Commit Graph

144 Commits

Author SHA1 Message Date
sthen
9998ef502d Use @unexec-delete instead of @unexec for the *-update-* goos.
prodded by espie@
discussed with espie@ ajacoutot@ landry@
2009-12-22 13:02:11 +00:00
naddy
9d0588f952 SECURITY update to 3.0.16:
MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects
MFSA 2009-70 Privilege escalation via chrome window.opener
MFSA 2009-69 Location bar spoofing vulnerabilities
MFSA 2009-68 NTLM reflection vulnerability
MFSA 2009-65 Crashes with evidence of memory corruption
2009-12-17 22:08:13 +00:00
naddy
2ef69bc65e SECURITY update to 3.0.15. For the list of horrors, see
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.15
2009-11-27 21:15:51 +00:00
martynas
84856b7c61 - create downloads dir with mode 0700 instead
- pass --disable-crashreporter
2009-09-18 20:35:27 +00:00
martynas
a21dd6625c - create downloads dir with mode 0700 instead
- pass --disable-crashreporter
2009-09-10 21:34:55 +00:00
martynas
67f1ca01e0 security update to mozilla-firefox-3.0.14. MFSA 2009-51, MFSA
2009-50, MFSA 2009-49, MFSA 2009-48, MFSA 2009-47
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.14
2009-09-10 21:28:25 +00:00
kili
8fc6287292 WANTLIB changes after xcb addition and bump. 2009-08-10 06:29:51 +00:00
steven
5c4c5b3d35 depend on more recent nss and nspr
help and ok martynas@
2009-08-04 21:19:13 +00:00
martynas
261715b957 security update to mozilla-firefox-3.0.13 2009-08-03 21:53:33 +00:00
martynas
0c7ae6d7c7 security update to mozilla-firefox-3.0.12 2009-07-21 19:25:49 +00:00
martynas
f6879d3eef mozilla-firefox-3.0.11 2009-06-11 14:10:37 +00:00
martynas
927ded3beb implement sndio backend and get rid of esound. ok jakemsr@ 2009-05-01 22:53:25 +00:00
martynas
ffd91fa3b4 security update to mozilla-firefox-3.0.10. from robert at openbsd.pap.st
MFSA 2009-23  Crash in nsTextFrame::ClearTextRun()
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.10
ok kurt@, naddy@
2009-04-28 21:50:16 +00:00
ajacoutot
2c5f8a533a CONFIGURE_ENV += PYTHON="${MODPY_BIN}" is inherited from the python module 2009-04-26 11:01:04 +00:00
martynas
c3a6bd83c4 security update to mozilla-firefox-3.0.9. MFSA 2009-22, MFSA
2009-21, MFSA 2009-20, MFSA 2009-19, MFSA 2009-18, MFSA 2009-17,
MFSA 2009-16, MFSA 2009-15, MFSA 2009-14:
"go ahead" naddy@
2009-04-22 21:59:31 +00:00
martynas
c256bdc4a7 turn off Ignore Scaling and Shrink to fit page width. fixes printing
for beck@.  ok kurt@, "no objections" naddy@
2009-04-22 21:00:23 +00:00
martynas
8596042dc8 sync switches w/ ff3
update about url
ok naddy@
2009-04-05 00:23:49 +00:00
martynas
352d6bb69f mozilla-firefox-3.0.8: forced release after security bugs got
attention

MFSA 2009-12 Mozilla Firefox XSL Parsing 'root' XML Tag Remote
Memory Corruption Vulnerability
    * http://www.securityfocus.com/bid/34235/exploit
    * https://bugzilla.mozilla.org/show_bug.cgi?id=485217
    * CVE-2009-1169


