing compressed XML 2015-53 Use-after-free due to Media Decoder Thread creation during shutdown 2015-52 Sensitive URL encoded information written to Android logcat 2015-51 Use-after-free during text processing with vertical text enabled 2015-50 Out-of-bounds read and write in asm.js validation 2015-49 Referrer policy ignored when links opened by middle-click and context menu 2015-48 Buffer overflow with SVG content and CSS 2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer 2015-46 Miscellaneous memory safety hazards (rv:38.0 / rv:31.7)
2015-04-16Fix PLIST.hiramatsu1-2/+1
Because this package does not use gnomevfs, libnkgnomevfs.so is not installed.
2015-04-05Update to 37.0ryoon1-15/+56
* Bump nspr requirement. Changelog: New Heartbeat user rating system - your feedback about Firefox New Yandex set as default search provider for the Turkish locale New Bing search now uses HTTPS for secure searching New Improved protection against site impersonation via OneCRL centralized certificate revocation New Opportunistically encrypt HTTP traffic where the server supports HTTP/2 AltSvc Changed Disabled insecure TLS version fallback for site security Changed Extended SSL error reporting for reporting non-certificate errors Changed TLS False Start optimization now requires a cipher suite using AEAD construction Changed Improved certificate and TLS communication security by removing support for DSA Changed Improved performance of WebGL rendering on Windows HTML5 Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube (Windows only) HTML5 Added support for CSS display:contents HTML5 IndexedDB now accessible from worker threads HTML5 New SDP/JSEP implementation in WebRTC Developer Debug tabs opened in Chrome Desktop, Chrome for Android, and Safari for iOS Developer New Inspector animations panel to control element animations Developer New Security Panel included in Network Panel Developer Debugger panel support for chrome:// and about:// URIs Developer Added logging of weak ciphers to the web console Fixed Various security fixes Fixed in Firefox 37 2015-42 Windows can retain access to privileged content on navigation to unprivileged pages 2015-41 PRNG weakness allows for DNS poisoning on Android 2015-40 Same-origin bypass through anchor navigation 2015-39 Use-after-free due to type confusion flaws 2015-38 Memory corruption crashes in Off Main Thread Compositing 2015-37 CORS requests should not follow 30x redirections after preflight 2015-36 Incorrect memory management for simple-type arrays in WebRTC 2015-35 Cursor clickjacking with flash and images 2015-34 Out of bounds read in QCMS library 2015-33 resource:// documents can load privileged pages 2015-32 Add-on lightweight theme installation approval bypassed through MITM attack 2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin 2015-30 Miscellaneous memory safety hazards (rv:37.0 / rv:31.6)
2015-02-28Update to 36.0ryoon1-15/+44
Changelog: New Pinned tiles on the new tab page can be synced New Support for the full HTTP/2 protocol. HTTP/2 enables a faster, more scalable, and more responsive web. New Locale added: Uzbek (uz) Changed -remote option removed Changed No longer accept insecure RC4 ciphers whenever possible Changed Phasing out Certificates with 1024-bit RSA Keys Changed Shut down hangs will now show the crash reporter before exiting the program Changed Add-on Compatibility HTML5 Support for the ECMAScript 6 Symbol data type added HTML5 unicode-range CSS descriptor implemented HTML5 CSSOM-View scroll behavior implemented allowing smooth scrolling of content without custom libraries HTML5 object-fit and object-position implemented. Defines how and where the content of a replaced element is displayed HTML5 isolation CSS property implemented. Create a new stacking context to isolate groups of boxes to control which blend together HTML5 CSS3 will-change property implemented. Hints the browser of elements that will be modified. The browser will perform some performance optimization for these HTML5 Changed JavaScript 'const' semantics to conform better to the ES6 specification. The const declaration is now block-scoped and requires an initializer. It also can not be redeclared anymore. HTML5 Improved ES6 generators for better performance Developer Eval sources now appear in the Debugger Debug JavaScript code that is evaluated dynamically, either as a string passed to eval() or as a string passed to the Function constructor Developer DOM Promises inspection Developer Inspector: More paste options in markup view Fixed CSS gradients work on premultiplied colors Fixed Fix some unexpected logout from Facebook or Google after restart Fixed Various security fixes Fixed in Firefox 36 2015-27 Caja Compiler JavaScript sandbox bypass 2015-26 UI Tour whitelisted sites in background tab can spoof foreground tabs 2015-25 Local files or privileged URLs in pages can be opened into new tabs 2015-24 Reading of local files through manipulation of form autocomplete 2015-23 Use-after-free in Developer Console date with OpenType Sanitiser 2015-22 Crash using DrawTarget in Cairo graphics library 2015-21 Buffer underflow during MP3 playback 2015-20 Buffer overflow during CSS restyling 2015-19 Out-of-bounds read and write while rendering SVG content 2015-18 Double-free when using non-default memory allocators with a zero-length XHR 2015-17 Buffer overflow in libstagefright during MP4 video playback 2015-16 Use-after-free in IndexedDB 2015-15 TLS TURN and STUN connections silently fail to simple TCP connections 2015-14 Malicious WebGL content crash when writing strings 2015-13 Appended period to hostnames can bypass HPKP and HSTS protections 2015-12 Invoking Mozilla updater will load locally stored DLL files 2015-11 Miscellaneous memory safety hazards (rv:36.0 / rv:31.5)
2015-01-30Fix many issues on Darwinpho1-1/+2
