Navigation:
Browse pkgsrc
(this page)
devel xulrunne..
CVSweb ] [ 
Homepage ] [ 
RSS ] [ 
Required by ] [ 
Add to tracker ] 2010-12-14 11:44:05 by Matthias Scheler | Files touched by this commit (5) |  |
Log message:
Pullup ticket #3301 - requested by tnn
devel/xulrunner: security update
www/firefox: security update
Revisions pulled up:
- devel/xulrunner/Makefile 1.43,1.45
- devel/xulrunner/PLIST 1.25-1.26
- devel/xulrunner/dist.mk 1.17
- devel/xulrunner/distinfo 1.39
- devel/xulrunner/mozilla-common.mk 1.17-1.18
- devel/xulrunner/patches/patch-pe delete
- www/firefox/Makefile 1.78,1.80
---
Module Name: pkgsrc
Committed By: joerg
Date: Wed Nov 3 01:22:36 UTC 2010
Modified Files:
pkgsrc/devel/xulrunner: mozilla-common.mk
Log message:
Requires sqlite3 3.7.1 now. Reported by cegger.
---
Module Name: pkgsrc
Committed By: tnn
Date: Sat Nov 13 11:54:44 UTC 2010
Modified Files:
pkgsrc/devel/xulrunner: Makefile PLIST mozilla-common.mk
pkgsrc/mail/thunderbird: Makefile
pkgsrc/www/firefox: Makefile
pkgsrc/www/seamonkey: Makefile
Log message:
Reluctantly switch over to bundled cairo and pixman for mozilla
packages, like other distros have recently done. Bump package revisions.
Background:
The cairo-1.10 update caused multiple regressions in firefox, such as
flickering gif animations and crashes.
Mozilla doesn't seem interested in fixing it on the stable branches:
https://bugzilla.mozilla.org/show_bug.cgi?id=610107
Other references:
https://bugzilla.redhat.com/show_bug.cgi?id=628331
http://bugs.gentoo.org/show_bug.cgi?id=337813
https://bugzilla.mozilla.org/show_bug.cgi?id=597174
This workaround is guaranteed to cause other problems in the long run;
so we should attempt to switch back when we move to the mozilla-2.0
branch.
---
odule Name: pkgsrc
Committed By: tnn
Date: Sat Dec 11 14:46:29 UTC 2010
Modified Files:
pkgsrc/devel/xulrunner: Makefile PLIST dist.mk distinfo
pkgsrc/www/firefox: Makefile
Removed Files:
pkgsrc/devel/xulrunner/patches: patch-pe
Log message:
Update to firefox-3.6.13.
MFSA 2010-84 XSS hazard in multiple character encodings
MFSA 2010-83 Location bar SSL spoofing using network error page
MFSA 2010-82 Incomplete fix for CVE-2010-0179
MFSA 2010-81 Integer overflow vulnerability in NewIdArray
MFSA 2010-80 Use-after-free error with nsDOMAttribute MutationObserver
MFSA 2010-79 Java security bypass from LiveConnect loaded via data: URL
meta refresh
MFSA 2010-78 Add support for OTS font sanitizer
MFSA 2010-77 Crash and remote code execution using HTML tags inside a XUL tree
MFSA 2010-76 Chrome privilege escalation with window.open and <isindex> element
MFSA 2010-75 Buffer overflow while line breaking after document.write with
long string
MFSA 2010-74 Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
|
| 2010-10-29 22:23:37 by S.P.Zeidler | Files touched by this commit (2) | |
Log message:
Pullup ticket 3262 - requested by tron
security update
Revisions pulled up:
- pkgsrc/devel/xulrunner/dist.mk 1.16
- pkgsrc/devel/xulrunner/distinfo 1.38
-------------------------------------------------------------------------
Module Name: pkgsrc
Committed By: tron
Date: Thu Oct 28 21:33:59 UTC 2010
Modified Files:
pkgsrc/devel/xulrunner: dist.mk distinfo
Log message:
Update the following package:
- devel/nspr from 4.8.6.11 to 4.8.6.12
- devel/xulrunner from 1.9.2.11 to 1.9.2.12
- www/firefox from 3.6.11 to 3.6.12
Security issues fixed since previous versions:
MFSA 2010-73 Heap buffer overflow mixing document.write and DOM insertion
To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/xulrunner/dist.mk
cvs rdiff -u -r1.37 -r1.38 pkgsrc/devel/xulrunner/distinfo
|
| 2010-10-25 10:23:43 by Matthias Scheler | Files touched by this commit (6) | |
Log message: Pullup ticket #3255 - requested by tnn devel/xulrunner: security update www/firefox: security update Revisions pulled up: - devel/xulrunner/Makefile 1.42 - devel/xulrunner/dist.mk 1.15 - devel/xulrunner/distinfo 1.37 - devel/xulrunner/patches/patch-be 1.2 - devel/xulrunner/patches/patch-mc delete - www/firefox/Makefile 1.77 --- Module Name: pkgsrc Committed By: tnn Date: Thu Oct 21 10:27:21 UTC 2010 Modified Files: pkgsrc/devel/xulrunner: Makefile dist.mk distinfo pkgsrc/devel/xulrunner/patches: patch-be pkgsrc/www/firefox: Makefile Removed Files: pkgsrc/devel/xulrunner/patches: patch-mc Log message: Security & stability update to firefox-3.6.11 (xulrunner-1.9.2.11) MFSA 2010-72 Insecure Diffie-Hellman key exchange MFSA 2010-71 Unsafe library loading vulnerabilities MFSA 2010-70 SSL wildcard certificate matching IP addresses MFSA 2010-69 Cross-site information disclosure via modal calls MFSA 2010-68 XSS in gopher parser when parsing hrefs MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter MFSA 2010-66 Use-after-free error in nsBarProp MFSA 2010-65 Buffer overflow and memory corruption using document.write MFSA 2010-64 Miscellaneous memory safety hazards (rv:1.9.2.11/ 1.9.1.14) |
New packages: