summaryrefslogtreecommitdiff
path: root/www/firefox
AgeCommit message (Collapse)AuthorFilesLines
2008-02-08Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.12.ghen2-6/+6
Security fixes in this version: MFSA 2008-11 Web forgery overwrite with div overlay MFSA 2008-10 URL token stealing via stylesheet redirect MFSA 2008-09 Mishandling of locally-saved plain text files MFSA 2008-08 File action dialog tampering MFSA 2008-06 Web browsing history and forward navigation stealing MFSA 2008-05 Directory traversal via chrome: URI MFSA 2008-04 Stored password corruption MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution MFSA 2008-02 Multiple file input focus stealing vulnerabilities MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12) For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.12/releasenotes/
2008-02-08Fix more cases of non-chainable PKGSRC_COMPILER tests.tnn1-2/+2
2007-12-22Change MOZILLA master sites difinitions, related to PR 37379.obache1-5/+2
There are three types Mozilla mirrors. (http://www.mozilla.org/mirroring.html) * mozilla-current contains only the current version of Firefox and Thunderbird * mozilla-release contains Firefox, Thunderbird, and Sunbird releases * mozilla-all complete archive Define following variables for mozilla master sites: MASTER_SITE_MOZILLA_ALL = mozilla-all MASTER_SITE_MOZILLA = mozilla-release and change some packages to use appropriate variable. Update contents of MASTER_SITE_MOZILLA with master and primary mirrors taken from http://www.mozilla.org/mirrors.html and add some sample definitions.
2007-12-01Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.11.ghen2-6/+6
This update fixes a bug introduced by the 2.0.0.10 update in the <canvas> feature that affected some web pages and extensions. For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.11/releasenotes/
2007-11-28Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.10.ghen2-6/+6
Security fixes in this version: MFSA 2007-39 Referer-spoofing via window.location race condition MFSA 2007-38 Memory corruption vulnerabilities (rv:1.8.1.10) MFSA 2007-37 jar: URI scheme XSS hazard For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.10/releasenotes/
2007-11-02Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.9.ghen2-6/+6
Fixes a number of regressions introduced in 2.0.0.8: * Bug 400406 - Firefox will ignore the clear CSS property when used beneath a box that is using the float property. There is a temporary workaround JS/CSS code available for web developers with affected layouts. * Bug 400467 - Windows Vista users will get Java not found or Java not working errors when trying to load Java applets after updating. To fix this, users can right-click the Firefox icon and Run as administrator, then browse to a page with a Java applet doing this once will fix the problem and permanently restore Java functionality. * Bug 396695 - Add-ons are disabled after updating. Users can fix this problem by opening their profile folder and removing three files (extensions.rdf, extensions.ini and extensions.cache) * Bug 400421 - Removing a single area element from an image map will cause the entire map to disappear. There is no workaround available at this time. * Bug 400735 - Some Windows users may experience crashes at startup. There is no workaround available at this time. For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.9/releasenotes/
2007-10-19Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.8.ghen3-17/+16
Security fixes in this version: MFSA 2007-36 URIs with invalid %-encoding mishandled by Windows MFSA 2007-35 XPCNativeWrapper pollution using Script object MFSA 2007-34 Possible file stealing through sftp protocol MFSA 2007-33 XUL pages can hide the window titlebar MFSA 2007-32 File input focus stealing vulnerability MFSA 2007-31 Browser digest authentication request splitting MFSA 2007-30 onUnload Tailgating MFSA 2007-29 Crashes with evidence of memory corruption (rv:1.8.1.8) For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.8/releasenotes/
2007-09-20Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.7.ghen2-7/+7
This version only fixes a Windows-specific security issue, but update nevertheless so we start the freeze with the latest available version. (People will start asking about this update anyway?) For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.7/releasenotes/
2007-08-23Fixed installation to DESTDIR in post-install target.heinz1-2/+2
2007-08-07Add INSTALLATION_DIRS=lib/pkgconfig for destdir support, requested by joerg.ghen1-1/+3
2007-07-31Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.6.ghen2-6/+6
Security fixes in this version: MFSA 2007-27 Unescaped URIs passed to external programs MFSA 2007-26 Privilege escalation through chrome-loaded about:blank windows For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.6/releasenotes/
2007-07-26Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.5.ghen4-11/+13
Security fixes in this version: MFSA 2007-25 XPCNativeWrapper pollution MFSA 2007-24 Unauthorized access to wyciwyg:// documents MFSA 2007-23 Remote code execution by launching Firefox from Internet Explorer MFSA 2007-22 File type confusion due to %00 in name MFSA 2007-21 Privilege escalation using an event handler attached to an element not in the document MFSA 2007-20 Frame spoofing while window is loading MFSA 2007-19 XSS using addEventListener and setTimeout MFSA 2007-18 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.5/releasenotes/
2007-06-18Fix the broken test for when to enable Xft. Addresses the remainder ofdmcmahill1-2/+2
PR/31481.