PLIST: * lib/firefox/libmozglue.so is built and installed as a shared library on some platforms including Darwin. mozilla-common.mk: * Sandboxing support is only available when the toolkit is cairo-cocoa. * It tries to use MacOS X 10.6 SDK by default, which is not always possible. patches/patch-build_gyp.mozbuild: * Don't assume iOS just because the toolkit is not cocoa. Ideally there should be an AC_SUBST just like 'ARM_ARCH' but nothing exists currently. * MacOS X SDK version should be able to configure with ./configure --enable-macos-target=VER patches/patch-extensions_spellcheck_hunspell_src_mozHunspell.cpp: * NS_NewNativeLocalFile() can fail and leave hunDir null, so we must check if it succeeded. This is not Darwin specific though. * "%%LOCALBASE%%" in the hunspell path is currently not substituted, which looks very erroneous to me. But since I don't know why ryoon@ changed it from "@PREFIX@" to "%%LOCALBASE%%" I leave it as it is. patches/patch-ipc_glue_moz.build: * Don't assume cocoa toolkit just because OS_ARCH is Darwin. patches/patch-js_src_asmjs_AsmJSSignalHandlers.cpp: * Increase portability for non-x86 Darwin by not hardwiring x86_THREAD_STATE. patches/patch-js_xpconnect_src_xpcprivate.h: * The declaration has to be C++11 'extern template', otherwise non-weak symbol collision will occur between libmozjs and libxul. We can't easily test if the feature is supported by compiler due to GCC bug #1773: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=1773 patches/patch-memory_mozalloc_VolatileBufferOSX.cpp: * Try to fallback to valloc(3) if posix_memalign(3) is not avialble. It has been added since MacOS 10.6. patches/patch-toolkit_library_moz.build: * GSTREAMER_LIBS are linked to libxul on Darwin, while they are dlopen(3)'ed at runtime on other platforms. The problem is that the toolkit being cocoa isn't relevant at all. It's Darwin that needs the special handling, not Cocoa. patches/patch-toolkit_xre_nsAppRunner.cpp: * MacOS X < 10.6 had an undocumented behavior concerning execve(2) inside a threaded process. If a process tried to call execve(2) and had more than one active thread, the kernel returned ENOTSUP. So we have to either fork(2) or vfork(2) before calling execve(2) to make sure the caller is single-threaded as otherwise the application fails to restart itself. patches/patch-xpcom_base_nsStackWalk.cpp, patches/patch-xpcom_build_PoisonIOInterposer.h: * Replace XP_MACOSX with XP_DARWIN as the former is not defined when the toolkit is not cocoa. patches/patch-xpcom_glue_standalone_nsXPCOMGlue.cpp: * Fix inconsistent use of XP_DARWIN and XP_MACOSX: LEADING_UNDERSCORE should be empty when we are going to load XPCOM using dlopen(3), not NSAddImage().
2015-01-16Update to 35.0ryoon1-39/+85
Changelog: New Firefox Hello with new rooms-based conversations model New New search UI improved and enabled for more locales New Access the Firefox Marketplace from the Tools menu and optional toolbar button New Built-in support for H264 (MP4) on Mac OS X Snow Leopard (10.6) and newer through native APIs New Use tiled rendering on OS X New Improved high quality image resizing performance New Improved handling of dynamic styling changes to increase responsiveness HTML5 Added support for the CSS Font Loading API HTML5 Resource Timing API implemented HTML5 CSS filters enabled by default HTML5 Changed JavaScript 'let' semantics to conform better to the ES6 specification Developer Support for inspecting ::before and ::after pseudo elements Developer Computed view: Nodes matching the hovered selector are now highlighted Developer Network Monitor: New request/response headers view (more info) Developer Added support for the EXT_blend_minmax WebGL extension Fixed Show DOM Properties context menu item in inspector Fixed Reduced resource usage for scaled images Fixed PDF.js updated to version 1.0.907 Fixed Non-HTTP(S) XHR now returns correct status code Fixed Various security fixes Security fixes: 2015-09 XrayWrapper bypass through DOM objects 2015-08 Delegated OCSP responder certificates failure with id-pkix-ocsp-nocheck extension 2015-07 Gecko Media Plugin sandbox escape 2015-06 Read-after-free in WebRTC 2015-05 Read of uninitialized memory in Web Audio 2015-04 Cookie injection through Proxy Authenticate responses 2015-03 sendBeacon requests lack an Origin header 2015-02 Uninitialized memory use during bitmap rendering 2015-01 Miscellaneous memory safety hazards (rv:35.0 / rv:31.4)
2014-12-01Update to 34.0.5ryoon1-55/+177
Changelog: New Default search engine changed to Yahoo! for North America New Default search engine changed to Yandex for Belarusian, Kazakh, and Russian locales New Improved search bar (en-US only) New Firefox Hello real-time communication client New Easily switch themes/personas directly in the Customizing mode New Wikipedia search now uses HTTPS for secure searching (en-US only) New Implementation of HTTP/2 (draft14) and ALPN New Recover from a locked Firefox process in the "Firefox is already running" dialog on Windows Changed Disabled SSLv3 Changed Proprietary window.crypto properties/functions re-enabled (to be removed in Firefox 35) Changed Firefox signed by Apple OS X version 2 signature HTML5 ECMAScript 6 WeakSet Implemented HTML5 JavaScript Template Strings Implemented HTML5 CSS3 Font variants and features control (e.g. kerning) implemented HTML5 WebCrypto: RSA-OAEP, PBKDF2 and AES-KW support HTML5 WebCrypto: wrapKey and unwrapKey implemented HTML5 WebCrypto: Import/export of JWK-formatted keys HTML5 matches() DOM API implemented (formerly mozMatchesSelector()) HTML5 Performance.now() for workers implemented HTML5 WebCrypto: ECDH support Developer WebIDE: Create, edit, and test a new Web application from your browser Developer Highlight all nodes that match a given selector in the Style Editor and the Inspector's Rules panel Developer Improved User Interface of the Profiler Developer console.table function added to web console Fixed CSS transitions start correctly when started at the same time as changes to display, position, overflow, and similar properties Fixed Various security fixes 2014-89 Bad casting from the BasicThebesLayer to BasicContainerLayer 2014-88 Buffer overflow while parsing media content 2014-87 Use-after-free during HTML5 parsing 2014-86 CSP leaks redirect data via violation reports 2014-85 XMLHttpRequest crashes with some input streams 2014-84 XBL bindings accessible via improper CSS declarations 2014-83 Miscellaneous memory safety hazards (rv:34.0 / rv:31.3)
2014-11-15firefox-33.1 has DuckDuckGo as a search option,szptvlfn1-2/+1
so remove related patches.
