update to 6.0.2, remove trust exceptions for certificates issued by Staat der
Nederlanden

Security:      
http://www.vuxml.org/freebsd/aa5bc971-d635-11e0-b3cf-080027ef73ec.html

- update to 6.0.1, which disables the DigiNotar certificate authority
- fixup a patch which was messed up in a previuos commit [1]

Submitted by:   aakuusta@gmail.com [1]

- commit remaining part of ports/159709 [1]
- register build conflict with spidermonkey until the firefox build failure
  can be fixed [2]

PR:             ports/159709 [1]
                ports/159831 [2]
Submitted by:   Ruslan Mahmatkhanov <cvs-src@yandex.ru> [1]

Chase libnotify, libproxy and webkit-gtk2 shlib changes, and fix build where
needed.

Remove unneeded @dirrm.

Approved by:    flo

- update to 6.0
- misc cleanups [1] [2]

Security:      
http://www.vuxml.org/freebsd/834591a9-c82f-11e0-897d-6c626dd55a41.html
PR:             ports/159709 [1]
                ports/158702 [2]
Submitted by:   Ruslan Mahmatkhanov <cvs-src@yandex.ru> [1]
                Pan Tsu <inyaoo@gmail.com> [2]

- require cairo>=1.10.2_1,1 to catch build failuers early

The cairo dependancy is usually added by bsd.gecko.mk, but for firefox we need a
spcific version.

PR:             ports/158610
Submitted by:   Pan Tsu <inyaoo@gmail.com>

- enable the use of ASM code in libjpeg-turbo [1]
- make plugin-container work with custom LD_LIBRARY_PATH [2]

Do not bump PORTREVISION as firefox package was not buildable due to size
constraints before my last bsd.gecko.mk commit.

PR:             ports/158371 [1]
Submitted by:   Pan Tsu <inyaoo@gmail.com> [1]
                kmoore [2]
Obtained from:  mozilla bugtracker [2]

- update to 5.0
- enable ipc, based on a patch by Pan Tsu <inyaoo@gmail.com>

Security:      
http://www.vuxml.org/freebsd/dfe40cff-9c3f-11e0-9bec-6c626dd55a41.html

- update to 4.0.1

Security:      
http://www.vuxml.org/freebsd/04b7d46c-7226-11e0-813a-6c626dd55a41.html

- Re-add MOZILLA_NAME to fix desktop entry [1]
- Fix leftover from Firefox 3.x in MOZ_PLUGIN_PATH [2]
- Bump PORTREVISION

Submitted by:   Denny Lin <dennylin93 AT hs.ntnu.edu.tw> [1],
                Jan Henrik Sylvester <me AT janh.de> [2]

- Update to 4.0
- Add PGO option to enable Profile-Guided Optimization [1].

PR:             ports/132231 [1] (based on)
Submitted by:   lioux@ [1]
Thanks to:      andreast@, Anonymous <swell.k AT gmail.com>, decke@, jsa@,
                swills@ and all the testers for their feedback!

- Update to 3.6.15

- Update to 3.6.14
- Add support for powerpc64 [1]

Submitted by:   andreast@ [1]

- Update to 3.6.13
- Drop MD5 checksum
- Remove CONFLICTS with Firefox 3.0 which has been removed in June
- Replace CONFLICTS with CONFLICTS_INSTALL

Security:      
http://www.vuxml.org/freebsd/1d8ff4a2-0445-11e0-8e32-000f20797ede.html

Sync to new bsd.autotools.mk

- Using cairo 1.10.0 results in not correct rendered gif and svn images:
  https://bugzilla.mozilla.org/show_bug.cgi?id=597174
  https://bugzilla.mozilla.org/show_bug.cgi?id=610107
  Until a proper fix is available use bundled cairo.
- Bump PORTREVISION

PR:             ports/152545
Submitted by:   Zach Thompson <hideo AT lastamericanempire.com>

- Update to 3.6.12

Security:      
http://www.vuxml.org/freebsd/c223b00d-e272-11df-8e32-000f20797ede.html

- Fix crash destroying stream in OSS sydneyaudio backend
- Bump PORTREVISION

PR:             ports/151728
Submitted by:   Ilya A. Arhipov <pa36ouHu4er AT yandex.ru>
Obtained from:  Mozilla Bugzilla ID 562488

- Firefox needs at least nspr 4.8.6 to build

PR:             ports/151611
Submitted by:   Toomas Aas <toomas.aas AT raad.tartu.ee>

- Update to 3.6.11

Security:      
http://www.vuxml.org/freebsd/c4f067b9-dc4a-11df-8e32-000f20797ede.html

- Update to 3.6.10

- Update to 3.6.9

Security:      
http://www.vuxml.org/freebsd/4a21ce2c-bb13-11df-8e32-000f20797ede.html

- Unbreak with recent versions of GCC

PR:             ports/142736
Submitted by:   bf <bf1783 AT gmail.com>

- Update to 3.6.8

- Update to 3.6.7.
- Remove NEWTAB option as the preference browser.link.open_external was
  removed in Firefox 3.5. [1]

Reported by:    crsd on EFnet [1]
Security:      
http://www.vuxml.org/freebsd/8c2ea875-9499-11df-8e32-000f20797ede.html

- Update to 3.6.4

Feature safe:   yes
Security:      
http://www.vuxml.org/freebsd/99858b7c-7ece-11df-a007-000f20797ede.html

- Update to 3.6.3

Submitted by:   Florian Smeets <flo AT smeets.im> (via freebsd-gecko SVN)
Security:      
http://www.vuxml.org/freebsd/ec8f449f-40ed-11df-9edc-000f20797ede.html

- update to 1.4.1
Reviewed by:    exp8 run on pointyhat
Supported by:   miwi

- Update to 3.6.2

Security:      
http://www.vuxml.org/freebsd/5d5ed535-3653-11df-9edc-000f20797ede.html

- Update to 3.6

What's new in Firefox 3.6:

  * Support for the HTML5 File API
  * A change to how third-party software integrates with Firefox to
    increase stability.
  * The ability to run scripts asynchronously to speed up page load times.
  * A mechanism to prevent incompatible software from crashing Firefox.
  * Users can now change their browser's appearance with a single click,
    with built in support for Personas.
  * Firefox 3.6 will alert users about out of date plugins to keep them
    safe.
  * Open, native video can now be displayed full screen, and supports
    poster frames.
  * Support for the WOFF font format.
  * Improved JavaScript performance, overall browser responsiveness and
    startup time.
  * Support for new CSS, DOM and HTML5 web technologies.

Thanks to:      Andreas Tobler, Florian Smeets, nox@, miwi@ and all testers

- update to jpeg-8

- Remove obsolete inclusion of www/mozilla/Makefile.common

Approved by:    portmgr (miwi)
Exp-run by:     miwi

- Mark it now FORBIDDEN too many security issues.

With hat:       secteam
Security:      
http://www.vuxml.org/freebsd/922d2398-9e2d-11de-a998-0030843d3802.html

- bump all port that indirectly depends on libjpeg and have not yet been bumped
or updated
Requested by:   edwin

- S/gnome@/gecko@

Reported by:    kvm via #bsdports

- Backport patches to fix the following security vulnerabilities:
  CVE-2009-1834
  CVE-2009-1835
  CVE-2009-1836
  CVE-2009-1838
  CVE-2009-1841

Obtained from:  Mozilla Bugzilla
Security:      
http://www.vuxml.org/freebsd/da185955-5738-11de-b857-000f20797ede.html
With hat:       Gecko gang

- Give Maintainership up to the Gecko Gang (gecko@)

Backport patches to fix the following security vulnerabilities:

        CVE-2009-1312
        CVE-2009-0652
        CVE-2009-1302
        CVE-2009-1303

Obtained from:  Mozilla Bugzilla
Security:      
http://www.vuxml.org/freebsd/3b18e237-2f15-11de-9672-0030843d3802.html

Take maintainership. The first of two steps is to take all
Gecko Stuff from the Gnome team. I'd like to say thanks a lot for
all the work in the past years.

Resurrect www/mozilla/Makefile.common rev. 1.30 and associated changes,
which got lost with the switch to bsd.gecko.mk:
Work around the miscompilation/mislinkage problem of the sCanonicalVTable
hacks in the XPCOM string code on sparc64 by omitting the code in question
and bump PORTREVISIONs accordingly.

Approved by:    marcus

Merge patches from Firefox Bugzilla to fix CVE-2009-1169.

grep for 'pthread:' in the compiler's spec file to avoid matching
random references of 'pthread'. On powerpc the mfwrap production
mentions "pthread_create", which matched the RE.

Ok'd by: marcus (thanks!)

Backport patches to fix the following security vulnerabilities:

CVE-2009-0776
CVE-2009-0775
CVE-2009-0772

Obtained from:  Mozilla Bugzilla

Back-port some more patches to fix CVE-2009-0352.

Obtained from:  Mozilla Bugzilla
Reported by:    simon

Forced commit to note these patches were obtained from Mozilla Bugzilla.

Backport patches for the following security bugs:

CVE-2009-0355
CVE-2009-0356
CVE-2009-0357

This allows Firefox 2 to be unforbidden for the time being.

- Fix portaudit conflict with www/firefox and www/firefox3
- Mark www/firefox and www/linux-firefox FORBIDDEN

Discussion by:  simon/stas
With hat:       secteam

Add a new framework for browser plugins, USE_WEBPLUGINS. It is for which foo
plugins support one of web browsers and can take care of plist (depend on how
you use it) at the same time. I have written a complete document and even show
how it works in the www/firefox/Makefile.webplugins so be sure to read in
there. If there is anything that isn't clear in the document, please feel free
to ask and I will try my best to improvement it.

FYI: GNOME 2.24 depends on this, so it's coming.

BTW: It's based on www/linux-mplayer-plugin/Makefile.npapi with heavy modified.

Approved by:    portmgr

- Remove conditional checks for FreeBSD 5.x and older

Approved by:    pav

- Update to 2.0.0.20

Approved by:    marcus
Security:      
http://www.vuxml.org/freebsd/29f5bfc5-ce04-11dd-a721-0030843d3802.html

Update to 2.0.0.19, and add libgnomeui support.

PR:             129728
Submitted by:   "Dima Panov" <fluffy@fluffy.khv.ru>

- Update to 2.0.0.18

Security:      
https://developer.mozilla.org/devnews/index.php/2008/11/12/firefox-20018-and-304-security-updates-now-available-for-download/

- Update to 2.0.0.17

Approved by:    portmgr (pav)
Security:      
http://www.vuxml.org/freebsd/2273879e-8a2f-11dd-a6fe-0030843d3802.html

- Remove USE_GCC where it can be satisfied with base compiler on following
  FreeBSD versions: 5.3 and up, 6.x, 7.x, 8-CURRENT

Update to 2.0.0.16.  See
http://en-us.www.mozilla.com/en-US/firefox/2.0.0.16/releasenotes/ for a list
of changes in this release.

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

-Update to 2.0.0.14.
-Mask FP_X_DNML not only on i386, but also on amd64. [1]

Security:       http://www.mozilla.org/security/announce/2008/mfsa2008-20.html
Obtained from:  delphij's committed on thunderbird. [1]

- Remove unneeded dependency from gtk12/gtk20 [1]
- Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG
- Remove X11BASE support in favor of LOCALBASE or PREFIX
- Use USE_LDCONFIG instead of INSTALLS_SHLIB
- Remove unneeded USE_GCC 3.4+

Thanks to all Helpers:
        Dmitry Marakasov, Chess Griffin, beech@, dinoex, rafan, gahr,
        ehaupt, nox, itetcu, flz, pav

PR:             116263
Tested on:      pointyhat
Approved by:    portmgr (pav)

- Update to 2.0.0.13

Approved by:    ahze (gnome)
Security:      
http://www.vuxml.org/freebsd/12b336c6-fe36-11dc-b09c-001c2514716c.html

- Add "--with-default-mozilla-five-home=${PREFIX}/lib/${MOZILLA}" to fix other
  applications in the runtime. Some applications required to have set
  MOZILLA_FIVE_HOME or/and LD_LIBRARY_PATH to make it works in the runtime. Now,
  it's no longer need to set these variables, which this flag takes care of it.
  The MOZILLA_FIVE_HOME still works with this flag if someone need to use
  different one. I have learned about this flag from RPM, Debian, Gentoo ebuild
  and other packages.
- Bump the PORTREVISION.

Have been tested in MC CVS since Dec.

Update to 2.0.0.12.  This is a security and stability release.  See
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.12
for a list of patched vulnerabilities.

PR:             120455
Security:      
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.12
Submitted by:   beech

Work around the miscompilation/mislinkage problem of the sCanonicalVTable
hacks in the XPCOM string code on sparc64 by omitting the code in question
and bump PORTREVISIONs accordingly.

Approved by:    marcus

Fix the pkg-message never display.

PR:             ports/119394
Submitted by:   naddy

Update to 2.0.0.11.

Fix a regression on firefox 2.0.0.10, as described in Mozilla bug 405584,
affecting canvas rendering.

Obtained from:  https://bugzilla.mozilla.org/attachment.cgi?id=284556
Approved by:    portmgr (marcus)

Update to 2.0.0.10, this is a security update for CVE-2007-5959.

Approved by:    portmgr (marcus)

- Update to 2.0.0.9

Approved by:    portsmgr (marcus)

Update to 2.0.0.8

* Workaround a bug which can cause applications embedding Gecko to crash
  on exit [1]

* Use the correct size for a JavaScript object on 64-bit platforms which
  will help get the Java plug-in working on those platforms [2]

Test by:        mezz [1]
Submitted by:   jkim [2]
Obtained from:  Firefox trunk [2]

Set USE_PERL5/WANT_PERL as appropriate, for ports that either depend on
perl unconditonally, or conditionally.  To be able to conditionalize the
inclusion of bsd.perl.mk, they now need to be defined before the inclusion
of bsd.port.pre.mk.

