MozillaFirefox/firefox-esr.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Tue, 29 Apr 2014 23:40:58 +0200
branchesr24
changeset 729 aa4b2ebc0785
parent 728 6820714d53f4
child 743 d43937f702f4
permissions -rw-r--r--
changelogs
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
674
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
     1
-------------------------------------------------------------------
728
6820714d53f4 update to 24.5.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 713
diff changeset
     2
Fri Apr 25 08:25:17 UTC 2014 - wr@rosenauer.org
6820714d53f4 update to 24.5.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 713
diff changeset
     3
6820714d53f4 update to 24.5.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 713
diff changeset
     4
- update to Firefox 24.5.0 (bnc#875378)
729
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
     5
  * MFSA 2014-34/CVE-2014-1518
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
     6
    Miscellaneous memory safety hazards
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
     7
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
     8
    Out of bounds read while decoding JPG images
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
     9
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    10
    Buffer overflow when using non-XBL object as XBL
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    11
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    12
    Privilege escalation through Web Notification API
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    13
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    14
    Cross-site scripting (XSS) using history navigations
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    15
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    16
    Use-after-free in imgLoader while resizing images
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    17
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
aa4b2ebc0785 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 728
diff changeset
    18
    Use-after-free in nsHostResolver
728
6820714d53f4 update to 24.5.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 713
diff changeset
    19
6820714d53f4 update to 24.5.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 713
diff changeset
    20
-------------------------------------------------------------------
713
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    21
Sun Mar 16 17:28:25 UTC 2014 - wr@rosenauer.org
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    22
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    23
- update to Firefox 24.4.0 (bnc#868603)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    24
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    25
    Miscellaneous memory safety hazards
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    26
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    27
    Out of bounds read during WAV file decoding
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    28
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    29
    Information disclosure through polygon rendering in MathML
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    30
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    31
    Memory corruption in Cairo during PDF font rendering
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    32
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    33
    SVG filters information disclosure through feDisplacementMap
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    34
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    35
    Privilege escalation using WebIDL-implemented APIs
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    36
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    37
    Use-after-free in TypeObject
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    38
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    39
    Out-of-bounds read/write through neutering ArrayBuffer objects
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    40
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    41
    Out-of-bounds write through TypedArrayObject after neutering
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    42
3c7719dfcafa update to 24.4.0esr
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 706
diff changeset
    43
-------------------------------------------------------------------
706
4639b5ad4fce Google API key inclusion
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 702
diff changeset
    44
Sun Feb 23 11:59:59 UTC 2014 - wr@rosenauer.org
4639b5ad4fce Google API key inclusion
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 702
diff changeset
    45
4639b5ad4fce Google API key inclusion
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 702
diff changeset
    46
- incorporate Google API key for geolocation (bnc#864170)
4639b5ad4fce Google API key inclusion
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 702
diff changeset
    47
4639b5ad4fce Google API key inclusion
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 702
diff changeset
    48
-------------------------------------------------------------------
702
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    49
Thu Jan 30 21:21:09 UTC 2014 - wr@rosenauer.org
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    50
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    51
- update to Firefox 24.3.0esr (bnc#861847)
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    52
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    53
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    54
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    55
    Clone protected content with XBL scopes
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    56
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    57
    Incorrect use of discarded images by RasterImage
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    58
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    59
    Use-after-free with imgRequestProxy and image proccessing
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    60
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    61
    Cross-origin information leak through web workers
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    62
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    63
    (bmo#934545, bmo#930874, bmo#930857)
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    64
    NSS ticket handling issues
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    65
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    66
    Inconsistent JavaScript handling of access to Window objects
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    67
- requires NSS 3.15.4
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    68
5561a483919b 24.3.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 690
diff changeset
    69
-------------------------------------------------------------------
687
8d64394d1c0c 24.2.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 684
diff changeset
    70
Sat Dec  7 17:30:18 UTC 2013 - wr@rosenauer.org
8d64394d1c0c 24.2.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 684
diff changeset
    71
690
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    72
- update to Firefox 24.2.0esr (bnc#854367, bnc#854370)
687
8d64394d1c0c 24.2.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 684
diff changeset
    73
  * requires NSPR 4.10.2 and NSS 3.15.3.1 or higher
690
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    74
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    75
    Miscellaneous memory safety hazards
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    76
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    77
    Use-after-free in event listeners
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    78
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    79
    Use-after-free during Table Editing
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    80
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    81
    Segmentation violation when replacing ordered list elements
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    82
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    83
    Trust settings for built-in roots ignored during EV certificate
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    84
    validation
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    85
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    86
    Use-after-free in synthetic mouse movement
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    87
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    88
    GetElementIC typed array stubs can be generated outside observed
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    89
    typesets
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    90
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    91
    JPEG information leak
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    92
  * MFSA 2013-117 (bmo#946351)
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    93
    Mis-issued ANSSI/DCSSI certificate
9291d123ef2b changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 687
diff changeset
    94
    (fixed via NSS 3.15.3.1)
687
8d64394d1c0c 24.2.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 684
diff changeset
    95
8d64394d1c0c 24.2.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 684
diff changeset
    96
-------------------------------------------------------------------
678
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
    97
Thu Oct 24 16:46:31 UTC 2013 - wr@rosenauer.org
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
    98
684
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
    99
- update to Firefox 24.1.0esr (bnc#847708)
678
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
   100
  * requires NSS 3.15.2 or above
684
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   101
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   102
    Miscellaneous memory safety hazards
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   103
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   104
    Spoofing addressbar through SELECT element
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   105
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   106
    Access violation with XSLT and uninitialized data
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   107
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   108
    Improperly initialized memory and overflows in some JavaScript
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   109
    functions
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   110
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   111
    Writing to cycle collected object during image decoding
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   112
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   113
    Use-after-free when updating offline cache
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   114
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   115
    Security bypass of PDF.js checks using iframes
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   116
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   117
    (bmo#915210, bmo#915576, bmo#916685)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   118
    Miscellaneous use-after-free issues found through ASAN fuzzing
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   119
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   120
    Memory corruption in workers
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   121
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
7627f28354d4 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 678
diff changeset
   122
    Use-after-free in HTML document templates
678
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
   123
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
   124
-------------------------------------------------------------------
674
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   125
Sat Oct  5 18:10:39 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   126
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   127
- renamed package to firefox-esr
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   128
  (by branching off from MozillaFirefox-24.0)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   129
