summaryrefslogtreecommitdiff
path: root/www/firefox
AgeCommit message (Collapse)AuthorFilesLines
2006-01-24Bump BUILDLINK_RECOMMENDED of textproc/expat to 2.0.0 becausewiz3-5/+8
of the shlib major bump. PKGREVISION++ for the dependencies.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-28Install the .pc files again, removed during the update to 1.5 (thus breakingjmmv2-3/+11
packages needing them, e.g., epiphany). Bump PKGREVISION to 2.
2005-12-23Disable usage of symbol visibility, Firefox is definitely not there yet.joerg2-2/+4
Since the build with DragonFly's system gcc was successful before, but segilled on startup, a revision bump is necessary.
2005-12-10one more file to update...taya1-2/+1
2005-12-10distinfo was broken.taya1-3/+1
regen.
2005-12-10Update firefox & firefox-gtk1 to 1.5taya69-827/+1285
Including fix for long title & history file problem. http://www.mozilla.org/security/history-title.html https://bugzilla.mozilla.org/show_bug.cgi?id=319004 What's New in Firefox 1.5 Firefox 1.5 is the next version of our award-winning Web browser. Here's what's new in Firefox 1.5: * Automated update to streamline product upgrades. Notification of an update is more prominent, and updates to Firefox may now be half a megabyte or smaller. Updating extensions has also improved. * Faster browser navigation with improvements to back and forward button performance. * Drag and drop reordering for browser tabs. * Improvements to popup blocking. * Clear Private Data feature provides an easy way to quickly remove personal data through a menu item or keyboard shortcut. * Answers.com is added to the search engine list. * Improvements to product usability including descriptive error pages, redesigned options menu, RSS discovery, and "Safe Mode" experience. * Better accessibility including support for DHTML accessibility and assistive technologies such as the Window-Eyes 5.5 beta screen reader for Microsoft Windows. Screen readers read aloud all available information in applications and documents or show the information on a Braille display, enabling blind and visually impaired users to use equivalent software functionality as their sighted peers. * Report a broken Web site wizard to report Web sites that are not working in Firefox. * Better support for Mac OS X (10.2 and greater) including profile migration from Safari and Mac Internet Explorer. * New support for Web Standards including SVG, CSS 2 and CSS 3, and JavaScript 1.6. * Many security enhancements. The Burning Edge has more detailed lists of new features and notable bug fixes. http://www.squarefree.com/burningedge/releases/1.5-comprehensive.html
2005-12-08Bumped the PKGREVISION of the packages that have been broken by the recentrillig1-1/+2
"pkglint --autofix" change.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-2/+2
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-2/+2
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-10-12Add DragonFly support for Firefox 1.0.7.joerg24-35/+568
2005-09-22Update www/firefox and www/firefox-gtk1 to version 1.0.7. Changes fromjlam47-251/+223
version 1.0.6 include: * Fix for a potential buffer overflow vulnerability when loading a hostname with all soft-hyphens * Fix to prevent URLs passed from external programs from being parsed by the shell (Linux only) * Fix to prevent a crash when loading a Proxy Auto-Config (PAC) script that uses an "eval" statement * Fix to restore InstallTrigger.getVersion() for Extension authors * Other stability and security fixes Approved by taya.
2005-09-17For the native firefox and mozilla packages, move the module/extensionjlam4-14/+24
registration out of the installation step and into the INSTALL script. Also, remove the registration commands from the PLIST as well. Putting them into the INSTALL script allows for the same commands to be run in the same way, so that there are fewer differences between installing from source and installing from a binary package. Also, this makes these packages pass CHECK_FILES=yes. Bump the PKGREVISION of firefox, firefox-gtk1, mozilla, and mozilla-gtk2. Also, include bsd.pkg.mk from the package Makefiles, not from within Makefile.common. This is a style issue and allows for appending to variables originally defined in Makefile.common from the package Makefile.
2005-09-08Update patches for mozilla applications to handle the fact that onabs3-8/+8
NetBSD the thread safe resolver is only available on __NetBSD_Version__ >= 299000900. Fixes runtime usage on NetBSD 2.1. New Versions: - firefox-1.0.6nb2 - firefox-gtk1-1.0.6nb2 - mozilla-1.7.11nb1 - mozilla-gtk2-1.7.11nb1 - thunderbird-1.0.6nb1 - thunderbird-gtk1-1.0.6nb1
2005-08-03Fix typo.hira1-2/+2
2005-08-03Compile without optimization if GCC <4.0 (4.0 not tested) is used ontron2-1/+25
a powerpc architecture (e.g. NetBSD-mapcppc). This cures display glitches (e.g. text appearing at the wrong location). Bump package revision because of this change.
