summaryrefslogtreecommitdiff
path: root/www/firefox
AgeCommit message (Collapse)AuthorFilesLines
2011-07-21recursive bump from gnome-vfs drop crypto dependency.obache1-1/+2
2011-07-11Fix PLIST when official branding is disabled.tnn2-2/+6
2011-04-26Update to firefox-4.0.tnn2-23/+366
Firefox 4 is based on the Gecko 2.0 Web platform. This release features JavaScript execution speeds up to six times faster than the previous version, new capabilities for Web Developers and Add-on Developers such as hardware accelerated graphics and HTML5 technologies, and a completely revised user interface.
2011-04-22recursive bump from gettext-lib shlib bump.obache1-1/+2
2011-03-05Stability & security update of firefox to 3.6.15.tnn1-2/+1
MFSA 2011-10 CSRF risk with plugins and 307 redirects MFSA 2011-09 Crash caused by corrupted JPEG image MFSA 2011-08 ParanoidFragmentSink allows javascript: URLs in chrome documents MFSA 2011-07 Memory corruption during text run construction (Windows) MFSA 2011-06 Use-after-free error using Web Workers MFSA 2011-05 Buffer overflow in JavaScript atom map MFSA 2011-04 Buffer overflow in JavaScript upvarMap MFSA 2011-03 Use-after-free error in JSON.stringify MFSA 2011-02 Recursive eval call causes confirm dialogs to evaluate to true MFSA 2011-01 Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
2011-01-13png shlib name changed for png>=1.5.0, so bump PKGREVISIONs.wiz1-1/+2
2010-12-29fix installation w/ gnome option enabledtnn2-5/+2
2010-12-11Update to firefox-3.6.13.tnn1-2/+1
MFSA 2010-84 XSS hazard in multiple character encodings MFSA 2010-83 Location bar SSL spoofing using network error page MFSA 2010-82 Incomplete fix for CVE-2010-0179 MFSA 2010-81 Integer overflow vulnerability in NewIdArray MFSA 2010-80 Use-after-free error with nsDOMAttribute MutationObserver MFSA 2010-79 Java security bypass from LiveConnect loaded via data: URL meta refresh MFSA 2010-78 Add support for OTS font sanitizer MFSA 2010-77 Crash and remote code execution using HTML tags inside a XUL tree MFSA 2010-76 Chrome privilege escalation with window.open and <isindex> element MFSA 2010-75 Buffer overflow while line breaking after document.write with long string MFSA 2010-74 Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
2010-11-15PKGREVISION bumps for changes to gtk2, librsvg, libbonobo and libgnomeabs1-2/+2
2010-11-13Reluctantly switch over to bundled cairo and pixman for mozilla packages,tnn1-1/+2
like other distros have recently done. Bump package revisions. Background: The cairo-1.10 update caused multiple regressions in firefox, such as flickering gif animations and crashes. Mozilla doesn't seem interested in fixing it on the stable branches: https://bugzilla.mozilla.org/show_bug.cgi?id=610107 Other references: https://bugzilla.redhat.com/show_bug.cgi?id=628331 http://bugs.gentoo.org/show_bug.cgi?id=337813 https://bugzilla.mozilla.org/show_bug.cgi?id=597174 This workaround is guaranteed to cause other problems in the long run; so we should attempt to switch back when we move to the mozilla-2.0 branch.
2010-10-21Security & stability update to firefox-3.6.11 (xulrunner-1.9.2.11)tnn1-2/+1
MFSA 2010-72 Insecure Diffie-Hellman key exchange MFSA 2010-71 Unsafe library loading vulnerabilities MFSA 2010-70 SSL wildcard certificate matching IP addresses MFSA 2010-69 Cross-site information disclosure via modal calls MFSA 2010-68 XSS in gopher parser when parsing hrefs MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter MFSA 2010-66 Use-after-free error in nsBarProp MFSA 2010-65 Buffer overflow and memory corruption using document.write MFSA 2010-64 Miscellaneous memory safety hazards (rv:1.9.2.11/ 1.9.1.14)
2010-09-14Bump dependency on pixman to 0.18.4 because cairo-1.10 needs thatwiz1-1/+2
version, and bump all depends. Per discussion on pkgsrc-changes.