  * switched to mozilla-esr24 branch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   130
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   131
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   132
Tue Sep 24 07:31:30 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   133
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   134
- as GStreamer is not automatically required anymore but loaded
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   135
  dynamically if available, require it explicitely
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   136
- recommend optional GStreamer plugins for comprehensive media
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   137
  support
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   138
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   139
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   140
Mon Sep 16 11:59:18 UTC 2013 - lnussel@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   141
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   142
- move greek to the translations-common package (bnc#840551)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   143
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   144
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   145
Sat Sep 14 14:39:58 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   146
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   147
- update to Firefox 24.0 (bnc#840485)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   148
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   149
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   150
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   151
    Improper state in HTML5 Tree Builder with templates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   152
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   153
    Integer overflow in ANGLE library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   154
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   155
    Use-after-free in Animation Manager during stylesheet cloning
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   156
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   157
    NativeKey continues handling key messages after widget is destroyed
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   158
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   159
    Use-after-free with select element
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   160
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   161
    Calling scope for new Javascript objects can lead to memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   162
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   163
    Uninitialized data in IonMonkey
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   164
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   165
    Compartment mismatch re-attaching XBL-backed nodes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   166
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   167
    Buffer overflow with multi-column, lists, and floats
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   168
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   169
    Memory corruption involving scrolling
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   170
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   171
    User-defined properties on DOM proxies get the wrong "this" object
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   172
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   173
    GC hazard with default compartments and frame chain restoration
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   174
- enable gstreamer explicitely via pref (gecko.js)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   175
- require NSS 3.15.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   176
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   177
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   178
Mon Aug 26 07:35:36 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   179
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   180
- update to Firefox 23.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   181
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   182
    (bmo#901527)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   183
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   184
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   185
Sun Aug  4 18:30:11 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   186
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   187
- update to Firefox 23.0 (bnc#833389)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   188
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   189
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   190
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   191
    Use after free mutating DOM during SetBody
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   192
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   193
    Buffer underflow when generating CRMF requests
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   194
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   195
    Crash during WAV audio file decoding
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   196
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   197
    Document URI misrepresentation and masquerading
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   198
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   199
    CRMF requests allow for code execution and XSS attacks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   200
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   201
    Bypass of XrayWrappers using XBL Scopes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   202
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   203
    Wrong principal used for validating URI for some Javascript
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   204
    components
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   205
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   206
    Same-origin bypass with web workers and XMLHttpRequest
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   207
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   208
    Local Java applets may read contents of local file system
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   209
- requires NSPR 4.10 and NSS 3.15
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   210
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   211
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   212
Wed Jul  3 17:14:35 UTC 2013 - dmueller@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   213
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   214
- fix build on ARM (/-g/ matches /-grecord-switches/)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   215
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   216
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   217
Sat Jun 22 17:48:06 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   218
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   219
- update to Firefox 22.0 (bnc#825935)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   220
  * removed obsolete patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   221
    + mozilla-qcms-ppc.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   222
    + mozilla-gstreamer-760140.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   223
  * GStreamer support does not build on 12.1 anymore (build only
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   224
    on 12.2 and later)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   225
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   226
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   227
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   228
    Memory corruption found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   229
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   230
    Privileged content access and execution via XBL
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   231
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   232
    Arbitrary code execution within Profiler
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   233
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   234
    Execution of unmapped memory through onreadystatechange event
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   235
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   236
    Data in the body of XHR HEAD requests leads to CSRF attacks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   237
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   238
    SVG filters can lead to information disclosure
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   239
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   240
    PreserveWrapper has inconsistent behavior
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   241
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   242
    Sandbox restrictions not applied to nested frame elements
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   243
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   244
    X-Frame-Options ignored when using server push with multi-part
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   245
    responses
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   246
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   247
    XrayWrappers can be bypassed to run user defined methods in a
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   248
    privileged context
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   249
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   250
    getUserMedia permission dialog incorrectly displays location
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   251
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   252
    Homograph domain spoofing in .com, .net and .name
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   253
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   254
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   255
Tue Jun 11 21:06:58 UTC 2013 - dvaleev@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   256
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   257
- Fix qcms altivec include (mozilla-qcms-ppc.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   258
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   259
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   260
Fri May 10 05:25:39 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   261
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   262
- update to Firefox 21.0 (bnc#819204)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   263
  * removed upstreamed patch firefox-712763.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   264
  * removed disabled mozilla-disable-neon-option.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   265
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   266
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   267
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   268
    Privileged access for content level constructor
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   269
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   270
    File input control has access to full path
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   271
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   272
    Use-after-free with video and onresize event
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   273
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   274
    Uninitialized functions in DOMSVGZoomEvent
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   275
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   276
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   277
    Memory corruption found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   278
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   279
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   280
Tue Apr  9 06:41:31 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   281
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   282
- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   283
  (remove mozilla-gstreamer-1.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   284
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   285
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   286
Fri Apr  5 17:04:11 UTC 2013 - schwab@linux-m68k.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   287
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   288
- Explicitly disable WebRTC support on non-x86, the configure script
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   289
  disables it only half-heartedly
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   290
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   291
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   292
Fri Mar 29 22:15:21 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   293
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   294
- update to Firefox 20.0 (bnc#813026)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   295
  * requires NSPR 4.9.5 and NSS 3.14.3
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   296
  * mozilla-webrtc-ppc.patch included upstream
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   297
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   298
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   299
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   300
    Out-of-bounds write in Cairo library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   301
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   302
    WebGL crash with Mesa graphics driver on Linux
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   303
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   304
    Bypass of SOW protections allows cloning of protected nodes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   305
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   306
    Bypass of tab-modal dialog origin disclosure
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   307
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   308
    Cross-site scripting (XSS) using timed history navigations
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   309
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   310
    Memory corruption while rendering grayscale PNG images
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   311
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   312
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   313
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   314
Tue Mar 12 23:08:15 UTC 2013 - dmueller@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   315
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   316
- build fixes for armv7hl:
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   317
  * disable debug build as armv7hl does not have enough memory
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   318
  * disable webrtc on armv7hl as it is non-compiling
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   319
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   320
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   321
Thu Mar  7 19:03:32 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   322
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   323
- update to Firefox 19.0.2 (bnc#808243)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   324
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   325
    Use-after-free in HTML Editor
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   326
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   327
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   328
Thu Feb 28 22:06:36 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   329
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   330
- update to Firefox 19.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   331
  * blocklist updates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   332
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   333
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   334
Sat Feb 16 07:08:55 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   335
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   336
- update to Firefox 19.0 (bnc#804248)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   337
  * MFSA 2013-21/CVE-2013-0783/2013-0784
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   338
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   339
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   340
    Out-of-bounds read in image rendering
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   341
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   342
    Wrapped WebIDL objects can be wrapped again
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   343
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   344
    Web content bypass of COW and SOW security wrappers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   345
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   346
    Privacy leak in JavaScript Workers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   347
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   348
    Use-after-free in nsImageLoadingContent
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   349
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   350
    Phishing on HTTPS connection through malicious proxy
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   351
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   352
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   353
    Use-after-free, out of bounds read, and buffer overflow issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   354
    found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   355
- removed obsolete patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   356
  * mozilla-webrtc.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   357
  * mozilla-gstreamer-803287.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   358
- added patch to fix session restore window order (bmo#712763)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   359
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   360
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   361
Sat Feb  2 08:40:52 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   362
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   363
- update to Firefox 18.0.2
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   364
  * blocklist and CTP updates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   365
  * fixes in JS engine
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   366
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   367
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   368
Wed Jan 16 20:51:55 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   369
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   370
- update to Firefox 18.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   371
  * blocklist updates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   372
  * backed out bmo#677092 (removed patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   373
  * fixed problems involving HTTP proxy transactions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   374
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   375
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   376
Sat Jan 12 17:25:11 UTC 2013 - schwab@linux-m68k.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   377
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   378
- Fix WebRTC to build on powerpc
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   379
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   380
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   381
Sun Jan  6 21:54:18 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   382
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   383
- update to Firefox 18.0 (bnc#796895)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   384
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   385
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   386
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   387
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   388
    Use-after-free and buffer overflow issues found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   389
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   390
    Buffer Overflow in Canvas
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   391
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   392
    URL spoofing in addressbar during page loads
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   393
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   394
    Use-after-free when displaying table with many columns and column groups
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   395
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   396
    Touch events are shared across iframes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   397
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   398
    Crash due to handling of SSL on threads
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   399
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   400
    AutoWrapperChanger fails to keep objects alive during garbage collection
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   401
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   402
    Compartment mismatch with quickstubs returned values
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   403
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   404
    Event manipulation in plugin handler to bypass same-origin policy
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   405
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   406
    Address space layout leaked in XBL objects
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   407
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   408
    Buffer overflow in Javascript string concatenation
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   409
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   410
    Memory corruption in XBL with XML bindings containing SVG
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   411
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   412
    Chrome Object Wrapper (COW) bypass through changing prototype
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   413
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   414
    Privilege escalation through plugin objects
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   415
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   416
    Use-after-free in serializeToStream
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   417
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   418
    Use-after-free in ListenerManager
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   419
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   420
    Use-after-free in Vibrate
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   421
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   422
    Use-after-free in Javascript Proxy objects
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   423
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   424
- removed obsolete SLE11 patches (mozilla-gcc43*)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   425
- reenable WebRTC
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   426
- added mozilla-libproxy-compat.patch for libproxy API compat
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   427
  on openSUSE 11.2 and earlier
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   428
- backed out restartless language packs as it broke multi-locale
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   429
  setup (bmo#677092, bmo#818468)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   430
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   431
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   432
Thu Nov 29 19:56:51 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   433
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   434
- update to Firefox 17.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   435
  * revert some useragent changes introduced in 17.0
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   436
  * leaving private browsing with social enabled doesn't reset all
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   437
    social components (bmo#815042)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   438
- fix KDE integration for file dialogs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   439