2007-06-17Don't or X11_TYPE and MOZILLA_USE_XFT, but the exists() condition.joerg1-2/+2
2007-06-16Use a package option to control the --enable-single-profile option fordmcmahill1-2/+1
mozilla browsers. This is now useful again to those of use who require multiple profiles.
2007-06-15Activate Xinerama for non-native case.joerg1-3/+3
2007-06-15Assume that libXft provides Xft support for non-native X11.joerg1-2/+2
2007-05-31Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.4.ghen5-21/+21
Security fixes in this version: MFSA 2007-17 XUL Popup Spoofing MFSA 2007-16 XSS using addEventListener MFSA 2007-14 Path Abuse in Cookies MFSA 2007-13 Persistent Autocomplete Denial of Service MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.4/releasenotes/
2007-05-12Update to Firefox 2.0.0.3 (nb1), from www/firefox2* (see there for historyghen70-195/+742
and change notes). Firefox 1.5.0.x will be maintained in www/firefox15*, as discussed on tech-pkg.
2007-05-12Update EOL notice.ghen1-2/+2
2007-03-31chmod u+w all files under lib/${MOZILLA}/defaults in post-install phase forghen1-1/+4
firefox and seamonkey to make user profiles writable. Bump PKGREVISION for firefox2(-gtk1) and seamonkey(-gtk1). Fixes PR#35596.
2007-03-21Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.11. Fixed in this version:ghen4-8/+11
* Security update: MFSA 2007-11 (FTP PASV port-scanning) has been fixed. * Website Compatibility: Fixed various web compatibility regressions. For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.11.html
2007-03-07Merge patch-dw from thunderbird to fix build on DragonFly.joerg2-1/+15
2007-03-07Dynamically generate the part of the PLIST for libfreebl. This is becausedmcmahill3-21/+32
the exact names of the freebl libraries depends on the platform and they have a habit of changing even on minor releases. This causes these mozilla packages to be broken quite a lot on platforms other than NetBSD/i386. Hopefully this fix will last longer than previous ones. pkgrevision bumps all around.
2007-02-25Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.10. Fixed in this version:ghen7-57/+22
Fixed in Firefox 1.5.0.10 MFSA 2007-07 Embedded nulls in location.hostname confuse same-domain checks MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow MFSA 2007-05 XSS and local file access by opening blocked popups MFSA 2007-04 Spoofing using custom cursor and CSS3 hotspot MFSA 2007-03 Information disclosure through cache collisions MFSA 2007-02 Improvements to help protect against Cross-Site Scripting attacks MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.10.html
2007-02-22pkglint USE_LANGUAGES cleanup. Patch from Sergey Svishchev.wiz1-2/+2
2007-02-04Add a NOT_SUNOSLIB to complement the SUNOSLIB variable. Needed bydmcmahill1-1/+5
firefox2.
