Commit Graph

189 Commits

Author SHA1 Message Date
martynas
67f1ca01e0 security update to mozilla-firefox-3.0.14. MFSA 2009-51, MFSA
2009-50, MFSA 2009-49, MFSA 2009-48, MFSA 2009-47
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.14
2009-09-10 21:28:25 +00:00
kili
8fc6287292 WANTLIB changes after xcb addition and bump. 2009-08-10 06:29:51 +00:00
steven
5c4c5b3d35 depend on more recent nss and nspr
help and ok martynas@
2009-08-04 21:19:13 +00:00
martynas
261715b957 security update to mozilla-firefox-3.0.13 2009-08-03 21:53:33 +00:00
martynas
0c7ae6d7c7 security update to mozilla-firefox-3.0.12 2009-07-21 19:25:49 +00:00
martynas
f6879d3eef mozilla-firefox-3.0.11 2009-06-11 14:10:37 +00:00
martynas
927ded3beb implement sndio backend and get rid of esound. ok jakemsr@ 2009-05-01 22:53:25 +00:00
martynas
ffd91fa3b4 security update to mozilla-firefox-3.0.10. from robert at openbsd.pap.st
MFSA 2009-23  Crash in nsTextFrame::ClearTextRun()
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.10
ok kurt@, naddy@
2009-04-28 21:50:16 +00:00
ajacoutot
2c5f8a533a CONFIGURE_ENV += PYTHON="${MODPY_BIN}" is inherited from the python module 2009-04-26 11:01:04 +00:00
martynas
c3a6bd83c4 security update to mozilla-firefox-3.0.9. MFSA 2009-22, MFSA
2009-21, MFSA 2009-20, MFSA 2009-19, MFSA 2009-18, MFSA 2009-17,
MFSA 2009-16, MFSA 2009-15, MFSA 2009-14:
"go ahead" naddy@
2009-04-22 21:59:31 +00:00
martynas
c256bdc4a7 turn off Ignore Scaling and Shrink to fit page width. fixes printing
for beck@.  ok kurt@, "no objections" naddy@
2009-04-22 21:00:23 +00:00
martynas
8596042dc8 sync switches w/ ff3
update about url
ok naddy@
2009-04-05 00:23:49 +00:00
martynas
352d6bb69f mozilla-firefox-3.0.8: forced release after security bugs got
attention

MFSA 2009-12 Mozilla Firefox XSL Parsing 'root' XML Tag Remote
Memory Corruption Vulnerability
    * http://www.securityfocus.com/bid/34235/exploit
    * https://bugzilla.mozilla.org/show_bug.cgi?id=485217
    * CVE-2009-1169


MFSA 2009-12 covers the Pwn2Own bug, which is a crash involving the XUL
<tree> widget.
    * https://bugzilla.mozilla.org/show_bug.cgi?id=484320
    * CVE-2009-1044

