~ubuntu-branches/ubuntu/natty/seamonkey/natty : changes

~ubuntu-branches/ubuntu/natty/seamonkey/natty » Changes from revision 23

From Revision 23 to 4

Rev	Summary	Authors	Tags	Date
23	* New upstream release v2.0.13 (SEAMONKEY_2_0_13_RELEASE) * New upstream release v2.0.13 (SEAMONKEY_2_0_13_RELEASE) * SECURITY UPDATE: MFSA-2011-11: Several fraudulent HTTPS certificates were placed on the certificate blacklist to prevent their misuse. These could allow an attacker to perform a man-in-the-middle attack. (LP: #743348) - http://www.mozilla.org/security/announce/2011/mfsa2011-11.html * SECURITY UPDATE (2.0.12): - http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html#seamonkey2.0.12	Micah Gersten	2.0.13+nobinonly-0ubuntu1	13 years ago
22	* fix LP: #688675 - Seamonkey FTBFS on armel; Add extra "IT"... * fix LP: #688675 - Seamonkey FTBFS on armel; Add extra "IT" lines for conditional code so it will compile on Thumb - add debian/patches/lp688675_arm_it_instruction.patch - update debian/patches/series	Micah Gersten	2.0.11+build1+nobinonly-0ubuntu2	13 years ago
21	* New upstream release v2.0.11 (SEAMONKEY_2_0_11_BUILD1) * New upstream release v2.0.11 (SEAMONKEY_2_0_11_BUILD1) * Drop patch after landing of bmo: 522635 aka RenderBadPicture fatal error closing tab - remove debian/patches/lp575160_destroy_child_windows.patch - update debian/patches/series	Chris Coulson	2.0.11+build1+nobinonly-0ubuntu1	13 years ago
20	* New upstream release v2.0.10 (SEAMONKEY_2_0_10_BUILD1) * New upstream release v2.0.10 (SEAMONKEY_2_0_10_BUILD1) * SECURITY UPDATE: - http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html#seamonkey2.0.10	Chris Coulson	2.0.10+build1+nobinonly-0ubuntu0.10.10.1	13 years ago
19	* New upstream release v2.0.9 (SEAMONKEY_2_0_9_BUILD1) * New upstream release v2.0.9 (SEAMONKEY_2_0_9_BUILD1) * SECURITY UPDATE: - http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html#seamonkey2.0.9 * Bump minimum system NSS to 3.12.8 after landing of (bmo: 600104) aka Bump minimum required version for system NSS to 3.12.8 - update debian/rules * Bump minimum system NSPR to 4.8.6 after landing of (bmo: 567620) aka Bump minimum required version for system NSPR to 4.8.6 - update debian/rules	Chris Coulson	2.0.9+build1+nobinonly-0ubuntu0.10.10.1	13 years ago
18	[ Chris Coulson <chris.coulson@canonical.com> ] [ Chris Coulson <chris.coulson@canonical.com> ] * Fix LP: #646632 - No dictionaries present in Seamonkey. Ship a symlink to the system dictionaries and add the necessary postinst magic to fix current 2.0.8 users - update debian/seamonkey-browser.postinst - update debian/rules - update debian/seamonkey-browser.install [ Mathieu Trudel-Lapierre <mathieu-tl@ubuntu.com> ] * Fix LP: #575160 - Apply patch set from Debian iceape to fix RenderBadPicture errors: properly walk through child windows as a window is destroyed. - update debian/patches/series - add debian/patches/lp575160_destroy_child_windows.patch	Mathieu Trudel-Lapie...	2.0.8+build1+nobinonly-0ubuntu2	13 years ago
17	New upstream release v2.0.8 (SEAMONKEY_2_0_8_BUILD1) New upstream release v2.0.8 (SEAMONKEY_2_0_8_BUILD1)	Chris Coulson	2.0.8+build1+nobinonly-0ubuntu1	13 years ago