2014-11-10Update to 33.1ryoon1-1/+5
Changelog: New Forget Button added New Enhanced Tiles New Privacy tour introduced New Adding DuckDuckGo as a search option
2014-11-06Bump PKGREVISIONryoon1-1/+2
* Build libmozjs.so shared library again. Thank you, joerg@.
2014-10-29Bump PKGREVISIONryoon1-2/+1
* Disable libmozjs.so to avoid WRKDIR reference error.
2014-10-15Update to 33.0ryoon1-13/+155
Changelog: New OpenH264 support (sandboxed) New Improved search experience through the location bar New Slimmer and faster JavaScript strings New Search suggestions on the Firefox Start (about:home) and new tab (about:newtab) pages New Windows: OMTC enabled by default New New CSP (Content Security Policy) backend New Support for connecting to HTTP proxy over HTTPS New Improved reliability of the session restoration New Azerbaijani [az] locale added Changed Proprietary window.crypto properties/functions removed Changed JSD (JavaScript Debugger Service) removed in favor of the Debugger interface HTML5 @counter-style rule from CSS3 Counter Styles specification implemented HTML5 DOMMatrix interface implemented Developer Cubic-bezier curves editor Developer Display which elements have listeners attached Developer New sidebar which displays a list of shortcuts to every @media rule in the current stylesheet Developer Paint flashing for browser content repaints Developer Editable @keyframes rules in the Rules section of the Inspector Developer CSS transform highlighter in the style-inspector Fixed Fix incomplete downloads being marked as complete by detecting broken HTTP1.1 transfers (237623) Fixed Various security fixes Fixed in Firefox 33 MFSA 2014-82 Accessing cross-origin objects via the Alarms API MFSA 2014-81 Inconsistent video sharing within iframe MFSA 2014-80 Key pinning bypasses MFSA 2014-79 Use-after-free interacting with text directionality MFSA 2014-78 Further uninitialized memory use during GIF MFSA 2014-77 Out-of-bounds write with WebM video MFSA 2014-76 Web Audio memory corruption issues with custom waveforms MFSA 2014-75 Buffer overflow during CSS manipulation MFSA 2014-74 Miscellaneous memory safety hazards (rv:33.0 / rv:31.2)
2014-10-05Update to 32.0.3ryoon1-40/+142
Changelog: Fixed 32.0.3: New security fixes can be found here New New HTTP cache provides improved performance including crash recovery New Integration of generational garbage collection New Public key pinning support enabled New View historical use information for logins stored in password manager New Display the number of found items in the find toolbar New Easier back, forward, reload, and bookmarking through the context menu New Lower Sorbian [dsb] locale added Changed Removed and turned off trust bit for some 1024-bit root certificates Changed Performance improvements to Password Manager and Add-on Manager HTML5 drawFocusIfNeeded enabled by default HTML5 ECMAScript 6 built-in method Array#copyWithin implemented HTML5 CSS position:sticky enabled by default HTML5 mix-blend-mode enabled by default HTML5 New Array built-in: Array.from() HTML5 navigator.languages property and languagechange event implemented HTML5 Vibration API updated to latest W3C spec HTML5 CSS box-decoration-break replaces -moz-background-inline-policy HTML5 box-decoration-break enabled by default Developer HiDPI support in Developer Tools UI Developer Inspector button moved to the top left Developer Hidden nodes displayed differently in the markup-view Developer New Web Audio Editor Developer Code completion and inline documentation added to Scratchpad Fixed 32.0.2 - Corrupt installations cause Firefox to crash on update Fixed 32.0.1 - Stability issues for computers with multiple graphics cards Fixed 32.0.1 - Mixed content icon may be incorrectly displayed instead of lock icon for SSL sites Fixed 32.0.1 - WebRTC: setRemoteDescription() silently fails if no success callback is specified Fixed Various security fixes Fixed Mac OS X: cmd-L does not open a new window when no window is available Fixed Text Rendering Issues on Windows 7 with Platform Update KB2670838 (MSIE 10 Prerequisite) or on Windows 8.1 Security fixes: Fixed in Firefox 32.0.3 MFSA 2014-73 RSA Signature Forgery in NSS Fixed in Firefox 32 MFSA 2014-72 Use-after-free setting text directionality MFSA 2014-71 Profile directory file access through file: protocol MFSA 2014-70 Out-of-bounds read in Web Audio audio timeline MFSA 2014-69 Uninitialized memory use during GIF rendering MFSA 2014-68 Use-after-free during DOM interactions with SVG MFSA 2014-67 Miscellaneous memory safety hazards (rv:32.0 / rv:31.1 / rv:24.8)
