![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / mail / thunderbird
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
update to thunderbird-3.0rc1. The 2.x version is still available in mail/thunderbird2. Major changes: - New Mail Account Setup Wizard - Redesigned Mail Toolbar - Tabbed Email Messages - Smart Folders - New Message Summary View - Column Headings - Message Archive - Activity Manager - New Add-ons Manager - Improved Address Book - Improved Gmail Integration Full release notes: http://www.mozillamessaging.com/en-US/thunderbird/3.0rc1/releasenotes/
Update thunderbird and thunderbird-gtk1 to 2.0.0.23. Security fixes in this version: MFSA 2009-43 Heap overflow in certificate regexp parsing MFSA 2009-42 Compromise of SSL-protected communication For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.23/releasenotes/
Include "../../sysutils/desktop-file-utils/desktopdb.mk" to make pkglint happy.
Remove USE_DIRS from pkgsrc. Shared directories can now be created independently by the pacakges needing them and will be removed automatically by pkg_delete when empty. Packages needing empty directories can use the @pkgdir command in PLIST. Discussed and ok'd in thread starting at http://mail-index.netbsd.org/tech-pkg/2009/06/30/msg003546.html
Update thunderbird and thunderbird-gtk1 to 2.0.0.22. Security fixes in this version: MFSA 2009-33 Crash viewing multipart/alternative message with text/enhanced part MFSA 2009-32 JavaScript chrome privilege escalation MFSA 2009-29 Arbitrary code execution using event listeners attached to an element whose owner document is null MFSA 2009-27 SSL tampering via non-200 responses to proxy CONNECT requests MFSA 2009-24 Crashes with evidence of memory corruption (rv:1.9.0.11) MFSA 2009-17 Same-origin violations when Adobe Flash loaded via view-source: scheme MFSA 2009-14 Crashes with evidence of memory corruption (rv:1.9.0.9) For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.22/releasenotes/
Move setting of PKGREVISION from Makefile to the common Makefile, so that thunderbird-gtk1 also gets the revision bump, as the latter is already using the newest patch for regxpcom crash fixing.
Update thunderbird and thunderbird-gtk1 to 2.0.0.21. Security fixes in this version: MFSA 2009-10 Upgrade PNG library to fix memory safety hazards MFSA 2009-09 XML data theft via RDFXMLDataSource and cross-domain redirect MFSA 2009-07 Crashes with evidence of memory corruption (rv:1.9.0.7) For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.21/releasenotes/
Unify all the mozilla projects into using a single Makefile.common and INSTALL, and put it in seamonkey. Ensure all build with USE_DESTDIR. Bump PKGREVISIONs
Pullup ticket #2624 - requested by ghen thunderbird: build fix thunderbird-gtk1: build fix Revisions pulled up: - mail/thunderbird-gtk1/Makefile 1.20 - mail/thunderbird-gtk1/PLIST 1.16 - mail/thunderbird/Makefile 1.33 - mail/thunderbird/Makefile-thunderbird.common 1.42 - mail/thunderbird/PLIST 1.26 --- Module Name: pkgsrc Committed By: ghen Date: Wed Jan 7 14:23:03 UTC 2009 Modified Files: pkgsrc/mail/thunderbird: Makefile Makefile-thunderbird.common PLIST pkgsrc/mail/thunderbird-gtk1: Makefile PLIST Log Message: Include xdg-dirs for the share/applications and share/pixmaps directories, otherwise thunderbird doesn't install properly if these directories don't exist on the system, noted by tron. Bump PKGREVISION, brick jmcneill. ;-)
Include xdg-dirs for the share/applications and share/pixmaps directories, otherwise thunderbird doesn't install properly if these directories don't exist on the system, noted by tron. Bump PKGREVISION, brick jmcneill. ;-)
Pullup ticket #2624 - requested by ghen thunderbird: security update thunderbird-gtk1: security update Revisions pulled up: - mail/thunderbird-gtk1/Makefile 1.19 - mail/thunderbird/Makefile 1.32 - mail/thunderbird/Makefile-thunderbird.common 1.41 - mail/thunderbird/distinfo 1.50 --- Module Name: pkgsrc Committed By: ghen Date: Mon Jan 5 19:41:37 UTC 2009 Modified Files: pkgsrc/mail/thunderbird: Makefile Makefile-thunderbird.common distinfo pkgsrc/mail/thunderbird-gtk1: Makefile Log Message: Update thunderbird and thunderbird-gtk1 to 2.0.0.19. Security fixes in this version: MFSA 2008-68 XSS and JavaScript privilege escalation MFSA 2008-67 Escaped null characters ignored by CSS parser MFSA 2008-66 Errors parsing URLs with leading whitespace and control characters MFSA 2008-65 Cross-domain data theft via script redirect error message MFSA 2008-64 XMLHttpRequest 302 response disclosure MFSA 2008-61 Information stealing via loadBindingDocument MFSA 2008-60 Crashes with evidence of memory corruption (rv:1.9.0.5/1.8.1.19) For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.19/releasenotes/
Update thunderbird and thunderbird-gtk1 to 2.0.0.19. Security fixes in this version: MFSA 2008-68 XSS and JavaScript privilege escalation MFSA 2008-67 Escaped null characters ignored by CSS parser MFSA 2008-66 Errors parsing URLs with leading whitespace and control characters MFSA 2008-65 Cross-domain data theft via script redirect error message MFSA 2008-64 XMLHttpRequest 302 response disclosure MFSA 2008-61 Information stealing via loadBindingDocument MFSA 2008-60 Crashes with evidence of memory corruption (rv:1.9.0.5/1.8.1.19) For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.19/releasenotes/
Add .desktop file for GNOME/KDE/Xfce integration, bump PKGREVISION. ok wiz@
Add an INSTALL template instead of post-install: target so that binary packages and unpriv cleaning work.