2010-06-24Security update of firefox & xulrunner to 3.6.4 (1.9.1.2).tnn1-2/+1
MFSA 2010-33 User tracking across sites using Math.random() MFSA 2010-32 Content-Disposition: attachment ignored if Content-Type: multipart also present MFSA 2010-31 focus() behavior can be used to inject or steal keystrokes MFSA 2010-30 Integer Overflow in XSLT Node Sorting MFSA 2010-29 Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal MFSA 2010-28 Freed object reuse across plugin instances MFSA 2010-26 Crashes with evidence of memory corruption
2010-06-13Bump PKGREVISION for libpng shlib name change.wiz1-1/+2
Also add some patches to remove use of deprecated symbols and fix other problems when looking for or compiling against libpng-1.4.x.
2010-04-02firefox-3.6.3 fixes a use-after-free bug which could be exploited totnn1-2/+1
run arbitrary code.
2010-03-23Update to firefox-3.6.2 proper. (no changes from the beta)tnn1-1/+2
Also add patch for PR pkg/42988 crash, effectively disabling all sound support until we decide on what sound API to use. The current dlopen() guesswork is bad, mkay. Bump PKGREVISION for this and previous changes.
2010-03-22Fix desktop icon name (PR pkg/43036)tnn1-3/+3
2010-03-16Update to firefox-3.6.2.tnn2-13/+7
.2 is not formally released yet, but is release tagged in the scm and I want to get this update in before we freeze the tree. "Firefox 3.6 is built on Mozilla's Gecko 1.9.2 web rendering platform, which has been under development since early 2009 and contains many improvements for web developers, add-on developers, and users." - Improved JavaScript performance, overall browser responsiveness, and startup time. - The ability for web developers to indicate that scripts should run asynchronously to speed up page load times. - Continued support for downloadable web fonts using the new WOFF font format. - Support for new CSS attributes such as gradients, background sizing, and pointer events. - Support for new DOM and HTML5 specifications including the Drag & Drop API and the File API, which allow for more interactive web pages.
2010-02-17Update to firefox-3.5.8 and xulrunner-1.9.1.8.tnn2-12/+5
Security and bugfix release. (no MFSAs released at time of writing) While here drop defunct debug option from firefox and reduce diff to wip/
2010-01-31Don't record an exact version dependency on xulrunner.tnn1-3/+4
Exact dependencies make upgrading through binary packages impossible because we don't have a way to do multipackage transactional updates. You still need to have the same mozilla platform version of xulrunner and firefox installed or there will be an error message at run time.
2010-01-26Update "firefox" package to 3.5.7. Changes since version 3.5.6:tron1-4/+2
- Fixed a common stability issue. - Fixed a problem with how updates were being presented to users. Approved by Tobias Nygren.
2010-01-18Second try at jpeg-8 recursive PKGREVISION bump.wiz1-1/+2
2010-01-16Added LICENSE.heinz1-1/+2
2009-12-16Update to firefox-3.5.6. Security and bugfix release.tnn1-3/+2
While here, switch NetBSD build from sunaudio to OSS emulation. This greatly improves HTML5 video playback. (Yes, we ought to fix the busted sunaudio support or PKG_OPTIONalize this. Perhaps another day.) Advisories relating to this release: MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects MFSA 2009-70 Privilege escalation via chrome window.opener MFSA 2009-69 Location bar spoofing vulnerabilities MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-67 Integer overflow, crash in libtheora video library MFSA 2009-66 Memory safety fixes in liboggplay media library MFSA 2009-65 Crashes with evidence of memory corruption (rv:1.9.1.6/ 1.9.0.16)
2009-11-29fix linttnn1-7/+8
2009-11-27bump the minimum required GTK+ to 2.18.3nb1tnn1-1/+2
2009-11-06Update to firefox 3.5.5. This is a stability/bugfix update.tnn1-9/+3