2014-07-24Update to 31.0ryoon1-23/+273
Changelog: New Add the search field to the new tab page New Support of Prefer:Safe http header for parental control (learn more) New mozilla::pkix as default certificate verifier (learn more) New Block malware from downloaded files (learn more) New Partial implementation of the OpenType MATH table (section 6.3.6) see documentation about mathematical fonts and the MathML Torture Test for details New audio/video .ogg and .pdf files handled by Firefox if no application specified (Windows only) New Upper Sorbian [hsb] locale added Changed Removal of the CAPS infrastructure for specifying site-specific permissions (via capability.policy.* preferences). Most notably, attempts to use this functionality to grant access to the clipboard will no longer work. The sole exception is the checkloaduri permission, which may still be used as before to allow sites to load file:// URIs. HTML5 WebVTT implemented and enabled (learn more) HTML5 CSS3 variables implemented (learn more) Developer Developer Tools: Add-on Debugger (learn more) Developer Developer Tools: Canvas Debugger (learn more) Developer New Array built-in: Array.prototype.fill() (learn more) Developer New Object built-in: Object.setPrototypeOf() (learn more) Developer CSP 1.1 nonce-source and hash-source enabled by default Developer Developer Tools: Eyedropper tool added to the color picker (learn more) Developer Developer Tools: Editable Box Model (learn more) Developer Developer Tools: Code Editor improvements (learn more) Developer Developer Tools: Console stack traces (learn more) Developer Developer Tools: Copy as cURL (learn more) Developer Developer Tools: Styled console logs (learn more) Developer navigator.sendBeacon enabled by default (learn more) Developer Dialogs spawned from the onbeforeunload event no longer block access to the rest of the browser Fixed Search for partially selected link text from context menu (985824) Fixed Various security fixes Fixed in Firefox 31 MFSA 2014-66 IFRAME sandbox same-origin access through redirect MFSA 2014-65 Certificate parsing broken by non-standard character encoding MFSA 2014-64 Crash in Skia library when scaling high quality images MFSA 2014-63 Use-after-free while when manipulating certificates in the trusted cache MFSA 2014-62 Exploitable WebGL crash with Cesium JavaScript library MFSA 2014-61 Use-after-free with FireOnStateChange event MFSA 2014-60 Toolbar dialog customization event spoofing MFSA 2014-59 Use-after-free in DirectWrite font handling MFSA 2014-58 Use-after-free in Web Audio due to incorrect control message ordering MFSA 2014-57 Buffer overflow during Web Audio buffering for playback MFSA 2014-56 Miscellaneous memory safety hazards (rv:31.0 / rv:24.7)
2014-06-11Update to 30.0ryoon1-39/+165
* debug build is broken Changelog: New Sidebars button in browser chrome enables faster access to social, bookmark, & history sidebars New Mac OS X command-E sets find term to selected text New Support for GStreamer 1.0 Changed Disallow calling WebIDL constructors as functions on the web Developer With the exception of those bundled inside an extension or ones that are whitelisted, plugins will no longer be activated by default (see blog post) Developer Fixes to box-shadow and other visual overflow (see bug 480888) Developer Mute and volume available per window when using WebAudio Developer background-blend-mode enabled by default Developer Use of line-height allowed for <input type="reset|button|submit"> Developer ES6 array and generator comprehensions implemented (read docs for more details) Developer Error stack now contains column number Developer Support for alpha option in canvas context options (feature description) Fixed Ignore autocomplete="off" when offering to save passwords via the password manager (see 956906) Fixed TypedArrays don't support new named properties (see 695438) Fixed Various security fixes Fixed in Firefox 30 MFSA 2014-54 Buffer overflow in Gamepad API MFSA 2014-53 Buffer overflow in Web Audio Speex resampler MFSA 2014-52 Use-after-free with SMIL Animation Controller MFSA 2014-51 Use-after-free in Event Listener Manager MFSA 2014-50 Clickjacking through cursor invisability after Flash interaction MFSA 2014-49 Use-after-free and out of bounds issues found using Address Sanitizer MFSA 2014-48 Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
2014-05-28PR pkg/48840: Fix PLIST on Cygwin and Darwinpho1-1/+2
libmozglue is built and installed as a shared library on these platforms.