Pullup ticket #2597 - requested by is thunderbird: security update thunderbird-gtk1: security update Revisions pulled up: - mail/thunderbird/Makefile-thunderbird.common 1.38 - mail/thunderbird/distinfo 1.49 --- Module Name: pkgsrc Committed By: is Date: Mon Nov 24 17:19:13 UTC 2008 Modified Files: pkgsrc/mail/thunderbird: Makefile-thunderbird.common distinfo Log Message: Upgrade to 2.0.0.18 (some security fix)
Upgrade to 2.0.0.18 (some security fix)
Update thunderbird and thunderbird-gtk1 to 2.0.0.17. Security fixes in this version: MFSA 2008-46 Heap overflow when canceling newsgroup message MFSA 2008-44 resource: traversal vulnerabilities MFSA 2008-43 BOM characters stripped from JavaScript before execution MFSA 2008-42 Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17) MFSA 2008-41 Privilege escalation via XPCnativeWrapper pollution MFSA 2008-38 nsXMLDocument::OnChannelRedirect() same-origin violation MFSA 2008-37 UTF-8 URL stack buffer overflow For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.17/releasenotes/
pullup ticket #2506 - requested by ghen
thunderbird, thunderbird-gtk1: update package for security fixes
revisions pulled up:
pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.36
pkgsrc/mail/thunderbird/PLIST 1.24
pkgsrc/mail/thunderbird/distinfo 1.46
pkgsrc/mail/thunderbird-gtk1/PLIST 1.14
pkgsrc/mail/thunderbird/patches/patch-af 1.5
pkgsrc/mail/thunderbird/patches/patch-ap 1.5
pkgsrc/mail/thunderbird/patches/patch-dw 1.2
Module Name: pkgsrc
Committed By: ghen
Date: Fri Aug 22 09:42:15 UTC 2008
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST distinfo
pkgsrc/mail/thunderbird-gtk1: PLIST
pkgsrc/mail/thunderbird/patches: patch-af patch-ap patch-dw
Log Message:
Update thunderbird and thunderbird-gtk1 to 2.0.0.16.
Security fixes in this version:
MFSA 2008-34 Remote code execution by overflowing CSS reference counter
MFSA 2008-33 Crash and remote code execution in block reflow
MFSA 2008-31 Peer-trusted certs can use alt names to spoof
MFSA 2008-29 Faulty .properties file results in uninitialized memory being used
MFSA 2008-26 Buffer length checks in MIME processing
MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript()
MFSA 2008-24 Chrome script loading from fastload file
MFSA 2008-21 Crashes with evidence of memory corruption
For more info, see
+http://www.mozilla.com/en-US/thunderbird/2.0.0.16/releasenotes/
Update thunderbird and thunderbird-gtk1 to 2.0.0.16. Security fixes in this version: MFSA 2008-34 Remote code execution by overflowing CSS reference counter MFSA 2008-33 Crash and remote code execution in block reflow MFSA 2008-31 Peer-trusted certs can use alt names to spoof MFSA 2008-29 Faulty .properties file results in uninitialized memory being used MFSA 2008-26 Buffer length checks in MIME processing MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript() MFSA 2008-24 Chrome script loading from fastload file MFSA 2008-21 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.16/releasenotes/
Pullup ticket 2394 - requested by ghen
Security update for thunderbird and thunderbird-gtk1
- mail/thunderbird-gtk1/Makefile 1.17
- mail/thunderbird/Makefile-thunderbird.common 1.35
- mail/thunderbird/distinfo 1.45
Module Name: pkgsrc
Committed By: ghen
Date: Tue May 20 11:51:55 UTC 2008
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common distinfo
Log Message:
Update thunderbird and thunderbird-gtk1 to 2.0.0.14 (2.0.0.13 was skipped to
stay on par with Firefox version numbering?)
Security fixes in this version:
MFSA 2008-15 Crashes with evidence of memory corruption (rv:1.8.1.13)
MFSA 2008-14 JavaScript privilege escalation and arbitrary code execution
For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.14/releasenotes/
---
Module Name: pkgsrc
Committed By: ghen
Date: Tue May 20 11:52:50 UTC 2008
Modified Files:
pkgsrc/mail/thunderbird-gtk1: Makefile
Log Message:
Unbump PKGREVISION for 2.0.0.14 update.
Update thunderbird and thunderbird-gtk1 to 2.0.0.14 (2.0.0.13 was skipped to stay on par with Firefox version numbering?) Security fixes in this version: MFSA 2008-15 Crashes with evidence of memory corruption (rv:1.8.1.13) MFSA 2008-14 JavaScript privilege escalation and arbitrary code execution For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.14/releasenotes/
Fix assorted pkglint complaints and warns.
Update thunderbrd and thunderbird-gtk1 to 2.0.0.12 (.10 and .11 where skipped). Security fixes in this version: MFSA 2008-12 Heap buffer overflow in external MIME bodies MFSA 2008-07 Possible information disclosure in BMP decoder MFSA 2008-05 Directory traversal via chrome: URI MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12) For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.12/releasenotes/
Change MOZILLA master sites difinitions, related to PR 37379.
There are three types Mozilla mirrors.
(http://www.mozilla.org/mirroring.html)
* mozilla-current
contains only the current version of Firefox and Thunderbird
* mozilla-release
contains Firefox, Thunderbird, and Sunbird releases
* mozilla-all
complete archive
Define following variables for mozilla master sites:
MASTER_SITE_MOZILLA_ALL = mozilla-all
MASTER_SITE_MOZILLA = mozilla-release
and change some packages to use appropriate variable.
Update contents of MASTER_SITE_MOZILLA with master and primary mirrors
taken from http://www.mozilla.org/mirrors.html and add some sample definitions.
Pullup ticket 2227 - requested by tron security update for thunderbird - pkgsrc/mail/thunderbird/Makefile 1.30 via patch - pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.31 - pkgsrc/mail/thunderbird/distinfo 1.42 - pkgsrc/mail/thunderbird/patches/patch-ac 1.8 Module Name: pkgsrc Committed By: tron Date: Thu Nov 15 15:05:23 UTC 2007 Modified Files: pkgsrc/mail/thunderbird: Makefile Makefile-thunderbird.common distinfo pkgsrc/mail/thunderbird/patches: patch-ac Log Message: Update "thunderbird" package to version 2.0.0.9. It fixes the following security problems: - MFSA 2007-36 URIs with invalid %-encoding mishandled by Windows - MFSA 2007-29 Crashes with evidence of memory corruption (rv:1.8.1.8)
Update "thunderbird" package to version 2.0.0.9. It fixes the following security problems: - MFSA 2007-36 URIs with invalid %-encoding mishandled by Windows - MFSA 2007-29 Crashes with evidence of memory corruption (rv:1.8.1.8)
Make thunderbird also obey the mozilla-single-profile package option that is used already for firefox and thunderbird.
Fix file permissions for default profile. Bump PKGREVISION.
