summaryrefslogtreecommitdiff
path: root/www/firefox
AgeCommit message (Collapse)AuthorFilesLines
2008-11-13Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.18.ghen2-6/+6
Security fixes in this version: MFSA 2008-58 Parsing error in E4X default namespace MFSA 2008-57 -moz-binding property bypasses security checks on codebase principals MFSA 2008-56 nsXMLHttpRequest::NotifyEventListeners() same-origin violation MFSA 2008-55 Crash and remote code execution in nsFrameManager MFSA 2008-54 Buffer overflow in http-index-format parser MFSA 2008-53 XSS and JavaScript privilege escalation via session restore MFSA 2008-52 Crashes with evidence of memory corruption (rv:1.9.0.4/1.8.1.18) MFSA 2008-50 Crash and remote code execution via __proto__ tampering MFSA 2008-49 Arbitrary code execution via Flash Player dynamic module unloading MFSA 2008-48 Image stealing via canvas and HTTP redirect MFSA 2008-47 Information stealing via local shortcut files For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.18/releasenotes/
2008-09-24Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.17.ghen4-9/+9
(ok during freeze agc@) Security fixes in this version: MFSA 2008-45 XBM image uninitialized memory reading MFSA 2008-44 resource: traversal vulnerabilities MFSA 2008-43 BOM characters stripped from JavaScript before execution MFSA 2008-42 Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17) MFSA 2008-41 Privilege escalation via XPCnativeWrapper pollution MFSA 2008-40 Forced mouse drag MFSA 2008-39 Privilege escalation using feed preview page and XSS flaw MFSA 2008-38 nsXMLDocument::OnChannelRedirect() same-origin violation MFSA 2008-37 UTF-8 URL stack buffer overflow For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.17/releasenotes/
2008-08-11Add "unicode" processing alignment patch from mozilla's bugzilla to makemartin5-2/+179
firefox work again on archs requiring strict alignement. Bump pkgrevision.
2008-07-16Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.16.ghen3-8/+7
Security fixes in this version: MFSA 2008-35 Command-line URLs launch multiple tabs when Firefox not running MFSA 2008-34 Remote code execution by overflowing CSS reference counter For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.16/releasenotes/
2008-07-06Fix build on DragonFly, from PR pkg/39096.ghen3-1/+29
2008-07-02Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.15.ghen6-35/+22
Part of patch-af has been fixed upstream. Security fixes in this version: MFSA 2008-33 Crash and remote code execution in block reflow MFSA 2008-32 Remote site run as local file via Windows URL shortcut MFSA 2008-31 Peer-trusted certs can use alt names to spoof MFSA 2008-30 File location URL in directory listings not escaped properly MFSA 2008-29 Faulty .properties file results in uninitialized memory being used MFSA 2008-28 Arbitrary socket connections with Java LiveConnect on Mac OS X MFSA 2008-27 Arbitrary file upload via originalTarget and DOM Range MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript() MFSA 2008-24 Chrome script loading from fastload file MFSA 2008-23 Signed JAR tampering MFSA 2008-22 XSS through JavaScript same-origin violation MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15) For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.15/releasenotes/
2008-05-31tie down API dependency to firefox 2.xtnn1-1/+2
2008-05-19Fix assorted pkglint complaints and warns.tnn5-17/+19
2008-04-17Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.14.ghen2-6/+6
Security fixes in this version: MFSA 2008-20 Crash in JavaScript garbage collector For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.14/releasenotes/
2008-03-30Update firefox and firefox-gtk1 to 2.0.0.13.ghen3-19/+28
Security fixes in this version: MFSA 2008-19 XUL popup spoofing variant (cross-tab popups) MFSA 2008-18 Java socket connection to any local port via LiveConnect MFSA 2008-17 Privacy issue with SSL Client Authentication MFSA 2008-16 HTTP Referrer spoofing with malformed URLs MFSA 2008-15 Crashes with evidence of memory corruption (rv:1.8.1.13) MFSA 2008-14 JavaScript privilege escalation and arbitrary code execution For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.13/releasenotes/
2008-02-08Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.12.ghen2-6/+6
Security fixes in this version: MFSA 2008-11 Web forgery overwrite with div overlay MFSA 2008-10 URL token stealing via stylesheet redirect MFSA 2008-09 Mishandling of locally-saved plain text files MFSA 2008-08 File action dialog tampering MFSA 2008-06 Web browsing history and forward navigation stealing MFSA 2008-05 Directory traversal via chrome: URI MFSA 2008-04 Stored password corruption MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution MFSA 2008-02 Multiple file input focus stealing vulnerabilities MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12) For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.12/releasenotes/
2008-02-08Fix more cases of non-chainable PKGSRC_COMPILER tests.tnn1-2/+2
2007-12-22Change MOZILLA master sites difinitions, related to PR 37379.obache1-5/+2
There are three types Mozilla mirrors. (http://www.mozilla.org/mirroring.html) * mozilla-current contains only the current version of Firefox and Thunderbird * mozilla-release contains Firefox, Thunderbird, and Sunbird releases * mozilla-all complete archive Define following variables for mozilla master sites: MASTER_SITE_MOZILLA_ALL = mozilla-all MASTER_SITE_MOZILLA = mozilla-release and change some packages to use appropriate variable. Update contents of MASTER_SITE_MOZILLA with master and primary mirrors taken from http://www.mozilla.org/mirrors.html and add some sample definitions.