pkgsrc changes: - assign devel/xulrunner maintainership to tnn@ - mozilla-common.mk: work around gcc __thread support misdetection on NetBSD - separate distinfo related stuff into dist.mk for sharing with nss & nspr "topcrash" bugs fixed: 468562 "ASSERTION: Inserting multiple children without flushing" 521750 Put a runtime NS_IsMainThread check in nsCycleCollector::Suspect2 ... 524462 startup crash [@ gfxWindowsFontGroup::WhichFontSupportsChar(nsTAr ... 525326 Crashes in gif decoder [@ xul.dll@0x348945][@ xul.dll@0x348864][@ ... 525276 crashes [@ nsDocument::RegisterNamedItems(nsIContent*)]
2009-10-28Security and bugfix update of firefox (to 3.5.4) and xulrunner (to 1.9.1.4)tnn2-6/+5
Also fix broken DESTDIR support. Fixes the following security issues: MFSA 2009-64 Crashes with evidence of memory corruption (rv:1.9.1.4/ 1.9.0.15) MFSA 2009-63 Upgrade media libraries to fix memory safety bugs MFSA 2009-62 Download filename spoofing with RTL override MFSA 2009-61 Cross-origin data theft through document.getSelection() MFSA 2009-59 Heap buffer overflow in string to number conversion MFSA 2009-57 Chrome privilege escalation in XPCVariant::VariantDataToJS() MFSA 2009-56 Heap buffer overflow in GIF color map parser MFSA 2009-55 Crash in proxy auto-configuration regexp parsing MFSA 2009-54 Crash with recursive web-worker calls MFSA 2009-53 Local downloaded file tampering MFSA 2009-52 Form history vulnerable to stealing
2009-10-11- allow firefox and xulrunner to share some infrastructuretnn11-264/+8
- install headers for plugin and liveconnect (needed by openjdk7-icedtea-plugin) - bump revision for both packages
2009-10-09s/Shiretoko/Browser/tnn1-2/+2
2009-09-23- when official branding is not enabled, just call it "Browser".tnn5-3/+34
- set the default start page to something more sensible. - Bump PKGREVISION
2009-09-22Send firefox3 on it's way to the happy hunting ground.tnn1-32/+0
2009-09-18Fix typo.ghen1-2/+2
2009-09-17fix potentially troublesome shell variable expansion in patchtnn2-4/+4
2009-09-16Build firefox against external runtime components from devel/xulrunner.tnn53-4761/+71
Bump PKGREVISION.
2009-09-10In qcmstypes.h, don't redefine standard types line uintptr_t, uint32_ttnn2-5/+15
and friends. Include <stdint.h> instead. Might fix PR pkg/42033.
2009-09-10Update to firefox-3.5.3. Bugfix and security release.tnn3-13/+12
MFSA 2009-51 Chrome privilege escalation with FeedWriter MFSA 2009-50 Location bar spoofing via tall line-height Unicode characters MFSA 2009-49 TreeColumns dangling pointer vulnerability MFSA 2009-47 Crashes with evidence of memory corruption (rv:1.9.1.3/1.9.0.14)
2009-09-01Fix an alignement problem in qcms/iccread.cmartin2-1/+39
2009-09-01Fix patch-nb on Linux by pulling in <stdint.h> before using uint64_t. Thisdsainty2-4/+7
only affects platforms that would not previously complete building, so no PKGREVISION++ required.
2009-08-30libgnome is also needed for the gnome option to do anything.markd2-2/+4
2009-08-29Upon giving this some more thought, I think the gnome option is bettertnn1-2/+1
left disabled by default. Correct me if I'm wrong but it feels like most pkgsrc users don't use gnome. If someone can comment on the benefits of these dependencies in the GNOME environment, speak up.
2009-08-29PLIST fix for previoustnn2-3/+6
2009-08-29Add a "gnome" option which toggles gnome-vfs (and dbus) support.tnn2-6/+13
Enable this by default. Bump revision.
2009-08-26New bugs reported upstream - add referencesmartin4-10/+13
2009-08-26Fix very obvious alignment issuemartin3-1/+53
2009-08-26bump revision because of graphics/jpeg updatesno1-1/+2
2009-08-23The aggregate allocator for JSScripts did not care about alignment at all -martin2-1/+123
make it deal properly at least on 64 bit archs (natural alignment seems to fit for all substructures for 32bit archs)
2009-08-09remove stale PLIST entrytnn1-2/+1
2009-08-09add mozilla-jit optiontnn1-4/+16
2009-08-08needs ALSA libraries on Linux for ogg playbacktnn1-2/+5
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-03 18:28:10 +0000