head 1.9; access; symbols pkgsrc-2013Q2:1.9.0.2 pkgsrc-2013Q2-base:1.9 pkgsrc-2012Q4:1.7.0.2 pkgsrc-2012Q4-base:1.7 pkgsrc-2012Q3:1.6.0.2 pkgsrc-2012Q3-base:1.6 pkgsrc-2012Q2:1.5.0.2 pkgsrc-2012Q2-base:1.5 pkgsrc-2012Q1:1.4.0.2 pkgsrc-2012Q1-base:1.4 pkgsrc-2011Q4:1.2.0.10 pkgsrc-2011Q4-base:1.2 pkgsrc-2011Q3:1.2.0.8 pkgsrc-2011Q3-base:1.2 pkgsrc-2011Q2:1.2.0.6 pkgsrc-2011Q2-base:1.2 pkgsrc-2011Q1:1.2.0.4 pkgsrc-2011Q1-base:1.2 pkgsrc-2010Q4:1.2.0.2 pkgsrc-2010Q4-base:1.2 pkgsrc-2010Q3:1.1.0.6 pkgsrc-2010Q3-base:1.1 pkgsrc-2010Q2:1.1.0.4 pkgsrc-2010Q2-base:1.1 pkgsrc-2010Q1:1.1.0.2 pkgsrc-2010Q1-base:1.1; locks; strict; comment @# @; 1.9 date 2013.01.20.08.33.13; author ryoon; state dead; branches; next 1.8; 1.8 date 2013.01.07.21.55.30; author ryoon; state Exp; branches; next 1.7; 1.7 date 2012.11.23.17.28.49; author ryoon; state Exp; branches; next 1.6; 1.6 date 2012.09.06.12.08.51; author ryoon; state Exp; branches; next 1.5; 1.5 date 2012.04.28.22.48.06; author ryoon; state Exp; branches; next 1.4; 1.4 date 2012.03.19.10.35.59; author ryoon; state Exp; branches; next 1.3; 1.3 date 2012.03.10.03.26.05; author ryoon; state Exp; branches; next 1.2; 1.2 date 2010.10.22.10.08.14; author tnn; state Exp; branches; next 1.1; 1.1 date 2010.03.16.10.59.10; author tnn; state Exp; branches 1.1.6.1; next ; 1.1.6.1 date 2010.10.25.16.30.56; author tron; state Exp; branches; next ; desc @@ 1.9 log @Update to 2.15 * Use Lightning in seamonkey tar ball, 2.0pre. Changelog: SeaMonkey-specific changes SeaMonkey can be set as default client/browser on Mac and Linux now. See the changes page for minor changes. Mozilla platform changes The new IonMonkey compiler improves JavaScript performance. Preliminary support for WebRTC has been added. Image quality has been improved through a new HTML scaling algorithm. CSS3 Flexbox has been implemented. Support for new DOM property window.devicePixelRatio has been added. Support for @@supports has been added (disabled for now). Startup time has been improved through smart handling of signed extension certificates. HTML5: Support for W3C touch events has been implemented, taking the place of MozTouch events Insecure content loading has been disabled on HTTPS pages (see bug 62178). Responsiveness for users on proxies has been improved. Fixed several stability issues. Fixed in SeaMonkey 2.15 MFSA 2013-20 Mis-issued TURKTRUST certificates MFSA 2013-19 Use-after-free in Javascript Proxy objects MFSA 2013-18 Use-after-free in Vibrate MFSA 2013-17 Use-after-free in ListenerManager MFSA 2013-16 Use-after-free in serializeToStream MFSA 2013-15 Privilege escalation through plugin objects MFSA 2013-14 Chrome Object Wrapper (COW) bypass through changing prototype MFSA 2013-13 Memory corruption in XBL with XML bindings containing SVG MFSA 2013-12 Buffer overflow in Javascript string concatenation MFSA 2013-11 Address space layout leaked in XBL objects MFSA 2013-10 Event manipulation in plugin handler to bypass same-origin policy MFSA 2013-09 Compartment mismatch with quickstubs returned values MFSA 2013-08 AutoWrapperChanger fails to keep objects alive during garbage collection MFSA 2013-07 Crash due to handling of SSL on threads MFSA 2013-06 Touch events are shared across iframes MFSA 2013-05 Use-after-free when displaying table with many columns and column groups MFSA 2013-04 URL spoofing in addressbar during page loads MFSA 2013-03 Buffer Overflow in Canvas MFSA 2013-02 Use-after-free and buffer overflow issues found using Address Sanitizer MFSA 2013-01 Miscellaneous memory safety hazards (rv:18.0/ rv:10.0.12 / rv:17.0.2) @ text @$NetBSD: patch-mn,v 1.8 2013/01/07 21:55:30 ryoon Exp $ Make sure we link correctly with sqlite3 from pkgsrc. --- mozilla/security/nss/lib/softoken/config.mk.orig 2012-11-18 10:19:51.000000000 +0000 +++ mozilla/security/nss/lib/softoken/config.mk @@@@ -80,7 +80,7 @@@@ else # $(EXTRA_SHARED_LIBS) come before $(OS_LIBS), except on AIX. EXTRA_SHARED_LIBS += \ -L$(DIST)/lib \ - -l$(SQLITE_LIB_NAME) \ + `pkg-config --libs sqlite3` \ -L$(NSSUTIL_LIB_DIR) \ -lnssutil3 \ -L$(NSPR_LIB_DIR) \ @ 1.8 log @* Regen patches... * Fix build on recent NetBSD (kproc_info vs kproc_info2) @ text @d1 1 a1 1 $NetBSD: patch-mn,v 1.6 2012/09/06 12:08:51 ryoon Exp $ @ 1.7 log @Update to 2.14 * Patches are synced with xulrunner-17.0, and regen patches * Update Mozilla Lightning to 1.9 Changelog: SeaMonkey-specific changes None (see changes page for minor changes). Mozilla platform changes OS X 10.6 is now the minimum supported Mac version. JavaScript Maps and Sets are now iterable. SVG FillPaint and StrokePaint have been implemented. The sandbox attribute has been implemented for iframes, enabling increased security. Fixed several stability issues. Security fixes Fixed in SeaMonkey 2.14 MFSA 2012-106 Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer MFSA 2012-105 Use-after-free and buffer overflow issues found using Address Sanitizer MFSA 2012-103 Frames can shadow top.location MFSA 2012-101 Improper character decoding in HZ-GB-2312 charset MFSA 2012-100 Improper security filtering for cross-origin wrappers MFSA 2012-99 XrayWrappers exposes chrome-only properties when not in chrome compartment MFSA 2012-97 XMLHttpRequest inherits incorrect principal within sandbox MFSA 2012-96 Memory corruption in str_unescape MFSA 2012-94 Crash when combining SVG text on path with CSS MFSA 2012-93 evalInSanbox location context incorrectly applied MFSA 2012-92 Buffer overflow while rendering GIF images MFSA 2012-91 Miscellaneous memory safety hazards (rv:17.0/ rv:10.0.11) @ text @@ 1.6 log @Update to 2.12 * Update Mozilla Lightning to 1.7 * Update Enigmail to 1.4.4 (functionality is not tested yet; should be updated) * Regen patches Changelog: SeaMonkey-specific changes None. Mozilla platform changes Added support for SPDY networking protocol v3. Implemented WebGL enhancements, including compressed textures for better performance. Optimized memory usage for add-ons. Implemented the CSS word-break property. Implemented high precision event timer. HTML5: Added native support for the Opus audio codec. HTML5: Added support for the source element media attribute. HTML5: Added support for the audio element and video element played attribute. Fixed several stability issues. Fixed in SeaMonkey 2.12 MFSA 2012-70 Location object security checks bypassed by chrome code MFSA 2012-69 Incorrect site SSL certificate data display MFSA 2012-68 DOMParser loads linked resources in extensions when parsing text/html MFSA 2012-65 Out-of-bounds read in format-number in XSLT MFSA 2012-64 Graphite 2 memory corruption MFSA 2012-63 SVG buffer overflow and use-after-free issues MFSA 2012-62 WebGL use-after-free and memory corruption MFSA 2012-61 Memory corruption with bitmap format images with negative height MFSA 2012-59 Location object can be shadowed using Object.defineProperty MFSA 2012-58 Use-after-free issues found using Address Sanitizer MFSA 2012-57 Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7) @ text @d1 1 a1 1 $NetBSD: patch-mn,v 1.5 2012/04/28 22:48:06 ryoon Exp $ d5 1 a5 1 --- mozilla/security/nss/lib/softoken/config.mk.orig 2012-08-27 04:49:29.000000000 +0000 @ 1.5 log @Update to 2.9 * Remove unused option. * Restore jemalloc option. Changelog: * The File and Move Bookmarks dialogs are resizable now. * HTML5 videos that do not start automatically show a large play button now. * Add-ons Sync can now be configured without the Add-ons Sync Prefs add-on. * Pasting a URL from the clipboard into the Download Manager window will download it. * Plugins can be disabled for the whole suite now in addition to Mail & Newsgroups only. * View Source