Pullup ticket 2156 - requested by ghen security update for thunderbird Revisions pulled up: - pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.27, 1.28 - pkgsrc/mail/thunderbird/PLIST 1.23 - pkgsrc/mail/thunderbird/distinfo 1.40, 1.41 - pkgsrc/mail/thunderbird-gtk1/PLIST 1.13 Module Name: pkgsrc Committed By: ghen Date: Thu Jul 26 12:29:37 UTC 2007 Modified Files: pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST distinfo pkgsrc/mail/thunderbird-gtk1: PLIST Log Message: Update thunderbrd and thunderbird-gtk1 to 2.0.0.5. Security fixes in this version: MFSA 2007-15 Security Vulnerability in APOP Authentication MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.5/releasenotes/ --- Module Name: pkgsrc Committed By: ghen Date: Thu Aug 2 08:48:30 UTC 2007 Modified Files: pkgsrc/mail/thunderbird: Makefile-thunderbird.common distinfo Log Message: Update thunderbrd and thunderbird-gtk1 to 2.0.0.6. Security fixes in this version: MFSA 2007-27 Unescaped URIs passed to external programs MFSA 2007-26 Privilege escalation through chrome-loaded about:blank windows For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.6/releasenotes/
Update thunderbrd and thunderbird-gtk1 to 2.0.0.6. Security fixes in this version: MFSA 2007-27 Unescaped URIs passed to external programs MFSA 2007-26 Privilege escalation through chrome-loaded about:blank windows For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.6/releasenotes/
Update thunderbrd and thunderbird-gtk1 to 2.0.0.5. Security fixes in this version: MFSA 2007-15 Security Vulnerability in APOP Authentication MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.5/releasenotes/
Include sqlite3 locking patch from Firefox.
Update thunderbrd and thunderbird-gtk1 to 2.0.0.4. (2.0.0.1-2.0.0.3 skipped to keep the version on par with Firefox?) Security fixes in this version: MFSA 2007-15 Security Vulnerability in APOP Authentication MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.4/releasenotes/
Pullup ticket 2109 - requested by ghen security update for thunderbird Updated via patch provided by the submitter, packages in HEAD were renamed. Module Name: pkgsrc Committed By: ghen Date: Thu May 31 21:36:52 UTC 2007 Modified Files: pkgsrc/mail/thunderbird15: Makefile Makefile-thunderbird.common distinfo pkgsrc/mail/thunderbird15-gtk1: Makefile Log Message: Update thunderbird15 and thunderbird15-gtk1 to 1.5.0.12 (they skipped .11 to stay on par with Firefox?). Security fixes in this version: MFSA 2007-15 Security Vulnerability in APOP Authentication MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/thunderbird/releases/1.5.0.12.html
Update to Thunderbird 2.0.0.0. What's New in Thunderbird 2 * Message Tags: Create your own tags for organizing email. Messages can be assigned any number of tags. Tags can be combined with saved searches and mail views to make it easier to organize email. * Visual Theme: Thunderbird 2's theme and user interface have been updated to improve usability and maximize screen real estate. * Session History Navigation: Back and Forward buttons allow navigation through message history. * Advanced Folder Views: Customize the folder pane to show favorite, unread or recent folders. * Easy Access to Popular Web Mail Services: Gmail and .Mac users can access their accounts in Thunderbird by simply providing their user names and passwords. * Improved Support For Extensions: Extensions can now add custom columns to the message list pane in addition to storing custom message data in the mail database. * Improved New Mail Notification Alerts: New mail alerts include information such as the subject, sender and message preview text. * Folder Summary Popups: Mouse over a folder with new messages to see a summary of the new messages in that folder. * Saved Search Folder Performance: Search results for saved search folders are now cached, improving folder loading performance. * Find As You Type: Finds and highlights message text as you type. * Improved Filing Tools: Recent folder menu items for moving and copying messages to recently used folders. Move / Copy again functionality. * Updates to the Extension System: The extension system has been updated to provide enhanced security and to allow for easier localization of extensions. The Rumbling Edge has a more detailed list of notable bug fixes: http://weblogs.mozillazine.org/rumblingedge/archives/2007/03/tb_2.html
Pullup ticket 2039 - requested by ghen security update for thunderbird Revisions pulled up: - pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.23 - pkgsrc/mail/thunderbird/PLIST patch - pkgsrc/mail/thunderbird/distinfo patch - pkgsrc/mail/thunderbird/patches/patch-ap patch - pkgsrc/mail/thunderbird/patches/patch-ax patch - pkgsrc/mail/thunderbird-gtk1/PLIST 1.9 Module Name: pkgsrc Committed By: ghen Date: Fri Mar 2 14:12:25 UTC 2007 Modified Files: pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST distinfo pkgsrc/mail/thunderbird-gtk1: PLIST pkgsrc/mail/thunderbird/patches: patch-ap patch-ax Log Message: Update thunderbird and thunderbird-gtk1 to 1.5.0.10. Fixed in this version: MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) For more info, see http://www.mozilla.com/en-US/thunderbird/releases/1.5.0.10.html
Update thunderbird and thunderbird-gtk1 to 1.5.0.10. Fixed in this version: MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) For more info, see http://www.mozilla.com/en-US/thunderbird/releases/1.5.0.10.html
Get these mozilla clients to work on Solaris-2.9/sparc. There were two issues. The PLIST was incorrect and since the PLIST is used by the "moz-install" script, anything missing from the PLIST is never installed even when building from source. When libfreebl* were not installed it caused the clients to fail to load the security component and fail with "The browser failed to load its security component". The second issue is that many installations of solaris-2.9 include various glib/gtk/gnome libraries in /usr/lib. This causes failures because the pkgsrc ones were used at link time and the /usr/lib ones at run time. Work around this by setting a LD_LIBRARY_PATH that includes the pkgsrc lib directory first. pkgrevision bumps all around.
Pullup ticket 1965 - requested by ghen
security update for thunderbird
Revisions pulled up:
- pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.21
- pkgsrc/mail/thunderbird/distinfo 1.32
Module Name: pkgsrc
Committed By: ghen
Date: Wed Dec 20 12:53:32 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common distinfo
Log Message:
Update thunderbird and thunderbird-gtk1 to 1.5.0.9. Fixed in this version:
MFSA 2006-74 Mail header processing heap overflows
MFSA 2006-73 Mozilla SVG Processing Remote Code Execution
MFSA 2006-72 XSS by setting img.src to javascript: URI
MFSA 2006-71 LiveConnect crash finalizing JS objects
MFSA 2006-70 Privilege escallation using watch point
MFSA 2006-68 Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1)
For more info, see http://www.mozilla.com/en-US/thunderbird/releases/1.5.0.9.html
Update thunderbird and thunderbird-gtk1 to 1.5.0.9. Fixed in this version: MFSA 2006-74 Mail header processing heap overflows MFSA 2006-73 Mozilla SVG Processing Remote Code Execution MFSA 2006-72 XSS by setting img.src to javascript: URI MFSA 2006-71 LiveConnect crash finalizing JS objects MFSA 2006-70 Privilege escallation using watch point MFSA 2006-68 Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1) For more info, see http://www.mozilla.com/en-US/thunderbird/releases/1.5.0.9.html
Pullup ticket 1906 - requested by ghen
security update for thunderbird
Revisions pulled up:
- pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.19, 1.20
- pkgsrc/mail/thunderbird/PLIST 1.16, 1.17
- pkgsrc/mail/thunderbird/distinfo 1.28, 1.29, 1.30, 1.31
- pkgsrc/mail/thunderbird/patches/patch-ai 1.4
- pkgsrc/mail/thunderbird/patches/patch-as 1.3
- pkgsrc/mail/thunderbird/patches/patch-at 1.1
- pkgsrc/mail/thunderbird-gtk1/PLIST 1.7, 1.8
Module Name: pkgsrc
Committed By: markd
Date: Thu Oct 19 10:26:14 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: distinfo
pkgsrc/mail/thunderbird/patches: patch-ai
Log Message:
Fix crash after printing caused by trying to destroy the same charset
structure multiple times. Bump PKGREVISION.
