MozillaFirefox/firefox-esr.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Thu, 24 Oct 2013 19:10:50 +0200
branchesr24
changeset 678 d0329e10d68c
parent 674 f0a52a36c6ec
child 684 7627f28354d4
permissions -rw-r--r--
prepare 24.1.0esr releases
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
674
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
     1
-------------------------------------------------------------------
678
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
     2
Thu Oct 24 16:46:31 UTC 2013 - wr@rosenauer.org
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
     3
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
     4
- update to Firefox 24.1.0esr (bnc#)
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
     5
  * requires NSS 3.15.2 or above
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
     6
d0329e10d68c prepare 24.1.0esr releases
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 674
diff changeset
     7
-------------------------------------------------------------------
674
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
     8
Sat Oct  5 18:10:39 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
     9
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    10
- renamed package to firefox-esr
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    11
  (by branching off from MozillaFirefox-24.0)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    12
  * switched to mozilla-esr24 branch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    13
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    14
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    15
Tue Sep 24 07:31:30 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    16
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    17
- as GStreamer is not automatically required anymore but loaded
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    18
  dynamically if available, require it explicitely
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    19
- recommend optional GStreamer plugins for comprehensive media
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    20
  support
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    21
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    22
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    23
Mon Sep 16 11:59:18 UTC 2013 - lnussel@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    24
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    25
- move greek to the translations-common package (bnc#840551)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    26
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    27
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    28
Sat Sep 14 14:39:58 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    29
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    30
- update to Firefox 24.0 (bnc#840485)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    31
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    32
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    33
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    34
    Improper state in HTML5 Tree Builder with templates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    35
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    36
    Integer overflow in ANGLE library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    37
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    38
    Use-after-free in Animation Manager during stylesheet cloning
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    39
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    40
    NativeKey continues handling key messages after widget is destroyed
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    41
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    42
    Use-after-free with select element
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    43
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    44
    Calling scope for new Javascript objects can lead to memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    45
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    46
    Uninitialized data in IonMonkey
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    47
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    48
    Compartment mismatch re-attaching XBL-backed nodes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    49
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    50
    Buffer overflow with multi-column, lists, and floats
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    51
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    52
    Memory corruption involving scrolling
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    53
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    54
    User-defined properties on DOM proxies get the wrong "this" object
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    55
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    56
    GC hazard with default compartments and frame chain restoration
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    57
- enable gstreamer explicitely via pref (gecko.js)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    58
- require NSS 3.15.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    59
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    60
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    61
Mon Aug 26 07:35:36 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    62
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    63
- update to Firefox 23.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    64
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    65
    (bmo#901527)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    66
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    67
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    68
Sun Aug  4 18:30:11 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    69
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    70
- update to Firefox 23.0 (bnc#833389)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    71
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    72
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    73
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    74
    Use after free mutating DOM during SetBody
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    75
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    76
    Buffer underflow when generating CRMF requests
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    77
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    78
    Crash during WAV audio file decoding
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    79
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    80
    Document URI misrepresentation and masquerading
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    81
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    82
    CRMF requests allow for code execution and XSS attacks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    83
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    84
    Bypass of XrayWrappers using XBL Scopes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    85
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    86
    Wrong principal used for validating URI for some Javascript
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    87
    components
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    88
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    89
    Same-origin bypass with web workers and XMLHttpRequest
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    90
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    91
    Local Java applets may read contents of local file system
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    92
- requires NSPR 4.10 and NSS 3.15
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    93
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    94
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    95
Wed Jul  3 17:14:35 UTC 2013 - dmueller@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    96
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    97
- fix build on ARM (/-g/ matches /-grecord-switches/)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    98
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
    99
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   100
Sat Jun 22 17:48:06 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   101
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   102
- update to Firefox 22.0 (bnc#825935)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   103
  * removed obsolete patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   104
    + mozilla-qcms-ppc.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   105
    + mozilla-gstreamer-760140.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   106
  * GStreamer support does not build on 12.1 anymore (build only
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   107
    on 12.2 and later)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   108
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   109
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   110
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   111
    Memory corruption found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   112
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   113
    Privileged content access and execution via XBL
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   114
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   115
    Arbitrary code execution within Profiler
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   116
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   117
    Execution of unmapped memory through onreadystatechange event
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   118
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   119
    Data in the body of XHR HEAD requests leads to CSRF attacks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   120
