summaryrefslogtreecommitdiff
path: root/www/firefox
AgeCommit message (Collapse)AuthorFilesLines
2016-05-19Pullup ticket #5015 - requested by sevanbsiegert23-427/+394
www/firefox: security fix Revisions pulled up: - www/firefox/Makefile 1.249-1.250 - www/firefox/PLIST 1.105-1.106 - www/firefox/distinfo 1.242-1.243 - www/firefox/mozilla-common.mk 1.73 - www/firefox/patches/patch-aa 1.45 - www/firefox/patches/patch-config_external_moz.build 1.11 - www/firefox/patches/patch-config_system-headers 1.18 - www/firefox/patches/patch-dom_media_gstreamer_GStreamerAllocator.cpp deleted - www/firefox/patches/patch-dom_media_moz.build 1.3 - www/firefox/patches/patch-gfx_skia_generate__mozbuild.py 1.4 - www/firefox/patches/patch-gfx_skia_moz.build 1.11 - www/firefox/patches/patch-gfx_skia_skia_src_core_SkUtilsArm.cpp 1.2 - www/firefox/patches/patch-gfx_skia_skia_src_opts_SkBitmapProcState__opts__arm.cpp deleted - www/firefox/patches/patch-gfx_skia_skia_src_opts_memset.arm.S deleted - www/firefox/patches/patch-gfx_thebes_moz.build 1.3 - www/firefox/patches/patch-media_libcubeb_src_cubeb.c 1.3 - www/firefox/patches/patch-media_libcubeb_src_cubeb__alsa.c 1.14 - www/firefox/patches/patch-media_libcubeb_src_moz.build 1.7 - www/firefox/patches/patch-media_libtheora_moz.build 1.5 - www/firefox/patches/patch-pb deleted - www/firefox/patches/patch-pc deleted - www/firefox/patches/patch-toolkit_library_moz.build 1.5 - www/firefox/patches/patch-xpcom_reflect_xptcall_md_unix_moz.build 1.5 --- Module Name: pkgsrc Committed By: ryoon Date: Wed Apr 13 20:37:33 UTC 2016 Modified Files: pkgsrc/www/firefox: Makefile PLIST distinfo Log Message: Update to 45.0.2 Changelog: Fixed: Fix an issue impacting the cookie header when third-party cookies are blocked (1257861) Fix a web compatibility regression impacting the srcset attribute of the image tag (1259482) Fix a regression with the copy and paste with some old versions of some Gecko applications like Thunderbird (1254980) Fix a crash impacting the video playback with Media Source Extension (1258562) Fix a regression impacting some specific uploads (1255735) --- Module Name: pkgsrc Committed By: ryoon Date: Wed Apr 27 16:22:40 UTC 2016 Modified Files: pkgsrc/www/firefox: Makefile PLIST distinfo mozilla-common.mk pkgsrc/www/firefox/patches: patch-aa patch-config_external_moz.build patch-config_system-headers patch-dom_media_moz.build patch-gfx_skia_generate__mozbuild.py patch-gfx_skia_moz.build patch-gfx_skia_skia_src_core_SkUtilsArm.cpp patch-gfx_thebes_moz.build patch-media_libcubeb_src_cubeb.c patch-media_libcubeb_src_cubeb__alsa.c patch-media_libcubeb_src_moz.build patch-media_libtheora_moz.build patch-toolkit_library_moz.build patch-xpcom_reflect_xptcall_md_unix_moz.build Removed Files: pkgsrc/www/firefox/patches: patch-dom_media_gstreamer_GStreamerAllocator.cpp patch-gfx_skia_skia_src_opts_SkBitmapProcState__opts__arm.cpp patch-gfx_skia_skia_src_opts_memset.arm.S patch-pb patch-pc Log Message: Update to 46.0 * Drop buildlink to gstreamer1 Changelog: New Improved security of the JavaScript Just In Time (JIT) Compiler GTK3 integration (GNU/Linux only) Fixed Correct rendering for scaled SVGs that use a clip and a mask Various security fixes Screen reader behavior with blank spaces in Google Docs corrected Changed WebRTC fixes to improve performance and stability Developer Display dominator trees in Memory tool Allocation and garbage collection pause profiling in the performance panel Launch responsive mode from the Style Editor @media sidebar HTML5 Added support for document.elementsFromPoint Added HKDF support for Web Crypto API Fixed in Firefox 46 2016-48 Firefox Health Reports could accept events from untrusted domains 2016-47 Write to invalid HashMap entry through JavaScript.watch() 2016-46 Elevation of privilege with chrome.tabs.update API in web extensions 2016-45 CSP not applied to pages sent with multipart/x-mixed-replace 2016-44 Buffer overflow in libstagefright with CENC offsets 2016-43 Disclosure of user actions through JavaScript with motion and orientation sensors 2016-42 Use-after-free and buffer overflow in Service Workers 2016-41 Content provider permission bypass allows malicious application to access data 2016-40 Privilege escalation through file deletion by Maintenance Service updater 2016-39 Miscellaneous memory safety hazards (rv:46.0 / rv:45.1 / rv:38.8)
