./www/firefox3, Lightweight gecko-based web browser

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: pkgsrc-2009Q1, Version: 3.0.11, Package name: firefox3-3.0.11, Maintainer: tnn
Required to run:
[databases/sqlite3] [fonts/Xft2] [graphics/cairo] [graphics/jpeg] [graphics/png] [net/libIDL] [x11/gtk2]

Required to build:
[lang/perl5] [lang/python25] [archivers/zip] [devel/gmake] [devel/autoconf213] [devel/pkg-config] [x11/inputproto] [x11/randrproto] [x11/fixesproto] [x11/xproto] [x11/xextproto] [x11/renderproto] [pkgtools/x11-links]

Master sites: (Expand)

SHA1: ca792dcdb67af40c91a4fcece25d6adfb6fef2c3
RMD160: d07a97e0a309bb7a872ba256bc270ee47b2c938b
Filesize: 36342.646 KB

Version history: (Expand)


CVS history: (Expand)


   2009-06-14 12:59:44 by S.P.Zeidler | Files touched by this commit (3) | Package updated
Log message:
Pullup ticket 2796 - requested by tron
Security update

Revisions pulled up:
- pkgsrc/www/firefox3/Makefile			1.33
- pkgsrc/www/firefox3/PLIST			1.9
- pkgsrc/www/firefox3/distinfo			1.25

   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Fri Jun 12 10:08:28 UTC 2009

   Modified Files:
   	pkgsrc/www/firefox3: Makefile PLIST distinfo

   Log message:
   Update "firefox3" package to version 3.0.11. Changes since version \ 
3.0.10:
   - Fixed several security issues:
     MFSA 2009-32 JavaScript chrome privilege escalation
     MFSA 2009-31 XUL scripts bypass content-policy checks
     MFSA 2009-30 Incorrect principal set for file: resources loaded via
                  location bar
     MFSA 2009-29 Arbitrary code execution using event listeners attached
                  to an element whose owner document is null
     MFSA 2009-28 Race condition while accessing the private data of a
                  NPObject JS wrapper class object
     MFSA 2009-27 SSL tampering via non-200 responses to proxy
                  CONNECT requests
     MFSA 2009-26 Arbitrary domain cookie access by local file: resources
     MFSA 2009-25 URL spoofing with invalid unicode characters
     MFSA 2009-24 Crashes with evidence of memory corruption (rv:1.9.0.11)
   - Fixed several stability issues.
   - Several issues were reported with the internal database, SQLite, which
     have now been fixed by upgrading to a newer version.
   - Fixed an issue where, in some specific cases, the bookmarks database
     would become corrupt. (bug 464486)

   To generate a diff of this commit:
   cvs rdiff -u -r1.32 -r1.33 pkgsrc/www/firefox3/Makefile
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/firefox3/PLIST
   cvs rdiff -u -r1.24 -r1.25 pkgsrc/www/firefox3/distinfo
   2009-04-28 12:47:59 by Matthias Scheler | Files touched by this commit (2) | Package updated
Log message:
Pullup ticket #2750 - requested by tnn
firefox3: security update

Revisions pulled up:
- www/firefox3/Makefile			1.31
- www/firefox3/distinfo			1.24
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Tue Apr 28 09:14:25 UTC 2009

Modified Files:
	pkgsrc/www/firefox3: Makefile distinfo

Log message:
Update to Firefox 3.0.10. Fixes a botched security fix from 3.0.9 which
may result in crashes if certain addons are installed. (mfsa2009-23)
   2009-04-23 00:08:43 by Matthias Scheler | Files touched by this commit (2) | Package updated
Log message:
Pullup ticket #2746 - requested by tnn
firefox3: security update

Revisions pulled up:
- www/firefox3/Makefile			1.30
- www/firefox3/distinfo			1.23
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Wed Apr 22 18:15:05 UTC 2009

Modified Files:
	pkgsrc/www/firefox3: Makefile distinfo

Log message:
Update to firefox3-3.0.9.

- Fixed several security issues:
  MFSA 2009-22 Firefox allows Refresh header to redirect to javascript: URIs
  MFSA 2009-21 POST data sent to wrong site when saving web page with
               embedded frame
  MFSA 2009-20 Malicious search plugins can inject code into arbitrary sites
  MFSA 2009-19 Same-origin violations in XMLHttpRequest and
               XPCNativeWrapper.toString
  MFSA 2009-18 XSS hazard using third-party stylesheets and XBL bindings
  MFSA 2009-17 Same-origin violations when Adobe Flash loaded via
               view-source: scheme
  MFSA 2009-16 jar: scheme ignores the content-disposition: header
               on the inner URI
  MFSA 2009-15 URL spoofing with box drawing character
  MFSA 2009-14 Crashes with evidence of memory corruption (rv:1.9.0.9)
- Fixed several stability issues.
- Many users experienced an issue where a corrupt local database caused
  Firefox to "lose" its stored cookies. (bug 470578)
- Fixed an issue where, starting with Firefox 3.0.7, inline image
  attachments on popular webmail services (like AOL and AIM) would not
  display. (bug 482659)
- Large forms would sometimes take a long time to submit. (bug 426991)
- In certain cases, new windows would not have proper focus. (bug 446568)