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   121
    SVG filters can lead to information disclosure
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   122
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   123
    PreserveWrapper has inconsistent behavior
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   124
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   125
    Sandbox restrictions not applied to nested frame elements
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   126
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   127
    X-Frame-Options ignored when using server push with multi-part
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   128
    responses
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   129
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   130
    XrayWrappers can be bypassed to run user defined methods in a
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   131
    privileged context
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   132
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   133
    getUserMedia permission dialog incorrectly displays location
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   134
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   135
    Homograph domain spoofing in .com, .net and .name
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   136
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   137
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   138
Tue Jun 11 21:06:58 UTC 2013 - dvaleev@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   139
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   140
- Fix qcms altivec include (mozilla-qcms-ppc.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   141
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   142
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   143
Fri May 10 05:25:39 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   144
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   145
- update to Firefox 21.0 (bnc#819204)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   146
  * removed upstreamed patch firefox-712763.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   147
  * removed disabled mozilla-disable-neon-option.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   148
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   149
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   150
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   151
    Privileged access for content level constructor
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   152
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   153
    File input control has access to full path
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   154
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   155
    Use-after-free with video and onresize event
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   156
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   157
    Uninitialized functions in DOMSVGZoomEvent
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   158
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   159
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   160
    Memory corruption found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   161
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   162
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   163
Tue Apr  9 06:41:31 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   164
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   165
- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   166
  (remove mozilla-gstreamer-1.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   167
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   168
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   169
Fri Apr  5 17:04:11 UTC 2013 - schwab@linux-m68k.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   170
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   171
- Explicitly disable WebRTC support on non-x86, the configure script
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   172
  disables it only half-heartedly
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   173
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   174
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   175
Fri Mar 29 22:15:21 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   176
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   177
- update to Firefox 20.0 (bnc#813026)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   178
  * requires NSPR 4.9.5 and NSS 3.14.3
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   179
  * mozilla-webrtc-ppc.patch included upstream
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   180
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   181
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   182
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   183
    Out-of-bounds write in Cairo library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   184
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   185
    WebGL crash with Mesa graphics driver on Linux
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   186
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   187
    Bypass of SOW protections allows cloning of protected nodes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   188
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   189
    Bypass of tab-modal dialog origin disclosure
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   190
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   191
    Cross-site scripting (XSS) using timed history navigations
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   192
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   193
    Memory corruption while rendering grayscale PNG images
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   194
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   195
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   196
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   197
Tue Mar 12 23:08:15 UTC 2013 - dmueller@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   198
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   199
- build fixes for armv7hl:
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   200
  * disable debug build as armv7hl does not have enough memory
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   201
  * disable webrtc on armv7hl as it is non-compiling
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   202
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   203
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   204
Thu Mar  7 19:03:32 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   205
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   206
- update to Firefox 19.0.2 (bnc#808243)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   207
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   208
    Use-after-free in HTML Editor
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   209
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   210
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   211
Thu Feb 28 22:06:36 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   212
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   213
- update to Firefox 19.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   214
  * blocklist updates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   215
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   216
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   217
Sat Feb 16 07:08:55 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   218
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   219
- update to Firefox 19.0 (bnc#804248)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   220
  * MFSA 2013-21/CVE-2013-0783/2013-0784
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   221
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   222
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   223
    Out-of-bounds read in image rendering
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   224
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   225
    Wrapped WebIDL objects can be wrapped again
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   226
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   227
    Web content bypass of COW and SOW security wrappers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   228
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   229
    Privacy leak in JavaScript Workers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   230
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   231
    Use-after-free in nsImageLoadingContent
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   232
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   233
    Phishing on HTTPS connection through malicious proxy
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   234
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   235
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   236
    Use-after-free, out of bounds read, and buffer overflow issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   237
    found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   238
- removed obsolete patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   239
  * mozilla-webrtc.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   240
  * mozilla-gstreamer-803287.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   241
- added patch to fix session restore window order (bmo#712763)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   242
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   243
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   244
Sat Feb  2 08:40:52 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   245
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   246
- update to Firefox 18.0.2
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   247
  * blocklist and CTP updates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   248