2016-03-19Update to 45.0.1ryoon2-7/+7
Changelog: Fixed Fix a potential performance regression (Youtube for example) (1220502) Fix a regression causing search engine settings to be lost in some context (1254694) Bring back non-standard jar: URIs to fix a regression in IBM iNotes (1255139) XSLTProcessor.importStylesheet was failing when <import> was used (1249572) Fix an issue which could cause the list of search provider to be empty (1255605) Fix a regression when using the location bar (1254503) Fix some loading issues when Accept third-party cookies: was set to Never (1254856) Changed Disabled Graphite font shaping library
2016-03-09Disable the SPS profiler. It makes extra files appear on Linux in the PLISTtnn2-15/+25
and is only useful for Gecko developers.
2016-03-08Update to 45.0ryoon22-527/+504
Changelog: New Instant browser tab sharing through Hello Tabs synced via Firefox Accounts from other devices are now shown in dropdown area of Awesome Bar when searching Synced Tabs button in button bar Introduce a new preference (network.dns.blockDotOnion) to allow blocking .onion at the DNS level Guarani [gn] locale added Fixed URLs containing a Unicode-format Internationalized Domain Name (IDN) are now properly redirected Various security fixes Fixed in Firefox 45 2016-37 Font vulnerabilities in the Graphite 2 library 2016-36 Use-after-free during processing of DER encoded keys in NSS 2016-35 Buffer overflow during ASN.1 decoding in NSS 2016-34 Out-of-bounds read in HTML parser following a failed allocation 2016-33 Use-after-free in GetStaticInstance in WebRTC 2016-32 WebRTC and LibVPX vulnerabilities found through code inspection 2016-31 Memory corruption with malicious NPAPI plugin 2016-30 Buffer overflow in Brotli decompression 2016-29 Same-origin policy violation using perfomance.getEntries and history navigation with session restore 2016-28 Addressbar spoofing though history navigation and Location protocol property 2016-27 Use-after-free during XML transformations 2016-26 Memory corruption when modifying a file being read by FileReader 2016-25 Use-after-free when using multiple WebRTC data channels 2016-24 Use-after-free in SetBody 2016-23 Use-after-free in HTML5 string parser 2016-22 Service Worker Manager out-of-bounds read in Service Worker Manager 2016-21 Displayed page address can be overridden 2016-20 Memory leak in libstagefright when deleting an array during MP4 processing 2016-19 Linux video memory DOS with Intel drivers 2016-18 CSP reports fail to strip location information for embedded iframe pages 2016-17 Local file overwriting and potential privilege escalation through CSP reports 2016-16 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7)
2016-03-05Bump PKGREVISION for security/openssl ABI bump.jperkin1-1/+2
2016-02-26Use OPSYSVARS.jperkin3-21/+10
2016-02-12Update to 44.0.2ryoon2-7/+7
Changelog: Fix: Firefox hangs or crashes on startup (1243098) Security bug: 2016-13 Same-origin-policy violation using Service Workers with plugins
2016-02-09Update to 44.0.1ryoon3-10/+9
Changelog: Fix: Fix issue which could lead to the removal of stored passwords under certain circumstances (1242176) Allows spaces in cookie names (1244505) Fix WebSockets when used in a Service Worker context (1243942) Disable opus/vorbis audio with H.264 (1245696) Require NSS 3.21 (1244069) Ship the Gecko SDK (1243740) Fix for graphics startup crash (GNU/Linux) (1222171) Fix a crash in cache networking (1244076)
2016-02-06Add workaround for build failure under recent NetBSD with binutils 2.26, ↵ryoon3-2/+19
bump PKGREVISION
2016-01-30Comment out libevent check unconditionally, requested by joerg@ryoon2-12/+8