2005-07-25Use pkgsrc optimisation (CFLAGS, CXXFLAGS) = faster binary, less memory usageadam5-15/+60
2005-07-20update firefox & firefox-gtk1 to 1.0.6taya3-8/+8
Firefox 1.0.6 is a stability update. We recommend that users upgrade to this latest version. Here's what's new in Firefox 1.0.6: * Restore API compatibility for extensions and web applications that did not work in Firefox 1.0.5.
2005-07-14Update firefox & firefox-gtk1 to 1.0.5.taya3-8/+9
Firefox 1.0.5 is a security update. Fixed vulnerabilities are: 2005-56 Code execution through shared function objects MFSA 2005-55 XHTML node spoofing MFSA 2005-54 Javascript prompt origin spoofing MFSA 2005-53 Standalone applications can run arbitrary code through the browser MFSA 2005-52 Same origin violation: frame calling top.focus() MFSA 2005-51 The return of frame-injection spoofing MFSA 2005-50 Possibly exploitable crash in InstallVersion.compareTo() MFSA 2005-49 Script injection from Firefox sidebar panel using data: MFSA 2005-48 Same-origin violation with InstallTrigger callback MFSA 2005-47 Code execution via "Set as Wallpaper" MFSA 2005-46 XBL scripts ran even when Javascript disabled MFSA 2005-45 Content-generated event vulnerabilities
2005-06-22Re-instantiate the NAN/INFINITY fixes, this time in a way that works onmartin8-1/+219
older C environments as well.
2005-06-20Back out the two last changes to the floating point code, since itkristerw8-277/+1
broke the package for NetBSD 1.6.
2005-06-16Redo the previous "double alignemnet" fix more completely. The previousmartin8-24/+262
state was completely broken.
2005-06-03MOZILLA_USE_GTK2 is a pkgsrc-internal variable -- prefix it withwiz1-2/+2
an underscore.
2005-06-02Replace the homegrown floating point binary access patterns in class Doublemartin2-1/+39
by macros from math.h to avoid alignement problems described in PR pkg/30106. (Same as ../mozilla/patches/patch-cd)
2005-05-14Update firefox & firefox-gtk1 to 1.0.4.taya5-10/+28
This is a security fix release. Fixed vulnerabilities are follows: MFSA 2005-44 Privilege escalation via non-DOM property overrides MFSA 2005-43 "Wrapped" javascript: urls bypass security checks MFSA 2005-42 Code execution via javascript: IconURL
2005-04-25Make sure build is without gssapi support. (Okayed by maintainer,reed1-1/+2
taya ... well really he said "I don't object your idea.") This fixes a build bug when heimdal is detected but not buildlinked. It is a known mozilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=245467 I didn't put this in the mozilla/Makefile.common, because didn't test that yet. This issue probably only happens when using /usr as the LOCALBASE, which is not really supported and maybe I am the only one to hit this with pkgsrc. Maybe later someone can consider adding a build option for GSSAPI, but I don't know anything about it in regards to a web browser myself.
2005-04-24concatinate extensions with separator ',' and set to MOZILLA_EXTENSIONS,taya1-12/+3
instead of using ':ts' modifier. becase make of NetBSD-1.6.x doesn't have it. suggested by Jeremy C. Reed.
2005-04-17Update firefox & firefox-gtk1 to 1.0.3.taya3-46/+6
This is a security fix release. Fixed vulnerabilities are follows: MFSA 2005-33 Javascript "lambda" replace exposes memory contents MFSA 2005-34 javascript: PLUGINSPAGE code execution MFSA 2005-35 Showing blocked javascript: popup uses wrong privilege context MFSA 2005-36 Cross-site scripting through global scope pollution MFSA 2005-37 Code execution through javascript: favicons MFSA 2005-38 Search plugin cross-site scripting MFSA 2005-39 Arbitrary code execution from Firefox sidebar panel II MFSA 2005-40 Missing Install object instance checks MFSA 2005-41 Privilege escalation via DOM property overrides
2005-04-15Add two @exec ${MKDIR} lines for empty directories which have @dirrm lines,wiz1-1/+3
to fix binary packages.
2005-04-13change extensions list as same as Linux official build.taya2-45/+15
bump PKGREVISION. fix PR pkg/29595
2005-04-06Add security fix to firefox & firefox-gtk1.taya3-2/+42
fixes "Mozilla Firefox JavaScript Engine Information Disclosure Vulnerability" See following pages for detail. http://secunia.com/advisories/14820/ https://bugzilla.mozilla.org/show_bug.cgi?id=288688 Bump PKGREVISION.