ok naddy@
2009-03-28 15:59:04 +00:00
fgsch
431e71fddb fix wantlib and bump package.
ok martynas@
2009-03-10 12:08:34 +00:00
martynas
5580d8dca2 security update to mozilla-firefox-3.0.7. MFSA 2009-11, MFSA
2009-10, MFSA 2009-09, MFSA 2009-08, MFSA 2009-07.
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.7
includes security update to the png library
ok naddy@
2009-03-05 23:42:20 +00:00
martynas
d762abf08b security/stability update to mozilla-firefox-3.0.6. MFSA 2009-06;
MFSA 2009-05; MFSA 2009-04; MFSA 2009-03; MFSA 2009-02; MFSA 2009-01
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.6
ok naddy@
2009-02-04 21:08:15 +00:00
martynas
ce3ab68a5a - do not run with a predictable directory as root: firefox,
thunderbird, seamonkey, xulrunner
- add comment for xulrunner why -devel needs to be bumped
suggested and ok naddy@;  ok kurt@
2009-01-09 15:54:31 +00:00
martynas
6dfe2634be security update to mozilla-firefox-3.0.5. MFSA 2008-69; MFSA
2008-68; MFSA 2008-67; MFSA 2008-66; MFSA 2008-65; MFSA 2008-64;
MFSA 2008-63; MFSA 2008-60.
tested by sthen@ and naddy@.  ok naddy@
2008-12-18 19:27:13 +00:00
naddy
4daf585935 The Gtk+2 printing default has been fixed to include lpr. ok martynas@ 2008-12-16 22:33:27 +00:00
martynas
9944b0d1c5 it is the right time to update to mozilla-firefox-3.0.4, which has
been tested good enough, and i've fixed all the issues i'm aware
of.  furthermore 2.0 branch has basically reached eol, since there
will be only one minor update (2.0.0.19)
discussed with kurt@, naddy@ and porters
pkgname change handling help naddy@
ok naddy@
2008-11-20 23:41:32 +00:00
martynas
c5067e1a5b security update to mozilla-firefox-2.0.0.18. MFSA 2008-58; MFSA
2008-57; MFSA 2008-56; MFSA 2008-55; MFSA 2008-54; MFSA 2008-53;
MFSA 2008-52; MFSA 2008-50; MFSA 2008-49; MFSA 2008-48; MFSA 2008-47.
http://www.mozilla.org/security/known-vulnerabilities/firefox20.html#firefox2.0.0.18
ok naddy@
2008-11-13 16:57:14 +00:00
martynas
20b073c42f security update to mozilla-firefox-2.0.0.17. MFSA 2008-45, MFSA
2008-44, MFSA 2008-43, MFSA 2008-42, MFSA 2008-41, MFSA 2008-40,
MFSA 2008-39, MFSA 2008-38, MFSA 2008-37
http://www.mozilla.org/security/known-vulnerabilities/firefox20.html#firefox2.0.0.17
ok naddy@.  looks good to kurt@
2008-09-24 19:23:25 +00:00
ajacoutot
cf10739f24 - SYSCONFDIR and LOCALBASE are already part of the generic SUBST_VARS
looks good to landry@
2008-09-18 13:37:41 +00:00
martynas
96836d3bb7 use system libm. was ok naddy@, kurt@ 2008-08-19 23:53:45 +00:00
ajacoutot
cdc11b66cd - s/PREFIX/LOCALBASE
ok martynas@
2008-07-26 16:23:32 +00:00
martynas
6dcaa5bd64 document the new MOZ_PLUGIN_PATH behavior, bump pkgnames
pointed out, and looks good to landry@
2008-07-25 17:41:06 +00:00
martynas
e0fd5632c7 @conflict firefox3-*
bump pkgname
2008-07-25 08:03:15 +00:00
claudio
8c7cca2dc8 Don't overwrite MOZ_PLUGIN_PATH in the startup script if it has been already
been set. This allows to load plugins on demand, especially interesting when
using multiple profiles with the -no-remote option.
OK martynas@
2008-07-20 09:49:00 +00:00
martynas
22f1813fee security update to mozilla-firefox-2.0.0.16. MFSA 2008-35, MFSA 2008-34
ok kurt@, naddy@, bernd@
2008-07-17 16:47:39 +00:00
martynas
9a3396b096 security update to mozilla-firefox-2.0.0.15, fixes MFSA 2008-33,
MFSA 2008-32, MFSA 2008-31, MFSA 2008-30, MFSA 2008-29, MFSA 2008-28,
MFSA 2008-27, MFSA 2008-25, MFSA 2008-24, MFSA 2008-23, MFSA 2008-22,
MFSA 2008-21
http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox2.0.0.15
ok kurt@, naddy@
2008-07-04 13:47:25 +00:00
martynas
b8a903ea58 security update to mozilla-firefox-2.0.0.14; MFSA 2008-20
ok kurt@, naddy@
2008-04-18 15:17:17 +00:00
jasper
8d27fc2715 SECURITY UPDATE to mozilla-firefox 2.0.0.13
fixes multiple vulnerabilities: http://secunia.com/advisories/29526/

ok landry@ martynas@
2008-03-27 21:51:35 +00:00
bernd
1d00ee6e88 Security update to mozilla-firefox-2.0.0.12.
Fixes multiple vulnerabilities:

CVE-2008-0412
CVE-2008-0413
CVE-2008-0414
CVE-2008-0415
CVE-2008-0419
CVE-2008-0591
CVE-2008-0593

More infos:
http://secunia.com/advisories/28758/

Tested by some people on ports@. Thanks!