2014-05-05Fix packaging under OpenBSDryoon1-8/+8
* It create .so.1.0 libraries instead of .so * Use bsdtar as tar forcibly under OpenBSD * Fix tremor/vorbis conditional, but it is not used now
2014-04-30Update to 29.0ryoon1-68/+208
* Restore html5 audio playback under NetBSD Changelog: New Significant new customization mode makes it easy to personalize your Web experience to access the features you use the most (learn more) New A new, easy to access menu sits in the right hand corner of Firefox and includes popular browser controls New Sleek new tabs provide an overall smoother look and fade into the background when not active New An interactive onboarding tour to guide users through the new Firefox changes New The ability to set up Firefox Sync by creating a Firefox account (learn more) New Gamepad API finalized and enabled (learn more) New HTTPS used for Yahoo Searches performed in en-US locale New Malay [ma] locale added Changed Clicking on a W3C Web Notification will switch to the originating tab Developer 'box-sizing' (dropping the -moz- prefix) implemented (learn more) Developer Console object available in Web Workers (learn more) Developer Promises enabled by default (learn more) Developer SharedWorker enabled by default Developer <input type="number"> implemented and enabled Developer <input type="color"> implemented and enabled Developer Enabled ECMAScript Internationalization API Developer Add-on bar has been removed, content moved to navigation bar Developer Implemented URLSearchParams from the URL specification (see MDN for details ) Fixed Various security fixes Fixed in Firefox 29 MFSA 2014-47 Debugger can bypass XrayWrappers with JavaScript MFSA 2014-46 Use-after-free in nsHostResolve MFSA 2014-45 Incorrect IDNA domain name matching for wildcard certificates MFSA 2014-44 Use-after-free in imgLoader while resizing images MFSA 2014-43 Cross-site scripting (XSS) using history navigations MFSA 2014-42 Privilege escalation through Web Notification API MFSA 2014-41 Out-of-bounds write in Cairo MFSA 2014-40 Firefox for Android addressbar suppression MFSA 2014-39 Use-after-free in the Text Track Manager for HTML video MFSA 2014-38 Buffer overflow when using non-XBL object as XBL MFSA 2014-37 Out of bounds read while decoding JPG images MFSA 2014-36 Web Audio memory corruption issues MFSA 2014-35 Privilege escalation through Mozilla Maintenance Service Installer MFSA 2014-34 Miscellaneous memory safety hazards (rv:29.0 / rv:24.5)
2014-03-20Update to 28.0ryoon1-26/+51
Changelog: NEW VP9 video decoding implemented NEW Mac OS X: Notification Center support for web notifications NEW Horizontal HTML5 audio/video volume control NEW Support for Opus in WebM CHANGED Now that spdy/3 is implemented support for spdy/2 has been removed and servers without spdy/3 will negotiate to http/1 without any penalty DEVELOPER Support for MathML 2.0 'mathvariant' attribute DEVELOPER Background thread hang reporting DEVELOPER Support for multi-line flexbox in layout FIXED Various security fixes Fixed in Firefox 28 MFSA 2014-32 Out-of-bounds write through TypedArrayObject after neutering MFSA 2014-31 Out-of-bounds read/write through neutering ArrayBuffer objects MFSA 2014-30 Use-after-free in TypeObject MFSA 2014-29 Privilege escalation using WebIDL-implemented APIs MFSA 2014-28 SVG filters information disclosure through feDisplacementMap MFSA 2014-27 Memory corruption in Cairo during PDF font rendering MFSA 2014-26 Information disclosure through polygon rendering in MathML MFSA 2014-25 Firefox OS DeviceStorageFile object vulnerable to relative path escape MFSA 2014-24 Android Crash Reporter open to manipulation MFSA 2014-23 Content Security Policy for data: documents not preserved by session restore MFSA 2014-22 WebGL content injection from one domain to rendering in another MFSA 2014-21 Local file access via Open Link in new tab MFSA 2014-20 onbeforeunload and Javascript navigation DOS MFSA 2014-19 Spoofing attack on WebRTC permission prompt MFSA 2014-18 crypto.generateCRMFRequest does not validate type of key MFSA 2014-17 Out of bounds read during WAV file decoding MFSA 2014-16 Files extracted during updates are not always read only MFSA 2014-15 Miscellaneous memory safety hazards (rv:28.0 / rv:24.4)
2014-02-08Update to 27.0ryoon1-14/+93
Changelog: NEW You can now run more than one service at a time with Firefox SocialAPI, allowing you to receive notifications, chat and more from multiple integrated services CHANGED Enabled TLS 1.1 (RFC 4346) and TLS 1.2 (RFC 5246) by default CHANGED Added support for SPDY 3.1 protocol DEVELOPER Ability to reset style sheets using 'all:unset' DEVELOPER You can now choose to deobfuscate javascript in the debugger (see 762761) DEVELOPER Added support for scrolled fieldsets (see 261037) DEVELOPER Implemented allow-popups directive for iframe sandbox, enabling increased security (see 766282) DEVELOPER CSS cursor keywords -moz-grab and -moz-grabbing have been unprefixed (see 880672) DEVELOPER Added support for ES6 generators in SpiderMonkey (see blog post) DEVELOPER Implemented support for mathematical function Math.hypot() in ES6 (see 896264) HTML5 Dashed line support on Canvas (see 768067) FIXED Get Azure/Skia content rendering working on Linux (see 740200) FIXED 27.0: Security fixes can be found here Fixed in Firefox 27 MFSA 2014-13 Inconsistent JavaScript handling of access to Window objects MFSA 2014-12 NSS ticket handling issues MFSA 2014-11 Crash when using web workers with asm.js MFSA 2014-10 Firefox default start page UI content invokable by script MFSA 2014-09 Cross-origin information leak through web workers MFSA 2014-08 Use-after-free with imgRequestProxy and image proccessing MFSA 2014-07 XSLT stylesheets treated as styles in Content Security Policy MFSA 2014-06 Profile path leaks to Android system log MFSA 2014-05 Information disclosure with *FromPoint on iframes MFSA 2014-04 Incorrect use of discarded images by RasterImage MFSA 2014-03 UI selection timeout missing on download prompts MFSA 2014-02 Clone protected content with XBL scopes MFSA 2014-01 Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
2013-12-15Update to 26.0ryoon1-18/+108