2016-01-30Fix build under netbsd-7, PR pkg/50721.ryoon2-1/+28
2016-01-28Fix build with graphics/graphite2 1.3.5ryoon2-5/+13
2016-01-27Fix "ignoring" error for patching. Reported by pgoyette@ryoon3-11/+11
2016-01-27Update to 44.0ryoon9-898/+950
Changelog: New Improved warning pages for certificate errors and untrusted connections Enable H.264 if system decoder is available Enable WebM/VP9 video support on systems that don't support MP4/H.264 In the animation-inspector timeline, lightning bolt icon next to animations running on the compositor thread Support the brotli compression format via HTTPS content-encoding Screenshot commands allow user choice of pixel ratio in Developer Tools Fixed Windows XP and Vista screensaver doesn't disable when watching videos (Bug 1193610) Various security fixes Changed To support unicode-range descriptor for webfonts, font matching under Linux now uses the same font matching code as other platforms Use a SHA-256 signing certificate for Windows builds, to meet new signing requirements Firefox has removed support for the RC4 decipher Firefox will no longer trust the Equifax Secure Certificate Authority 1024-bit root certificate or the UTN - DATACorp SGC to validate secure website certificates Stricter validation of web fonts On-screen keyboard support temporarily turned off for Windows 8 and Windows 8.1 Developer Right click on a logged object in the console to store it as a global variable on the page Visual tools for Animation: View/Edit CSS animation keyframe rules directly in the inspector Visually modify the cubic-bezier curve that drives the way animations progress through time Discover and scrub through all CSS animations and transitions playing on the page Learn more: http://devtoolschallenger.com/ Visual tools for Layout and Styles: Display rulers along the viewport to verify size and position and use the measurement tool to easily detect spacing and alignment problems Use CSS filters to preview and create real-time effects like drop-shadows, sepia, etc Learn more: http://devtoolschallenger.com/ New memory tool for inspecting the memory heap Service Workers API Built-in JSON reader to intuitively view, search, copy and save data without extensions Jump to function definitions in the debugger with Cmd-Click WebSocket Debugging API and add-on The rule view now displays styles using their authored text, and edits in the rule view are now linked to the style editor Security bugs: Fixed in Firefox 44 2016-12 Lightweight themes on Firefox for Android do not verify a secure connection 2016-11 Application Reputation service disabled in Firefox 43 2016-10 Unsafe memory manipulation found through code inspection 2016-09 Addressbar spoofing attacks 2016-08 Delay following click events in file download dialog too short on OS X 2016-07 Errors in mp_div and mp_exptmod cryptographic functions in NSS 2016-06 Missing delay following user click events in protocol handler dialog 2016-05 Addressbar spoofing through stored data url shortcuts on Firefox for Android 2016-04 Firefox allows for control characters to be set in cookie names 2016-03 Buffer overflow in WebGL after out of memory allocation 2016-02 Out of Memory crash when parsing GIF format images 2016-01 Miscellaneous memory safety hazards (rv:44.0 / rv:38.6)
2016-01-19Fix build with recent g++/complex on NetBSD currentryoon2-7/+15
2016-01-09Update to 43.0.4ryoon2-7/+7
Changelog: Fixed: Fix for startup crash for users of a third party antivirus tool (Bug 1235537) Fixed: Multi-user GNU/Linux download folders can be created (Bug 1233434) Changed: Re-enable SHA-1 certificates (Bug 1236975)
2015-12-31Update to 43.0.3ryoon3-36/+40
* Fix alsa option build, fix PR pkg/50427 Changelog: Fix: Fix network issue when using Nvidia's Network Access Manager (1233237) Fix: On some Windows configurations, improve the decoding of some videos on YouTube (1233970)
2015-12-27Update to 43.0.2ryoon3-10/+17
* Add OSS support, disabled by default Changelog: 43.0.2: Stability fixes. 43.0.1: Not for non-Microsoft Windows platforms.