Hat:            portmgr

Remove always-false/true conditions based on OSVERSION 500000

Update to 2.0.0.7

Release Notes:  http://www.mozilla.com/en-US/firefox/2.0.0.7/releasenotes/

Remove support for antique perl.

Hat:    portmgr

Update to 2.0.0.6

Update to 2.0.0.5

Update to 2.0.0.4

- Welcome X.org 7.2 \o/.
- Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}.
- Bump PORTREVISION for ports intalling files in ${X11BASE}.

- Update to 2.0.0.3

Update to 2.0.0.2 to fix some security vulnerabilities.  See
http://vuxml.FreeBSD.org/12bd6ecf-c430-11db-95c5-000c6ec775d9.html for
more details.

Fix the gtk2 dnd implementation broken, see more details in the bugzilla. This
patch[1] was created by Matthias Clasen <mclasen@redhat.com>. This bug was
started to reproduce with least 2.10.7 version of gtk2.

PR:             ports/107689
Reported by:    a few users
Bugzilla:       https://bugzilla.mozilla.org/show_bug.cgi?id=355248
                https://bugzilla.mozilla.org/show_bug.cgi?id=367203 [1]
                http://bugzilla.gnome.org/show_bug.cgi?id=394525

Mark IGNORE if ${ARCH} == "sparc64" && ${OSVERSION} < 601101
since it doesn't run.

The ipv6 is supported in these ports, so add ipv6 category.

PR:             ports/107057 and ports/107056
Submitted by:   Janos Mohacsi <janos.mohacsi@bsd.hu>

Update to 2.0.0.1

Release notes:  http://www.mozilla.com/en-US/firefox/2.0.0.1/releasenotes/

Fix our gross -lpthread hack to work with GCC 4.1.

Reported by:    pointyhat via kris

Fix a double-free while performing print operations which could trigger a
segmentation fault if malloc debugging was enabled.

Reported by:    dougb

Fix a problem with PTHREAD_LIB-safeness.

Submitted by:   nork

Restore firefox to 2.0 after slipping the RELEASE_6_2_0 tag.

Temporarily roll firefox back to 1.5.0.8 so that we can tag this security
fix release for 6.2.

Approved by:    secteam
                portmgr

Fix build on 5.x since only 6.1+ has fedisableexcept()

Reported by:    Clint Olsen <clint@0lsen.net>

- Remove bogus warning about being "bleeding edge" meant for firefox-devel

Remove LATEST_LINK since we have moved from firefox-devel -> firefox

- No longer disable pthreads in sqlite3 [2]
- Remove LIBS= from Makefile to fix "open with application" function. [2] [5]
- Fix component registration for some users. [1] [2] [3]
- Bump PORTREVISION [4]

Obtained from:  https://bugzilla.mozilla.org/show_bug.cgi?id=351181 [1]
Submitted by:   marcus [2]
                aspar Chilingarov <nm@web.am> [3]
                ahze [4] (I had to submit something)
Reported by:    philip and many others [5]

- Update to 2.0

Release notes:  http://www.mozilla.com/en-US/firefox/2.0/releasenotes/

Special thanks to marcus and many others for helping test and fixing
bugs!

Presenting GNOME 2.16.1 for FreeBSD.  This release represents a massive
amount of work by the FreeBSD GNOME Team and our testers.

On top of the usual GNOME update, we have taken this opportunity to move
GNOME from X11BASE to LOCALBASE.  This means roughly 600 ports NOT part of
the GNOME Desktop also need to be changed.  The bulk of the move was carried
out by ahze, mezz, and pav, but it would not have been possible without
cooperation from the FreeBSD KDE team who worked with us to make sure
GNOME and KDE can still coexist happily.  We would also like to send a
shout out to kris and pointyhat for putting up with multiple test runs
until we got something that was solid.

Back to GNOME 2.16.  This release brings a huge amount of new functionality
to FreeBSD.  The standard release notes can be read at
http://www.gnome.org/start/2.16/ .  But on top of what you will read there,

Add a tiny hunk to allow firefox to use our system libz instead of
building its own. Some years ago there was a security problem with
zlib-1.2.2 and firefox' configure checks the system's zlib.h to be
1.2.3 or higher.

FreeBSD patched the hole without bumping the version number, which
caused Firefox (and, likely, other Mozilla stuff) to build their own
versions instead (and install their headers).

Maintainers were repeatedly notified -- most recently about a month
ago: <200608091216.00510@aldan>, <200601251926.39246.mi+mx@aldan.algebra.com>.

Approved by:    maintainer timeout

- Update to 1.5.0.7

- Update to 1.5.0.6

- Update to 1.5.0.5

- Welcome back sparc64 on kern.osreldate>=601101