* Build outside WRKSRC, fix build Changelog: NEW All Java plug-ins are defaulted to 'click to play' NEW Password manager now supports script-generated password fields NEW Updates can now be performed by Windows users without write permissions to Firefox install directory (requires Mozilla Maintenance Service) NEW Support for H.264 on Linux if the appropriate gstreamer plug-ins are installed CHANGED Support for MP3 decoding on Windows XP, completing MP3 support across Windows OS versions CHANGED CSP implementation now supports multiple policies, including the case of both an enforced and Report-Only policy, per the spec DEVELOPER Social API now supports Social Bookmarking for multiple providers through its SocialMarks functionality (see MDN docs) DEVELOPER Math.ToFloat32 takes a JS value and converts it to a Float32, whenever possible DEVELOPER There is no longer a prompt when websites use appcache DEVELOPER Support for the CSS image orientation property DEVELOPER New App Manager allows you to deploy and debug HTML5 webapps on Firefox OS phones and the Firefox OS Simulator DEVELOPER IndexedDB can now be used as a "optimistic" storage area so it doesn't require any prompts and data is stored in a pool with LRU eviction policy, in short temporary storage FIXED When displaying a standalone image, Firefox matches the EXIF orientation information contained within the JPEG image (298619) FIXED Text Rendering Issues on Windows 7 with Platform Update KB2670838 (MSIE 10 Prerequisite) or on Windows 8.1 (812695) FIXED Improved page load times due to no longer decoding images that aren't visible (847223) FIXED AudioToolbox MP3 backend for OSX (914479) FIXED Various security fixes Fixed in Firefox 26 MFSA 2013-117 Mis-issued ANSSI/DCSSI certificate MFSA 2013-116 JPEG information leak MFSA 2013-115 GetElementIC typed array stubs can be generated outside observed typesets MFSA 2013-114 Use-after-free in synthetic mouse movement MFSA 2013-113 Trust settings for built-in roots ignored during EV certificate validation MFSA 2013-112 Linux clipboard information disclosure though selection paste MFSA 2013-111 Segmentation violation when replacing ordered list elements MFSA 2013-110 Potential overflow in JavaScript binary search algorithms MFSA 2013-109 Use-after-free during Table Editing MFSA 2013-108 Use-after-free in event listeners MFSA 2013-107 Sandbox restrictions not applied to nested object elements MFSA 2013-106 Character encoding cross-origin XSS attack MFSA 2013-105 Application Installation doorhanger persists on navigation MFSA 2013-104 Miscellaneous memory safety hazards (rv:26.0 / rv:24.2)
2013-11-02Update to 25.0ryoon1-4566/+67
* Enable pulseaudio by default, OSS support is dropped, and ALSA support on NetBSD does not work properly for me * Enable GStremer support for non-webm and non-theora video support * Create alsa option, and enabled on Linux by default Changelog: NEW Web Audio support NEW The find bar is no longer shared between tabs CHANGED If away from Firefox for months, you now will be offered the option to reset it to its default state while preserving your essential information CHANGED Resetting Firefox no longer clears your browsing session DEVELOPER CSS3 background-attachment:local support to control background scrolling DEVELOPER Many new ES6 functions implemented HTML5 iframe document content can now be specified inline FIXED Blank or missing page thumbnails when opening a new tab FIXED Security fixes can be found here Fixed in Firefox 25 MFSA 2013-102 Use-after-free in HTML document templates MFSA 2013-101 Memory corruption in workers MFSA 2013-100 Miscellaneous use-after-free issues found through ASAN fuzzing MFSA 2013-99 Security bypass of PDF.js checks using iframes MFSA 2013-98 Use-after-free when updating offline cache MFSA 2013-97 Writing to cycle collected object during image decoding MFSA 2013-96 Improperly initialized memory and overflows in some JavaScript functions MFSA 2013-95 Access violation with XSLT and uninitialized data MFSA 2013-94 Spoofing addressbar though SELECT element MFSA 2013-93 Miscellaneous memory safety hazards (rv:25.0 / rv:24.1 / rv:17.0.10)
2013-09-21Fix non-official branding build.ryoon1-2/+3
2013-09-21Try to reintrodece PLIST conditionals related to vorbis.ryoon1-2/+3
2013-09-21The about-wordmark resource changed from .svg to .pngmartin1-2/+2
2013-09-19Update to 24.0, ESR edition.ryoon1-81/+181
* Merge some patches via FreeBSD ports. * Tested on NetBSD/amd64 6.99.23 and DragonFly/amd64 3.4.1. * Use system hunspell dictionaries. * DuckDuckGo search window. * Enable system icu support. Changelog: NEW Support for new scrollbar style in Mac OS X 10.7 and newer NEW Implemented Close tabs to the right NEW Social: Ability to tear-off chat windows to view separately by simply dragging them out CHANGED Accessibility related improvements on using pinned tabs (see 577727) CHANGED Removed support for Revocation Lists feature (see 867465) CHANGED Performance improvements on New Tab Page loads (see 791670) DEVELOPER Major SVG rendering improvements around Image tiling and scaling (see 600207 ) DEVELOPER Improved and unified Browser console for enhanced debugging experience, replacing existing Error console DEVELOPER Removed support for sherlock files that are loaded from application or profile directory FIXED Replace fixed-ratio audio resampler in webrtc.org capture code with Speex resampler and eliminate pseudo-44000Hz rate ( see 886886) FIXED 24.0: Security fixes can be found here Fixed in Firefox 24 MFSA 2013-92 GC hazard with default compartments and frame chain restoration MFSA 2013-91 User-defined properties on DOM proxies get the wrong "this" object MFSA 2013-90 Memory corruption involving scrolling MFSA 2013-89 Buffer overflow with multi-column, lists, and floats MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes MFSA 2013-87 Shared object library loading from writable location MFSA 2013-86 WebGL Information disclosure through OS X NVIDIA graphic drivers MFSA 2013-85 Uninitialized data in IonMonkey MFSA 2013-84 Same-origin bypass through symbolic links MFSA 2013-83 Mozilla Updater does not lock MAR file after signature verification MFSA 2013-82 Calling scope for new Javascript objects can lead to memory corruption MFSA 2013-81 Use-after-free with select element MFSA 2013-80 NativeKey continues handling key messages after widget is destroyed MFSA 2013-79 Use-after-free in Animation Manager during stylesheet cloning MFSA 2013-78 Integer overflow in ANGLE library MFSA 2013-77 Improper state in HTML5 Tree Builder with templates MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 / rv:17.0.9)
2013-08-29Conditionalize the last remaining PLIST difference on sparc64martin1-2/+2
2013-08-29Skia does not support GL on big endian machines yet - so adjust PLISTmartin1-2/+2
by conditionalizing it.