  * fixes in JS engine
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   249
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   250
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   251
Wed Jan 16 20:51:55 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   252
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   253
- update to Firefox 18.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   254
  * blocklist updates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   255
  * backed out bmo#677092 (removed patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   256
  * fixed problems involving HTTP proxy transactions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   257
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   258
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   259
Sat Jan 12 17:25:11 UTC 2013 - schwab@linux-m68k.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   260
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   261
- Fix WebRTC to build on powerpc
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   262
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   263
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   264
Sun Jan  6 21:54:18 UTC 2013 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   265
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   266
- update to Firefox 18.0 (bnc#796895)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   267
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   268
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   269
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   270
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   271
    Use-after-free and buffer overflow issues found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   272
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   273
    Buffer Overflow in Canvas
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   274
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   275
    URL spoofing in addressbar during page loads
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   276
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   277
    Use-after-free when displaying table with many columns and column groups
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   278
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   279
    Touch events are shared across iframes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   280
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   281
    Crash due to handling of SSL on threads
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   282
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   283
    AutoWrapperChanger fails to keep objects alive during garbage collection
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   284
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   285
    Compartment mismatch with quickstubs returned values
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   286
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   287
    Event manipulation in plugin handler to bypass same-origin policy
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   288
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   289
    Address space layout leaked in XBL objects
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   290
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   291
    Buffer overflow in Javascript string concatenation
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   292
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   293
    Memory corruption in XBL with XML bindings containing SVG
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   294
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   295
    Chrome Object Wrapper (COW) bypass through changing prototype
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   296
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   297
    Privilege escalation through plugin objects
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   298
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   299
    Use-after-free in serializeToStream
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   300
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   301
    Use-after-free in ListenerManager
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   302
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   303
    Use-after-free in Vibrate
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   304
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   305
    Use-after-free in Javascript Proxy objects
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   306
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   307
- removed obsolete SLE11 patches (mozilla-gcc43*)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   308
- reenable WebRTC
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   309
- added mozilla-libproxy-compat.patch for libproxy API compat
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   310
  on openSUSE 11.2 and earlier
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   311
- backed out restartless language packs as it broke multi-locale
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   312
  setup (bmo#677092, bmo#818468)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   313
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   314
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   315
Thu Nov 29 19:56:51 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   316
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   317
- update to Firefox 17.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   318
  * revert some useragent changes introduced in 17.0
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   319
  * leaving private browsing with social enabled doesn't reset all
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   320
    social components (bmo#815042)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   321
- fix KDE integration for file dialogs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   322
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   323
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   324
Tue Nov 20 19:52:02 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   325
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   326
- update to Firefox 17.0 (bnc#790140)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   327
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   328
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   329
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   330
    Buffer overflow while rendering GIF images
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   331
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   332
    evalInSanbox location context incorrectly applied
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   333
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   334
    Crash when combining SVG text on path with CSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   335
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   336
    Javascript: URLs run in privileged context on New Tab page
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   337
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   338
    Memory corruption in str_unescape
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   339
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   340
    XMLHttpRequest inherits incorrect principal within sandbox
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   341
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   342
    XrayWrappers exposes chrome-only properties when not in chrome
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   343
    compartment
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   344
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   345
    Improper security filtering for cross-origin wrappers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   346
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   347
    Improper character decoding in HZ-GB-2312 charset
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   348
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   349
    Script entered into Developer Toolbar runs with chrome privileges
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   350
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   351
    Frames can shadow top.location
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   352
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   353
    CSS and HTML injection through Style Inspector
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   354
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   355
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   356
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   357
    Use-after-free and buffer overflow issues found using Address
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   358
    Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   359
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   360
    Use-after-free, buffer overflow, and memory corruption issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   361
    found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   362
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   363
- disabled WebRTC since build is broken (bmo#776877)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   364
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   365
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   366
Tue Nov 20 15:42:55 UTC 2012 - pcerny@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   367
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   368
- build on SLE11
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   369
  * mozilla-gcc43-enums.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   370
  * mozilla-gcc43-template_hacks.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   371