2015-12-19Remove changes for bugzilla ticket #1026499 which has been resolvedmartin5-98/+3
differently upstream.
2015-12-18Fix build under NetBSD 6, at least i386ryoon2-1/+14
2015-12-16Update to 43.0ryoon16-228/+169
Changelog: New Private Browsing with Tracking Protection offers choice of blocking additional trackers New Improved API support for m4v video playback New Firefox 64-bit for Windows is now available via the Firefox download page New Users can choose search suggestions from the Awesome Bar New On-screen keyboard displayed on selecting input field on devices running Windows 8 or greater New Firefox Health Report has switched to use the same data collection mechanism as telemetry Developer Markup view shows indicators for pseudo-classes locked for elements Developer Bind F1 key to open the settings when the toolbox is focused Developer New 'Use in Console' context menu item in Inspector to store selected element in a temporary variable Developer Search button next to overridden CSS properties to find similar properties in the rules view Developer Ability to filter styles from their property names in the rules view Developer Stack traces are now shown for exceptions inside the console Developer Added ability to display server-side logs in the console Developer Ability to choose resolution for the GCLI screenshot command Developer Subresource integrity allows developers to make their sites more secure Developer Network requests in Console now link to Network panel instead of opening in a popup Developer Unprefixed 'hyphens' property is now supported Developer WebIDE now has a sidebar-based UI Developer The 'transform-origin' property is now supported on SVG elements Developer Animation inspector now displays animations in a timeline Developer Single-process mode is no longer supported for NPAPI plugins Fixed Eyedropper tool does not work as expected when page is zoomed Fixed Various security fixes Fixed in Firefox 43 2015-149 Cross-site reading attack through data and view-source URIs 2015-148 Privilege escalation vulnerabilities in WebExtension APIs 2015-147 Integer underflow and buffer overflow processing MP4 metadata in libstagefright 2015-146 Integer overflow in MP4 playback in 64-bit versions 2015-145 Underflow through code inspection 2015-144 Buffer overflows found through code inspection 2015-143 Linux file chooser crashes on malformed images due to flaws in Jasper library 2015-142 DOS due to malformed frames in HTTP/2 2015-141 Hash in data URI is incorrectly parsed 2015-140 Cross-origin information leak through web workers error events 2015-139 Integer overflow allocating extremely large textures 2015-138 Use-after-free in WebRTC when datachannel is used after being destroyed 2015-137 Firefox allows for control characters to be set in cookies 2015-136 Same-origin policy violation using perfomance.getEntries and history navigation 2015-135 Crash with JavaScript variable assignment with unboxed objects 2015-134 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5)
2015-12-05Extend PYTHON_VERSIONS_INCOMPATIBLE to 35adam1-2/+2
2015-11-25Remove mk/find-prefix.mk usage from the www category.jperkin1-2/+2
The find-prefix infrastructure was required in a pkgviews world where packages installed from pkgsrc could have different installation prefixes, and this was a way for a dependency prefix to be determined. Now that pkgviews has been removed there is no longer any need for the overhead of this infrastructure. Instead we use BUILDLINK_PREFIX.pkg for dependencies pulled in via buildlink, or LOCALBASE/PREFIX where the dependency is coming from pkgsrc. Provides a reasonable performance win due to the reduction of `pkg_info -qp` calls, some of which were redundant anyway as they were duplicating the same information provided by BUILDLINK_PREFIX.pkg.