MFSA 2009-12 covers the Pwn2Own bug, which is a crash involving the XUL
<tree> widget.
    * https://bugzilla.mozilla.org/show_bug.cgi?id=484320
    * CVE-2009-1044

ok naddy@
2009-03-28 15:59:04 +00:00
fgsch
431e71fddb fix wantlib and bump package.
ok martynas@
2009-03-10 12:08:34 +00:00
martynas
5580d8dca2 security update to mozilla-firefox-3.0.7. MFSA 2009-11, MFSA
2009-10, MFSA 2009-09, MFSA 2009-08, MFSA 2009-07.
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.7
includes security update to the png library
ok naddy@
2009-03-05 23:42:20 +00:00
martynas
d762abf08b security/stability update to mozilla-firefox-3.0.6. MFSA 2009-06;
MFSA 2009-05; MFSA 2009-04; MFSA 2009-03; MFSA 2009-02; MFSA 2009-01
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.6
ok naddy@
2009-02-04 21:08:15 +00:00
martynas
ce3ab68a5a - do not run with a predictable directory as root: firefox,
thunderbird, seamonkey, xulrunner
- add comment for xulrunner why -devel needs to be bumped
suggested and ok naddy@;  ok kurt@
2009-01-09 15:54:31 +00:00
martynas
6dfe2634be security update to mozilla-firefox-3.0.5. MFSA 2008-69; MFSA
2008-68; MFSA 2008-67; MFSA 2008-66; MFSA 2008-65; MFSA 2008-64;
MFSA 2008-63; MFSA 2008-60.
tested by sthen@ and naddy@.  ok naddy@
2008-12-18 19:27:13 +00:00
naddy
4daf585935 The Gtk+2 printing default has been fixed to include lpr. ok martynas@ 2008-12-16 22:33:27 +00:00
martynas
9944b0d1c5 it is the right time to update to mozilla-firefox-3.0.4, which has
been tested good enough, and i've fixed all the issues i'm aware
of.  furthermore 2.0 branch has basically reached eol, since there
will be only one minor update (2.0.0.19)
discussed with kurt@, naddy@ and porters
pkgname change handling help naddy@
ok naddy@
2008-11-20 23:41:32 +00:00
martynas
c5067e1a5b security update to mozilla-firefox-2.0.0.18. MFSA 2008-58; MFSA
2008-57; MFSA 2008-56; MFSA 2008-55; MFSA 2008-54; MFSA 2008-53;
MFSA 2008-52; MFSA 2008-50; MFSA 2008-49; MFSA 2008-48; MFSA 2008-47.
http://www.mozilla.org/security/known-vulnerabilities/firefox20.html#firefox2.0.0.18
ok naddy@
2008-11-13 16:57:14 +00:00
martynas
20b073c42f security update to mozilla-firefox-2.0.0.17. MFSA 2008-45, MFSA
2008-44, MFSA 2008-43, MFSA 2008-42, MFSA 2008-41, MFSA 2008-40,
MFSA 2008-39, MFSA 2008-38, MFSA 2008-37
http://www.mozilla.org/security/known-vulnerabilities/firefox20.html#firefox2.0.0.17
ok naddy@.  looks good to kurt@
2008-09-24 19:23:25 +00:00
ajacoutot
cf10739f24 - SYSCONFDIR and LOCALBASE are already part of the generic SUBST_VARS
looks good to landry@
2008-09-18 13:37:41 +00:00
martynas
96836d3bb7 use system libm. was ok naddy@, kurt@ 2008-08-19 23:53:45 +00:00
ajacoutot
cdc11b66cd - s/PREFIX/LOCALBASE
ok martynas@
2008-07-26 16:23:32 +00:00
martynas
6dcaa5bd64 document the new MOZ_PLUGIN_PATH behavior, bump pkgnames
pointed out, and looks good to landry@
2008-07-25 17:41:06 +00:00
martynas
e0fd5632c7 @conflict firefox3-*
bump pkgname
2008-07-25 08:03:15 +00:00
claudio
8c7cca2dc8 Don't overwrite MOZ_PLUGIN_PATH in the startup script if it has been already
been set. This allows to load plugins on demand, especially interesting when
using multiple profiles with the -no-remote option.
OK martynas@
2008-07-20 09:49:00 +00:00
martynas
22f1813fee security update to mozilla-firefox-2.0.0.16. MFSA 2008-35, MFSA 2008-34
ok kurt@, naddy@, bernd@
2008-07-17 16:47:39 +00:00
martynas
9a3396b096 security update to mozilla-firefox-2.0.0.15, fixes MFSA 2008-33,
MFSA 2008-32, MFSA 2008-31, MFSA 2008-30, MFSA 2008-29, MFSA 2008-28,
MFSA 2008-27, MFSA 2008-25, MFSA 2008-24, MFSA 2008-23, MFSA 2008-22,
MFSA 2008-21
http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox2.0.0.15
ok kurt@, naddy@
2008-07-04 13:47:25 +00:00
martynas
b8a903ea58 security update to mozilla-firefox-2.0.0.14; MFSA 2008-20
ok kurt@, naddy@
2008-04-18 15:17:17 +00:00
jasper
8d27fc2715 SECURITY UPDATE to mozilla-firefox 2.0.0.13
fixes multiple vulnerabilities: http://secunia.com/advisories/29526/