  * mozilla-gcc43-templates_instantiation.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   372
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   373
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   374
Wed Oct 24 08:27:29 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   375
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   376
- update to Firefox 16.0.2 (bnc#786522)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   377
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   378
    (bmo#800666, bmo#793121, bmo#802557)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   379
    Fixes for Location object issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   380
- bring back Obsoletes for libproxy's mozjs plugin for distributions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   381
  before 12.2 to avoid crashes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   382
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   383
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   384
Thu Oct 11 01:51:16 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   385
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   386
- update to Firefox 16.0.1 (bnc#783533)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   387
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   388
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   389
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   390
    defaultValue security checks not applied
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   391
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   392
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   393
Sun Oct  7 21:40:14 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   394
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   395
- update to Firefox 16.0 (bnc#783533)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   396
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   397
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   398
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   399
    select element persistance allows for attacks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   400
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   401
    Continued access to initial origin after setting document.domain
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   402
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   403
    Some DOMWindowUtils methods bypass security checks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   404
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   405
    DOS and crash with full screen and history navigation
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   406
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   407
    Crash with invalid cast when using instanceof operator
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   408
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   409
    GetProperty function can bypass security checks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   410
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   411
    top object and location property accessible by plugins
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   412
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   413
    Chrome Object Wrapper (COW) does not disallow acces to privileged
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   414
    functions or properties
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   415
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   416
    Spoofing and script injection through location.hash
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   417
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   418
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   419
    Use-after-free, buffer overflow, and out of bounds read issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   420
    found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   421
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   422
    CVE-2012-4188
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   423
    Heap memory corruption issues found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   424
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   425
    Use-after-free in the IME State Manager
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   426
- requires NSPR 4.9.2
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   427
- improve GStreamer integration (bmo#760140)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   428
- removed upstreamed mozilla-crashreporter-restart-args.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   429
- webapprt now included
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   430
- use kmozillahelper's new REVEAL command (bnc#777415)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   431
  (requires mozilla-kde4-integration >= 0.6.4)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   432
- updated translations-other with new languages
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   433
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   434
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   435
Mon Sep 10 19:37:56 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   436
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   437
- update to Firefox 15.0.1 (bnc#779936)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   438
  * Sites visited while in Private Browsing mode could be found
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   439
    through manual browser cache inspection (bmo#787743)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   440
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   441
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   442
Sun Aug 26 13:47:43 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   443
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   444
- update to Firefox 15.0 (bnc#777588)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   445
  * MFSA 2012-57/CVE-2012-1970
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   446
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   447
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   448
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   449
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   450
    Use-after-free issues found using Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   451
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   452
    Location object can be shadowed using Object.defineProperty
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   453
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   454
    Escalation of privilege through about:newtab
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   455
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   456
    Memory corruption with bitmap format images with negative height
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   457
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   458
    WebGL use-after-free and memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   459
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   460
    SVG buffer overflow and use-after-free issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   461
  * MFSA 2012-64/CVE-2012-3971
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   462
    Graphite 2 memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   463
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   464
    Out-of-bounds read in format-number in XSLT
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   465
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   466
    HTTPMonitor extension allows for remote debugging without explicit
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   467
    activation
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   468
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   469
    DOMParser loads linked resources in extensions when parsing
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   470
    text/html
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   471
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   472
    Incorrect site SSL certificate data display
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   473
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   474
    Location object security checks bypassed by chrome code
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   475
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   476
    Web console eval capable of executing chrome-privileged code
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   477
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   478
- GStreamer is only used for MP4 (no WebM, OGG)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   479
- updated filelist
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   480
- moved browser specific preferences to correct location
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   481
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   482
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   483
Sun Jul 29 08:34:39 UTC 2012 - aj@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   484
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   485
- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   486
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   487
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   488
Sat Jul 14 19:31:51 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   489
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   490
- update to 14.0.1 (bnc#771583)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   491
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   492
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   493
  * MFSA 2012-43/CVE-2012-1950
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   494
    Incorrect URL displayed in addressbar through drag and drop
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   495
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   496
    Gecko memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   497
