cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
66,361 Commits 1 Branch 0 Tags 554 MiB
b7199e378c
Commit Graph

203 Commits

Author SHA1 Message Date
espie
8666776b2e gcc3 and gcc4 disagree, so put a common cast to make them compile. 
(also compile some file with -O1 in moz)
 2010-05-10 12:36:09 +00:00
dcoppa
298f15e211 Adjust WANTLIB. 
OK landry@, sthen@, ajacoutot@
 2010-05-09 09:35:55 +00:00
landry
bcce369765 Various cleanups, as done in www/firefox35 : 
- use SUBST_CMD instead of perl -pi -e
- use ${LOCALBASE}/${TRUEPREFIX}/${X11BASE} instead of the handpatched
  _XXX_ ones
- harmonize default systemwide plugins/extensions search path to
  lib/mozilla/{plugins,extensions} as done in other mozilla ports
 2010-04-28 06:56:38 +00:00
landry
de100a1ff9 Firefox uses its own libpng (for animated png support), and apparently 
it breaks loading png icons through gdk_pixbuf_new_from_file as gtk is
linked with systemwide png. This went unnoticed so far as firefox always
shipped a fallback xpm icon, but this is not the case anymore, so now
gtk_window_set_icon_list() is not called anymore, and the window manager
shows the default icon for firefox windows in taskbar/tasklists..
So add graphics/netpbm as a build dependency, do the necessary netpbm
magic in do-install to create the default.xpm from mozicon128.png, and
patch widget/src/gtk2/nsWindow.cpp to not try to load png icons.
While here fix icon path in desktop file, and add a comment about why we
don't use systemwide png.
 2010-04-26 22:14:37 +00:00
landry
ad076fd40f Update www/mozilla-firefox from 3.0.19 to 3.6.3, merging the wip done in 
www/firefox36 mostly by martynas@ and naddy@.
Note that the java plugin from devel/jdk currently doesn't work with this
version of firefox, in the meantime users really needed it will have to
use www/firefox35.
ok naddy@
 2010-04-26 19:55:58 +00:00
naddy
c82dd556f9 path to distfiles changed; no changes to the distfiles themselves 2010-04-04 19:11:42 +00:00
naddy
846bed1120 SECURITY update to 3.0.19: 
MFSA 2010-20 Chrome privilege escalation via forced URL drag and drop
MFSA 2010-19 Dangling pointer vulnerability in nsPluginArray
MFSA 2010-18 Dangling pointer vulnerability in nsTreeContentView
MFSA 2010-17 Remote code execution with use-after-free in nsTreeSelection
MFSA 2010-16 Crashes with evidence of memory corruption
 2010-03-31 15:46:12 +00:00
naddy
2c0af6bc4f SECURITY update to 3.0.18: 
MFSA 2010-05 XSS hazard using SVG document and binary Content-Type
MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain
MFSA 2010-03 Use-after-free crash in HTML parser
MFSA 2010-01 Crashes with evidence of memory corruption

