Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
|
|
Fix PR pkg/48777
|
|
|
|
|
|
|
|
version number, as suggested in PR 47418 a year ago. Also make sure
the localization packages claim they belong to the right corresponding
firefox packages, as a number of them were wrong.
|
|
|
|
|
|
|
|
NetBSD 6, requested by tron.
|
|
Recursively bump package revisions again after the "freetype2" and
"fontconfig" handling was fixed.
|
|
to address issues with NetBSD-6(and earlier)'s fontconfig not being
new enough for pango.
While doing that, also bump freetype2 dependency to current pkgsrc
version.
Suggested by tron in PR 47882
|
|
|
|
|
|
|
|
|
|
|
|
|
|
requested by Thomas Klausner.
|
|
(additionaly, reset PKGREVISION of qt4-* sub packages from base qt4 update)
|
|
|
|
|
|
|
|
|
|
pkgsrc changes:
* use own mozilla-common.mk, some dependency differ from recent Firefox.
* switch to use system cairo.
Fixed in Firefox 3.6.27
* MFSA 2012-11 libpng integer overflow
Fixed in Firefox 3.6.26
* MFSA 2012-08 Crash with malformed embedded XSLT stylesheets
* MFSA 2012-07 Potential Memory Corruption When Decoding Ogg Vorbis files
* MFSA 2012-04 Child nodes from nsDOMAttribute still accessible after removal of nodes
* MFSA 2012-02 Overly permissive IPv6 literal syntax
* MFSA 2012-01 Miscellaneous memory safety hazards (rv:10.0/ rv:1.9.2.26)
Fixed in Firefox 3.6.25
* MFSA 2011-59 .jar not treated as executable in Firefox 3.6 on Mac
|
|
a) tiff update to 4.0 (shlib major change)
b) glib2 update 2.30.2 (adds libffi dependency to buildlink3.mk)
Enjoy.
|
|
|
|
|
|
Fixed in Firefox 3.6.24
MFSA 2011-49 Memory corruption while profiling using Firebug
MFSA 2011-47 Potential XSS against sites using Shift-JIS
MFSA 2011-46 loadSubScript unwraps XPCNativeWrapper scope parameter (1.9.2 branch)
Fixed in Firefox 3.6.23
MFSA 2011-40 Code installation through holding down Enter
MFSA 2011-39 Defense against multiple Location headers due to CRLF Injection
MFSA 2011-38 XSS via plugins and shadowed window.location object
MFSA 2011-37 Integer underflow when using JavaScript RegExp
MFSA 2011-36 Miscellaneous memory safety hazards (rv:7.0 / rv:1.9.2.23)
|
|
|
|
Fixes some security issues:
MFSA 2011-34 Protection against fraudulent DigiNotar certificates
MFSA 2011-30 Security issues addressed in Firefox 3.6.20
MFSA 2011-24 Cookie isolation error
MFSA 2011-23 Multiple dangling pointer vulnerabilities
MFSA 2011-22 Integer overflow and arbitrary code execution in Array.reduceRight()
MFSA 2011-21 Memory corruption due to multipart/x-mixed-replace images
MFSA 2011-20 Use-after-free vulnerability when viewing XUL document with script disabled
MFSA 2011-19 Miscellaneous memory safety hazards (rv:3.0/1.9.2.18)
|
|
|
|
to facilitate coinstallation with current packages.
|
|
|
|
MFSA 2011-18 XSLT generate-id() function heap address leak
MFSA 2011-16 Directory traversal in resource: protocol
MFSA 2011-15 Escalation of privilege through Java Embedding Plugin
MFSA 2011-14 Information stealing via form history
MFSA 2011-13 Multiple dangling pointer vulnerabilities
MFSA 2011-12 Miscellaneous memory safety hazards (rv:2.0.1/ 1.9.2.17/ 1.9.1.19)
|
|
work for some users (sparc64 support, for example, is busted and
won't appear again until firefox-5.0).
|