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   498
    Spoofing issue with location
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   499
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   500
    XSS through data: URLs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   501
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   502
    Improper filtering of javascript in HTML feed-view
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   503
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   504
    use-after-free in nsGlobalWindow::PageHidden
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   505
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   506
    Same-compartment Security Wrappers can be bypassed
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   507
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   508
    Out of bounds read in QCMS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   509
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   510
    X-Frame-Options header ignored when duplicated
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   511
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   512
    JSDependentString::undepend string conversion results in memory
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   513
    corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   514
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   515
    Content Security Policy 1.0 implementation errors cause data
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   516
    leakage
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   517
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   518
    feed: URLs with an innerURI inherit security context of page
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   519
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   520
    Code execution through javascript: URLs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   521
- license change from tri license to MPL-2.0
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   522
- fix crashreporter restart option (bmo#762780)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   523
- require NSS 3.13.5
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   524
- remove mozjs pacrunner obsoletes again for now
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   525
- adopted mozilla-prefer_plugin_pref.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   526
- PPC fixes:
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   527
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   528
  * add patches for bmo#750620 and bmo#746112
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   529
  * fix xpcshell segfault on ppc
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   530
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   531
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   532
Fri Jun 15 12:37:09 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   533
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   534
- update to Firefox 13.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   535
  * bugfix release
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   536
- obsolete libproxy's mozjs pacrunner (bnc#759123)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   537
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   538
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   539
Sat Jun  2 08:22:51 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   540
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   541
- update to Firefox 13.0 (bnc#765204)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   542
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   543
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   544
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   545
    Content Security Policy inline-script bypass
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   546
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   547
    Information disclosure though Windows file shares and shortcut
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   548
    files
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   549
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   550
    Use-after-free while replacing/inserting a node in a document
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   551
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   552
    Buffer overflow and use-after-free issues found using Address
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   553
    Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   554
- require NSS 3.13.4
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   555
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   556
- fix sound notifications when filename/path contains a whitespace
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   557
  (bmo#749739)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   558
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   559
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   560
Wed May 23 14:40:16 UTC 2012 - adrian@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   561
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   562
- fix build on arm
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   563
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   564
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   565
Wed May 16 05:34:01 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   566
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   567
- reenabled crashreporter for Factory/12.2
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   568
  (fix in mozilla-gcc47.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   569
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   570
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   571
Sat Apr 21 10:02:37 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   572
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   573
- update to Firefox 12.0 (bnc#758408)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   574
  * rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   575
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   576
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   577
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   578
    use-after-free in IDBKeyRange
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   579
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   580
    Invalid frees causes heap corruption in gfxImageSurface
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   581
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   582
    Potential XSS via multibyte content processing errors
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   583
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   584
    Potential memory corruption during font rendering using cairo-dwrite
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   585
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   586
    WebGL.drawElements may read illegal video memory due to
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   587
    FindMaxUshortElement error
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   588
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   589
    Page load short-circuit can lead to XSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   590
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   591
    Ambiguous IPv6 in Origin headers may bypass webserver access
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   592
    restrictions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   593
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   594
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   595
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   596
    Crash with WebGL content using textImage2D
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   597
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   598
    Off-by-one error in OpenType Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   599
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   600
    HTTP Redirections and remote content can be read by javascript errors
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   601
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   602
    Potential site identity spoofing when loading RSS and Atom feeds
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   603
- added mozilla-libnotify.patch to allow fallback from libnotify
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   604
  to xul based events if no notification-daemon is running
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   605
- gcc 4.7 fixes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   606
  * mozilla-gcc47.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   607
  * disabled crashreporter temporarily for Factory
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   608
- recommend libcanberra0 for proper sound notifications
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   609
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   610
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   611
Fri Mar  9 21:47:07 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   612
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   613
- update to Firefox 11.0 (bnc#750044)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   614
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   615
    XSS with Drag and Drop and Javascript: URL
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   616
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   617
    SVG issues found with Address Sanitizer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   618
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   619
    XSS with multiple Content Security Policy headers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   620
  * MFSA 2012-16/CVE-2012-0458
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   621