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   440
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   441
Tue Nov 20 19:52:02 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   442
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   443
- update to Firefox 17.0 (bnc#790140)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   444
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   445
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   446
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   447
    Buffer overflow while rendering GIF images
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   448
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   449
    evalInSanbox location context incorrectly applied
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   450
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   451
    Crash when combining SVG text on path with CSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   452
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   453
    Javascript: URLs run in privileged context on New Tab page
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   454
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   455
    Memory corruption in str_unescape
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   456
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   457
    XMLHttpRequest inherits incorrect principal within sandbox
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   458
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   459
    XrayWrappers exposes chrome-only properties when not in chrome
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   460
    compartment
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   461
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   462
    Improper security filtering for cross-origin wrappers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   463
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   464
    Improper character decoding in HZ-GB-2312 charset
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   465
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   466
    Script entered into Developer Toolbar runs with chrome privileges
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   467
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   468
    Frames can shadow top.location
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   469
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   470
    CSS and HTML injection through Style Inspector
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   471
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   472
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   473
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   474
    Use-after-free and buffer overflow issues found using Address
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   475
    Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   476
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   477
    Use-after-free, buffer overflow, and memory corruption issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   478
    found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   479
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   480
- disabled WebRTC since build is broken (bmo#776877)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   481
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   482
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   483
Tue Nov 20 15:42:55 UTC 2012 - pcerny@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   484
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   485
- build on SLE11
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   486
  * mozilla-gcc43-enums.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   487
  * mozilla-gcc43-template_hacks.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   488
  * mozilla-gcc43-templates_instantiation.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   489
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   490
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   491
Wed Oct 24 08:27:29 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   492
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   493
- update to Firefox 16.0.2 (bnc#786522)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   494
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   495
    (bmo#800666, bmo#793121, bmo#802557)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   496
    Fixes for Location object issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   497
- bring back Obsoletes for libproxy's mozjs plugin for distributions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   498
  before 12.2 to avoid crashes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   499
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   500
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   501
Thu Oct 11 01:51:16 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   502
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   503
- update to Firefox 16.0.1 (bnc#783533)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   504
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   505
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   506
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   507
    defaultValue security checks not applied
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   508
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   509
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   510
Sun Oct  7 21:40:14 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   511
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   512
- update to Firefox 16.0 (bnc#783533)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   513
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   514
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   515
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   516
    select element persistance allows for attacks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   517
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   518
    Continued access to initial origin after setting document.domain
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   519
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   520
    Some DOMWindowUtils methods bypass security checks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   521
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   522
    DOS and crash with full screen and history navigation
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   523
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   524
    Crash with invalid cast when using instanceof operator
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   525
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   526
    GetProperty function can bypass security checks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   527
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   528
    top object and location property accessible by plugins
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   529
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   530
    Chrome Object Wrapper (COW) does not disallow acces to privileged
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   531
    functions or properties
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   532
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   533
    Spoofing and script injection through location.hash
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   534
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   535
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   536
    Use-after-free, buffer overflow, and out of bounds read issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   537
    found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   538
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   539
    CVE-2012-4188
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   540
    Heap memory corruption issues found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   541
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   542
    Use-after-free in the IME State Manager
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   543
- requires NSPR 4.9.2
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   544
- improve GStreamer integration (bmo#760140)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   545
- removed upstreamed mozilla-crashreporter-restart-args.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   546
- webapprt now included
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   547
- use kmozillahelper's new REVEAL command (bnc#777415)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   548
  (requires mozilla-kde4-integration >= 0.6.4)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   549
- updated translations-other with new languages
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   550
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   551
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   552
Mon Sep 10 19:37:56 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   553
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   554
- update to Firefox 15.0.1 (bnc#779936)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   555
  * Sites visited while in Private Browsing mode could be found
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   556
    through manual browser cache inspection (bmo#787743)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   557
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   558
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   559
Sun Aug 26 13:47:43 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   560
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   561
- update to Firefox 15.0 (bnc#777588)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   562
  * MFSA 2012-57/CVE-2012-1970
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   563
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   564
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   565
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   566
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   567
    Use-after-free issues found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   568
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   569
    Location object can be shadowed using Object.defineProperty
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   570
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   571
    Escalation of privilege through about:newtab
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   572
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   573
    Memory corruption with bitmap format images with negative height
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   574
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   575
    WebGL use-after-free and memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   576
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   577
    SVG buffer overflow and use-after-free issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   578
  * MFSA 2012-64/CVE-2012-3971
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   579
    Graphite 2 memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   580
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   581
    Out-of-bounds read in format-number in XSLT
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   582
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   583
    HTTPMonitor extension allows for remote debugging without explicit
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   584
    activation
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   585
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   586
    DOMParser loads linked resources in extensions when parsing
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   587
    text/html
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   588
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   589
    Incorrect site SSL certificate data display
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   590
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   591
    Location object security checks bypassed by chrome code
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   592
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   593
    Web console eval capable of executing chrome-privileged code