16	* New upstream release v2.0.7 (SEAMONKEY_2_0_7_BUILD1) * New upstream release v2.0.7 (SEAMONKEY_2_0_7_BUILD1) * Refresh patches for new upstream version - update debian/patches/seamonkey-fsh.patch * Don't touch $LIBDIR/.autoreg from the seamonkey postinst script. The seamonkey package is just a meta-package, and the file is shipped by seamonkey-browser. Changing this ensures that seamonkey doesn't fail to configure if there is version skew between arch-all and arch-any packages - update debian/rules - remove debian/seamonkey.postinst.in - remove debian/seamonkey.prerm.in * Ensure that the timestamp of $LIBDIR/.autoreg is updated when installing or removing seamonkey-mailnews, to ensure XPCOM component re-registration - add debian/seamonkey-mailnews.postinst.in - add debian/seamonkey-mailnews.prerm.in - update debian/rules * Move the newsblog.js component to seamonkey-mailnews, and add appropriately versioned conflicts/replaces - update debian/seamonkey-browser.install - update debian/seamonkey-mailnews.install - update debian/control	Chris Coulson	2.0.7+build1+nobinonly-0ubuntu1	13 years ago
15	* New upstream release v2.0.6 (SEAMONKEY_2_0_6_BUILD1) * New upstream release v2.0.6 (SEAMONKEY_2_0_6_BUILD1) * Fix LP: #593571 - searching for am-newsblog.xul in the wrong chrome package Install the newsblog.js XPCOM component - update debian/seamonkey-browser.install * Fix some Lintian warnings - update debian/control - add debian/README.source	Chris Coulson	2.0.6+build1+nobinonly-0ubuntu1	13 years ago
14	* New upstream release v2.0.5 (SEAMONKEY_2_0_5_BUILD1) * New upstream release v2.0.5 (SEAMONKEY_2_0_5_BUILD1) * MFSA 2010-25: Re-use of freed object due to scope confusion - CVE-2010-1121 * MFSA 2010-26: Crashes with evidence of memory corruption - CVE-2010-1200 - CVE-2010-1201 - CVE-2010-1202 * MFSA 2010-27: Use-after-free error in nsCycleCollector::MarkRoots() - CVE-2010-0183 * MFSA 2010-28: Freed object reuse across plugin instances - CVE-2010-1198 * MFSA 2010-29: Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal - CVE-2010-1196 * MFSA 2010-30: Integer Overflow in XSLT Node Sorting - CVE-2010-1199 * MFSA 2010-31: focus() behavior can be used to inject or steal keystrokes - CVE-2010-1125 * MFSA 2010-32: Content-Disposition: attachment ignored if Content-Type: multipart also present - CVE-2010-1197 * MFSA 2010-33: User tracking across sites using Math.random() - CVE-2008-5913 * Fix FTBFS on Sparc by disabling jit (LP: #523627) - update debian/rules	Micah Gersten	2.0.5+build1+nobinonly-0ubuntu1	13 years ago
13	* New upstream release v2.0.4 (SEAMONKEY_2_0_4_RELEASE) (LP:... * New upstream release v2.0.4 (SEAMONKEY_2_0_4_RELEASE) (LP: #461864) [ Fabien Tassin <fta@ubuntu.com> ] * Add conditional support for system Cairo, NSS, NSPR - update debian/rules * Update icons from xpm to png - update debian/seamonkey-.{install,links,menu} We no longer need dynamic -lsoftokn, disable NSS_DYNAMIC_SOFTOKN - add debian/patches/no_dynamic_nss_softokn.patch - update debian/patches/series [ Micah Gersten <micahg@ubuntu.com> ] * Use versioned install directory - update debian/rules * Bump minimum versions of system libs; cairo to 1.8.8; NSPR to 4.8; NSS to 3.12.6 - update debian/rules * Update .install files for latest release - update debian/seamonkey-browser.install - update debian/seamonkey-mailnews.install * Refresh patches - update debian/patches/cleaner_dist_clean.patch - update debian/patches/fix_installer.patch - update debian/patches/seamonkey-fsh.patch * Drop cairo FTBFS patch after upstream landing - drop debian/patches/fix_ftbfs_with_cairo_fb.patch - update debian/series * Install gnome components in -browser package so that it works out of the box - update debian/seamonkey-browser.install - update debian/control - update debian/rules * Move mozclient to be in source - add debian/mozclient/compare.mk - add debian/mozclient/seamonkey-remove.binonly.sh - add debian/mozclient/seamonkey.conf - add debian/mozclient/seamonkey.mk - update debian/rules [ Chris Coulson <chris.coulson@canonical.com> ] * Ensure the symlinks are installed correctly. File name expansion doesn't work in the .links files, so call dh_link explicitly in debian/rules instead - drop debian/seamonkey-browser.links - drop debian/seamonkey-mailnews.links - update debian/rules * Only the seamonkey-gnome-support package should have dependencies on GNOME libraries - ensure that seamonkey-browser doesn't have the GNOME components installed when dh_shlibdeps is run - update debian/rules - update debian/seamonkey-browser.install	Micah Gersten	2.0.4+nobinonly-0ubuntu1	14 years ago
