Number of commits found: 56

- Remove www/linux-mozilla: Security vulnerabilities and abandoned upstream
  since 2006.

Feature safe:   yes
With hat:       gecko

- update to 1.4.1
Reviewed by:    exp8 run on pointyhat
Supported by:   miwi

. remove linux-glib2 as a dependency from linux-seamonkey/Makefile.common
  since it was incorporated into default linux base port;
. bump PORTREVISION for ports using linux-seamonkey/Makefile.common.

Pointed out by: Portsnap buildbox

Reset infofarmer due to maintainer-timeouts and no response to email.

Hat:    portmgr

- Bump portrevisions after the recent update

Update my e-mail address

Approved by:    krion (mentor, implicit)

- Move common code code and files from mozilla linux binary
  ports to www/linux-seamonkey
- Add translations to desktop entries by snatching them from
  native apps [1]
- Update www/linux-flock to 0.5.15.0

Inspired by: Masashi CHIBA <chiba.masashi@gmail.com> [1]
PR:             96784
Approved by:    krion (mentor)

* Bring to a structure, similar to those of www/linux-firefox and
  www/linux-seamonkey
* Give maintainership to submitter

PR:             ports/96238
Submitted by:   Andrew Pantyukhin <infofarmer@gmail.com>

Update from 1.7.12 to 1.7.13

* add support for acrobat reader 7 plugin [1]
* add support for flash 7 plugin [1]
* add ${X11BASE} to the plugins' search path [1]
* changed the order that 'linkfarm' script searches for plugins, so that
  jdk 1.4 instead of jdk 1.3 is found if both are installed [1]
* bump PORTREVISION
* portlint

PR:             ports/87523 [1]
Submitted by:   Simun Mikecin <numisemis@yahoo.com> [1]
Approved by:    garga (mentor)

Reset maintainership to ports@ after ~4 months without any response to any
PR.

Thanks for contributing.

Since the acroread7 port is a somewhat important port for our users, I
will hand it over to emulation@ if no _active_ *committer* takes it
before the ports freeze.

While I'm here:
 - fix a little nit in the csound port (I think the intention was to
   create no backup file instead of creating one with a "-e" extension)
 - set ARCH to i386 in the amd64 case for the acroread7 port. This
   is a work-around to be able to install everything when a dependency
   is not already installed (ARCH is read-only in sub-makes, so the
   dependencies can't change it). This should be removed when the
   dependencies are fixed or converted to use bsd.linux-rpm.mk. [1]

Not objected to by:     portmgr (explicit: krion; silence: rest)
Maintainer timeout:     ~4 months
Submitted by:           Sangwoo Shim <sangwoos@gmail.com> [1]
PR:                     87985 [1]

- Add amd64 to the list of working archs.

PR:             ports/87873
Submitted by:   Bill Squire {billsf} <billsf@cuba.calyx.nl>
Approved by:    maintainer timeout (3 weeks)

Chase linux-blackdown-jdk14 installation path.

Submitted by:   Simun Mikecin
PR:             87493

Update to 1.7.12.

Mega-patch to cleanup the ports infrastructure regarding our linux bits:
  - USE_LINUX now implies NO_FILTER_SHLIBS=yes. It also doesn't use FreeBSD
    tools to strip binaries anymore, so it's not neccesary anymore to override
    STRIP and STRIP_CMD.
  - USE_LINUX_PREFIX implies NO_MTREE now.
  - In the USE_LINUX case, USE_XLIB now depends upon the linux X11 libraries
    instead upon the native FreeBSD libraries.
  - The variable LINUX_BASE_PORT contains a string which is suitable as an
    item in *_DEPENDS, so if a port BATCH_DEPENDS or FETCH_DEPENDS upon the
    default (or overriden) linux base, ${LINUX_BASE_PORT} should be used
    instead of a hardcoded reference.
  - Change all ports to comply to the "new world order".
  - The Ports Collection now allows to override the default linux_base port.
    Specify e.g. OVERRIDE_LINUX_BASE_PORT=rh-9 in /etc/make.conf to use
    ${PORTSDIR}/emulators/linux_base-rh-9 (the logic is to use

(Only the first 15 lines of the commit message are shown above )

Security update to 1.7.8.

Respect the user's USE_LINUX setting.

update to 1.7.5 to avoid NNTP security bug:
<URL:http://www.isec.pl/vulnerabilities/isec-0020-mozilla.txt>
<URL:https://bugzilla.mozilla.org/show_bug.cgi?id=264388>

Say hello to the linux mega patch, it consolidates our linux bits a
little bit and allows to proceed to a more recent linux_base from
a stable (read as: the major bugs should be ironed out or identified
and most linux ports build just fine) source.

It also allows to ship 4.11 with a working linuxolator (the EOLed
linux_base is marked forbidden because of a security hole).

This is a major update, please read UPDATING (and CHANGES if you
develop linux ports).

Changes:
 - change the default linux_base from v7 to v8
 - add a newer freetype to linux_base-8 for nicer fonts display [1]
 - don't let cpio use hardlinks in the linux_base-8 port to quiet some

(Only the first 15 lines of the commit message are shown above )

I removed talkback.xpi from the list of distfiles for the interactive
build (because I doubt the error reports would be valuable) but
forgot to do so for batch builds, causing an error.