Also fix some corrupted $OpenBSD keywords, pointed out by sthen@

ok sthen@
 2010-02-24 18:17:23 +00:00
naddy
7ef0c5c7ee minor reliability update to 3.0.17 2010-01-06 14:37:35 +00:00
sthen
9998ef502d Use @unexec-delete instead of @unexec for the *-update-* goos. 
prodded by espie@
discussed with espie@ ajacoutot@ landry@
 2009-12-22 13:02:11 +00:00
naddy
9d0588f952 SECURITY update to 3.0.16: 
MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects
MFSA 2009-70 Privilege escalation via chrome window.opener
MFSA 2009-69 Location bar spoofing vulnerabilities
MFSA 2009-68 NTLM reflection vulnerability
MFSA 2009-65 Crashes with evidence of memory corruption
 2009-12-17 22:08:13 +00:00
naddy
2ef69bc65e SECURITY update to 3.0.15. For the list of horrors, see 
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.15
 2009-11-27 21:15:51 +00:00
martynas
84856b7c61 - create downloads dir with mode 0700 instead 
- pass --disable-crashreporter
 2009-09-18 20:35:27 +00:00
martynas
a21dd6625c - create downloads dir with mode 0700 instead 
- pass --disable-crashreporter
 2009-09-10 21:34:55 +00:00
martynas
67f1ca01e0 security update to mozilla-firefox-3.0.14. MFSA 2009-51, MFSA 
2009-50, MFSA 2009-49, MFSA 2009-48, MFSA 2009-47
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.14
 2009-09-10 21:28:25 +00:00
kili
8fc6287292 WANTLIB changes after xcb addition and bump. 2009-08-10 06:29:51 +00:00
steven
5c4c5b3d35 depend on more recent nss and nspr 
help and ok martynas@
 2009-08-04 21:19:13 +00:00
martynas
261715b957 security update to mozilla-firefox-3.0.13 2009-08-03 21:53:33 +00:00
martynas
0c7ae6d7c7 security update to mozilla-firefox-3.0.12 2009-07-21 19:25:49 +00:00
martynas
f6879d3eef mozilla-firefox-3.0.11 2009-06-11 14:10:37 +00:00
martynas
927ded3beb implement sndio backend and get rid of esound. ok jakemsr@ 2009-05-01 22:53:25 +00:00
martynas
ffd91fa3b4 security update to mozilla-firefox-3.0.10. from robert at openbsd.pap.st 
MFSA 2009-23  Crash in nsTextFrame::ClearTextRun()
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.10
ok kurt@, naddy@
 2009-04-28 21:50:16 +00:00
ajacoutot
2c5f8a533a CONFIGURE_ENV += PYTHON="${MODPY_BIN}" is inherited from the python module 2009-04-26 11:01:04 +00:00
martynas
c3a6bd83c4 security update to mozilla-firefox-3.0.9. MFSA 2009-22, MFSA 
2009-21, MFSA 2009-20, MFSA 2009-19, MFSA 2009-18, MFSA 2009-17,
MFSA 2009-16, MFSA 2009-15, MFSA 2009-14:
"go ahead" naddy@
 2009-04-22 21:59:31 +00:00
martynas
c256bdc4a7 turn off Ignore Scaling and Shrink to fit page width. fixes printing 
for beck@.  ok kurt@, "no objections" naddy@
 2009-04-22 21:00:23 +00:00
martynas
8596042dc8 sync switches w/ ff3 
update about url
ok naddy@
 2009-04-05 00:23:49 +00:00
martynas
352d6bb69f mozilla-firefox-3.0.8: forced release after security bugs got 
attention

MFSA 2009-12 Mozilla Firefox XSL Parsing 'root' XML Tag Remote
Memory Corruption Vulnerability
    * http://www.securityfocus.com/bid/34235/exploit
    * https://bugzilla.mozilla.org/show_bug.cgi?id=485217
    * CVE-2009-1169


MFSA 2009-12 covers the Pwn2Own bug, which is a crash involving the XUL
<tree> widget.
    * https://bugzilla.mozilla.org/show_bug.cgi?id=484320
    * CVE-2009-1044