2015-11-20Avoid ambigious class references.joerg2-1/+16
2015-11-18Recursive revbump from multimedia/libvpxryoon1-1/+2
2015-11-08Add devel/yasm as build dependency.ryoon1-1/+5
It fixes the build under NetBSD/i386 and amd64.
2015-11-03Update BUILDLINK_API_DEPENDS.nsprryoon1-2/+2
2015-11-03Update to 42.0ryoon30-987/+199
Changelog: New Private Browsing with Tracking Protection blocks certain Web elements that could be used to record your behavior across sites New Control Center that contains site security and privacy controls New Indicator added to tabs that play audio with one-click muting New WebRTC improvements: IPV6 support Preferences for controlling ICE candidate generation and IP exposure Hooks for extensions to allow/deny createOffer/Answer Improved ability for applications to monitor and control which devices are used in getUserMedia New Login Manager improvements: Improved heuristics to save usernames and passwords Edit and show all logins in line, Copy/Paste usernames/passwords from the Context menu Migration imports your passwords to Firefox from Google Chrome for Windows and Internet Explorer; import anytime from the Login Manager Changed Improved performance on interactive websites that trigger a lot of restyles HTML5 Media Source Extension for HTML5 video available for all sites HTML5 Support ImageBitmap and createImageBitmap() HTML5 Implemented ES6 Reflect Developer Ability to save filter presets inside CSS Filter Tooltip Developer CSS filter presets in the Inspector Developer Configurable Firefox OS Simulator in WebIDE, to simulate reference devices like phones, tablets, even TVs Developer Asynchronous call stacks now allow web developers to follow the code flow through setTimeout, DOM event handlers, and Promise handlers. Developer Remote website debugging over WiFi (no USB cable or ADB needed) Developer View HTML source in a tab
2015-10-25NEON runtime detection for NetBSD/arm.jmcneill5-5/+107
2015-10-17remove redundant '--disable-libnotify'szptvlfn1-2/+1
2015-10-16Update to 41.0.2ryoon2-7/+7
Changelog: Security fix Fixed in Firefox 41.0.2 2015-115 Cross-origin restriction bypass using Fetch
2015-10-16NetBSD/arm fixes. Now Firefox works on my Tegra board again.jmcneill8-1/+232
2015-10-16gio is part of gtk2 not gnome, so dont make the gio extension conditional on ↵jmcneill2-6/+5
the gnome pkg option. bump pkg revision.
2015-10-10Recursive revbump from textproc/icuryoon1-1/+2
2015-10-07Drop using that conflicts with the declaration itself.joerg2-1/+14
2015-10-05Update to 41.0.1ryoon2-7/+6
Changelog: Fixed Fix a startup crash related to Yandex toolbar and Adblock Plus (1209124) Fixed Fix potential hangs with Flash plugins (1185639) Fixed Fix a regression in the bookmark creation (1206376) Fixed Fix a startup crash with some Intel Media Accelerator 3150 graphic cards (1207665) Fixed Fix a graphic crash, occurring occasionally on Facebook (1178601)
2015-09-29Fix build under NetBSD/i386.ryoon1-2/+2
2015-09-27Remove old and probably stale Gecko Media Plugin patches (from FreeBSD?).tnn5-199/+3
It might still be possible that pkgsrc needs adjustments for gmp loading if/when we adopt some gmp packages, but until then they serve no purpose and in fact appear to be harmful. Fixes Firefox startup error message: addons.manager ERROR Exception calling provider GMPProvider.startup
2015-09-24Fix NetBSD/i386 build.ryoon1-3/+3
flag for c++ compiler is CXXFLAGS.