---
Module Name: pkgsrc
Committed By: tron
Date: Fri Oct 20 12:45:13 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: distinfo
Added Files:
pkgsrc/mail/thunderbird/patches: patch-as
Log Message:
Fix "if [ ... == ...]" in a build script.
---
Module Name: pkgsrc
Committed By: markd
Date: Mon Oct 23 09:43:06 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST
pkgsrc/mail/thunderbird-gtk1: PLIST
Log Message:
Build the default set of extensions in thunderbird{,-gtk1}. Allows
GSSAPI authentication to work on NetBSD-current. Fixes my PR 33512.
OKed by ghen. Bump PKGREVISION.
---
Module Name: pkgsrc
Committed By: markd
Date: Mon Oct 23 10:49:35 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: distinfo
Added Files:
pkgsrc/mail/thunderbird/patches: patch-at
Log Message:
thunderbird's ldap doesn't work talking to an ipv4 ldap server if
talking to ipv4 addresses using ipv6 addresses isn't allowed, which is
the default on NetBSD. Patch to use a v4 socket when talking to an ipv4
ldap server. Fixes my PR 33511.
seamonkey/firefox/sunbird have the same code so make the same patch.
OKed ghen. Bump PKGREVISION.
---
Module Name: pkgsrc
Committed By: ghen
Date: Wed Nov 8 13:15:40 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST
distinfo
pkgsrc/mail/thunderbird-gtk1: PLIST
Log Message:
Update thunderbird and thunderbird-gtk1 to 1.5.0.8. Fixed in this version:
MFSA 2006-67 Running Script can be recompiled
MFSA 2006-66 RSA signature forgery (variant)
MFSA 2006-65 Crashes with evidence of memory corruption (rv:1.8.0.8)
For more info, see http://www.mozilla.com/en-US/thunderbird/releases/1.5.0.8.html
Update thunderbird and thunderbird-gtk1 to 1.5.0.8. Fixed in this version: MFSA 2006-67 Running Script can be recompiled MFSA 2006-66 RSA signature forgery (variant) MFSA 2006-65 Crashes with evidence of memory corruption (rv:1.8.0.8) For more info, see http://www.mozilla.com/en-US/thunderbird/releases/1.5.0.8.html
Build the default set of extensions in thunderbird{,-gtk1}. Allows
GSSAPI authentication to work on NetBSD-current. Fixes my PR 33512.
OKed by ghen. Bump PKGREVISION.
Use Makefile.common from seamonkey dir instead of mozilla.
Pullup ticket 1828 - requested by ghen security update for thunderbird Revisions pulled up: - pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.17 - pkgsrc/mail/thunderbird/distinfo 1.26, 1.27 Module Name: pkgsrc Committed By: tron Date: Mon Jul 31 14:05:00 UTC 2006 Modified Files: pkgsrc/mail/thunderbird: distinfo Added Files: pkgsrc/mail/thunderbird/patches: patch-as Log Message: Make this build with GCC 4.1.x. --- Module Name: pkgsrc Committed By: ghen Date: Fri Sep 15 13:55:22 UTC 2006 Modified Files: pkgsrc/mail/thunderbird: Makefile-thunderbird.common distinfo Removed Files: pkgsrc/mail/thunderbird/patches: patch-as Log Message: Update thunderbird and thunderbird-gtk1 to 1.5.0.7. Fixed in this version: MFSA 2006-64 Crashes with evidence of memory corruption (rv:1.8.0.7) MFSA 2006-63 JavaScript execution in mail via XBL MFSA 2006-60 RSA Signature Forgery MFSA 2006-59 Concurrency-related vulnerability MFSA 2006-58 Auto-Update compromise through DNS and SSL spoofing MFSA 2006-57 JavaScript Regular Expression Heap Corruption For more info, see http://www.mozilla.com/thunderbird/releases/1.5.0.7.html
Update thunderbird and thunderbird-gtk1 to 1.5.0.7. Fixed in this version: MFSA 2006-64 Crashes with evidence of memory corruption (rv:1.8.0.7) MFSA 2006-63 JavaScript execution in mail via XBL MFSA 2006-60 RSA Signature Forgery MFSA 2006-59 Concurrency-related vulnerability MFSA 2006-58 Auto-Update compromise through DNS and SSL spoofing MFSA 2006-57 JavaScript Regular Expression Heap Corruption For more info, see http://www.mozilla.com/thunderbird/releases/1.5.0.7.html
Pullup ticket 1760 - requested by uebayasi security update for thunderbird Revisions pulled up: - pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.16 - pkgsrc/mail/thunderbird/distinfo 1.25 Module Name: pkgsrc Committed By: uebayasi Date: Sat Jul 29 02:13:04 UTC 2006 Modified Files: pkgsrc/mail/thunderbird: Makefile-thunderbird.common distinfo Log Message: Update Thunderbird to 1.5.0.5. This is a security update announce at July 26, 2006. See the following URLs in detail: http://www.mozilla.org/security/announce/2006/mfsa2006-56.html http://www.mozilla.org/security/announce/2006/mfsa2006-55.html http://www.mozilla.org/security/announce/2006/mfsa2006-54.html http://www.mozilla.org/security/announce/2006/mfsa2006-53.html http://www.mozilla.org/security/announce/2006/mfsa2006-52.html http://www.mozilla.org/security/announce/2006/mfsa2006-51.html http://www.mozilla.org/security/announce/2006/mfsa2006-50.html http://www.mozilla.org/security/announce/2006/mfsa2006-49.html http://www.mozilla.org/security/announce/2006/mfsa2006-48.html http://www.mozilla.org/security/announce/2006/mfsa2006-47.html http://www.mozilla.org/security/announce/2006/mfsa2006-46.html http://www.mozilla.org/security/announce/2006/mfsa2006-45.html http://www.mozilla.org/security/announce/2006/mfsa2006-44.html
Update Thunderbird to 1.5.0.5. This is a security update announce at July 26, 2006. See the following URLs in detail: http://www.mozilla.org/security/announce/2006/mfsa2006-56.html http://www.mozilla.org/security/announce/2006/mfsa2006-55.html http://www.mozilla.org/security/announce/2006/mfsa2006-54.html http://www.mozilla.org/security/announce/2006/mfsa2006-53.html http://www.mozilla.org/security/announce/2006/mfsa2006-52.html http://www.mozilla.org/security/announce/2006/mfsa2006-51.html http://www.mozilla.org/security/announce/2006/mfsa2006-50.html http://www.mozilla.org/security/announce/2006/mfsa2006-49.html http://www.mozilla.org/security/announce/2006/mfsa2006-48.html http://www.mozilla.org/security/announce/2006/mfsa2006-47.html http://www.mozilla.org/security/announce/2006/mfsa2006-46.html http://www.mozilla.org/security/announce/2006/mfsa2006-45.html http://www.mozilla.org/security/announce/2006/mfsa2006-44.html
Pullup ticket 1682 - requested by ghen
security update for firefox and thunderbird
Revisions pulled up:
- pkgsrc/www/firefox/Makefile 1.35
- pkgsrc/www/firefox/Makefile-firefox.common 1.30, 1.33
- pkgsrc/www/firefox/distinfo 1.49, 1.50
- pkgsrc/www/firefox-gtk1/Makefile 1.13
- pkgsrc/www/firefox/patches/patch-fa removed
- pkgsrc/www/firefox/patches/patch-fb removed
- pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.15
- pkgsrc/mail/thunderbird/PLIST 1.14
- pkgsrc/mail/thunderbird/distinfo 1.23
- pkgsrc/mail/thunderbird-gtk1/PLIST 1.5
Module Name: pkgsrc
Committed By: ghen
Date: Thu May 4 05:16:13 UTC 2006
Modified Files:
pkgsrc/www/firefox: Makefile Makefile-firefox.common distinfo
pkgsrc/www/firefox-gtk1: Makefile
Removed Files:
pkgsrc/www/firefox/patches: patch-fa patch-fb
Log Message:
Update Firefox to 1.5.0.3, which is identical to our 1.5.0.2nb2 (except
for the advertized version), so there's no reason to upgrade. :-)
Fixes a denial of service vulnerability (MFSA 2006-30).
---
Module Name: pkgsrc
Committed By: ghen
Date: Sat Jun 3 08:04:36 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST distinfo
pkgsrc/mail/thunderbird-gtk1: PLIST
pkgsrc/www/firefox: Makefile-firefox.common distinfo
Log Message:
Update www/firefox and www/firefox-gtk to 1.5.0.4, mail/thunderbird and
mail/thunderbird-gtk1 to 1.5.0.4 (salo has already updated
www/firefox-bin). Note that thunderbird skipped one release number
(again) to stay on par with firefox.
These updates provide:
* improvements to product stability,
* several important security fixes (see below).
Fixed in Firefox 1.5.0.4:
MFSA 2006-43 Privilege escalation using addSelectionListener
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-41 File stealing by changing input type (variant)
MFSA 2006-39 "View Image" local resource linking (Windows)
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object
prototypes
MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-34 XSS viewing javascript: frames or images from context menu
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
Fixed in Thunderbird 1.5.0.4:
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-40 Double-free on malformed VCard
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object
prototypes
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
Update www/firefox and www/firefox-gtk to 1.5.0.4, mail/thunderbird and mail/thunderbird-gtk1 to 1.5.0.4, and www/seamonkey, www/seamonkey-gtk1 and www/seamonkey-bin to 1.0.2 (salo has already updated www/firefox-bin). Note that thunderbird skipped one release number (again) to stay on par with firefox. These updates provide: * improvements to product stability, * several important security fixes (see below). Fixed in Firefox 1.5.0.4: MFSA 2006-43 Privilege escalation using addSelectionListener MFSA 2006-42 Web site XSS using BOM on UTF-8 pages MFSA 2006-41 File stealing by changing input type (variant) MFSA 2006-39 "View Image" local resource linking (Windows) MFSA 2006-38 Buffer overflow in crypto.signText() MFSA 2006-37 Remote compromise via content-defined setter on object prototypes MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2 MFSA 2006-35 Privilege escalation through XUL persist MFSA 2006-34 XSS viewing javascript: frames or images from context menu MFSA 2006-33 HTTP response smuggling MFSA 2006-32 Fixes for crashes with potential memory corruption MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey) Fixed in Thunderbird 1.5.0.4: MFSA 2006-42 Web site XSS using BOM on UTF-8 pages MFSA 2006-40 Double-free on malformed VCard MFSA 2006-38 Buffer overflow in crypto.signText() MFSA 2006-37 Remote compromise via content-defined setter on object prototypes MFSA 2006-35 Privilege escalation through XUL persist MFSA 2006-33 HTTP response smuggling MFSA 2006-32 Fixes for crashes with potential memory corruption MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey) Fixed in SeaMonkey 1.0.2: MFSA 2006-43 Privilege escalation using addSelectionListener MFSA 2006-42 Web site XSS using BOM on UTF-8 pages MFSA 2006-41 File stealing by changing input type (variant) MFSA 2006-40 Double-free on malformed VCard MFSA 2006-39 "View Image" local resource linking (Windows) MFSA 2006-38 Buffer overflow in crypto.signText() MFSA 2006-37 Remote compromise via content-defined setter on object prototypes MFSA 2006-35 Privilege escalation through XUL persist MFSA 2006-34 XSS viewing javascript: frames or images from context menu MFSA 2006-33 HTTP response smuggling MFSA 2006-32 Fixes for crashes with potential memory corruption MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
Remove MESSAGE, as this seems to be no longer true for 1.5+ releases.
Set MESSAGE_SRC instead of MESSAGE so that we can take advantage of MESSAGE_SUBST properly. No package should be setting MESSAGE anyway.