12	* New upstream security release: 1.1.17 (LP: #356274) * New upstream security release: 1.1.17 (LP: #356274) - CVE-2009-1841: JavaScript chrome privilege escalation - CVE-2009-1838: Arbitrary code execution using event listeners attached to an element whose owner document is null - CVE-2009-1836: SSL tampering via non-200 responses to proxy CONNECT requests - CVE-2009-1835: Arbitrary domain cookie access by local file: resources - CVE-2009-1392, CVE-2009-1832, CVE-2009-1833: Crashes with evidence of memory corruption (rv:1.9.0.11) - CVE-2009-1311: POST data sent to wrong site when saving web page with embedded frame - CVE-2009-1307: Same-origin violations when Adobe Flash loaded via view-source: scheme - MFSA 2009-33 Crash viewing multipart/alternative message with text/enhanced part * removed debian/patches/90_181_484320_attachment_368977.patch * removed debian/patches/90_181_485217_attachment_369357.patch * removed debian/patches/90_181_485286_attachment_369457.patch - update debian/patches/series	John Vivirito	1.1.17+nobinonly-0ubuntu1	14 years ago
11	* CVE-2009-1044: Arbitrary code execution via XUL tree eleme... * CVE-2009-1044: Arbitrary code execution via XUL tree element - add debian/patches/90_181_484320_attachment_368977.patch - update debian/patches/series * CVE-2009-1169: XSL Transformation vulnerability - add 90_181_485217_attachment_369357.patch - add debian/patches/90_181_485286_attachment_369457.patch	Alexander Sack	1.1.15+nobinonly-0ubuntu2	15 years ago
10	* New security upstream release: 1.1.15 (LP: #309655) * New security upstream release: 1.1.15 (LP: #309655) - CVE-2009-0040: Upgrade PNG library to fix memory safety hazard - CVE-2009-0352: Crashes with evidence of memory corruption (rv:1.9.0.6) - CVE-2009-0357: XMLHttpRequest allows reading HTTPOnly cookies - CVE-2009-0771: Crashes with evidence of memory corruption (rv:1.9.0.7) - CVE-2009-0776: XML data theft via RDFXMLDataSource and cross-domain redirect	John Vivirito	1.1.15+nobinonly-0ubuntu1	15 years ago
9	* New security upstream release: 1.1.13 (LP: #297789) * New security upstream release: 1.1.13 (LP: #297789) - CVE-2008-4582: Information stealing via local shortcut files - CVE-2008-5012: Image stealing via canvas and HTTP redirect - CVE-2008-5013: Arbitrary code execution via Flash Player dynamic module unloading - CVE-2008-5014: Crash and remote code execution via __proto__ tampering - CVE-2008-5017: Browser engine crash - Firefox 2 and 3 - CVE-2008-5018: JavaScript engine crashes - Firefox 2 and 3 - CVE-2008-5019: XSS and JavaScript privilege escalation via session restore - CVE-2008-0017: Buffer overflow in http-index-format parser - CVE-2008-5021: Crash and remote code execution in nsFrameManager - CVE-2008-5022: nsXMLHttpRequest::NotifyEventListeners() same-origin violation - CVE-2008-5023: -moz-binding property bypasses security checks on codebase principals - CVE-2008-5024: Parsing error in E4X default namespace - CVE-NOTASSIGN (MFSA2008-59): Script access to .documentURI and .textContent in mail * re-run autoconf2.13 to update configure patch to changed upstream codebase - update debian/patches/99_configure.patch	Alexander Sack	1.1.13+nobinonly-0ubuntu1	15 years ago