ok martynas@, laurent@, steven@
2008-02-11 18:13:44 +00:00
martynas
a30c8f18f8 - drop -devel
- move libraries to PLIST
improvements, testing and ok kurt@ and naddy@
2008-01-23 16:41:40 +00:00
martynas
8e66a80a27 bring back the browser.startup.homepage behavior after 1.82
requested by deraadt@;  ok naddy@
2007-12-20 22:41:18 +00:00
kurt
6b2d09fd97 add back in the directory entries that were accidentally removed in the
last commit.
2007-12-20 21:50:31 +00:00
jasper
9c2cc1a432 oops, wrong dependency 2007-12-19 17:25:28 +00:00
jasper
a3cb2d5bf3 - install a .desktop file, so that a firefox entry will appear in menus
like gnome's.
- tweak PLIST (from kurt@)

requested by fkr@

feedback and ok kurt@ martynas@
2007-12-19 14:47:50 +00:00
martynas
0f165eda60 - security update to mozilla-firefox-2.0.0.10:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.10
- fix canvas.drawImage regression.
ok kurt@, kili@
2007-11-28 20:22:25 +00:00
martynas
c3055b17e9 update to 2.0.0.9, a regression fix release:
http://developer.mozilla.org/devnews/index.php/2007/10/22/firefox-2008-update-to-be-updated/
ok kurt@, naddy@
2007-11-08 16:07:42 +00:00
ajacoutot
9ee0f0dc38 - fix WANTLIB
"go ahead" robert@
2007-10-27 09:04:32 +00:00
martynas
dd58cf6c31 security update to mozilla-firefox-2.0.0.8:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.8
ok kurt@, naddy@
2007-10-23 20:13:26 +00:00
fgsch
0ff347de08 Re-add browserconfig.properties, otherwise you may encounter some issues
on fresh installations; bump package.
discussed an ok kurt@ martynas@
2007-10-19 17:36:17 +00:00
kurt
9e80ec3311 - fix a 64-bit problem with the LiveConnect feature. From mozilla
bug report: https://bugzilla.mozilla.org/show_bug.cgi?id=345866
  Eventually the java plugin will need this on amd64. okay martynas@
2007-10-14 18:33:09 +00:00
martynas
0946c23a6f update to 2.0.0.7; fixes MFSA 2007-28:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.7
ok kurt@; naddy@.  similar diff from bernd@
2007-09-20 16:28:28 +00:00
merdely
618456247b Remove surrounding quotes in COMMENT-* 2007-09-15 22:14:34 +00:00
merdely
ba8add3ebb Remove surrounding quotes from
COMMENT-*/ERRORS/NO_REGRESS/PERMIT_*/REGRESS_IS_INTERACTIVE

Change '.include "bsd.port.mk"' to '.include <bsd.port.mk>' while here
(ok naddy@)
2007-09-15 20:38:20 +00:00
martynas
e65c158c58 security update to 2.0.0.6:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.6
the diff matches with naddy@'s, ok kurt@
2007-08-02 13:09:41 +00:00
naddy
a1723b4fa7 SECURITY update to 2.0.0.5.
Fixes a rash of security vulnerabilities and bugs.  ok kurt@
2007-07-24 19:32:13 +00:00
martynas
17c3fae17a - set fd soft limit to 128 if it's lower: helps for people who
upgraded and didn't use mergemaster;
- remove lines, related to debug build and fd in README.OpenBSD;
help from sturm@, kurt@, espie@, naddy@
ok kurt@, sturm@
2007-06-12 16:45:37 +00:00
martynas
819930f960 security update to mozilla-firefox-2.0.0.4
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.4

- WANTLIB for xenocara;
- use the combination of find(1) and install(1) to install the
{DATA,DIST}FILES, as suggested by kurt@;
- remove the two patches that are already upstream;
- fmt;

ok kurt@, naddy@
2007-06-01 08:03:42 +00:00
kili
283ebc9f56 -devel has -main in it's plist, so bump it, too.
ok, martynas@
2007-04-07 17:40:02 +00:00
martynas
2aab7d2ee3 - make it check LOCALBASE/share/mozilla-dicts, the global dictionaries
location for all mozilla ports;
- regen patches (due to the current changes);
- bump pkgname;
discussed with naddy@, kurt@, ajacoutot@
ok naddy@
2007-04-06 14:33:36 +00:00
espie
d4ebcd974d more base64 checksums 2007-04-05 17:26:05 +00:00
martynas
84e3b38b98 remove patch-widget_src_gtk_nsSound_cpp, because
patch-widget_src_gtk2_nsSound_cpp does the job.
no pkgname bump -- the file was not being compiled.
ok wilfried@
2007-04-03 10:56:13 +00:00
martynas
076c6a6f95 - update to 2.0.0.3;
- don't force -Os;
ok naddy@, kurt@
2007-03-27 16:04:37 +00:00
espie
64a9885735 fix @pkgpath for debug flavor, unconfuses pkg_add -u.
okay pvalchev@
2007-03-06 17:43:36 +00:00
pvalchev
ed8cf210c2 Fix permissions to /usr/local/mozilla (where ~/.mozilla inherits them
from) to allow owner writes. This was broken in the last commit... now
it allows users to save bookmarks, preferences, etc. From martynas
2007-03-04 20:23:57 +00:00
robert
d3d161c7d9 - update to version 2.0.0.2 and apply several security fixes,
therefore bump the PKGNAME to p0 now;
- enable official branding by default
- fix some WANTLIB markers

work done by Martynas Venckus; thanks.