2015-09-23Update to 41.0ryoon35-462/+295
Changelog: New Enhance IME support on Windows (Vista +) using TSF (Text Services Framework) New Ability to set a profile picture for your Firefox Account New Firefox Hello now includes instant messaging New SVG images can be used as favicons New Improved box-shadow rendering performance Changed WebRTC now requires perfect forward secrecy Changed WARP is disabled on Windows 7 Changed Updates to image decoding process Changed Support for running animations of 'transform' and 'opacity' on the compositor thread HTML5 MessageChannel and MessagePort API enabled by default HTML5 Added support for the transform-origin property on SVG elements HTML5 CSS Font Loading API enabled by default HTML5 Navigator.onLine now varies with actual internet connectivity (Windows and Mac OS X only) HTML5 Copy/Cut Web content from JavaScript to the OS clipboard with document.execCommand("cut"/"copy") HTML5 Implemented Cache API for querying named caches that are accessible Window, Worker, and ServiceWorker Developer Removed support for binary XPCOM components in extensions, use addon SDK "system/child_process" pipe mechanism for native binaries instead Developer Network requests can be exported in HAR format Developer Quickly add new CSS rule with New Rule button in the Inspector Developer Screenshot a node or element from markup view with the Screenshot Node context menu item Developer Copy element CSS rule declarations with the Copy Rule Declaration context menu item in the Inspector Developer Pseudo-Class panel in the Inspector Fixed Picture element does not react to resize/viewport changes Fixed Various security fixes Security fixes: Fixed in Firefox 41 2015-114 Information disclosure via the High Resolution Time API 2015-113 Memory safety errors in libGLES in the ANGLE graphics library 2015-112 Vulnerabilities found through code inspection 2015-111 Errors in the handling of CORS preflight request headers 2015-110 Dragging and dropping images exposes final URL after redirects 2015-109 JavaScript immutable property enforcement can be bypassed 2015-108 Scripted proxies can access inner window 2015-107 Out-of-bounds read during 2D canvas display on Linux 16-bit color depth systems 2015-106 Use-after-free while manipulating HTML media content 2015-105 Buffer overflow while decoding WebM video 2015-104 Use-after-free with shared workers and IndexedDB 2015-103 URL spoofing in reader mode 2015-102 Crash when using debugger with SavedStacks in JavaScript 2015-101 Buffer overflow in libvpx while parsing vp9 format video 2015-100 Arbitrary file manipulation by local user through Mozilla updater 2015-99 Site attribute spoofing on Android by pasting URL with unknown scheme 2015-98 Out of bounds read in QCMS library with ICC V4 profile attributes 2015-97 Memory leak in mozTCPSocket to servers 2015-96 Miscellaneous memory safety hazards (rv:41.0 / rv:38.3)
2015-08-30Bump PKGREVISIONryoon3-2/+17
* Set layers.offmainthreadcomposition.enabled=false by default. Improve stability.