8	* New security upstream release: 1.1.12 (LP: #276437) * New security upstream release: 1.1.12 (LP: #276437) - CVE-2008-4070: Heap overflow when canceling newsgroup message - CVE-2008-4069: XBM image uninitialized memory reading - CVE-2008-4067..4068: resource: traversal vulnerabilities - CVE-2008-4065..4066: BOM characters stripped from JavaScript before execution - CVE-2008-4061..4064: Crashes with evidence of memory corruption - CVE-2008-4058..4060: Privilege escalation via XPCnativeWrapper pollution - CVE-2008-3837: Forced mouse drag - CVE-2008-3835: nsXMLDocument::OnChannelRedirect() same-origin violation - CVE-2008-0016: UTF-8 URL stack buffer overflow	Fabien Tassin	1.1.12+nobinonly-0ubuntu1	15 years ago
7	* New security upstream release: 1.1.11 (LP: #218534) * New security upstream release: 1.1.11 (LP: #218534) Fixes USN-602-1, USN-619-1, USN-623-1 and USN-629-1 * Refresh diverged patch: - update debian/patches/80_security_build.patch * Fix FTBFS with missing -lfontconfig - add debian/patches/11_fix_ftbfs_with_fontconfig.patch - update debian/patches/series * Build with default gcc (hardy: 4.2, intrepid: 4.3) - update debian/rules - update debian/control	Fabien Tassin	1.1.11+nobinonly-0ubuntu1	15 years ago
6	* New security upstream release: 1.1.9 (LP: #207461) * New security upstream release: 1.1.9 (LP: #207461) * Security fixes: - MFSA 2008-19 XUL popup spoofing variant (cross-tab popups) - MFSA 2008-18 Java socket connection to any local port via LiveConnect - MFSA 2008-17 Privacy issue with SSL Client Authentication - MFSA 2008-16 HTTP Referrer spoofing with malformed URLs - MFSA 2008-15 Crashes with evidence of memory corruption - MFSA 2008-14 JavaScript privilege escalation and arbitrary code execution * Drop patches applied upstream: - drop debian/patches/11_bz399589_fix_missing_symbol_with_new_nss.patch - update debian/patches/series * Add missing Ubuntu-specific menu items (LP: #190845) - add debian/patches/85_ubuntu_menu.patch - update debian/patches/series Contributed by Andrea Colangelo <warp10@libero.it>	Fabien Tassin	1.1.9+nobinonly-0ubuntu1	16 years ago
5	* New security upstream release: 1.1.8 * New security upstream release: 1.1.8 * Security fixes: - MFSA 2008-10 URL token stealing via stylesheet redirect - MFSA 2008-09 Mishandling of locally-saved plain text files - MFSA 2008-06 Web browsing history and forward navigation stealing - MFSA 2008-05 Directory traversal via chrome: URI - MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution - MFSA 2008-02 Multiple file input focus stealing vulnerabilities - MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12) * Drop unwanted patches: - drop debian/patches/82_homepage.patch - drop debian/patches/85_about.patch - drop debian/patches/85_release_notes.patch - update debian/patches/series * Update diverged patch: - update debian/patches/99_configure.patch	Fabien Tassin	1.1.8+nobinonly-0ubuntu1	16 years ago
4	* bump Standards-Version to 3.7.3 * bump Standards-Version to 3.7.3 - update debian/control * Add comments to patches lacking one - update debian/patches/11_bz399589_fix_missing_symbol_with_new_nss.patch - update debian/patches/12_fix_ftbfs_with_nss.patch * Drop extensions from icons in the .desktop files - update debian/menu_dir/.desktop Drop Uploaders: field as it doesn't mean anything for Ubuntu - update debian/control * Reference the specific versions of the GPL and LGPL - update debian/copyright * Add get-orig-source and get-current-source to respectively fetch and repack a newer tarball or the current tarball needed to build this version of the package - update debian/rules * Update 'section' of all menu files to be compliant with Debian Menu System - update debian/*.menu	Fabien Tassin	1.1.7+nobinonly-0ubuntu2	16 years ago

Older »