2013-08-07Update to 23.0ryoon1-120/+309
* Install SDK to firefox-sdk directory. * Split multiple CONFIGURE_ARS's arguments. * Enable libmozjs.so build. Changelog: NEW Mixed content blocking enabled to protects users from man-in-the-middle attacks and eavesdroppers on HTTPS pages (learn more) NEW Options panel created for Web Developer Toolbox CHANGED "Enable JavaScript" preference checkbox has been removed and user-set values will be reset to the default CHANGED Updated Firefox Logo CHANGED Improved about:memory's functional UI CHANGED Simplified interface for notifications of plugin installation CHANGED Enabled DXVA2 on Windows Vista+ to accelerate H.264 video decoding CHANGED Users can now switch to a new search provider across the entire browser CHANGED CSP policies using the standard syntax and semantics will now be enforced CHANGED <input type='file'> rendering improvements (see bug 838675) CHANGED Replace fixed-ratio audio resampler in webrtc.org capture code with Speex resampler and eliminate pseudo-44000Hz rate CHANGED "Load images automatically" and Always show the tab bar" checkboxes removed from preferences and reset to defaults DEVELOPER HTML5 <input type="range"> form control implemented DEVELOPER Write more accessible pages on touch interfaces with new ARIA role for key buttons DEVELOPER Social share functionality DEVELOPER Added unprefixed requestAnimationFrame DEVELOPER Implemented a global browser console DEVELOPER Dropped blink effect from text-decoration: blink; and completely removed <blink> element DEVELOPER New feature in toolbox: Network Monitor FIXED Various security fixes n Firefox 23 MFSA 2013-75 Local Java applets may read contents of local file system MFSA 2013-74 Firefox full and stub installer DLL hijacking MFSA 2013-73 Same-origin bypass with web workers and XMLHttpRequest MFSA 2013-72 Wrong principal used for validating URI for some Javascript components MFSA 2013-71 Further Privilege escalation through Mozilla Updater MFSA 2013-70 Bypass of XrayWrappers using XBL Scopes MFSA 2013-69 CRMF requests allow for code execution and XSS attacks MFSA 2013-68 Document URI misrepresentation and masquerading MFSA 2013-67 Crash during WAV audio file decoding MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater MFSA 2013-65 Buffer underflow when generating CRMF requests MFSA 2013-64 Use after free mutating DOM during SetBody MFSA 2013-63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8)
2013-06-26Update to 22.0ryoon1-71/+362
* On NetBSD WebRTC support is disabled, because libxul.so has some errors in link stage. WebRTC support should be tested on non-NetBSD platforms. * It seems that OSS sound support is not working properly on NetBSD. Changelog: NEW WebRTC is now enabled by default! NEW Windows: Firefox now follows display scaling options to render text larger on high-res displays NEW Mac OS X: Download progress in Dock application icon NEW HTML5 audio/video playback rate can now be changed NEW Social services management implemented in Add-ons Manager NEW asm.js optimizations (OdinMonkey) enabled for major performance improvements CHANGED Improved WebGL rendering performance through asynchronous canvas updates CHANGED Plain text files displayed within Firefox will now word-wrap CHANGED For user security, the |Components| object is no longer accessible from web content CHANGED Pointer Lock API can now be used outside of fullscreen DEVELOPER CSS3 Flexbox implemented and enabled by default DEVELOPER New Web Notifications API implemented DEVELOPER Added clipboardData API for JavaScript access to a user's clipboard DEVELOPER New built-in font inspector HTML5 New HTML5 <data> and <time> elements FIXED Various security fixes FIXED Scrolling using some high-resolution-scroll aware touchpads feels slow (829952) Fixed in Firefox 22 MFSA 2013-62 Inaccessible updater can lead to local privilege escalation MFSA 2013-61 Homograph domain spoofing in .com, .net and .name MFSA 2013-60 getUserMedia permission dialog incorrectly displays location MFSA 2013-59 XrayWrappers can be bypassed to run user defined methods in a privileged context MFSA 2013-58 X-Frame-Options ignored when using server push with multi-part responses MFSA 2013-57 Sandbox restrictions not applied to nested frame elements MFSA 2013-56 PreserveWrapper has inconsistent behavior MFSA 2013-55 SVG filters can lead to information disclosure MFSA 2013-54 Data in the body of XHR HEAD requests leads to CSRF attacks MFSA 2013-53 Execution of unmapped memory through onreadystatechange event MFSA 2013-52 Arbitrary code execution within Profiler MFSA 2013-51 Privileged content access and execution via XBL MFSA 2013-50 Memory corruption found using Address Sanitizer MFSA 2013-49 Miscellaneous memory safety hazards (rv:22.0 / rv:17.0.7)
2013-06-21Bump PKGREVISION.ryoon1-7/+1
* Add NetBSD/sparc64 support from martin@. Almost all functionalities work fine, but https handling. * Enable system jpeg support. This is accidentally disabled.