    Escalation of privilege with Javascript: URL as home page
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   622
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   623
    Crash when accessing keyframe cssText after dynamic modification
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   624
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   625
    window.fullScreen writeable by untrusted content
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   626
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   627
    CVE-2012-0463
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   628
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   629
- ported and reenabled KDE integration (bnc#746591)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   630
- explicitely build-require X libs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   631
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   632
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   633
Mon Mar  5 13:31:48 UTC 2012 - vdziewiecki@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   634
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   635
- add Provides: browser(npapi) FATE#313084
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   636
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   637
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   638
Fri Feb 17 17:41:11 UTC 2012 - pcerny@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   639
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   640
- better plugin directory resolution (bnc#747320)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   641
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   642
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   643
Thu Feb 16 08:47:31 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   644
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   645
- update to Firefox 10.0.2 (bnc#747328)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   646
  * CVE-2011-3026 (bmo#727401)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   647
    libpng: integer overflow leading to heap-buffer overflow
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   648
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   649
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   650
Thu Feb  9 09:26:11 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   651
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   652
- update to Firefox 10.0.1 (bnc#746616)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   653
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   654
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   655
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   656
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   657
Tue Feb  7 10:40:58 UTC 2012 - dvaleev@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   658
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   659
- Use YARR interpreter instead of PCRE on platforms where YARR JIT
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   660
  is not supported, since PCRE doesnt build (bmo#691898)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   661
- fix ppc64 build (bmo#703534)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   662
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   663
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   664
Mon Jan 30 09:41:59 UTC 2012 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   665
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   666
- update to Firefox 10.0 (bnc#744275)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   667
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   668
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   669
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   670
    <iframe> element exposed across domains via name attribute
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   671
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   672
    Child nodes from nsDOMAttribute still accessible after removal
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   673
    of nodes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   674
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   675
    Frame scripts calling into untrusted objects bypass security
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   676
    checks
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   677
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   678
    Uninitialized memory appended when encoding icon images may
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   679
    cause information disclosure
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   680
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   681
    Potential Memory Corruption When Decoding Ogg Vorbis files
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   682
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   683
    Crash with malformed embedded XSLT stylesheets
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   684
- KDE integration has been disabled since it needs refactoring
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   685
- removed obsolete ppc64 patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   686
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   687
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   688
Sun Jan 22 12:08:07 UTC 2012 - joop.boonen@opensuse.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   689
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   690
- Disable neon for arm as it doesn't build correctly
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   691
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   692
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   693
Fri Dec 23 17:02:01 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   694
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   695
- update to Firefox 9.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   696
  * (strongparent) parentNode of element gets lost (bmo#335998)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   697
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   698
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   699
Sun Dec 18 09:58:52 UTC 2011 - adrian@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   700
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   701
- fix arm build, don't package crashreporter there
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   702
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   703
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   704
Sun Dec 18 09:52:08 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   705
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   706
- update to Firefox 9 (bnc#737533)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   707
  * MFSA 2011-53/CVE-2011-3660
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   708
    Miscellaneous memory safety hazards (rv:9.0)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   709
  * MFSA 2011-54/CVE-2011-3661 (bmo#691299)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   710
    Potentially exploitable crash in the YARR regular expression
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   711
    library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   712
  * MFSA 2011-55/CVE-2011-3658 (bmo#708186)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   713
    nsSVGValue out-of-bounds access
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   714
  * MFSA 2011-56/CVE-2011-3663 (bmo#704482)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   715
    Key detection without JavaScript via SVG animation
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   716
  * MFSA 2011-58/VE-2011-3665 (bmo#701259)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   717
    Crash scaling <video> to extreme sizes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   718
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   719
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   720
Sun Nov 27 03:51:54 UTC 2011 - mgorse@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   721
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   722
- Fix accessibility under GNOME 3 (bnc#732898)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   723
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   724
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   725
Sat Nov 12 15:16:38 UTC 2011 - dvaleev@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   726
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   727
- fix ppc64 build
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   728
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   729
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   730
Sun Nov  6 08:20:59 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   731
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   732
- update to Firefox 8 (bnc#728520)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   733
  * MFSA 2011-47/CVE-2011-3648 (bmo#690225)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   734
    Potential XSS against sites using Shift-JIS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   735
  * MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   736
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   737
  * MFSA 2011-49/CVE-2011-3650 (bmo#674776)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   738
    Memory corruption while profiling using Firebug
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   739
  * MFSA 2011-52/CVE-2011-3655 (bmo#672182)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   740
    Code execution via NoWaiverWrapper
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   741
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   742
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   743
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   744
Thu Oct 20 12:34:47 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   745
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   746
- enable telemetry prompt