tested by many many people; ok pvalchev@
2007-03-01 22:46:06 +00:00
robert
c3922e86f6 implement xptcinvoke and xptcstubs for arm based on the linux code,
and fix an endianess issue that makes minimo work on arm based
architectures; bump PKGNAME
2007-02-26 14:21:26 +00:00
sturm
dfae7fe22c fix live bookmarks on sparc64
from Martynas Venckus <martynas at altroot.org>
2007-02-20 20:06:56 +00:00
naddy
6f3f4607cc add man page; from Martynas Venckus <martynas@altroot.org>, ok kurt@ 2007-02-14 22:44:32 +00:00
espie
57b2d0439a resurrect COREXFONTS, so that GDK_USE_XFT works again. Needs linking fixes
(+pangox-1.0).
Adjust README.OpenBSD, and provide a debug flavor
2007-02-05 00:11:55 +00:00
kurt
c07becdd02 - update to 2.0.0.1 from Martynas Venckus <martynas at altroot.org>
- add a -devel sub-package for vlc plugin
input and testing from many - thanks! okay naddy@ pvalchev@
2007-01-12 21:46:17 +00:00
bernd
fa5982a5ac Security update to firefox 1.5.0.9.
More info:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox

ok steven@
2006-12-21 09:53:43 +00:00
espie
0f5dc96ea1 say goodbye to GNU land. 2006-12-16 12:22:32 +00:00
kurt
7ab5074357 - require nspr with PR_GetLibraryName fix
- bump major due to previous nspr removal
2006-11-30 21:06:35 +00:00
kurt
adffbb61ca use devel/nspr instead of internal nspr. now using libc strtod and __dtoa
via devel/nspr. okay pvalchev@
2006-11-17 19:14:51 +00:00
wilfried
f6e93594db SECURITY update to 1.5.0.8
see http://www.mozilla.org/projects/security/known-vulnerabilities.html
for details
2006-11-10 14:15:49 +00:00
brad
05a117853f stop using the gcc3 module on the alpha architecture. 2006-10-01 22:23:47 +00:00
espie
939a8c0f52 zap .0.0 2006-09-18 11:59:59 +00:00
steven
4b337b355c SECURITY update to firefox 1.5.0.7
see http://www.mozilla.org/projects/security/known-vulnerabilities.html
for details

ok bernd@
2006-09-17 21:02:58 +00:00
bernd
1498df97f8 Security update to mozilla-firefox-1.5.0.5.
This update fixes multiple security vulnerabilities.

For detailed information see:

http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox1.5.0.5

ok steven@
2006-07-31 09:32:19 +00:00
bernd
682eb24b83 Security update to mozilla-firefox-1.5.0.4.
Fixes multiple security vulnerabilities. For detailed information see:

http://secunia.com/advisories/20376/
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox1.5.0.4

ok steven@
2006-06-05 09:30:06 +00:00
bernd
0e40ccc07e - better pkg/MESSAGE, from Deanna Phillips <deanna at sdf.lonestar.org>
- fix some typos in files/README.OpenBSD
- bump PKGNAME accordingly

ok wilfried@, kurt@
2006-05-23 14:03:22 +00:00
bernd
3bbe03aff4 Update to 1.5.0.3. Security fixes inside...
More info:

CVE-2006-1993
http://secunia.com/advisories/19802/

tested by many
"go ahead" jolan@
2006-05-05 10:14:21 +00:00
wilfried
2431442cac update to 1.5.0.2
fixes multiple critical vulnerabilities
2006-04-18 10:37:32 +00:00
pvalchev
9cbf189d5c check XftLockFace() for NULL return to avoid a crash, see
https://bugzilla.mozilla.org/show_bug.cgi?id=331077
from Tobias Ulmer <tobiasu@tmux.org>
2006-03-27 04:23:28 +00:00
wilfried
4c685774b5 Firefox 1.5.0.1 is a stability-and-security update to Firefox 1.5.
It also includes a number of low-risk fixes for other types of bugs.
2006-02-06 08:21:53 +00:00
steven
cf67e0bdb7 fix WANTLIB after gtk+2 downgrade
"looks good" espie@
2006-01-16 07:01:39 +00:00
espie
a9df05cec2 more C++ libs bumps. Done thru mail, plus lizards. 2006-01-14 00:07:28 +00:00
sturm
5a686c751d SHARED_LIBS
note that we keep the mozilla ports at a single SO_VERSION, too many
libraries, too little gain otherwise
2005-12-31 18:35:56 +00:00
ian
3664fb0fb3 Add README.OpenBSD with more details on email, Java, etc.; shorten
MESSAGE accordingly to refer to new file; patchlevel bump for new file.
ok bernd@, kurt@.
2005-12-26 02:17:53 +00:00
kurt
5454dfe735 - Fix startup DoS. overlong document.title setting can corrupt history
data, causing non-responsive temporary hang on subsequent startups
patches from https://bugzilla.mozilla.org/show_bug.cgi?id=319004
- Fix use after free segfault after printing reported by Andy Wingate.
FT_Done_Face was being called twice on the same mFace.
2005-12-21 15:33:00 +00:00
bernd
1ea3eea498 Update to Firefox 1.5.
Team work by wilfried@, kurt@ and me.

Tested by many. Thanks a lot!

ok kurt@ krw@ jolan@ ian@ pvalchev@
2005-12-20 23:44:00 +00:00
wilfried
5630e1aa18 fix packages-specs brain fart from yesterday and bump 2005-11-15 09:21:50 +00:00
wilfried
141a5175b7 fix wantlib + bump 2005-11-14 15:50:18 +00:00
pvalchev
63607b50b1 Fix a crash in prdtoa.c:mult() where there is an off-by-some bytes
in memory accessed during some very fucked up pointer acrobatics.
Allocate 2 bytes extra for that case, which seems to be a
sufficient hack to keep this working.

Debugged by me with minimo on zaurus/arm (pain!), seen also by krw@
and others on amd64, who helped with testing.  Due to random malloc
this of course did not show up everywhere all the time.
2005-11-03 00:59:43 +00:00
naddy
79f5804452 Mozilla.org bug 210658:
Fix hanging with non-standard HTML elements parsererror, sourcetext.
ok wilfried@
2005-10-19 13:08:12 +00:00
kurt
c34ab1b1a4 remove 'don't close dlopened objects' type ld.so work-arounds 2005-10-14 04:00:37 +00:00
bernd
6c26bb90b1 If we start a second firefox, don't show the profile chooser but open a
new browser window instead. (The same for thunderbird and mozilla.)

Idea from Marc Winiger <mw at msys.ch>, thanks!

suggestions, tests & ok kurt@
2005-10-13 04:32:41 +00:00
bernd
0abe19a7d2 update to mozilla-firefox-1.0.7
comments & ok kurt@
2005-09-24 16:19:29 +00:00
david
3490f7b528 SECURITY: disable IDN due to buffer overflow (CAN-2005-2871)
https://addons.mozilla.org/messages/307259.html

tested by bernd@
2005-09-16 15:54:53 +00:00
kurt
b29fbb1dab - switch from gtk1 to gtk2. tested by many (thanks!)
- fix backup mastersite
- fix gdk_property_get warnings (from marcm@)

some feedback marcm@, okay brad@ pvalchev@
2005-09-08 12:48:39 +00:00
pvalchev
31d18f916a Switch back to gtk1, as there are side-effects that need to be discussed
more and it's too close to release to be having such discussions, showing
this was not thought out very well.
Bump PKGNAME and shlibs again
2005-08-12 19:01:44 +00:00
kurt
33283fba1c -switch to gtk2 (originally from msf@) tested by many
some minor scrolling issues noticed my naddy@
-fix US master site

ok msf@, fine by me naddy@, go ahead wilfried@
2005-08-11 18:59:14 +00:00
kurt
382d862c01 - update to 1.0.6 from Bernd Ahlers
- remove "Extentions don't work" from DESCR

tested on i386/amd64/macppc by myself, naddy@ and/or Bernd
2005-07-22 19:34:20 +00:00
msf
08a983aada - USE_SYSTRACE was written to be transparent to the port author. Adding i
${_SYSTRACE_CMD} to any target in a port Makefile is a mistake.

ok sturm@ kurt@
2005-05-24 00:44:41 +00:00
wilfried
0891c4851b update to firefox 1.0.4
fixed remote code execution of Javascript and DHTML errors.
2005-05-13 08:21:54 +00:00
wilfried
b1ccb8ab3b update firefox to 1.0.3 2005-04-19 07:07:05 +00:00