Pullup ticket 1442 - requested by ghen
security update for thunderbird
Revisions pulled up:
- pkgsrc/mail/thunderbird/Makefile 1.18
- pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.12
- pkgsrc/mail/thunderbird/distinfo 1.22
- pkgsrc/mail/thunderbird/patches/patch-ab 1.9
- pkgsrc/mail/thunderbird-gtk1/Makefile 1.9
Module Name: pkgsrc
Committed By: ghen
Date: Sun Apr 23 14:14:07 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: Makefile Makefile-thunderbird.common
distinfo
pkgsrc/mail/thunderbird-gtk1: Makefile
pkgsrc/mail/thunderbird/patches: patch-ab
Log Message:
Update to Thunderbird 1.5.0.2 (1.5.0.1 was skipped to stay in sync with
Firefox).
Thunderbird 1.5.0.2 offers improved stability, and several security fixes:
MFSA 2006-28 Security check of js_ValueToFunctionObject() can be
circumvented
MFSA 2006-27 Table Rebuilding Code Execution Vulnerability
MFSA 2006-26 Mail Multiple Information Disclosure
MFSA 2006-25 Privilege escalation through Print Preview
MFSA 2006-24 Privilege escalation using crypto.generateCRMFRequest
MFSA 2006-22 CSS Letter-Spacing Heap Overflow Vulnerability
MFSA 2006-21 JavaScript execution in mail when forwarding in-line
MFSA 2006-20 Crashes with evidence of memory corruption (rv:1.8.0.2)
MFSA 2006-08 "AnyName" entrainment and access control hazard
MFSA 2006-07 Read beyond buffer while parsing XML
MFSA 2006-06 Integer overflows in E4X, SVG and Canvas
MFSA 2006-05 Localstore.rdf XML injection through XULDocument.persist()
MFSA 2006-04 Memory corruption via QueryInterface on Location, Navigator
objects
MFSA 2006-02 Changing postion:relative to static corrupts memory
MFSA 2006-01 JavaScript garbage-collection hazards
For a detailed ChangeLog, see:
http://weblogs.mozillazine.org/rumblingedge/archives/2006/02/1-5-0-2.html
Update to Thunderbird 1.5.0.2 (1.5.0.1 was skipped to stay in sync with Firefox). Thunderbird 1.5.0.2 offers improved stability, and several security fixes: MFSA 2006-28 Security check of js_ValueToFunctionObject() can be circumvented MFSA 2006-27 Table Rebuilding Code Execution Vulnerability MFSA 2006-26 Mail Multiple Information Disclosure MFSA 2006-25 Privilege escalation through Print Preview MFSA 2006-24 Privilege escalation using crypto.generateCRMFRequest MFSA 2006-22 CSS Letter-Spacing Heap Overflow Vulnerability MFSA 2006-21 JavaScript execution in mail when forwarding in-line MFSA 2006-20 Crashes with evidence of memory corruption (rv:1.8.0.2) MFSA 2006-08 "AnyName" entrainment and access control hazard MFSA 2006-07 Read beyond buffer while parsing XML MFSA 2006-06 Integer overflows in E4X, SVG and Canvas MFSA 2006-05 Localstore.rdf XML injection through XULDocument.persist() MFSA 2006-04 Memory corruption via QueryInterface on Location, Navigator objects MFSA 2006-02 Changing postion:relative to static corrupts memory MFSA 2006-01 JavaScript garbage-collection hazards For a detailed ChangeLog, see: http://weblogs.mozillazine.org/rumblingedge/archives/2006/02/1-5-0-2.html
Make thunderbird pass CHECK_FILES by skipping automatically generated files.
Readd minor DragonFly patch. Disable use of visibility attributes, It's Just Broken (TM). Bump revision.
Pullup ticket 1102 - requested by Geert Hendrickx
security update for firefox and thunderbird
Updated via patch from the submitter, includes these changes:
Module Name: pkgsrc
Committed By: joerg
Date: Fri Dec 30 21:35:58 UTC 2005
Modified Files:
pkgsrc/mail/thunderbird/patches: patch-ab patch-ac patch-aq patch-ba
patch-bo patch-bs
Added Files:
pkgsrc/mail/thunderbird/patches: patch-ar patch-da patch-db patch-dc
patch-de patch-df patch-dg patch-dh patch-dj patch-dk patch-dl
patch-dm patch-do patch-ds patch-dt
Log Message:
Add DragonFly build support, partly based on the patches from
www/firefox.
---
Module Name: pkgsrc
Committed By: joerg
Date: Wed Jan 4 08:55:08 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: distinfo
Log Message:
Also commit distinfo. Reminded by wiz@.
---
Module Name: pkgsrc
Committed By: ghen
Date: Sun Feb 5 14:49:05 UTC 2006
Modified Files:
pkgsrc/mail/thunderbird: Makefile Makefile-thunderbird.common PLIST
distinfo
pkgsrc/mail/thunderbird-gtk1: Makefile PLIST
pkgsrc/mail/thunderbird/patches: patch-aa patch-ab patch-ac patch-af
patch-ag patch-ai patch-aj patch-al patch-ap patch-aq patch-aw
patch-ax patch-bb patch-bo patch-bq patch-br patch-db patch-de
patch-df
Removed Files:
pkgsrc/mail/thunderbird-gtk1: MESSAGE
pkgsrc/mail/thunderbird/patches: patch-bt patch-bw patch-cc patch-ce
patch-cf
Log Message:
Update to Thunderbird 1.5.
What's new:
* Automated update to streamline product upgrades. Notification of an
update is more prominent, and updates to Thunderbird may now be half
a megabyte or smaller. Updating extensions has also improved.
* Sort address autocomplete results by how often you send e-mail
to each recipient.
* Spell check as you type.
* Saved Search Folders can now search across multiple accounts.
* Built in phishing detector to help protect users against email scams.
* Podcasting and other RSS Improvements.
* Deleting attachments from messages.
* Integration with server side spam filtering.
* Reply and forward actions for message filters.
* Kerberos Authentication.
* Auto save as draft for mail composition.
* Message aging.
* Filters for Global Inbox.
* Improvements to product usability including redesigned options
interface, and SMTP server management.
* Many security enhancements.
For a more detailed list of changes, see
http://weblogs.mozillazine.org/rumblingedge/archives/2006/01/1-5.html
Ok with wiz.
---
Module Name: pkgsrc
Committed By: ghen
Date: Sun Feb 5 14:43:59 UTC 2006
Modified Files:
pkgsrc/www/mozilla: Makefile.common
Log Message:
Set CATEGORIES ?=www (instead of =) such that thunderbird (and later
sunbird) can override it. Ok for wiz.
