pkgsrc.se | The NetBSD package collection

./devel/xulrunner, XML User Interface Language runtime environment

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2010Q2, Version: 1.9.2.9, Package name: xulrunner-1.9.2.9, Maintainer: tnn

XULRunner is a runtime environment for applications using the
XML User Interface Language, XUL. It is the successor of the "Gecko"
runtime environment.

Required to run:
[net/libIDL] [x11/gtk2] [graphics/jpeg] [databases/sqlite3]

Required to build:
[devel/pkg-config] [devel/gmake] [devel/autoconf213] [lang/python26] [lang/perl5] [archivers/zip] [x11/fixesproto] [x11/renderproto] [x11/xproto] [x11/inputproto] [x11/randrproto] [x11/xextproto] [pkgtools/x11-links]

Master sites: (Expand)

SHA1: 2429154c8d50bb5eeef80233b56fb26dcf727ea3
RMD160: 530b1d64cc02ba0433c3a39d1c97c569dad090ef
Filesize: 50039.637 KB

Version history: (Expand)

(2010-09-12) Updated to version: xulrunner-1.9.2.9
(2010-07-30) Updated to version: xulrunner-1.9.2.8
(2010-07-22) Updated to version: xulrunner-1.9.2.7
(2010-07-05) Package has been reborn
(2010-07-04) Package added to pkgsrc.se, version xulrunner-1.9.2.4 (created)

CVS history: (Expand)

2010-09-11 16:59:16 by S.P.Zeidler | Files touched by this commit (13) | Package updated

Log message:
Pullup ticket 3219 - requested by tnn
security update

Revisions pulled up:
- pkgsrc/devel/nspr/Makefile			1.37
- pkgsrc/devel/nspr/PLIST			1.11
- pkgsrc/devel/nss/Makefile			1.38
- pkgsrc/devel/xulrunner/PLIST			1.24
- pkgsrc/devel/xulrunner/dist.mk		1.14
- pkgsrc/devel/xulrunner/distinfo		1.36
- pkgsrc/devel/xulrunner/mozilla-common.mk	1.16
- pkgsrc/devel/xulrunner/patches/patch-ag	1.2
- pkgsrc/devel/xulrunner/patches/patch-al	1.2
- pkgsrc/devel/xulrunner/patches/patch-ap	1.4
- pkgsrc/devel/xulrunner/patches/patch-mc	1.2
- pkgsrc/devel/xulrunner/patches/patch-mm	1.3
- pkgsrc/devel/xulrunner/patches/patch-mn	1.3

-------------------------------------------------------------------------
   Modified Files:
           pkgsrc/devel/nspr: Makefile PLIST

   Log message:
   Update to nspr-4.8.6 (via firefox-3.6.9). Changes unknown.

   To generate a diff of this commit:
   cvs rdiff -u -r1.36 -r1.37 pkgsrc/devel/nspr/Makefile
   cvs rdiff -u -r1.10 -r1.11 pkgsrc/devel/nspr/PLIST

-------------------------------------------------------------------------
   Modified Files:
           pkgsrc/devel/nss: Makefile

   Log message:
   Update to nss-3.12.7.0 (via firefox-3.6.9). Changes unknown.

   To generate a diff of this commit:
   cvs rdiff -u -r1.37 -r1.38 pkgsrc/devel/nss/Makefile

-------------------------------------------------------------------------
   Modified Files:
           pkgsrc/devel/xulrunner: PLIST dist.mk distinfo mozilla-common.mk
           pkgsrc/devel/xulrunner/patches: patch-ag patch-al patch-ap
   patch-mc patch-mm patch-mn

   Log message:
   Update to firefox-3.6.9 (xulrunner-1.9.2.9)