2005-04-02MOZILLA_USE_GTK2 needs --disable-gnomevfs, so make this so inabs1-2/+1
mozilla/Makefile.common, rather than adding it into each Makefile (also fixes thunderbird-gtk2).
2005-03-31explicitely --disable-gnomevfs; otherwise gnome stuff will be founddrochner1-1/+2
and some extension tried to be built which fails because not buildlink'd
2005-03-25Bump BUILDLINK_RECOMMENDED, not BUIDLINK_DEPENDS for security fixes.salo1-2/+3
2005-03-24Update firefox & firefox-gtk1 to 1.0.2taya3-8/+8
Firefox 1.0.2 is a security and stability update. Followings bugs are fixed in this release. MFSA 2005-32 Drag and drop loading of privileged XUL MFSA 2005-31 Arbitrary code execution from Firefox sidebar panel MFSA 2005-30 GIF heap overflow parsing Netscape extension 2
2005-02-27Update firefox to 1.0.1.taya5-17/+49
And switched to use gtk2. Changes from release notes: * Improved stability * International Domain Names are now displayed as punycode. (To show International Domain Names in Unicode, set the "network.IDN_show_punycode" preference to false.) * Several security fixes. MFSA 2005-29 Internationalized Domain Name (IDN) homograph spoofing MFSA 2005-28 Unsafe /tmp/plugtmp directory exploitable to erase user's files MFSA 2005-27 Plugins can be used to load privileged content MFSA 2005-26 Cross-site scripting by dropping javascript: link on tab MFSA 2005-25 Image drag and drop executable spoofing MFSA 2005-24 HTTP auth prompt tab spoofing MFSA 2005-23 Download dialog source spoofing MFSA 2005-22 Download dialog spoofing using Content-Disposition header MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice MFSA 2005-20 XSLT can include stylesheets from arbitrary hosts MFSA 2005-19 Autocomplete data leak MFSA 2005-18 Memory overwrite in string library MFSA 2005-17 Install source spoofing with user:pass@host MFSA 2005-16 Spoofing download and security dialogs with overlapping windows MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion MFSA 2005-14 SSL "secure site" indicator spoofing MFSA 2005-13 Window Injection Spoofing
2005-02-24Add RMD160 checksums.wiz1-1/+2
2004-12-04NetBSD have socklen_t.taya2-6/+13
define HAVE_SOCKLEN_T
2004-12-03generate extension directory & related stuff at install time.taya2-4/+9
fix PR pkg/28396 bump PKGREVISION
2004-11-17bl3.mk files required by multimedia/mplayer-plugin-firefox*.xtraeme1-0/+18
2004-11-13remove typeahead extension that confilicts with buildin typeahead component.taya2-7/+4
fix pkg/28164. bump PKGREVISION
2004-11-10- correct path of mirror sitetaya2-5/+15
- add some missing files to PLIST
2004-11-09Update firefox and firefox-gtk2 to 1.0.xtraeme3-12/+9
This is a bugfix release, to fix the problems reported in Preview Releases, etc.
2004-11-01Use __va_copy instead of va_copy for NetBSD. This is needed on gcc 3.4kristerw2-4/+4
since the build use -ansi that in turn makes gcc 3.4 modify its pre- defined symbols in such a way that va_copy is not defined.
2004-10-24apply patch from mozilla CVS to fix bug id #260337 (installer missinggrant3-1/+32
libnsl on Solaris), as well as another sh(1) portability fix. https://bugzilla.mozilla.org/show_bug.cgi?id=260337 no PKGREVISION bump because this didn't build on Solaris without libnsl.
2004-10-21Only include <stdbool.h> if !defined(_cplusplus) in nptypes.h.xtraeme2-1/+31
Fixes build on NetBSD/macppc and maybe others, tested by Peter Bex on 2-0/macppc and i386/-current/2-0 by me, closes PR pkg/27033.
2004-10-19Instead of non-portable cp -RL, use pax with -Lrwreed1-3/+3
to copy the extensions files. On Solaris, cp doesn't know -L. (Reported by R. Quinn.) Using pax was suggested by grant@.
2004-10-16Use cp(1)'s -RL instead of -r, because coreutils'sreed1-2/+2
cp -r copies symlinks as symlinks (which caused files to be missing in install). Hopefully, this is portable. I tested under NetBSD and with coreutils. And I brought this up on tech-pkg in July.
2004-10-04commit a patch for using thread-safe resolver library functions ongrant2-8/+12
NetBSD >=2.0F - I've been running with it for months on -current without any problems.
2004-10-04update to Firefox 0.10.1, bugfix for a security issue:grant2-5/+6
http://www.mozilla.org/press/mozilla-2004-10-01-02.html