2013-05-23Bump PKGREVISION.ryoon1-1/+2
* Remove reference to devel/xulrunner. * Move some common files for firefox/xulrunner-21.0. * Move patches from devel/sulrunner. * Take MAINTAINERship.
2013-05-19Fix gnome option.ryoon1-1/+3
This is related to PR pkg/47801. But devel/xulrunner is broken now.
2013-05-19Update to 21.0ryoon1-732/+6039
* This release of firefox is built with internal xulrunner. Because separated (system) xulrunner has prefs and chrome load problem. * gnome option is broken in libnkmozgnomevfs.so build. Changelog: NEW The Social API now supports multiple providers NEW Enhanced three-state UI for Do Not Track (DNT) NEW Firefox will suggest how to improve your application startup time if needed NEW Preliminary implementation of Firefox Health Report CHANGED Ability to restore removed thumbnails on New Tab Page CHANGED CSS -moz-user-select:none selection changed to improve compatibility with -webkit-user-select:none (bug 816298) CHANGED Graphics related performance improvements (bug 809821) CHANGED Removed E4X support from Spidermonkey DEVELOPER Implemented Remote Profiling DEVELOPER Integrated add-on SDK loader and API libraries into Firefox HTML5 Added support for <main> element HTML5 Implemented scoped stylesheets HTML5 Added support for window.crypto.getRandomValues FIXED Some function keys may not work when pressed (833719) FIXED Browsing and Download history clearing needs unification to avoid confusion on clearing download history (847627) FIXED 21.0: Security fixes can be found here Fixed in Firefox 21 MFSA 2013-48 Memory corruption found using Address Sanitizer MFSA 2013-47 Uninitialized functions in DOMSVGZoomEvent MFSA 2013-46 Use-after-free with video and onresize event MFSA 2013-45 Mozilla Updater fails to update some Windows Registry entries MFSA 2013-44 Local privilege escalation through Mozilla Maintenance Service MFSA 2013-43 File input control has access to full path MFSA 2013-42 Privileged access for content level constructor MFSA 2013-41 Miscellaneous memory safety hazards (rv:21.0 / rv:17.0.6)
2013-04-05Update to 20.0ryoon1-78/+83
Changelog: NEW Per-window Private Browsing. Learn more. NEW New download experience. Learn more. NEW Ability to close hanging plugins, without the browser hanging CHANGED Continued performance improvements around common browser tasks (page loads, downloads, shutdown, etc.) DEVELOPER Continued implementation of draft ECMAScript 6 - clear() and Math.imul DEVELOPER New JavaScript Profiler tool HTML5 getUserMedia implemented for web access to the user's camera and microphone (with user permission) HTML5 <canvas> now supports blend modes HTML5 Various <audio> and <video> improvements FIXED Details button on Crash Reporter (793972) FIXED Unity plugin doesn't display in HiDPI mode (829284) FIXED 20.0: Security fixes can be found here Fixed in Firefox 20 MFSA 2013-40 Out-of-bounds array read in CERT_DecodeCertPackage MFSA 2013-39 Memory corruption while rendering grayscale PNG images MFSA 2013-38 Cross-site scripting (XSS) using timed history navigations MFSA 2013-37 Bypass of tab-modal dialog origin disclosure MFSA 2013-36 Bypass of SOW protections allows cloning of protected nodes MFSA 2013-35 WebGL crash with Mesa graphics driver on Linux MFSA 2013-34 Privilege escalation through Mozilla Updater MFSA 2013-33 World read and write access to app_tmp directory on Android MFSA 2013-32 Privilege escalation through Mozilla Maintenance Service MFSA 2013-31 Out-of-bounds write in Cairo library MFSA 2013-30 Miscellaneous memory safety hazards (rv:20.0 / rv:17.0.5)
2013-02-22Update to 19.0ryoon1-5/+26
Sync with xulrunner-19.0.
2013-01-10Update to 18.0ryoon1-17/+14
Sync with devel/xulrunner 18.0.
2012-11-22fix lib/firefox/chrome/browser/content/branding/about-background.pngabs1-2/+1
2012-11-21Update to 17.0ryoon1-17/+54
* Add --enable-pulseaudio configure option (functionality is not tested) Changelog: NEW First revision of the Social API and support for Facebook Messenger NEW Click-to-play blocklisting implemented to prevent vulnerable plugin versions from running without the user's permission (see blog post) CHANGED Updated Awesome Bar experience with larger icons CHANGED Mac OS X 10.5 is no longer supported DEVELOPER JavaScript Maps and Sets are now iterable DEVELOPER SVG FillPaint and StrokePaint implemented DEVELOPER Improvements that make the Web Console, Debugger and Developer Toolbar faster and easier to use DEVELOPER New Markup panel in the Page Inspector allows easy editing of the DOM HTML5 Sandbox attribute for iframes implemented, enabling increased security FIXED Over twenty performance improvements, including fixes around the New Tab page FIXED Pointer lock doesn't work in web apps (769150) FIXED Page scrolling on sites with fixed headers (780345)
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-31 20:43:38 +0000