   MFSA 2010-63 Information leak via XMLHttpRequest statusText
   MFSA 2010-62 Copy-and-paste or drag-and-drop into designMode document allows XSS
   MFSA 2010-61 UTF-7 XSS by overriding document charset using <object> type
                attribute
   MFSA 2010-59 SJOW creates scope chains ending in outer object
   MFSA 2010-58 Crash on Mac using fuzzed font in data: URL
   MFSA 2010-57 Crash and remote code execution in normalizeDocument
   MFSA 2010-56 Dangling pointer vulnerability in nsTreeContentView
   MFSA 2010-55 XUL tree removal crash and remote code execution
   MFSA 2010-54 Dangling pointer vulnerability in nsTreeSelection
   MFSA 2010-53 Heap buffer overflow in nsTextFrameUtils::TransformText
   MFSA 2010-52 Windows XP DLL loading vulnerability
   MFSA 2010-51 Dangling pointer vulnerability using DOM plugin array
   MFSA 2010-50 Frameset integer overflow vulnerability
   MFSA 2010-49 Miscellaneous memory safety hazards (rv:1.9.2.9/ 1.9.1.12)

   To generate a diff of this commit:
   cvs rdiff -u -r1.23 -r1.24 pkgsrc/devel/xulrunner/PLIST
   cvs rdiff -u -r1.13 -r1.14 pkgsrc/devel/xulrunner/dist.mk
   cvs rdiff -u -r1.35 -r1.36 pkgsrc/devel/xulrunner/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/xulrunner/mozilla-common.mk
   cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/devel/xulrunner/patches/patch-ag \
       pkgsrc/devel/xulrunner/patches/patch-al
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/devel/xulrunner/patches/patch-ap
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/devel/xulrunner/patches/patch-mc
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/devel/xulrunner/patches/patch-mm \
       pkgsrc/devel/xulrunner/patches/patch-mn

2010-07-27 16:00:10 by Matthias Scheler | Files touched by this commit (2) | Package updated

Log message:
Pullup ticket #3189 - requested by tnn
devel/xulrunner: security update
www/firefox: security update

Revisions pulled up:
- devel/xulrunner/dist.mk			1.13
- devel/xulrunner/distinfo			1.35
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Tue Jul 27 07:58:53 UTC 2010

Modified Files:
	pkgsrc/devel/xulrunner: dist.mk distinfo

Log message:
Update to firefox-3.6.8.
Fixes a heap corruption issue due to free() of garbage pointers when
parsing an invalid <object> tag.

2010-07-22 15:23:33 by Matthias Scheler | Files touched by this commit (5) | Package updated

Log message:
Pullup ticket #3177 - requested by tnn
devel/xulrunner: security update
www/firefox: security update

Revisions pulled up:
- devel/xulrunner/PLIST				1.23
- devel/xulrunner/dist.mk			1.12
- devel/xulrunner/distinfo			1.34
- devel/xulrunner/patches/patch-bc		delete
- devel/xulrunner/patches/patch-mp		1.4
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Wed Jul 21 16:55:34 UTC 2010

Modified Files:
	pkgsrc/devel/xulrunner: PLIST dist.mk distinfo
	pkgsrc/devel/xulrunner/patches: patch-mp
Removed Files:
	pkgsrc/devel/xulrunner/patches: patch-bc

Log message:
firefox-3.6.7 / xulrunner-1.9.2.7 security update.

MFSA 2010-47 Cross-origin data leakage from script filename in error
messages MFSA 2010-46 Cross-domain data theft using CSS
MFSA 2010-45 Multiple location bar spoofing vulnerabilities
MFSA 2010-44 Characters mapped to U+FFFD in 8 bit encodings cause
subsequent character to vanish
MFSA 2010-43 Same-origin bypass using canvas context
MFSA 2010-42 Cross-origin data disclosure via Web Workers and
importScripts MFSA 2010-41 Remote code execution using malformed PNG
image MFSA 2010-40 nsTreeSelection dangling pointer remote code
execution MFSA 2010-39 nsCSSValue::Array index integer overflow
MFSA 2010-38 Arbitrary code execution using SJOW and fast native
function MFSA 2010-37 Plugin parameter EnsureCachedAttrParamArrays
remote code execution MFSA 2010-36 Use-after-free error in NodeIterator
MFSA 2010-35 DOM attribute cloning remote code execution vulnerability
MFSA 2010-34 Miscellaneous memory safety hazards (rv:1.9.2.7/ 1.9.1.11)