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   594
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   595
- GStreamer is only used for MP4 (no WebM, OGG)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   596
- updated filelist
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   597
- moved browser specific preferences to correct location
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   598
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   599
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   600
Sun Jul 29 08:34:39 UTC 2012 - aj@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   601
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   602
- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   603
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   604
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   605
Sat Jul 14 19:31:51 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   606
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   607
- update to 14.0.1 (bnc#771583)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   608
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   609
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   610
  * MFSA 2012-43/CVE-2012-1950
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   611
    Incorrect URL displayed in addressbar through drag and drop
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   612
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   613
    Gecko memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   614
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   615
    Spoofing issue with location
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   616
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   617
    XSS through data: URLs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   618
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   619
    Improper filtering of javascript in HTML feed-view
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   620
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   621
    use-after-free in nsGlobalWindow::PageHidden
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   622
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   623
    Same-compartment Security Wrappers can be bypassed
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   624
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   625
    Out of bounds read in QCMS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   626
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   627
    X-Frame-Options header ignored when duplicated
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   628
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   629
    JSDependentString::undepend string conversion results in memory
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   630
    corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   631
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   632
    Content Security Policy 1.0 implementation errors cause data
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   633
    leakage
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   634
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   635
    feed: URLs with an innerURI inherit security context of page
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   636
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   637
    Code execution through javascript: URLs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   638
- license change from tri license to MPL-2.0
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   639
- fix crashreporter restart option (bmo#762780)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   640
- require NSS 3.13.5
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   641
- remove mozjs pacrunner obsoletes again for now
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   642
- adopted mozilla-prefer_plugin_pref.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   643
- PPC fixes:
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   644
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   645
  * add patches for bmo#750620 and bmo#746112
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   646
  * fix xpcshell segfault on ppc
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   647
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   648
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   649
Fri Jun 15 12:37:09 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   650
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   651
- update to Firefox 13.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   652
  * bugfix release
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   653
- obsolete libproxy's mozjs pacrunner (bnc#759123)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   654
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   655
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   656
Sat Jun  2 08:22:51 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   657
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   658
- update to Firefox 13.0 (bnc#765204)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   659
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   660
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   661
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   662
    Content Security Policy inline-script bypass
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   663
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   664
    Information disclosure though Windows file shares and shortcut
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   665
    files
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   666
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   667
    Use-after-free while replacing/inserting a node in a document
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   668
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   669
    Buffer overflow and use-after-free issues found using Address
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   670
    Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   671
- require NSS 3.13.4
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   672
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   673
- fix sound notifications when filename/path contains a whitespace
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   674
  (bmo#749739)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   675
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   676
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   677
Wed May 23 14:40:16 UTC 2012 - adrian@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   678
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   679
- fix build on arm
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   680
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   681
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   682
Wed May 16 05:34:01 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   683
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   684
- reenabled crashreporter for Factory/12.2
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   685
  (fix in mozilla-gcc47.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   686
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   687
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   688
Sat Apr 21 10:02:37 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   689
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   690
- update to Firefox 12.0 (bnc#758408)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   691
  * rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   692
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   693
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   694
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   695
    use-after-free in IDBKeyRange
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   696
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   697
    Invalid frees causes heap corruption in gfxImageSurface
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   698
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   699
    Potential XSS via multibyte content processing errors
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   700
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   701
    Potential memory corruption during font rendering using cairo-dwrite
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   702
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   703
    WebGL.drawElements may read illegal video memory due to
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   704
    FindMaxUshortElement error
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   705
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   706
    Page load short-circuit can lead to XSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   707
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   708
    Ambiguous IPv6 in Origin headers may bypass webserver access
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   709
    restrictions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   710
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   711
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   712
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   713
    Crash with WebGL content using textImage2D
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   714
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   715
    Off-by-one error in OpenType Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   716
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   717
    HTTP Redirections and remote content can be read by javascript errors
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   718
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   719
    Potential site identity spoofing when loading RSS and Atom feeds
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   720
- added mozilla-libnotify.patch to allow fallback from libnotify
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   721
  to xul based events if no notification-daemon is running
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   722
- gcc 4.7 fixes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   723
  * mozilla-gcc47.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   724
  * disabled crashreporter temporarily for Factory
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   725
- recommend libcanberra0 for proper sound notifications
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   726
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   727
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   728
Fri Mar  9 21:47:07 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   729
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   730
- update to Firefox 11.0 (bnc#750044)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   731
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   732
    XSS with Drag and Drop and Javascript: URL
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   733
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   734
    SVG issues found with Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   735
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   736
    XSS with multiple Content Security Policy headers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   737
  * MFSA 2012-16/CVE-2012-0458
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   738
    Escalation of privilege with Javascript: URL as home page
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   739
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   740
    Crash when accessing keyframe cssText after dynamic modification
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   741
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   742
    window.fullScreen writeable by untrusted content
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   743
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   744
    CVE-2012-0463
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   745
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   746
- ported and reenabled KDE integration (bnc#746591)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   747
- explicitely build-require X libs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   748