---
odule Name: pkgsrc
Committed By: ghen
Date: Sun Feb 5 14:46:31 UTC 2006
Modified Files:
pkgsrc/www/firefox: Makefile Makefile-firefox.common PLIST distinfo
pkgsrc/www/firefox-gtk1: Makefile PLIST
Added Files:
pkgsrc/www/firefox/patches: patch-dw patch-dx
Removed Files:
pkgsrc/www/firefox/patches: patch-bugzilla-319004
Log Message:
Update to Firefox 1.5.0.1, a bug fix release for Firefox 1.5.
What's new:
* Improved stability.
* Improved support for Mac OS X.
* International Domain Name support for Iceland (.is) is now enabled.
* Fixes for several memory leaks.
* Several security enhancements.
For a more detailed list changes, see
http://www.squarefree.com/burningedge/releases/1.5.0.1.html
Ok with wiz.
Update to Thunderbird 1.5.
What's new:
* Automated update to streamline product upgrades. Notification of an
update is more prominent, and updates to Thunderbird may now be half a
megabyte or smaller. Updating extensions has also improved.
* Sort address autocomplete results by how often you send e-mail to each recipient.
* Spell check as you type.
* Saved Search Folders can now search across multiple accounts.
* Built in phishing detector to help protect users against email scams.
* Podcasting and other RSS Improvements.
* Deleting attachments from messages.
* Integration with server side spam filtering.
* Reply and forward actions for message filters.
* Kerberos Authentication.
* Auto save as draft for mail composition.
* Message aging.
* Filters for Global Inbox.
* Improvements to product usability including redesigned options interface,
and SMTP server management.
* Many security enhancements.
For a more detailed list of changes, see http://weblogs.mozillazine.org/rumblingedge/archives/2006/01/1-5.html
Ok with wiz.
Pullup ticket 797 - requested by Shin'ichiro TAYA security update for thunderbird Revisions pulled up: - pkgsrc/mail/thunderbird/Makefile 1.11 - pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.8 - pkgsrc/mail/thunderbird/distinfo 1.18 - pkgsrc/mail/thunderbird-gtk1/Makefile 1.4 Module Name: pkgsrc Committed By: taya Date: Sun Oct 2 12:37:04 UTC 2005 Modified Files: pkgsrc/mail/thunderbird: Makefile Makefile-thunderbird.common distinfo pkgsrc/mail/thunderbird-gtk1: Makefile Log Message: Update thunderbird & thunderbird-gtk1 to 1.0.7 What's New in Thunderbird 1.0.7 (from Release Notes) Thunderbird 1.0.7 is a security and stability update that is part of our ongoing program to provide a safe Internet experience for our customers. We recommend that all users upgrade to this latest version.
Update thunderbird & thunderbird-gtk1 to 1.0.7 What's New in Thunderbird 1.0.7 (from Release Notes) Thunderbird 1.0.7 is a security and stability update that is part of our ongoing program to provide a safe Internet experience for our customers. We recommend that all users upgrade to this latest version.
Pullup ticket 685 - requested by Shin'ichiro TAYA
security update for thunderbird and thunderbird-gtk1
Revisions pulled up:
- pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.7
- pkgsrc/mail/thunderbird/PLIST 1.11
- pkgsrc/mail/thunderbird/distinfo 1.15
- pkgsrc/mail/thunderbird-gtk1/PLIST 1.2
Module Name: pkgsrc
Committed By: taya
Date: Sun Jul 24 02:58:33 UTC 2005
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST distinfo
pkgsrc/mail/thunderbird-gtk1: PLIST
Log Message:
Update thunderbird & thunderbird-gtk1 to 1.0.6
This is a security fix release.
Fixed in Thunderbird 1.0.5/1.0.6
MFSA 2005-56 Code execution through shared function objects
MFSA 2005-55 XHTML node spoofing
MFSA 2005-52 Same origin violation: frame calling top.focus()
MFSA 2005-50 Possibly exploitable crash in InstallVersion.compareTo()
MFSA 2005-46 XBL scripts ran even when Javascript disabled
MFSA 2005-44 Privilege escalation via non-DOM property overrides
MFSA 2005-41 Privilege escalation via DOM property overrides
MFSA 2005-40 Missing Install object instance checks
MFSA 2005-33 Javascript "lambda" replace exposes memory contents
Update thunderbird & thunderbird-gtk1 to 1.0.6 This is a security fix release. Fixed in Thunderbird 1.0.5/1.0.6 MFSA 2005-56 Code execution through shared function objects MFSA 2005-55 XHTML node spoofing MFSA 2005-52 Same origin violation: frame calling top.focus() MFSA 2005-50 Possibly exploitable crash in InstallVersion.compareTo() MFSA 2005-46 XBL scripts ran even when Javascript disabled MFSA 2005-44 Privilege escalation via non-DOM property overrides MFSA 2005-41 Privilege escalation via DOM property overrides MFSA 2005-40 Missing Install object instance checks MFSA 2005-33 Javascript "lambda" replace exposes memory contents
Pullup ticket 390 - requested by Shin'ichiro TAYA
security fix for thunderbird and thunderbird-gtk2
Revisions pulled up:
- pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.6
- pkgsrc/mail/thunderbird/PLIST 1.9
- pkgsrc/mail/thunderbird/distinfo 1.14
- pkgsrc/mail/thunderbird-gtk2/PLIST 1.8
Module Name: pkgsrc
Committed By: taya
Date: Fri Mar 25 14:43:46 UTC 2005
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST distinfo
pkgsrc/mail/thunderbird-gtk2: PLIST
Log Message:
Update thunderbird & thunderbird-gtk2 to 1.0.2
Thunderbird 1.0.2 is a security and stability update.
Fixed vulnerbilities are follows.
MFSA 2005-30 GIF heap overflow parsing Netscape extension 2
MFSA 2005-25 Image drag and drop executable spoofing
MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice
MFSA 2005-18 Memory overwrite in string library
MFSA 2005-17 Install source spoofing with user:pass@host
MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion
Update thunderbird & thunderbird-gtk2 to 1.0.2 Thunderbird 1.0.2 is a security and stability update. Fixed vulnerbilities are follows. MFSA 2005-30 GIF heap overflow parsing Netscape extension 2 MFSA 2005-25 Image drag and drop executable spoofing MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice MFSA 2005-18 Memory overwrite in string library MFSA 2005-17 Install source spoofing with user:pass@host MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion
Update thunderbird & thunderbird-gtk2 to 1.0 Here are some of the new features to look for in Thunderbird: * Adaptive Junk Mail Controls * RSS Integration * Saved Search Folders Saved Search Folders display messages based on previously set search criteria. For example, instead of filtering messages into a new folder, you can create a Saved Search Folder that lists all the messages received from a certain person over the past 30 days, even if those messages are stored in different folders and subfolders. * Global Inbox Support POP3 users can now combine all of their POP3 accounts into a single global inbox under local folders. * Message Grouping You can now group messages in a folder by attributes such as date, sender, priority or a custom label. For instance, a folder grouped by date will group messages from today, yesterday, last week, etc. into self-contained groups in the message list pane. (View > Sort By > Grouped By Sort) * Privacy Protection In order to help protect your privacy, Thunderbird now automatically blocks remote image requests in emails from senders you don't know. * Comprehensive Mail Migration from other Mail Clients Switching to Thunderbird has never been easier since Thunderbird can now migrate all of your email data including settings, mail folders and address book data from common mail applications such as the Mozilla 1.x Suite, Outlook Express, Outlook and Eudora.