ok naddy@
 2009-03-28 15:59:04 +00:00
fgsch
431e71fddb fix wantlib and bump package. 
ok martynas@
 2009-03-10 12:08:34 +00:00
martynas
5580d8dca2 security update to mozilla-firefox-3.0.7. MFSA 2009-11, MFSA 
2009-10, MFSA 2009-09, MFSA 2009-08, MFSA 2009-07.
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.7
includes security update to the png library
ok naddy@
 2009-03-05 23:42:20 +00:00
martynas
d762abf08b security/stability update to mozilla-firefox-3.0.6. MFSA 2009-06; 
MFSA 2009-05; MFSA 2009-04; MFSA 2009-03; MFSA 2009-02; MFSA 2009-01
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.6
ok naddy@
 2009-02-04 21:08:15 +00:00
martynas
ce3ab68a5a - do not run with a predictable directory as root: firefox, 
thunderbird, seamonkey, xulrunner
- add comment for xulrunner why -devel needs to be bumped
suggested and ok naddy@;  ok kurt@
 2009-01-09 15:54:31 +00:00
martynas
6dfe2634be security update to mozilla-firefox-3.0.5. MFSA 2008-69; MFSA 
2008-68; MFSA 2008-67; MFSA 2008-66; MFSA 2008-65; MFSA 2008-64;
MFSA 2008-63; MFSA 2008-60.
tested by sthen@ and naddy@.  ok naddy@
 2008-12-18 19:27:13 +00:00
naddy
4daf585935 The Gtk+2 printing default has been fixed to include lpr. ok martynas@ 2008-12-16 22:33:27 +00:00
martynas
9944b0d1c5 it is the right time to update to mozilla-firefox-3.0.4, which has 
been tested good enough, and i've fixed all the issues i'm aware
of.  furthermore 2.0 branch has basically reached eol, since there
will be only one minor update (2.0.0.19)
discussed with kurt@, naddy@ and porters
pkgname change handling help naddy@
ok naddy@
 2008-11-20 23:41:32 +00:00
martynas
c5067e1a5b security update to mozilla-firefox-2.0.0.18. MFSA 2008-58; MFSA 
2008-57; MFSA 2008-56; MFSA 2008-55; MFSA 2008-54; MFSA 2008-53;
MFSA 2008-52; MFSA 2008-50; MFSA 2008-49; MFSA 2008-48; MFSA 2008-47.
http://www.mozilla.org/security/known-vulnerabilities/firefox20.html#firefox2.0.0.18
ok naddy@
 2008-11-13 16:57:14 +00:00
martynas
20b073c42f security update to mozilla-firefox-2.0.0.17. MFSA 2008-45, MFSA 
2008-44, MFSA 2008-43, MFSA 2008-42, MFSA 2008-41, MFSA 2008-40,
MFSA 2008-39, MFSA 2008-38, MFSA 2008-37
http://www.mozilla.org/security/known-vulnerabilities/firefox20.html#firefox2.0.0.17
ok naddy@.  looks good to kurt@
 2008-09-24 19:23:25 +00:00
ajacoutot
cf10739f24 - SYSCONFDIR and LOCALBASE are already part of the generic SUBST_VARS 
looks good to landry@
 2008-09-18 13:37:41 +00:00
martynas
96836d3bb7 use system libm. was ok naddy@, kurt@ 2008-08-19 23:53:45 +00:00
ajacoutot
cdc11b66cd - s/PREFIX/LOCALBASE 
ok martynas@
 2008-07-26 16:23:32 +00:00
martynas
6dcaa5bd64 document the new MOZ_PLUGIN_PATH behavior, bump pkgnames 
pointed out, and looks good to landry@
 2008-07-25 17:41:06 +00:00
martynas
e0fd5632c7 @conflict firefox3-* 
bump pkgname
 2008-07-25 08:03:15 +00:00
claudio
8c7cca2dc8 Don't overwrite MOZ_PLUGIN_PATH in the startup script if it has been already 
been set. This allows to load plugins on demand, especially interesting when
using multiple profiles with the -no-remote option.
OK martynas@
 2008-07-20 09:49:00 +00:00
martynas
22f1813fee security update to mozilla-firefox-2.0.0.16. MFSA 2008-35, MFSA 2008-34 
ok kurt@, naddy@, bernd@
 2008-07-17 16:47:39 +00:00
martynas
9a3396b096 security update to mozilla-firefox-2.0.0.15, fixes MFSA 2008-33, 
MFSA 2008-32, MFSA 2008-31, MFSA 2008-30, MFSA 2008-29, MFSA 2008-28,
MFSA 2008-27, MFSA 2008-25, MFSA 2008-24, MFSA 2008-23, MFSA 2008-22,
MFSA 2008-21
http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox2.0.0.15
ok kurt@, naddy@
 2008-07-04 13:47:25 +00:00
martynas
b8a903ea58 security update to mozilla-firefox-2.0.0.14; MFSA 2008-20 
ok kurt@, naddy@
 2008-04-18 15:17:17 +00:00
jasper
8d27fc2715 SECURITY UPDATE to mozilla-firefox 2.0.0.13 
fixes multiple vulnerabilities: http://secunia.com/advisories/29526/

ok landry@ martynas@
 2008-03-27 21:51:35 +00:00
bernd
1d00ee6e88 Security update to mozilla-firefox-2.0.0.12. 
Fixes multiple vulnerabilities:

CVE-2008-0412
CVE-2008-0413
CVE-2008-0414
CVE-2008-0415
CVE-2008-0419
CVE-2008-0591
CVE-2008-0593

More infos:
http://secunia.com/advisories/28758/

Tested by some people on ports@. Thanks!

ok martynas@, laurent@, steven@
 2008-02-11 18:13:44 +00:00
martynas
a30c8f18f8 - drop -devel 
- move libraries to PLIST
improvements, testing and ok kurt@ and naddy@
 2008-01-23 16:41:40 +00:00
martynas
8e66a80a27 bring back the browser.startup.homepage behavior after 1.82 
requested by deraadt@;  ok naddy@
 2007-12-20 22:41:18 +00:00
kurt
6b2d09fd97 add back in the directory entries that were accidentally removed in the 
last commit.
 2007-12-20 21:50:31 +00:00
jasper
9c2cc1a432 oops, wrong dependency 2007-12-19 17:25:28 +00:00
jasper
a3cb2d5bf3 - install a .desktop file, so that a firefox entry will appear in menus 
like gnome's.
- tweak PLIST (from kurt@)

requested by fkr@

feedback and ok kurt@ martynas@
 2007-12-19 14:47:50 +00:00
martynas
0f165eda60 - security update to mozilla-firefox-2.0.0.10: 
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.10
- fix canvas.drawImage regression.
ok kurt@, kili@
 2007-11-28 20:22:25 +00:00
martynas
c3055b17e9 update to 2.0.0.9, a regression fix release: 
http://developer.mozilla.org/devnews/index.php/2007/10/22/firefox-2008-update-to-be-updated/
ok kurt@, naddy@
 2007-11-08 16:07:42 +00:00
ajacoutot
9ee0f0dc38 - fix WANTLIB 
"go ahead" robert@
 2007-10-27 09:04:32 +00:00
martynas
dd58cf6c31 security update to mozilla-firefox-2.0.0.8: 
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.8
ok kurt@, naddy@
 2007-10-23 20:13:26 +00:00
fgsch
0ff347de08 Re-add browserconfig.properties, otherwise you may encounter some issues 
on fresh installations; bump package.
discussed an ok kurt@ martynas@
 2007-10-19 17:36:17 +00:00
kurt
9e80ec3311 - fix a 64-bit problem with the LiveConnect feature. From mozilla 
bug report: https://bugzilla.mozilla.org/show_bug.cgi?id=345866
  Eventually the java plugin will need this on amd64. okay martynas@
 2007-10-14 18:33:09 +00:00
martynas
0946c23a6f update to 2.0.0.7; fixes MFSA 2007-28: 
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.7
ok kurt@; naddy@.  similar diff from bernd@
 2007-09-20 16:28:28 +00:00
merdely
618456247b Remove surrounding quotes in COMMENT-* 2007-09-15 22:14:34 +00:00
merdely
ba8add3ebb Remove surrounding quotes from 
COMMENT-*/ERRORS/NO_REGRESS/PERMIT_*/REGRESS_IS_INTERACTIVE

Change '.include "bsd.port.mk"' to '.include <bsd.port.mk>' while here
(ok naddy@)
 2007-09-15 20:38:20 +00:00
martynas
e65c158c58 security update to 2.0.0.6: 
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.6
the diff matches with naddy@'s, ok kurt@
 2007-08-02 13:09:41 +00:00
naddy
a1723b4fa7 SECURITY update to 2.0.0.5. 
Fixes a rash of security vulnerabilities and bugs.  ok kurt@
 2007-07-24 19:32:13 +00:00
martynas
17c3fae17a - set fd soft limit to 128 if it's lower: helps for people who 
upgraded and didn't use mergemaster;
- remove lines, related to debug build and fd in README.OpenBSD;
help from sturm@, kurt@, espie@, naddy@
ok kurt@, sturm@
 2007-06-12 16:45:37 +00:00
martynas
819930f960 security update to mozilla-firefox-2.0.0.4 
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.4