ok landry@ martynas@
2008-03-27 21:51:35 +00:00
bernd
1d00ee6e88 Security update to mozilla-firefox-2.0.0.12.
Fixes multiple vulnerabilities:

CVE-2008-0412
CVE-2008-0413
CVE-2008-0414
CVE-2008-0415
CVE-2008-0419
CVE-2008-0591
CVE-2008-0593

More infos:
http://secunia.com/advisories/28758/

Tested by some people on ports@. Thanks!

ok martynas@, laurent@, steven@
2008-02-11 18:13:44 +00:00
martynas
a30c8f18f8 - drop -devel
- move libraries to PLIST
improvements, testing and ok kurt@ and naddy@
2008-01-23 16:41:40 +00:00
martynas
8e66a80a27 bring back the browser.startup.homepage behavior after 1.82
requested by deraadt@;  ok naddy@
2007-12-20 22:41:18 +00:00
kurt
6b2d09fd97 add back in the directory entries that were accidentally removed in the
last commit.
2007-12-20 21:50:31 +00:00
jasper
9c2cc1a432 oops, wrong dependency 2007-12-19 17:25:28 +00:00
jasper
a3cb2d5bf3 - install a .desktop file, so that a firefox entry will appear in menus
like gnome's.
- tweak PLIST (from kurt@)

requested by fkr@

feedback and ok kurt@ martynas@
2007-12-19 14:47:50 +00:00
martynas
0f165eda60 - security update to mozilla-firefox-2.0.0.10:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.10
- fix canvas.drawImage regression.
ok kurt@, kili@
2007-11-28 20:22:25 +00:00
martynas
c3055b17e9 update to 2.0.0.9, a regression fix release:
http://developer.mozilla.org/devnews/index.php/2007/10/22/firefox-2008-update-to-be-updated/
ok kurt@, naddy@
2007-11-08 16:07:42 +00:00
ajacoutot
9ee0f0dc38 - fix WANTLIB
"go ahead" robert@
2007-10-27 09:04:32 +00:00
martynas
dd58cf6c31 security update to mozilla-firefox-2.0.0.8:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.8
ok kurt@, naddy@
2007-10-23 20:13:26 +00:00
fgsch
0ff347de08 Re-add browserconfig.properties, otherwise you may encounter some issues
on fresh installations; bump package.
discussed an ok kurt@ martynas@
2007-10-19 17:36:17 +00:00
kurt
9e80ec3311 - fix a 64-bit problem with the LiveConnect feature. From mozilla
bug report: https://bugzilla.mozilla.org/show_bug.cgi?id=345866
  Eventually the java plugin will need this on amd64. okay martynas@
2007-10-14 18:33:09 +00:00
martynas
0946c23a6f update to 2.0.0.7; fixes MFSA 2007-28:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.7
ok kurt@; naddy@.  similar diff from bernd@
2007-09-20 16:28:28 +00:00