2015-08-29Update to 40.0.3ryoon3-7/+8
* Enable PIE. Changelog: Changed Disable the asynchronous plugin initialization (1198590) Fixed Fix a segmentation fault in the GStreamer support (GNU/Linux) (1145230) Fixed Fix a startup crash when using DisplayLink (Windows Only) (1195844) Fixed Fix a regression with some Japanese fonts used in the <input> field (1194055) Fixed On some sites, the selection in a select combox box using the mouse could be broken (1194733) Fixed Some search partner codes were missing (1195683) Fixed Various security fixes Fixed in Firefox 40.0.3 2015-95 Add-on notification bypass through data URLs 2015-94 Use-after-free when resizing canvas element during restyling
2015-08-19Update to 40.0.2ryoon3-11/+10
* Disable OSS support explicitly under NetBSD. Changelog: New Enabled API allowing Windows 10 users to open settings dialog (1193196) Fixed mozalloc.lib was missing from the xulrunner package (1168291) Fixed Fix a startup crash with some combination of hardware and drivers (1160295)
2015-08-12Bump PKGREVISION.ryoon3-12/+5
* Fix merge mistake.
2015-08-11Update to 40.0ryoon22-669/+832
Changelog: New Support for Windows 10 New Added protection against unwanted software downloads New User can receive suggested tiles in the new tab page based on categories Firefox matches to browsing history (en-US only). New Hello allows adding a link to conversations to provide context on what the conversation will be about New New style for add-on manager based on the in-content preferences style New Improved scrolling, graphics, and video playback performance with off main thread compositing (GNU/Linux only) New Graphic blocklist mechanism improved: Firefox version ranges can be specified, limiting the number of devices blocked Changed Add-on extensions that are not signed by Mozilla will display a warning Changed NPAPI Plug-in performance improved via asynchronous initialization Changed Smoother animation and scrolling with hardware vsync (Windows only) Changed JPEG images use less memory when scaled and can be painted faster Changed Sub-resources can no longer request HTTP authentication, thus protecting users from inadvertently disclosing login data HTML5 IndexedDB transactions are now non-durable by default HTML5 Implemented AudioBufferSourceNode.detune to modulate playback rate in cents, a logarithmic unit of measure used for musical intervals Developer Improved Performance tools in the developer tools: Waterfall view, Call Tree view and a Flame Chart view Developer New rules view tooltip in the Inspector to tweak CSS Filter values Developer Console API messages from SharedWorker and ServiceWorker are now displayed in web console Developer New page ruler highlighting tool that displays lightweight horizontal and vertical rules on a page Developer Inspector now searches across all content frames in a page Fixed Kannada text does not display properly in built-in pdf viewer Fixed Various security fixes Known Issues unresolved If Firefox is restarted from an add-on install notification, on-going private browsing downloads might be canceled without warning (1185294) Fixed in Firefox 40 2015-92 Use-after-free in XMLHttpRequest with shared workers 2015-91 Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification 2015-90 Vulnerabilities found through code inspection 2015-89 Buffer overflows on Libvpx when decoding WebM video 2015-88 Heap overflow in gdk-pixbuf when scaling bitmap images 2015-87 Crash when using shared memory in JavaScript 2015-86 Feed protocol with POST bypasses mixed content protections 2015-85 Out-of-bounds write with Updater and malicious MAR file 2015-84 Arbitrary file overwriting through Mozilla Maintenance Service with hard links 2015-83 Overflow issues in libstagefright 2015-82 Redefinition of non-configurable JavaScript object properties 2015-81 Use-after-free in MediaStream playback 2015-80 Out-of-bounds read with malformed MP3 file 2015-79 Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)
2015-08-09Hm, actually get rid of the PKGREVISION now that we bumped the version.he1-2/+1
2015-08-09Update to version 39.0.3.he2-6/+6
Fixes Mozilla Foundation Security Advisory 2015-78: Same origin violation and local file stealing via PDF reader * Fixes CVE-2015-4495 - It's possible to read local files or perform privilege escalation by using a native setter, bug 1178058. * Remove PlayPreview registration from PDF viewer, bug 1179262.
2015-07-16Recent firefox does not support external xulrunner build.ryoon1-4/+1
Remove commented out lines.
2015-07-05Make WebGL work on NetBSDmartin4-2/+37
2015-07-04firefox 39.0 requires nss>=3.19.2.tsutsui1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-01 04:47:57 +0000