- WANTLIB for xenocara;
- use the combination of find(1) and install(1) to install the
{DATA,DIST}FILES, as suggested by kurt@;
- remove the two patches that are already upstream;
- fmt;

ok kurt@, naddy@
 2007-06-01 08:03:42 +00:00
kili
283ebc9f56 -devel has -main in it's plist, so bump it, too. 
ok, martynas@
 2007-04-07 17:40:02 +00:00
martynas
2aab7d2ee3 - make it check LOCALBASE/share/mozilla-dicts, the global dictionaries 
location for all mozilla ports;
- regen patches (due to the current changes);
- bump pkgname;
discussed with naddy@, kurt@, ajacoutot@
ok naddy@
 2007-04-06 14:33:36 +00:00
espie
d4ebcd974d more base64 checksums 2007-04-05 17:26:05 +00:00
martynas
84e3b38b98 remove patch-widget_src_gtk_nsSound_cpp, because 
patch-widget_src_gtk2_nsSound_cpp does the job.
no pkgname bump -- the file was not being compiled.
ok wilfried@
 2007-04-03 10:56:13 +00:00
martynas
076c6a6f95 - update to 2.0.0.3; 
- don't force -Os;
ok naddy@, kurt@
 2007-03-27 16:04:37 +00:00
espie
64a9885735 fix @pkgpath for debug flavor, unconfuses pkg_add -u. 
okay pvalchev@
 2007-03-06 17:43:36 +00:00
pvalchev
ed8cf210c2 Fix permissions to /usr/local/mozilla (where ~/.mozilla inherits them 
from) to allow owner writes. This was broken in the last commit... now
it allows users to save bookmarks, preferences, etc. From martynas
 2007-03-04 20:23:57 +00:00
robert
d3d161c7d9 - update to version 2.0.0.2 and apply several security fixes, 
therefore bump the PKGNAME to p0 now;
- enable official branding by default
- fix some WANTLIB markers

work done by Martynas Venckus; thanks.

tested by many many people; ok pvalchev@
 2007-03-01 22:46:06 +00:00
robert
c3922e86f6 implement xptcinvoke and xptcstubs for arm based on the linux code, 
and fix an endianess issue that makes minimo work on arm based
architectures; bump PKGNAME
 2007-02-26 14:21:26 +00:00
sturm
dfae7fe22c fix live bookmarks on sparc64 
from Martynas Venckus <martynas at altroot.org>
 2007-02-20 20:06:56 +00:00
naddy
6f3f4607cc add man page; from Martynas Venckus <martynas@altroot.org>, ok kurt@ 2007-02-14 22:44:32 +00:00
espie
57b2d0439a resurrect COREXFONTS, so that GDK_USE_XFT works again. Needs linking fixes 
(+pangox-1.0).
Adjust README.OpenBSD, and provide a debug flavor
 2007-02-05 00:11:55 +00:00
kurt
c07becdd02 - update to 2.0.0.1 from Martynas Venckus <martynas at altroot.org> 
- add a -devel sub-package for vlc plugin
input and testing from many - thanks! okay naddy@ pvalchev@
 2007-01-12 21:46:17 +00:00
bernd
fa5982a5ac Security update to firefox 1.5.0.9. 
More info:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox

ok steven@
 2006-12-21 09:53:43 +00:00
espie
0f5dc96ea1 say goodbye to GNU land. 2006-12-16 12:22:32 +00:00
kurt
7ab5074357 - require nspr with PR_GetLibraryName fix 
- bump major due to previous nspr removal
 2006-11-30 21:06:35 +00:00
kurt
adffbb61ca use devel/nspr instead of internal nspr. now using libc strtod and __dtoa 
via devel/nspr. okay pvalchev@
 2006-11-17 19:14:51 +00:00
wilfried
f6e93594db SECURITY update to 1.5.0.8 
see http://www.mozilla.org/projects/security/known-vulnerabilities.html
for details
 2006-11-10 14:15:49 +00:00
brad
05a117853f stop using the gcc3 module on the alpha architecture. 2006-10-01 22:23:47 +00:00
espie
939a8c0f52 zap .0.0 2006-09-18 11:59:59 +00:00
steven
4b337b355c SECURITY update to firefox 1.5.0.7 
see http://www.mozilla.org/projects/security/known-vulnerabilities.html
for details

ok bernd@
 2006-09-17 21:02:58 +00:00
bernd
1498df97f8 Security update to mozilla-firefox-1.5.0.5. 
This update fixes multiple security vulnerabilities.

For detailed information see:

http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox1.5.0.5

ok steven@
 2006-07-31 09:32:19 +00:00
bernd
682eb24b83 Security update to mozilla-firefox-1.5.0.4. 
Fixes multiple security vulnerabilities. For detailed information see:

http://secunia.com/advisories/20376/
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox1.5.0.4

ok steven@
 2006-06-05 09:30:06 +00:00
bernd
0e40ccc07e - better pkg/MESSAGE, from Deanna Phillips <deanna at sdf.lonestar.org> 
- fix some typos in files/README.OpenBSD
- bump PKGNAME accordingly

ok wilfried@, kurt@
 2006-05-23 14:03:22 +00:00
bernd
3bbe03aff4 Update to 1.5.0.3. Security fixes inside... 
More info:

CVE-2006-1993
http://secunia.com/advisories/19802/

tested by many
"go ahead" jolan@
 2006-05-05 10:14:21 +00:00
wilfried
2431442cac update to 1.5.0.2 
fixes multiple critical vulnerabilities
 2006-04-18 10:37:32 +00:00
pvalchev
9cbf189d5c check XftLockFace() for NULL return to avoid a crash, see 
https://bugzilla.mozilla.org/show_bug.cgi?id=331077
from Tobias Ulmer <tobiasu@tmux.org>
 2006-03-27 04:23:28 +00:00
wilfried
4c685774b5 Firefox 1.5.0.1 is a stability-and-security update to Firefox 1.5. 
It also includes a number of low-risk fixes for other types of bugs.
 2006-02-06 08:21:53 +00:00
steven
cf67e0bdb7 fix WANTLIB after gtk+2 downgrade 
"looks good" espie@
 2006-01-16 07:01:39 +00:00
espie
a9df05cec2 more C++ libs bumps. Done thru mail, plus lizards. 2006-01-14 00:07:28 +00:00
sturm
5a686c751d SHARED_LIBS 
note that we keep the mozilla ports at a single SO_VERSION, too many
libraries, too little gain otherwise
 2005-12-31 18:35:56 +00:00
ian
3664fb0fb3 Add README.OpenBSD with more details on email, Java, etc.; shorten 
MESSAGE accordingly to refer to new file; patchlevel bump for new file.
ok bernd@, kurt@.
 2005-12-26 02:17:53 +00:00
kurt
5454dfe735 - Fix startup DoS. overlong document.title setting can corrupt history 
data, causing non-responsive temporary hang on subsequent startups
patches from https://bugzilla.mozilla.org/show_bug.cgi?id=319004
- Fix use after free segfault after printing reported by Andy Wingate.
FT_Done_Face was being called twice on the same mFace.
 2005-12-21 15:33:00 +00:00
bernd
1ea3eea498 Update to Firefox 1.5. 
Team work by wilfried@, kurt@ and me.

Tested by many. Thanks a lot!

ok kurt@ krw@ jolan@ ian@ pvalchev@
 2005-12-20 23:44:00 +00:00
wilfried
5630e1aa18 fix packages-specs brain fart from yesterday and bump 2005-11-15 09:21:50 +00:00