2022-11-23 17:21:30 by Adam Ciarcinski | Files touched by this commit (1878) | |
Log message:
massive revision bump after textproc/icu update
|
2022-11-02 21:33:07 by David H. Gutteridge | Files touched by this commit (1) |
Log message:
firefox91: reflect new minimum dependency of cbindgen >= 0.24
We're carrying a patch that will only build with recent cbindgen.
Issue noted by Todd Gruhn on pkgsrc-users@.
|
2022-09-27 22:58:29 by Thomas Klausner | Files touched by this commit (74) |
Log message:
*: recursive bump for ffmpeg4 switch to x264
|
2022-09-11 14:52:13 by Thomas Klausner | Files touched by this commit (670) |
Log message:
*: bump PKGREVISION for flac shlib bump
|
2022-09-06 17:38:35 by Nia Alarie | Files touched by this commit (4) | |
Log message:
firefox91: update to 91.13.0
Security Vulnerabilities fixed in Firefox ESR 91.13
#CVE-2022-38472: Address bar spoofing via XSLT error handling
#CVE-2022-38473: Cross-origin XSLT Documents would have inherited the
parent's permissions
#CVE-2022-38478: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
and Firefox ESR 91.13
|
2022-09-06 11:15:57 by Nia Alarie | Files touched by this commit (5) |
Log message:
firefox*: Add a note about the branding to DESCR to reduce confusion
|
2022-08-11 07:09:36 by David H. Gutteridge | Files touched by this commit (999) |
Log message:
Bump all dependent packages of wayland (belatedly)
The package changed with the addition of its libepoll-shim dependency.
Otherwise, we can get:
ERROR: libepoll-shim>=0.0.20210418 is not installed; can't buildlink files.
|
2022-08-09 15:39:28 by Nia Alarie | Files touched by this commit (5) | |
Log message:
firefox91: update to 91.12.0. Fix building with latest cbindgen.
Mozilla Foundation Security Advisory 2022-29
Security Vulnerabilities fixed in Firefox ESR 91.12
#CVE-2022-36319: Mouse Position spoofing with CSS transforms
#CVE-2022-36318: Directory indexes for bundled resources reflected URL
parameters
|
2022-07-22 10:16:40 by Nia Alarie | Files touched by this commit (4) | |
Log message:
firefox91: update to 91.11.0
Mozilla Foundation Security Advisory 2022-25
Security Vulnerabilities fixed in Firefox ESR 91.11
#CVE-2022-34479: A popup window could be resized in a way to overlay the
address bar with web content
#CVE-2022-34470: Use-after-free in nsSHistory
#CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed
via retargeted javascript: URI
#CVE-2022-34481: Potential integer overflow in ReplaceElementsAt
#CVE-2022-31744: CSP bypass enabling stylesheet injection
#CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being
blocked
#CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a
prompt
#CVE-2022-2200: Undesired attributes could be set as part of prototype
pollution
#CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR
91.11
|
2022-07-02 18:53:42 by Ryo ONODERA | Files touched by this commit (395) |
Log message:
*: Recursive revbump from audio/pulseaudio
|