2007-02-04Get these mozilla clients to work on Solaris-2.9/sparc. There weredmcmahill3-6/+10
two issues. The PLIST was incorrect and since the PLIST is used by the "moz-install" script, anything missing from the PLIST is never installed even when building from source. When libfreebl* were not installed it caused the clients to fail to load the security component and fail with "The browser failed to load its security component". The second issue is that many installations of solaris-2.9 include various glib/gtk/gnome libraries in /usr/lib. This causes failures because the pkgsrc ones were used at link time and the /usr/lib ones at run time. Work around this by setting a LD_LIBRARY_PATH that includes the pkgsrc lib directory first. pkgrevision bumps all around.
2007-01-25fix a makefile bug related to the change in how GNU make-3.81 handles \ newlinedmcmahill2-1/+33
in single quoted strings compared to version 3.80 and older
2007-01-16Fix build problems on solaris reported in NetBSD PR/31481, PR/42905,dmcmahill3-5/+9
and PR/33583. See also https://bugzilla.mozilla.org/show_bug.cgi?id=77788 for a discussion of this.
2007-01-15libXp is needed for the gtk1 build.joerg1-1/+2
2006-12-27- fine grained X11 dependencies for packages which have either USE_IMAKEjoerg1-1/+7
or USE_X11BASE set, but don't include mk/x11.buildlink3.mk directly or via buildlink3.mks - introduce BUILDLINK_PREFIX.libXpm as alias for BUILDLINK_PREFIX.xpm in the !modular case - fix some cases where the check for libX11 couldn't work at all by using C++ for compilation without including the proper headers Verified using a full X11_TYPE=xorg bulk build without additional breakage. Discussed with salo@, wiz@ and send to packages@ for feedback.
2006-12-20Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.9. Fixed in this version:ghen2-6/+6
MFSA 2006-75 RSS Feed-preview referrer leak MFSA 2006-73 Mozilla SVG Processing Remote Code Execution MFSA 2006-72 XSS by setting img.src to javascript: URI MFSA 2006-71 LiveConnect crash finalizing JS objects MFSA 2006-70 Privilege escallation using watch point MFSA 2006-68 Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.9.html
2006-12-15Mechanically replace all includes of buildlink3.mk of the followingjoerg1-2/+2
packages with the modular Xorg equivalent. Those are falling back to the old location by default, so this commmit doesn't change dependencies. graphics/xpm ==> x11/libXpm fonts/Xft2 ==> x11/libXft x11/Xfixes ==> x11/libXfixes x11/xcursor ==> x11/libXcursor x11/Xrender ==> x11/libXrender x11/Xrandr ==> libXrandr
2006-11-08Update firefox, firefox-bin and firefox-gtk1 to 1.5.0.8. Fixed in this version:ghen3-8/+7
MFSA 2006-67 Running Script can be recompiled MFSA 2006-66 RSA signature forgery (variant) MFSA 2006-65 Crashes with evidence of memory corruption (rv:1.8.0.8) For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.8.html
2006-11-03DESTDIR support for Firefox 2.joerg1-2/+2
2006-10-23thunderbird's ldap doesn't work talking to an ipv4 ldap server ifmarkd3-3/+40
talking to ipv4 addresses using ipv6 addresses isn't allowed, which is the default on NetBSD. Patch to use a v4 socket when talking to an ipv4 ldap server. Fixes my PR 33511. seamonkey/firefox/sunbird have the same code so make the same patch. OKed ghen. Bump PKGREVISION.
2006-10-19Fix crash after printing caused by trying to destroy the same charsetmarkd3-11/+21
structure multiple times. Bump PKGREVISION.
2006-10-16Fixed "test ==".seb2-1/+15
2006-09-24Use various files from seamonkey dir instead of mozilla.salo1-4/+4
2006-09-15Update firefox and firefox-gtk1 to 1.5.0.7. Fixed in this version:ghen2-6/+6
MFSA 2006-64 Crashes with evidence of memory corruption (rv:1.8.0.7) MFSA 2006-62 Popup-blocker cross-site scripting (XSS) MFSA 2006-61 Frame spoofing using document.open() MFSA 2006-60 RSA Signature Forgery MFSA 2006-59 Concurrency-related vulnerability MFSA 2006-58 Auto-Update compromise through DNS and SSL spoofing MFSA 2006-57 JavaScript Regular Expression Heap Corruption For more info, see http://www.mozilla.com/firefox/releases/1.5.0.7.html
2006-09-15EXTRACT_SUFX is defined in Makefile-firefox.common.ghen1-2/+1
2006-08-03Update www/firefox* to Firefox 1.5.0.6 and www/seamonkey* to Seamonkey 1.0.4.ghen2-7/+6
Just one change: - Fixed an issue with playing Windows Media content
2006-07-28Fix build.uebayasi2-15/+23
(Don't bump because this must have never been built since 1.5.0.5 update.)
2006-07-28Update package to 1.5.0.5 in response to CERT warnings of severeperry2-6/+6
security problems with 1.5.0.4. No functional changes at all in the package -- this is purely a security update. See CERT advisory TA06-208A (last revised July 27) for details.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-06-15Pluralize INSTALL_TEMPLATE and DEINSTALL_TEMPLATE variable names as perjlam2-4/+4
the pkglint warning: As {INSTALL,DEINSTALL}_TEMPLATE is modified using "+=", its name should indicate plural. This does make the variables a bit more suggestive of the fact that they hold lists of values.
2006-06-07Add some additional headers introduced with ff1504/tb1504/sm102. Not worthghen1-1/+3
bumping PKGREVISION for.
2006-06-03Update www/firefox and www/firefox-gtk to 1.5.0.4, mail/thunderbird andghen2-6/+6
mail/thunderbird-gtk1 to 1.5.0.4, and www/seamonkey, www/seamonkey-gtk1 and www/seamonkey-bin to 1.0.2 (salo has already updated www/firefox-bin). Note that thunderbird skipped one release number (again) to stay on par with firefox. These updates provide: * improvements to product stability, * several important security fixes (see below). Fixed in Firefox 1.5.0.4: MFSA 2006-43 Privilege escalation using addSelectionListener MFSA 2006-42 Web site XSS using BOM on UTF-8 pages MFSA 2006-41 File stealing by changing input type (variant) MFSA 2006-39 "View Image" local resource linking (Windows) MFSA 2006-38 Buffer overflow in crypto.signText() MFSA 2006-37 Remote compromise via content-defined setter on object prototypes MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2 MFSA 2006-35 Privilege escalation through XUL persist MFSA 2006-34 XSS viewing javascript: frames or images from context menu MFSA 2006-33 HTTP response smuggling MFSA 2006-32 Fixes for crashes with potential memory corruption MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey) Fixed in Thunderbird 1.5.0.4: MFSA 2006-42 Web site XSS using BOM on UTF-8 pages MFSA 2006-40 Double-free on malformed VCard MFSA 2006-38 Buffer overflow in crypto.signText() MFSA 2006-37 Remote compromise via content-defined setter on object prototypes MFSA 2006-35 Privilege escalation through XUL persist MFSA 2006-33 HTTP response smuggling MFSA 2006-32 Fixes for crashes with potential memory corruption MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey) Fixed in SeaMonkey 1.0.2: MFSA 2006-43 Privilege escalation using addSelectionListener MFSA 2006-42 Web site XSS using BOM on UTF-8 pages MFSA 2006-41 File stealing by changing input type (variant) MFSA 2006-40 Double-free on malformed VCard MFSA 2006-39 "View Image" local resource linking (Windows) MFSA 2006-38 Buffer overflow in crypto.signText() MFSA 2006-37 Remote compromise via content-defined setter on object prototypes MFSA 2006-35 Privilege escalation through XUL persist MFSA 2006-34 XSS viewing javascript: frames or images from context menu MFSA 2006-33 HTTP response smuggling MFSA 2006-32 Fixes for crashes with potential memory corruption MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-30 13:38:09 +0000