1)Generate extension directory at installation time. 2)sync patches from www/mozilla. - update patch-ab from commit log >> date: 2004/08/31 02:37:57; author: danw; state: Exp; lines: +13 -6 >> darwin fixes (tested against firefox-gtk2) - update patch-ac - update patch-bx - add patch-bz - add patch-ca - add patch-cb from commit log >> date: 2004/07/07 09:08:31; author: aymeric; state: Exp; lines: +14 -7 >> . on PowerPC, update files so that Mozilla works properly when compiled with >> gcc version 3+. >> . generally reduce diffs to Linux version >> . retain compatibility with older ABI (AIX-like) thanks to useful comments >> from Charles Hannum >> >> Thanks to Matthew Green for the fruitful discussion. This should address >> PR#23240 as far as mozilla is concerned. - remove patch-bn enable HAVE_SOCKLEN_T - update patch-br from commit log >> date: 2004/10/04 11:52:45; author: grant; state: Exp; lines: +10 -6 >> bring across a patch in Firefox for using thread-safe resolver library >> functions on NetBSD >=2.0F. - update patch-cc make mozilla work on NetBSD-current/alpha 3)bump PKGREVISION
Pullup ticket 157 - requested by Havard Eidnes
security fix for thunderbird and thunderbird-gtk2
Module Name: pkgsrc
Committed By: kristerw
Date: Thu Nov 4 20:06:34 UTC 2004
Modified Files:
pkgsrc/mail/thunderbird: distinfo
pkgsrc/mail/thunderbird/patches: patch-bt
Log Message:
Use __va_copy instead of va_copy for NetBSD. This is needed on gcc 3.4=
since the build use -ansi that in turn makes gcc 3.4 modify its pre-
defined symbols in such a way that va_copy is not defined.
---
Module Name: pkgsrc
Committed By: taya
Date: Sun Nov 14 23:38:20 UTC 2004
Modified Files:
pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST dist=
info
pkgsrc/mail/thunderbird-gtk2: PLIST
Log Message:
Update thunderbird & thunderbird-gtk2 to 0.9
Here are the highlights for this Thunderbird release:
* Saved Search Folders
- Saved Search Folders display messages based on previously set search
criteria. For example, instead of filtering messages into a new
folder, you could create a Saved Search Folder that lists all the
messages received from a certain person over the past 30 days, even if
those messages are stored in different folders and subfolders.
* Message Grouping
- You can now group messages in a folder by attributes such as date,
sender, priority or a custom label. For instance, a folder grouped by
date will group messages from today, yesterday, last week, etc. into
self-contained groups in the message list pane. (View > Sort By >
Grouped By Sort)
* Other New Features
- Messages with attachments now get marked as such in the message list
pane immediately and not when the message is displayed.
- Improvements to Thunderbird's Global Inbox support for POP3 users.
- The new quick search bar introduced in 0.8 now features a clear
button when search text is present inside the quick search box.
- Fixed a regression introduced in 0.8 where a user could not change
the local folder path in the Account Manager.
- Improved offline support including fixes for common offline-related
problems.
- Improved privacy controls block remote content in e-mail messages
from senders not in your address book.
- Long file attachment names are no longer truncated in the message
pane.
- Bug fixes too numerous to mention!
Update thunderbird & thunderbird-gtk2 to 0.9 Here are the highlights for this Thunderbird release: * Saved Search Folders - Saved Search Folders display messages based on previously set search criteria. For example, instead of filtering messages into a new folder, you could create a Saved Search Folder that lists all the messages received from a certain person over the past 30 days, even if those messages are stored in different folders and subfolders. * Message Grouping - You can now group messages in a folder by attributes such as date, sender, priority or a custom label. For instance, a folder grouped by date will group messages from today, yesterday, last week, etc. into self-contained groups in the message list pane. (View > Sort By > Grouped By Sort) * Other New Features - Messages with attachments now get marked as such in the message list pane immediately and not when the message is displayed. - Improvements to Thunderbird's Global Inbox support for POP3 users. - The new quick search bar introduced in 0.8 now features a clear button when search text is present inside the quick search box. - Fixed a regression introduced in 0.8 where a user could not change the local folder path in the Account Manager. - Improved offline support including fixes for common offline-related problems. - Improved privacy controls block remote content in e-mail messages from senders not in your address book. - Long file attachment names are no longer truncated in the message pane. - Bug fixes too numerous to mention!
Update thunderbird & thunderbird-gtk2 to 0.8 What's new from Release Notes: * Global Inbox POP3 users can now combine all of their POP3 accounts into a single global inbox under local folders. * Comprehensive Data Migration Switching to Thunderbird has never been easier since Thunderbird can now migrate all of your e-mail data including settings, mail folders and address book data from common mail applications such as the Mozilla 1.x Suite, Outlook Express, Outlook and Eudora. * RSS Integration Thunderbird now features a built in RSS reader which allows you to easily subscribe to and read news and weblogs that support RSS. * Improved Privacy Controls In order to help protect your privacy, Thunderbird now automatically blocks remote image requests in e-mails from senders you don't know. * Improved Quick Search Thunderbird now makes it even easier to manage your e-mail. Quick search now supports many different types of search criteria including the ability to search message body text. Thunderbird can also highlight the quick search terms in the message body. * Other New Features Support for using a master password to encrypt saved e-mail account passwords. Linux GNOME users can now make Thunderbird their default e-mail client (Tools > Options > General). If your network uses proxy authentication for HTTP, Thunderbird now correctly prompts for proxy authentication instead of silently failing. Bug fixes too numerous to mention! --- Several security holes have been fixed. See the page bellow for detail. http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
Update thunderbird & thunderbird-gtk2 to 0.7.3 thunderbird 0.7.3 is a security fix release. Fixed bugs are: - lock icon and certificate spoof with onunload document.write (Bugzilla#253121) - Malicious certificates can permanently break HTTPS/SSL (Bugzilla#249004) See the page below. http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.2