Security:
- Solved data URL issue described in Secunia Advisory SA13818,
http://secunia.com/advisories/13818/
- Additional fixes for frame injection issue reported in
Secunia Advisory SA13253,
http://secunia.com/advisories/13253/
Miscellaneous:
- Improvements to handling of the must-revalidate directive.
- Solved stability issue in Japanese version.
UNIX specific:
- Added extra warning dialog when opening .sh, .desktop or
executables directly from Web or from transfer manager with
kfmclient exec. Addresses issue reported in Secunia Advisory
SA13447, http://secunia.com/advisories/13447/
- Fixed crash when importing e-mail.
http://www.opera.com/linux/changelogs/754u2/
- Few other small cleans up.
- Let's see if Realplayer plugins will work for anyone. It's not tested, but
added support. I am not going to be surpised if the support is limited as
common in the Linux world.
little bit and allows to proceed to a more recent linux_base from
a stable (read as: the major bugs should be ironed out or identified
and most linux ports build just fine) source.
It also allows to ship 4.11 with a working linuxolator (the EOLed
linux_base is marked forbidden because of a security hole).
This is a major update, please read UPDATING (and CHANGES if you
develop linux ports).
Changes:
- change the default linux_base from v7 to v8
- add a newer freetype to linux_base-8 for nicer fonts display [1]
- don't let cpio use hardlinks in the linux_base-8 port to quiet some
warnings in some cases [2]
- fix a cut&past error in the linux_base-8 pkg-install script [3]
- convert the binary knob "USE_LINUX" to a version specifier, e.g.
USE_LINUX=<value> specifies a dependency upon
emulators/linux_base-<value>, exceptions are a value of "7" (which
does what you want and adds a dependency to linux_base) and any
value without a corresponding port in
PORTSDIR/emulators/linux_base-<value> (which adds a dependency to
the default linux_base)
- don't implicitly add USE_LINUX with the USE_LINUX_PREFIX knob,
this allows us to use the USE_LINUX_PREFIX knob for linux_base and
paves the way for splitting up future linux base ports into
individual pieces
- remove RESTRICTED from some GPL licensed ports, even when we only
distribute binaries, we get them from official linux sites, so
anyone can grab them there if he needs to
- add a dependency upon the linux X11 bits where necessary (based upon
guesswork)
- don't use USE_X_PREFIX in some linux ports since it adds a dependency
to the FreeBSD X11 libs, as a workaround use PREFIX?= (the clean
solution would be to remove the implicit USE_XLIB from USE_X_PREFIX)
- bump the portrevision of the linux ports ("better safe than sorry"
algorithm)
- pass maintainership of the important linux infrastructure to a
mailinglist, hijack freebsd-emulation@ for this purpose (if somebody
doesn't like this: tell us your bikeshed color at freebsd-emulation@,
my color would be "linuxolator@" in case someone cares...)
- add a pkg-install script for linux-fontconfig, but don't use it;
everything should work without it (the FreeBSD fc-cache program should
do all the work), but in case we need it we just need to decomment the
pkg-install part in the Makefile
- fix some dependencies
- fix some bugs
- add some static plists
- unbreak the ports with dependecies to more than one linux_base
This also fixes some ports which are marked BROKEN because of dependencies
to v7 and v8 of linux_base at the same time.
Known bugs:
- the linux-mesa and linux-devtools ports install libGL*.so symlinks
- some "minor" plist bugs (e.g. ld.so.{conf,cache} are modified by
the linux X11 port, so linx_Base-8 moans at deinstall time)
Future work (interested souls should coordinate with freebsd-emulation@):
- add some kind of USE_LINUX_X11 knob to streamline the X11 dependencies,
or modify the behavior of USE_XLIB in the USE_LINUX case
AFAIK trevor has some patches.
- make USE_XLIB and USE_X_PREFIX orthogonal to be able to get rid of
the PREFIX?= workaround in some linux ports
Should be discussed/coordinated on/with x11@.
- move the RPM bits from x11-toolkits/linux-gtk/Makefile to PORTSDIR/Mk/
- update to a more recent linux base
PR: 69997, 70539 (and maybe others)
Discussed with/on: java@, x11@, trevor, portmgr
Tested by: mezz, portmgr, pointyhat
RPM hunted down by: Joseph Gelinas <scirocco@tasam.com> [1]
Requested by: portmgr [2]
Submitted by: kris [3]
Approved by: portmgr
security fixes:
Severity: Moderate/high
========================
- Tightened origin check for frames. A side effect of this is that
documents not passing the origin check will open in a new page.
- Fixed issue reported by Marc Schonefeld: intrusive JavaScript or
Java applet could exploit Sun Java vulnerability to retrieve
logged-in user's username and install directory.
- Fixed LiveConnect class access security issue reported by Jouko
Pynnonen.
- Fixed Secunia issue SA12981, reported by Andreas Sandblad: periods
in the file name and non-breaking spaces in content-type header type
could obscure the file type.
- Fixed Secunia issue SA13253: "hi-jacking" a named browser window.
- Improved support for the "must-revalidate" cache directive.
More details: http://www.opera.com/support/search/supsearch.dml?index=782
broke, I get no respone from the maintainer since Oct 22, 2004. The
www/linux-opera works fine with new linux-openmotif. Also, bump PORTREVISION.
To fix or update for biology/spdbv is welcome, I shall commit them if I get
patch(es) in my Inbox.
www/opera:
- The maintainer has asked me to babysitting this while he's away for
vacation. He is gone for about five weeks started last Thursday.
- Some tweak with the plugins, I have added jdk13 and jdk14 support
but I have no idea if they will work since I don't have any FreeBSD
4.x to test. Please let me know if there has any issue.
- Does the spellcheck feature works in FreeBSD 4.x? Please, contract
me on this one too. If it works, then I will need to add a dependency
of aspell with a new WITHOUT_ASPELL knob.
- See the changelog for detail:
http://www.opera.com/freebsd/changelogs/753/
www/linux-opera:
- I didn't update it to 7.52, because it still doesn't fix the security
and the plugins was broke. The 7.53 has solved all of this to allow
me to update it.
- Please read in pkg-message about the changes of search.ini if you
have a custom of it. You will have to edit it or it will not work.
- See the changelog for detail:
7.52 = http://www.opera.com/linux/changelogs/752/
7.53 = http://www.opera.com/linux/changelogs/753/
- Use DOCSDIR.
- Rename everything from opera to linux-opera, no longer in conflict
with www/opera.
- Handle the dependenies better for linux_base(8).
- Handle the better check if GNOME and KDE exist.
- Now, it will auto find flash plug-in by automatic without have to
copy in plugins directory by manual. Finally got it works, really!
Approved by: adamw (mentor)
Note that plugins won't work unless you happen to have a Linux version of
Motif (or OpenMotif) installed; there is no linux-openmotif port (yet) so
you'll have to figure this one out on your own. Once you do, though, both
www/linux-flashplugin and java/linux-jdk13 should work with no further
tweaks (as should any other Netscape-compatible plugin that installs into
${PREFIX}/lib/netscape-linux/plugins). Happy browsing!