now has line numbers. * Line breaks are now supported in the title attribute. * Find in Page search results are scrolled into view now. * The column-fill CSS property has been implemented. * Support for the text-align-last CSS property has been added. * Experimental support for ECMAScript 6 Map and Set objects has been implemented. * Fixed several stability issues. @ text @d1 1 a1 1 $NetBSD: patch-mn,v 1.4 2012/03/19 10:35:59 ryoon Exp $ d5 1 a5 1 --- mozilla/security/nss/lib/softoken/config.mk.orig 2012-04-23 06:28:18.000000000 +0000 @ 1.4 log @Update to 2.8 * Based on xulrunner-11.0 * Patches are almost as same as mail/thunderbird Changelog: See http://www.seamonkey-project.org/releases/seamonkey2.8/ etc. @ text @d1 1 a1 1 $NetBSD: patch-mn,v 1.3 2012/03/10 03:26:05 ryoon Exp $ d5 1 a5 1 --- mozilla/security/nss/lib/softoken/config.mk.orig 2012-03-13 05:33:09.000000000 +0000 @ 1.3 log @Update to 2.7.2 * Many new features. * Security bugfixes. * See http://www.seamonkey-project.org/releases/seamonkey2.7/ @ text @d1 1 a1 1 $NetBSD: patch-mn,v 1.2 2010/10/22 10:08:14 tnn Exp $ d5 1 a5 1 --- mozilla/security/nss/lib/softoken/config.mk.orig 2012-02-16 14:09:31.000000000 +0000 @ 1.2 log @Security and stability update of seamonkey to 2.0.9. MFSA 2010-72 Insecure Diffie-Hellman key exchange MFSA 2010-71 Unsafe library loading vulnerabilities MFSA 2010-70 SSL wildcard certificate matching IP addresses MFSA 2010-69 Cross-site information disclosure via modal calls MFSA 2010-68 XSS in gopher parser when parsing hrefs MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter MFSA 2010-66 Use-after-free error in nsBarProp MFSA 2010-65 Buffer overflow and memory corruption using document.write MFSA 2010-64 Miscellaneous memory safety hazards (rv:1.9.2.11/ 1.9.1.14) @ text @d1 1 a1 1 $NetBSD: patch-mn,v 1.3 2010/09/09 09:41:22 tnn Exp $ d5 1 a5 1 --- mozilla/security/nss/lib/softoken/config.mk.orig 2010-08-24 21:32:09.000000000 +0000 @ 1.1 log @clone comm-1.9.1 patch set from devel/xulrunner into mail/thunderbird and www/seamonkey so devel/xulrunner can move forward to 1.9.2. @ text @d1 1 a1 1 $NetBSD: patch-mn,v 1.2 2009/10/28 11:36:36 tnn Exp $ d5 1 a5 1 --- mozilla/security/nss/lib/softoken/config.mk.orig 2009-10-16 17:14:19.000000000 +0200 d7 3 a9 1 @@@@ -83,7 +83,7 @@@@ EXTRA_SHARED_LIBS += \ d11 2 a14 2 - -lsqlite3 \ + `pkg-config --libs sqlite3` \ a15 2 -lplc4 \ -lplds4 \ @ 1.1.6.1 log @Pullup ticket #3258 - requested by tnn www/seamonkey: security update Revisions pulled up: - www/seamonkey/Makefile 1.41 - www/seamonkey/distinfo 1.56 - www/seamonkey/patches/patch-ag 1.4 - www/seamonkey/patches/patch-al delete - www/seamonkey/patches/patch-mn 1.2 --- Module Name: pkgsrc Committed By: tnn Date: Fri Oct 22 10:08:15 UTC 2010 Modified Files: pkgsrc/www/seamonkey: Makefile distinfo pkgsrc/www/seamonkey/patches: patch-ag patch-mn Removed Files: pkgsrc/www/seamonkey/patches: patch-al Log Message: Security and stability update of seamonkey to 2.0.9. MFSA 2010-72 Insecure Diffie-Hellman key exchange MFSA 2010-71 Unsafe library loading vulnerabilities MFSA 2010-70 SSL wildcard certificate matching IP addresses MFSA 2010-69 Cross-site information disclosure via modal calls MFSA 2010-68 XSS in gopher parser when parsing hrefs MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter MFSA 2010-66 Use-after-free error in nsBarProp MFSA 2010-65 Buffer overflow and memory corruption using document.write MFSA 2010-64 Miscellaneous memory safety hazards (rv:1.9.2.11/ 1.9.1.14) @ text @d1 1 a1 1 $NetBSD$ d5 1 a5 1 --- mozilla/security/nss/lib/softoken/config.mk.orig 2010-08-24 21:32:09.000000000 +0000 d7 1 a7 3 @@@@ -80,7 +80,7 @@@@ else # $(EXTRA_SHARED_LIBS) come before $(OS_LIBS), except on AIX. EXTRA_SHARED_LIBS += \ a8 2 - -l$(SQLITE_LIB_NAME) \ + `pkg-config --libs sqlite3` \ d11 2 d14 2 @