Reported by:    pointyhat log forwarded by kris, and sf

In order to fix the permissions on the extracted files as soon as
possible, run chmod right after unzipping each distfile, as before.

Approved by:  sf (carte blanche)

don't assume superuser privilege at do-extract.

cosmetics:  use UNZIP_CMD, alphabetize distfiles, use WRKSRC for
permissions

Fix ownership and permissions on extracted files.

Update to 1.7.3.  Make deflenus and psm components mandatory.  Add
choices for Chatzilla and the spell-checker.

Mark FORBIDDEN due to unpatched security vulnerability documented for
over a month at
http://vuxml.freebsd.org/c1d97a8b-05ed-11d9-b45d-000c41e2cdad.html

Use the SORT macro from bsd.port.mk.

Remove checksum target, which is no longer needed and causes "make
index" to generate a warning message (requested by kris).

Update to 1.5.

Use the FIND and XARGS macros introduced in bsd.port.mk 1.391.

Support the Blackdown Java plugin (with some cosmetic changes).

Update to 1.4.

Change the configuration process, so that extraneous files are not
downloaded.

Support the www/linux-flashplugin6 port.

Update to 1.3.1.

Use bzip2 compression for the generated files (I reused the ones
from 1.2b).

Correct the dependency on unzip:  it was being ignored, probably
because it was listed as a BUILD_DEPENDS but the ports are marked
NO_BUILD.

Retire comment file.

Update to 1.2b.  This fixes bug 145579 in Bugzilla, the "forward
referrer" security bug.

Scavenge plugins from linux-beonex (untested).

Scavenge plugins from Netscape 7 (new PORTREVISION).

Make GTK+ dependency less specific, so it will work with the GTK+
in linux_base-6.

Synchronize with linux-gtk (forgotten by mita).

noticed by:     Warren Block
Submitted by:   alex

Update to 1.1, which no longer has the "huge fonts" security bug.

Forbid because of remote crash.  I confirmed it with XFree86 4.2.0;
XFree86 3.3.6 has identical code so it is likely to be vulnerable
as well.  Mozilla 1.1a (20020610) still has the bug.

Disable Chatzilla once again.  My earlier testing was not thorough
enough, and I have found that the security bug reported by Thor
Larholm on Bugtraq is still present.

security officer ticket:  17

__   ___      __
Update to /_ | / _ \    / /
           | || | | |  / /
           | || | | | / /
           | || |_| |/_/
           |_(_)___/(_)

Have linkfarm script look for plugins in the new language-specific
Netscape 6 directories.

Make venkman optional.

Enable Chatzilla.
Reviewed by:    http://jscript.dk/2002/4/moz1rc1tests/ircbufferoverrun.html

Update to a nightly build.  Using the GreyMagic Mozilla Disk Explorer
and c't Browsercheck, I am no longer able to activate bug #141061
("XMLHttpRequest allows reading of local files").

In message <52D05AEFB0D95C4BAD179A054A54CDEB1BD37A@mailsrv1.jubii.dk>
on Bugtraq, Thor Larholm described a buffer overflow in Chatzilla.
I confirmed the bug with this version of Mozilla/Chatzilla.  Therefore
the chatzilla component is now omitted from batch builds and defaults
to being omitted from interactive ones too (XFree86 did crash
once--perhaps taken down by Mozilla--when I was viewing Thor's
demonstration page for the bug, but a second visit was uneventful).
I added a warning in capitals for interactive users.  I was unable
to reproduce the other bug reported by Thor in the same message.

Mark forbidden because of security bug.

Reported by:  mbr

Bump PORTREVISION for change to startup script.

Change a space to a tab.

Make startup script pass arguments.

Submitted by:   Adrian Woizik <morrow@unfug.org>

Update to "two nines" version.  This version has MathML, TrueType,
and SOAP.  Add inspector component.  Make venkman component optional.

new version noticed by:  Muhannad Asfour <muhannad07@cogeco.ca>

Add a selection dialog from which the user can disable the chatzilla,  
deflenus, mail, psm and talkback components.  This is based on the   recent work
on the www/linux-netscape6 port.  When psm is omitted,   Mozilla still shows the
Privacy and Security menus, and complains   about not being able to load
libpipboot.so.  When talkback is   omitted, Mozilla makes noise about the
missing libqfaservices.so.    

Update to 0.9.8.    

Use ${ECHO_CMD} instead of ${ECHO} where you mean the echo command;   the ECHO
macro is set to "echo" by default, but it is set to "true" if   make(1) is
invoked with the -s option while ECHO_CMD is always set to   the echo command.  
 

Install a new script, linkfarm, with linux-mozilla.  This script   makes
symlinks under PREFIX/lib/linux-mozilla/plugins/, pointing   to anything the
script finds in the netscape-linux or linux-netscape6   plugin directories.  The
script is run automatically on installation   of the port or the package and the
user is advised to run it after   installing new Netscape plugins.  Unlike the
former arrangement,   the symlinks are now removed upon de-installation of
linux-mozilla.   Increment PORTREVISION.    

Tidy up dependencies by using LINUXBASE and USE_LINUX macros.    

Make this compatibile with the www/linux-flashplugin package, by   adding some
symbolic links into the Netscape plugins directory.    

new port of Mozilla pre-compiled for Linux, for use with   plugins which are
only available as Linux binaries    

Number of commits found: 56

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities