2008-04-17 09:39:20 by Geert Hendrickx | Files touched by this commit (4) |
Log message:
Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.14.
Security fixes in this version:
MFSA 2008-20 Crash in JavaScript garbage collector
For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.14/releasenotes/
|
2008-03-27 14:17:21 by Matthias Scheler | Files touched by this commit (2) | |
Log message:
Update "firefox-bin" package to version 2.0.0.13. This update fixes the
following security issues:
- MFSA 2008-19 XUL popup spoofing variant (cross-tab popups)
- MFSA 2008-18 Java socket connection to any local port via LiveConnect
- MFSA 2008-17 Privacy issue with SSL Client Authentication
- MFSA 2008-16 HTTP Referrer spoofing with malformed URLs
- MFSA 2008-15 Crashes with evidence of memory corruption (rv:1.8.1.13)
- MFSA 2008-14 JavaScript privilege escalation and arbitrary code execution
|
2008-03-07 06:14:04 by Johnny C. Lam | Files touched by this commit (3) |
Log message:
Add support for user-destdir installation -- seamonkey-bin/Makefile.common
has already been altered to support user-destdir, so we just need to turn
it on in these packages.
|
2008-02-08 12:28:30 by Geert Hendrickx | Files touched by this commit (4) |
Log message:
Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.12.
Security fixes in this version:
MFSA 2008-11 Web forgery overwrite with div overlay
MFSA 2008-10 URL token stealing via stylesheet redirect
MFSA 2008-09 Mishandling of locally-saved plain text files
MFSA 2008-08 File action dialog tampering
MFSA 2008-06 Web browsing history and forward navigation stealing
MFSA 2008-05 Directory traversal via chrome: URI
MFSA 2008-04 Stored password corruption
MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution
MFSA 2008-02 Multiple file input focus stealing vulnerabilities
MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12)
For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.12/releasenotes/
|
2007-12-02 22:28:36 by Geert Hendrickx | Files touched by this commit (1) |
Log message:
Add distinfo for solaris10 binaries (weren't available yet when the 2.0.0.11
release was announced).
|
2007-12-01 22:43:25 by Geert Hendrickx | Files touched by this commit (4) | |
Log message:
Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.11.
This update fixes a bug introduced by the 2.0.0.10 update in the <canvas>
feature that affected some web pages and extensions.
For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.11/releasenotes/
|
2007-11-28 02:36:11 by Geert Hendrickx | Files touched by this commit (4) |
Log message:
Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.10.
Security fixes in this version:
MFSA 2007-39 Referer-spoofing via window.location race condition
MFSA 2007-38 Memory corruption vulnerabilities (rv:1.8.1.10)
MFSA 2007-37 jar: URI scheme XSS hazard
For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.10/releasenotes/
|
2007-11-02 22:46:38 by Geert Hendrickx | Files touched by this commit (4) |
Log message:
Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.9.
Fixes a number of regressions introduced in 2.0.0.8:
* Bug 400406 - Firefox will ignore the clear CSS property when used beneath a
box that is using the float property. There is a temporary workaround JS/CSS
code available for web developers with affected layouts.
* Bug 400467 - Windows Vista users will get Java not found or Java not working
errors when trying to load Java applets after updating. To fix this, users
can right-click the Firefox icon and Run as administrator, then browse to a
page with a Java applet doing this once will fix the problem and permanently
restore Java functionality.
* Bug 396695 - Add-ons are disabled after updating. Users can fix this problem
by opening their profile folder and removing three files (extensions.rdf,
extensions.ini and extensions.cache)
* Bug 400421 - Removing a single area element from an image map will cause the
entire map to disappear. There is no workaround available at this time.
* Bug 400735 - Some Windows users may experience crashes at startup. There is
no workaround available at this time.
For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.9/releasenotes/
|
2007-10-25 23:04:26 by Johnny C. Lam | Files touched by this commit (13) |
Log message:
Move code that generates a dynamic PLIST from the {pre,do,post}-install
targets and into a GENERATE_PLIST variable definition. Remove some
unnecessary empty PLISTs as a result of properly setting GENERATE_PLIST.
|
2007-10-25 19:50:03 by Johnny C. Lam | Files touched by this commit (85) |
Log message:
Re-add "intentionally empty" PLISTs for meta-packages and other packages
that directly manipulate empty PLISTs.
Modify plist/plist.mk so that if the PLIST files are missing and no
GENERATE_PLIST is defined, then the package fails to build.
|