2007-12-01Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.11.ghen2-6/+6
This update fixes a bug introduced by the 2.0.0.10 update in the <canvas> feature that affected some web pages and extensions. For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.11/releasenotes/
2007-11-28Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.10.ghen2-6/+6
Security fixes in this version: MFSA 2007-39 Referer-spoofing via window.location race condition MFSA 2007-38 Memory corruption vulnerabilities (rv:1.8.1.10) MFSA 2007-37 jar: URI scheme XSS hazard For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.10/releasenotes/
2007-11-02Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.9.ghen2-6/+6
Fixes a number of regressions introduced in 2.0.0.8: * Bug 400406 - Firefox will ignore the clear CSS property when used beneath a box that is using the float property. There is a temporary workaround JS/CSS code available for web developers with affected layouts. * Bug 400467 - Windows Vista users will get Java not found or Java not working errors when trying to load Java applets after updating. To fix this, users can right-click the Firefox icon and Run as administrator, then browse to a page with a Java applet doing this once will fix the problem and permanently restore Java functionality. * Bug 396695 - Add-ons are disabled after updating. Users can fix this problem by opening their profile folder and removing three files (extensions.rdf, extensions.ini and extensions.cache) * Bug 400421 - Removing a single area element from an image map will cause the entire map to disappear. There is no workaround available at this time. * Bug 400735 - Some Windows users may experience crashes at startup. There is no workaround available at this time. For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.9/releasenotes/
2007-10-19Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.8.ghen3-17/+16
Security fixes in this version: MFSA 2007-36 URIs with invalid %-encoding mishandled by Windows MFSA 2007-35 XPCNativeWrapper pollution using Script object MFSA 2007-34 Possible file stealing through sftp protocol MFSA 2007-33 XUL pages can hide the window titlebar MFSA 2007-32 File input focus stealing vulnerability MFSA 2007-31 Browser digest authentication request splitting MFSA 2007-30 onUnload Tailgating MFSA 2007-29 Crashes with evidence of memory corruption (rv:1.8.1.8) For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.8/releasenotes/
2007-09-20Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.7.ghen2-7/+7
This version only fixes a Windows-specific security issue, but update nevertheless so we start the freeze with the latest available version. (People will start asking about this update anyway?) For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.7/releasenotes/
2007-08-23Fixed installation to DESTDIR in post-install target.heinz1-2/+2
2007-08-07Add INSTALLATION_DIRS=lib/pkgconfig for destdir support, requested by joerg.ghen1-1/+3
2007-07-31Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.6.ghen2-6/+6
Security fixes in this version: MFSA 2007-27 Unescaped URIs passed to external programs MFSA 2007-26 Privilege escalation through chrome-loaded about:blank windows For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.6/releasenotes/
2007-07-26Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.5.ghen4-11/+13
Security fixes in this version: MFSA 2007-25 XPCNativeWrapper pollution MFSA 2007-24 Unauthorized access to wyciwyg:// documents MFSA 2007-23 Remote code execution by launching Firefox from Internet Explorer MFSA 2007-22 File type confusion due to %00 in name MFSA 2007-21 Privilege escalation using an event handler attached to an element not in the document MFSA 2007-20 Frame spoofing while window is loading MFSA 2007-19 XSS using addEventListener and setTimeout MFSA 2007-18 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.5/releasenotes/
2007-06-18Fix the broken test for when to enable Xft. Addresses the remainder ofdmcmahill1-2/+2
PR/31481.
2007-06-17Don't or X11_TYPE and MOZILLA_USE_XFT, but the exists() condition.joerg1-2/+2
2007-06-16Use a package option to control the --enable-single-profile option fordmcmahill1-2/+1
mozilla browsers. This is now useful again to those of use who require multiple profiles.
2007-06-15Activate Xinerama for non-native case.joerg1-3/+3
2007-06-15Assume that libXft provides Xft support for non-native X11.joerg1-2/+2
2007-05-31Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.4.ghen5-21/+21
Security fixes in this version: MFSA 2007-17 XUL Popup Spoofing MFSA 2007-16 XSS using addEventListener MFSA 2007-14 Path Abuse in Cookies MFSA 2007-13 Persistent Autocomplete Denial of Service MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.4/releasenotes/
2007-05-12Update to Firefox 2.0.0.3 (nb1), from www/firefox2* (see there for historyghen70-195/+742
and change notes). Firefox 1.5.0.x will be maintained in www/firefox15*, as discussed on tech-pkg.
2007-05-12Update EOL notice.ghen1-2/+2
2007-03-31chmod u+w all files under lib/${MOZILLA}/defaults in post-install phase forghen1-1/+4
firefox and seamonkey to make user profiles writable. Bump PKGREVISION for firefox2(-gtk1) and seamonkey(-gtk1). Fixes PR#35596.
2007-03-21Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.11. Fixed in this version:ghen4-8/+11
* Security update: MFSA 2007-11 (FTP PASV port-scanning) has been fixed. * Website Compatibility: Fixed various web compatibility regressions. For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.11.html
2007-03-07Merge patch-dw from thunderbird to fix build on DragonFly.joerg2-1/+15
2007-03-07Dynamically generate the part of the PLIST for libfreebl. This is becausedmcmahill3-21/+32
the exact names of the freebl libraries depends on the platform and they have a habit of changing even on minor releases. This causes these mozilla packages to be broken quite a lot on platforms other than NetBSD/i386. Hopefully this fix will last longer than previous ones. pkgrevision bumps all around.
2007-02-25Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.10. Fixed in this version:ghen7-57/+22
Fixed in Firefox 1.5.0.10 MFSA 2007-07 Embedded nulls in location.hostname confuse same-domain checks MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow MFSA 2007-05 XSS and local file access by opening blocked popups MFSA 2007-04 Spoofing using custom cursor and CSS3 hotspot MFSA 2007-03 Information disclosure through cache collisions MFSA 2007-02 Improvements to help protect against Cross-Site Scripting attacks MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.10.html
2007-02-22pkglint USE_LANGUAGES cleanup. Patch from Sergey Svishchev.wiz1-2/+2
2007-02-04Add a NOT_SUNOSLIB to complement the SUNOSLIB variable. Needed bydmcmahill1-1/+5
firefox2.
2007-02-04Get these mozilla clients to work on Solaris-2.9/sparc. There weredmcmahill3-6/+10
two issues. The PLIST was incorrect and since the PLIST is used by the "moz-install" script, anything missing from the PLIST is never installed even when building from source. When libfreebl* were not installed it caused the clients to fail to load the security component and fail with "The browser failed to load its security component". The second issue is that many installations of solaris-2.9 include various glib/gtk/gnome libraries in /usr/lib. This causes failures because the pkgsrc ones were used at link time and the /usr/lib ones at run time. Work around this by setting a LD_LIBRARY_PATH that includes the pkgsrc lib directory first. pkgrevision bumps all around.
2007-01-25fix a makefile bug related to the change in how GNU make-3.81 handles \ newlinedmcmahill2-1/+33
in single quoted strings compared to version 3.80 and older
2007-01-16Fix build problems on solaris reported in NetBSD PR/31481, PR/42905,dmcmahill3-5/+9
and PR/33583. See also https://bugzilla.mozilla.org/show_bug.cgi?id=77788 for a discussion of this.
2007-01-15libXp is needed for the gtk1 build.joerg1-1/+2
2006-12-27- fine grained X11 dependencies for packages which have either USE_IMAKEjoerg1-1/+7
or USE_X11BASE set, but don't include mk/x11.buildlink3.mk directly or via buildlink3.mks - introduce BUILDLINK_PREFIX.libXpm as alias for BUILDLINK_PREFIX.xpm in the !modular case - fix some cases where the check for libX11 couldn't work at all by using C++ for compilation without including the proper headers Verified using a full X11_TYPE=xorg bulk build without additional breakage. Discussed with salo@, wiz@ and send to packages@ for feedback.
2006-12-20Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.9. Fixed in this version:ghen2-6/+6
MFSA 2006-75 RSS Feed-preview referrer leak MFSA 2006-73 Mozilla SVG Processing Remote Code Execution MFSA 2006-72 XSS by setting img.src to javascript: URI MFSA 2006-71 LiveConnect crash finalizing JS objects MFSA 2006-70 Privilege escallation using watch point MFSA 2006-68 Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.9.html
2006-12-15Mechanically replace all includes of buildlink3.mk of the followingjoerg1-2/+2
packages with the modular Xorg equivalent. Those are falling back to the old location by default, so this commmit doesn't change dependencies. graphics/xpm ==> x11/libXpm fonts/Xft2 ==> x11/libXft x11/Xfixes ==> x11/libXfixes x11/xcursor ==> x11/libXcursor x11/Xrender ==> x11/libXrender x11/Xrandr ==> libXrandr
2006-11-08Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.8. Fixed in this version:ghen3-8/+7
MFSA 2006-67 Running Script can be recompiled MFSA 2006-66 RSA signature forgery (variant) MFSA 2006-65 Crashes with evidence of memory corruption (rv:1.8.0.8) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.8.html
2006-11-03DESTDIR support for Firefox 2.joerg1-2/+2
2006-10-23thunderbird's ldap doesn't work talking to an ipv4 ldap server ifmarkd3-3/+40
talking to ipv4 addresses using ipv6 addresses isn't allowed, which is the default on NetBSD. Patch to use a v4 socket when talking to an ipv4 ldap server. Fixes my PR 33511. seamonkey/firefox/sunbird have the same code so make the same patch. OKed ghen. Bump PKGREVISION.
2006-10-19Fix crash after printing caused by trying to destroy the same charsetmarkd3-11/+21
structure multiple times. Bump PKGREVISION.
2006-10-16Fixed "test ==".seb2-1/+15
2006-09-24Use various files from seamonkey dir instead of mozilla.salo1-4/+4
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-13 20:39:55 +0000