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   749
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   750
Mon Mar  5 13:31:48 UTC 2012 - vdziewiecki@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   751
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   752
- add Provides: browser(npapi) FATE#313084
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   753
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   754
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   755
Fri Feb 17 17:41:11 UTC 2012 - pcerny@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   756
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   757
- better plugin directory resolution (bnc#747320)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   758
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   759
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   760
Thu Feb 16 08:47:31 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   761
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   762
- update to Firefox 10.0.2 (bnc#747328)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   763
  * CVE-2011-3026 (bmo#727401)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   764
    libpng: integer overflow leading to heap-buffer overflow
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   765
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   766
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   767
Thu Feb  9 09:26:11 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   768
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   769
- update to Firefox 10.0.1 (bnc#746616)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   770
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   771
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   772
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   773
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   774
Tue Feb  7 10:40:58 UTC 2012 - dvaleev@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   775
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   776
- Use YARR interpreter instead of PCRE on platforms where YARR JIT
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   777
  is not supported, since PCRE doesnt build (bmo#691898)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   778
- fix ppc64 build (bmo#703534)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   779
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   780
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   781
Mon Jan 30 09:41:59 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   782
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   783
- update to Firefox 10.0 (bnc#744275)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   784
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   785
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   786
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   787
    <iframe> element exposed across domains via name attribute
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   788
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   789
    Child nodes from nsDOMAttribute still accessible after removal
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   790
    of nodes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   791
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   792
    Frame scripts calling into untrusted objects bypass security
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   793
    checks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   794
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   795
    Uninitialized memory appended when encoding icon images may
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   796
    cause information disclosure
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   797
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   798
    Potential Memory Corruption When Decoding Ogg Vorbis files
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   799
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   800
    Crash with malformed embedded XSLT stylesheets
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   801
- KDE integration has been disabled since it needs refactoring
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   802
- removed obsolete ppc64 patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   803
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   804
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   805
Sun Jan 22 12:08:07 UTC 2012 - joop.boonen@opensuse.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   806
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   807
- Disable neon for arm as it doesn't build correctly
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   808
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   809
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   810
Fri Dec 23 17:02:01 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   811
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   812
- update to Firefox 9.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   813
  * (strongparent) parentNode of element gets lost (bmo#335998)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   814
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   815
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   816
Sun Dec 18 09:58:52 UTC 2011 - adrian@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   817
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   818
- fix arm build, don't package crashreporter there
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   819
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   820
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   821
Sun Dec 18 09:52:08 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   822
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   823
- update to Firefox 9 (bnc#737533)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   824
  * MFSA 2011-53/CVE-2011-3660
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   825
    Miscellaneous memory safety hazards (rv:9.0)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   826
  * MFSA 2011-54/CVE-2011-3661 (bmo#691299)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   827
    Potentially exploitable crash in the YARR regular expression
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   828
    library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   829
  * MFSA 2011-55/CVE-2011-3658 (bmo#708186)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   830
    nsSVGValue out-of-bounds access
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   831
  * MFSA 2011-56/CVE-2011-3663 (bmo#704482)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   832
    Key detection without JavaScript via SVG animation
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   833
  * MFSA 2011-58/VE-2011-3665 (bmo#701259)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   834
    Crash scaling <video> to extreme sizes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   835
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   836
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   837
Sun Nov 27 03:51:54 UTC 2011 - mgorse@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   838
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   839
- Fix accessibility under GNOME 3 (bnc#732898)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   840
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   841
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   842
Sat Nov 12 15:16:38 UTC 2011 - dvaleev@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   843
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   844
- fix ppc64 build
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   845
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   846
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   847
Sun Nov  6 08:20:59 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   848
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   849
- update to Firefox 8 (bnc#728520)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   850
  * MFSA 2011-47/CVE-2011-3648 (bmo#690225)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   851
    Potential XSS against sites using Shift-JIS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   852
  * MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   853
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   854
  * MFSA 2011-49/CVE-2011-3650 (bmo#674776)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   855
    Memory corruption while profiling using Firebug
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   856
  * MFSA 2011-52/CVE-2011-3655 (bmo#672182)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   857
    Code execution via NoWaiverWrapper
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   858
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   859
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   860
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   861
Thu Oct 20 12:34:47 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   862
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   863
- enable telemetry prompt
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   864
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   865
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   866
Fri Sep 30 10:52:36 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   867
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   868
- update to minor release 7.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   869
  * fixed staged addon updates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   870
- set intl.locale.matchOS=true in the base package as it causes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   871
  too much confusion when it's only available with branding-openSUSE
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   872
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   873
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   874
Fri Sep 23 11:22:22 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   875
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   876
- update to Firefox 7 (bnc#720264)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   877
  including
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   878
  * Improve Responsiveness with Memory Reductions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   879
  * Instant Sync
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   880
  * WebSocket protocol 8
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   881
  * MFSA 2011-36/CVE-2011-2995/CVE-2011-2996/CVE-2011-2997
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   882
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   883
  * MFSA 2011-39/CVE-2011-3000 (bmo#655389)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   884
    Defense against multiple Location headers due to CRLF Injection
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   885
  * MFSA 2011-40/CVE-2011-2372/CVE-2011-3001
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   886
    Code installation through holding down Enter
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   887
  * MFSA 2011-41/CVE-2011-3002/CVE-2011-3003 (bmo#680840, bmo#682335)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   888
    Potentially exploitable WebGL crashes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   889
  * MFSA 2011-42/CVE-2011-3232 (bmo#653672)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   890
    Potentially exploitable crash in the YARR regular expression
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   891
    library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   892
  * MFSA 2011-43/CVE-2011-3004 (bmo#653926)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   893
    loadSubScript unwraps XPCNativeWrapper scope parameter
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   894
  * MFSA 2011-44/CVE-2011-3005 (bmo#675747)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   895
    Use after free reading OGG headers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   896
  * MFSA 2011-45
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   897
    Inferring keystrokes from motion data
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   898
- removed obsolete mozilla-cairo-lcd.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   899
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   900
- removed XLIB_SKIP_ARGB_VISUALS=1 from environment in
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   901
  mozilla.sh.in (bnc#680758)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   902
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   903
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   904
Fri Sep 16 06:57:38 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   905
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   906
- fixed loading of kde.js under KDE (bnc#718311)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   907
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   908
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   909
Wed Sep 14 07:02:04 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   910
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   911
- add dbus-1-glib-devel to BuildRequires (not pulled in
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   912
  automatically anymore on 12.1)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   913
- increase minversions for NSPR and NSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   914
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   915
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   916
Fri Sep  9 20:44:15 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   917
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   918
- recreated source archive to get correct source-stamp.txt
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   919
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   920
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   921
Wed Sep  7 14:30:34 UTC 2011 - pcerny@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   922
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   923
- security update to 6.0.2 (bnc#714931)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   924
  * Complete blocking of certificates issued by DigiNotar
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   925
    (bmo#683449)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   926
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   927
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   928
Fri Sep  2 14:40:07 UTC 2011 - pcerny@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   929
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   930
- security update to 6.0.1 (bnc#714931)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   931
  * MFSA 2011-34
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   932
    Protection against fraudulent DigiNotar certificates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   933
    (bmo#682927)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   934
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   935
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   936
Fri Aug 12 21:16:19 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   937
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   938
- update to 6.0 (bnc#712224)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   939
  included security fixes MFSA 2011-29
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   940
  * CVE-2011-2989/CVE-2011-2991/CVE-2011-2992/CVE-2011-2985
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   941
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   942
  * CVE-2011-2993 (bmo#657267)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   943
    Unsigned scripts can call script inside signed JAR
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   944
  * CVE-2011-2988 (bmo#665934)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   945
    Heap overflow in ANGLE library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   946
  * CVE-2011-0084 (bmo#648094)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   947
    Crash in SVGTextElement.getCharNumAtPosition()
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   948
  * CVE-2011-2990
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   949
    Credential leakage using Content Security Policy reports
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   950
  * CVE-2011-2986 (bmo#655836)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   951
    Cross-origin data theft using canvas and Windows D2D
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   952
- removed obsolete curl header dependency (mozilla-curl.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   953
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   954
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   955
Fri Jul 22 13:34:12 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   956
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   957
- update to 6.0b3
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   958
  * removed obsolete patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   959
    - firefox-shellservice.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   960
    - mozilla-gio.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   961
    - mozilla-ppc-ipc.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   962
    - firefox-linkorder.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   963
    - firefox-no-sync-l10n.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   964
- recognize linux3 as platform for symbolstore.py
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   965
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   966
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   967
Fri Jul  1 19:53:18 CEST 2011 - vuntz@opensuse.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   968
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   969
- Add x-scheme-handler/ftp to the MimeType key in the .desktop, to
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   970
  let desktops know that Firefox can deal with ftp: URIs.
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   971
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   972
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   973
Fri Jul  1 06:45:08 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   974
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   975
- create upstream branding package again (supposedly empty)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   976
  (bnc#703401)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   977
- fix build on SLE11 (changes do not affect/are not applied for
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   978
  later versions)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   979
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   980
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   981
Wed Jun 22 06:41:17 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   982
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   983
- enable startup notification (bnc#701465)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   984
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   985
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   986
Mon Jun 20 19:37:01 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   987
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   988
- update to 5.0 final
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   989
- included fixes for security issues: (bnc#701296, bnc#700578)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   990
  * MFSA 2011-19/CVE-2011-2374 CVE-2011-2375
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   991
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   992
  * MFSA 2011-20/CVE-2011-2373 (bmo#617247)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   993
    Use-after-free vulnerability when viewing XUL document with
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   994
    script disabled
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   995
  * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   996
    Memory corruption due to multipart/x-mixed-replace images
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   997
  * MFSA 2011-22/CVE-2011-2371 (bmo#664009)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   998
    Integer overflow and arbitrary code execution in
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   999
    Array.reduceRight()
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1000
  * MFSA 2011-25/CVE-2011-2366
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1001
    Stealing of cross-domain images using WebGL textures
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1002
  * MFSA 2011-26/CVE-2011-2367 CVE-2011-2368
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1003
    Multiple WebGL crashes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1004
  * MFSA 2011-27/CVE-2011-2369 (bmo#650001)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1005
    XSS encoding hazard with inline SVG
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1006
  * MFSA 2011-28/CVE-2011-2370 (bmo#645699)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1007
    Non-whitelisted site can trigger xpinstall
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1008
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1009
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1010
Mon Jun 20 09:17:42 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1011
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1012
- update to 5.0b7
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1013
  * updated supported locales
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1014
- do not build dump_syms static (not needed for us)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1015
  -> fix build for openSUSE 12.1 and above
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1016
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1017
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1018
Wed Jun 15 14:59:32 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1019
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1020
- update to 5.0b6
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1021
- include proper revision information into the build
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1022
- speedier find-external-requires.sh
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1023
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1024
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1025
Tue May 31 06:53:55 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1026
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1027
- update to 5.0b3
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1028
- transformed to standalone Firefox (not xulrunner based)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1029
  (with new Firefox rapid release cycle it makes no sense anymore)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1030
  * imported all relevant xulrunner patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1031
- do not compile in build timestamp
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1032
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1033
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1034
Fri Apr 15 07:08:53 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1035
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1036
- security update to 4.0.1 (bnc#689281)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1037
  * MFSA 2011-12/ CVE-2011-0069 CVE-2011-0070 CVE-2011-0079
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1038
    CVE-2011-0080 CVE-2011-0081
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1039
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1040
  * MFSA 2011-17/CVE-2011-0068 (bmo#623791)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1041
    WebGLES vulnerabilities
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1042
  * MFSA 2011-18/CVE-2011-1202 (bmo#640339)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1043
    XSLT generate-id() function heap address leak
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1044
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1045
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1046
Wed Mar 30 11:24:36 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1047
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1048
- add all available icon sizes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1049
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1050
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1051
Tue Mar 29 11:55:53 UTC 2011 - cfarrell@novell.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1052
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1053
- license update: MPLv1.1 or GPLv2+ or LGPLv2+
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1054
  Sync licenses with Fedora. MPL does not state ^or later^
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1055
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1056
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1057
Fri Mar 18 08:49:15 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1058
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1059
- update to version 4.0rc2
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1060
- fixed rpm macros delivered with devel package (bnc#679950)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1061
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1062
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1063
Wed Feb 23 07:52:04 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1064
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1065
- update to version 4.0b12
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1066
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1067
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1068
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1069
Fri Feb  4 09:32:50 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1070
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1071
- update to version 4.0b11
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1072
  * loads of bugfixes compared to last beta
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1073
  * added "Do Not Track" option
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1074
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1075
- disable testpilot
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1076
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1077
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1078
Fri Jan 28 08:56:12 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1079
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1080
- set correct desktop file name within KDE for 11.4 and up
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1081
- add devel package with macros for extensions (from lnussel@suse.de)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1082
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1083
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1084
Sat Jan 22 22:21:52 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1085
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1086
- update to version 4.0b10
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1087
- removed obsolete firefox-shell-bmo624267.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1088
- testpilot moved to distribution/extensions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1089
- updated locale provides and removed bn-IN from locales
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1090
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1091
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1092
Tue Jan 11 06:13:40 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1093
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1094
- update to version 4.0b9
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1095
- added x-scheme-handler for http and https to desktop file for
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1096
  newer Gnome environments
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1097
- fixed default browser check/set for GIO (bmo#611953)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1098
  (mozilla-shellservice.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1099
- removed obsolete firefox-appname.patch (integrated into
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1100
  shellservice patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1101
- renamed desktop file to firefox.desktop for 11.4 and newer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1102
  (bnc#664211)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1103
- removed support for 10.3 and older from the spec file
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1104
- removed obsolete "Ximian" categories from desktop file
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1105
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1106
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1107
Mon Jan  3 17:35:46 CET 2011 - meissner@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1108
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1109
- Mirror ac_add_options --disable-ipc from xulrunner for PowerPC.
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1110
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1111
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1112
Wed Dec 15 07:49:45 UTC 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1113
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1114
- update to version 4.0beta8
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1115
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1116
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1117
Tue Nov 30 14:19:59 UTC 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1118
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1119
- major update to version 4.0beta7
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1120
  * based on mozilla-xulrunner20
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1121
  * far too many internal changes to list
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1122
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1123
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1124
Wed Oct 27 07:12:14 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1125
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1126
- security update to 3.6.12 (bnc#649492)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1127
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1128
    Heap buffer overflow mixing document.write and DOM insertion
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1129
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1130
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1131
Wed Oct  6 07:13:52 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1132
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1133
- security update to 3.6.11 (bnc#645315)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1134
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1135
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1136
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1137
    Buffer overflow and memory corruption using document.write
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1138
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1139
    Use-after-free error in nsBarProp
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1140
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1141
    Dangling pointer vulnerability in LookupGetterOrSetter
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1142
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1143
    XSS in gopher parser when parsing hrefs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1144
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1145
    Cross-site information disclosure via modal calls
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1146
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1147
    SSL wildcard certificate matching IP addresses
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1148
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1149
    Unsafe library loading vulnerabilities
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1150
  * MFSA 2010-72/CVE-2010-3173
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1151
    Insecure Diffie-Hellman key exchange
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1152
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1153
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1154
Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1155
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1156
- update to 3.6.10
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1157
  * fixing startup topcrash (bmo#594699)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1158
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1159
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1160
Thu Aug 26 07:40:28 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1161
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1162
- security update to 3.6.9 (bnc#637303)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1163
  * MFSA 2010-49/CVE-2010-3169
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1164
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1165
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1166
    Frameset integer overflow vulnerability
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1167
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1168
    Dangling pointer vulnerability using DOM plugin array
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1169
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1170
    Heap buffer overflow in nsTextFrameUtils::TransformText
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1171
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1172
    Dangling pointer vulnerability in nsTreeSelection
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1173
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1174
    XUL tree removal crash and remote code execution
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1175
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1176
    Dangling pointer vulnerability in nsTreeContentView
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1177
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1178
    Crash and remote code execution in normalizeDocument
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1179
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1180
    SJOW creates scope chains ending in outer object
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1181
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1182
    UTF-7 XSS by overriding document charset using <object> type
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1183
    attribute
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1184
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1185
    Copy-and-paste or drag-and-drop into designMode document allows
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1186
    XSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1187
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1188
    Information leak via XMLHttpRequest statusText
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1189
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1190
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1191
Wed Jul 28 08:33:14 CEST 2010 - meissner@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1192
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1193
- disable crash reporter for non x86/x86_64 to make it build.
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1194
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1195
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1196
Sat Jul 24 12:42:58 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1197
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1198
- security update to 3.6.8 (bnc#622506)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1199
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1200
    Dangling pointer crash regression from plugin parameter array
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1201
    fix
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1202
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1203
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1204
Fri Jul 16 06:48:44 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1205
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1206
- security update to 3.6.7 (bnc#622506)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1207
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1208
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1209
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1210
    DOM attribute cloning remote code execution vulnerability
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1211
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)