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   747
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   748
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   749
Fri Sep 30 10:52:36 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   750
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   751
- update to minor release 7.0.1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   752
  * fixed staged addon updates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   753
- set intl.locale.matchOS=true in the base package as it causes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   754
  too much confusion when it's only available with branding-openSUSE
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   755
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   756
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   757
Fri Sep 23 11:22:22 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   758
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   759
- update to Firefox 7 (bnc#720264)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   760
  including
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   761
  * Improve Responsiveness with Memory Reductions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   762
  * Instant Sync
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   763
  * WebSocket protocol 8
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   764
  * MFSA 2011-36/CVE-2011-2995/CVE-2011-2996/CVE-2011-2997
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   765
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   766
  * MFSA 2011-39/CVE-2011-3000 (bmo#655389)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   767
    Defense against multiple Location headers due to CRLF Injection
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   768
  * MFSA 2011-40/CVE-2011-2372/CVE-2011-3001
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   769
    Code installation through holding down Enter
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   770
  * MFSA 2011-41/CVE-2011-3002/CVE-2011-3003 (bmo#680840, bmo#682335)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   771
    Potentially exploitable WebGL crashes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   772
  * MFSA 2011-42/CVE-2011-3232 (bmo#653672)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   773
    Potentially exploitable crash in the YARR regular expression
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   774
    library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   775
  * MFSA 2011-43/CVE-2011-3004 (bmo#653926)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   776
    loadSubScript unwraps XPCNativeWrapper scope parameter
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   777
  * MFSA 2011-44/CVE-2011-3005 (bmo#675747)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   778
    Use after free reading OGG headers
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   779
  * MFSA 2011-45
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   780
    Inferring keystrokes from motion data
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   781
- removed obsolete mozilla-cairo-lcd.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   782
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   783
- removed XLIB_SKIP_ARGB_VISUALS=1 from environment in
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   784
  mozilla.sh.in (bnc#680758)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   785
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   786
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   787
Fri Sep 16 06:57:38 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   788
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   789
- fixed loading of kde.js under KDE (bnc#718311)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   790
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   791
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   792
Wed Sep 14 07:02:04 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   793
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   794
- add dbus-1-glib-devel to BuildRequires (not pulled in
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   795
  automatically anymore on 12.1)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   796
- increase minversions for NSPR and NSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   797
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   798
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   799
Fri Sep  9 20:44:15 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   800
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   801
- recreated source archive to get correct source-stamp.txt
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   802
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   803
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   804
Wed Sep  7 14:30:34 UTC 2011 - pcerny@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   805
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   806
- security update to 6.0.2 (bnc#714931)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   807
  * Complete blocking of certificates issued by DigiNotar
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   808
    (bmo#683449)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   809
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   810
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   811
Fri Sep  2 14:40:07 UTC 2011 - pcerny@suse.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   812
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   813
- security update to 6.0.1 (bnc#714931)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   814
  * MFSA 2011-34
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   815
    Protection against fraudulent DigiNotar certificates
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   816
    (bmo#682927)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   817
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   818
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   819
Fri Aug 12 21:16:19 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   820
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   821
- update to 6.0 (bnc#712224)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   822
  included security fixes MFSA 2011-29
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   823
  * CVE-2011-2989/CVE-2011-2991/CVE-2011-2992/CVE-2011-2985
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   824
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   825
  * CVE-2011-2993 (bmo#657267)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   826
    Unsigned scripts can call script inside signed JAR
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   827
  * CVE-2011-2988 (bmo#665934)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   828
    Heap overflow in ANGLE library
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   829
  * CVE-2011-0084 (bmo#648094)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   830
    Crash in SVGTextElement.getCharNumAtPosition()
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   831
  * CVE-2011-2990
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   832
    Credential leakage using Content Security Policy reports
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   833
  * CVE-2011-2986 (bmo#655836)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   834
    Cross-origin data theft using canvas and Windows D2D
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   835
- removed obsolete curl header dependency (mozilla-curl.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   836
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   837
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   838
Fri Jul 22 13:34:12 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   839
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   840
- update to 6.0b3
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   841
  * removed obsolete patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   842
    - firefox-shellservice.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   843
    - mozilla-gio.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   844
    - mozilla-ppc-ipc.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   845
    - firefox-linkorder.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   846
    - firefox-no-sync-l10n.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   847
- recognize linux3 as platform for symbolstore.py
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   848
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   849
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   850
Fri Jul  1 19:53:18 CEST 2011 - vuntz@opensuse.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   851
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   852
- Add x-scheme-handler/ftp to the MimeType key in the .desktop, to
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   853
  let desktops know that Firefox can deal with ftp: URIs.
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   854
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   855
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   856
Fri Jul  1 06:45:08 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   857
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   858
- create upstream branding package again (supposedly empty)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   859
  (bnc#703401)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   860
- fix build on SLE11 (changes do not affect/are not applied for
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   861
  later versions)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   862
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   863
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   864
Wed Jun 22 06:41:17 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   865
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   866
- enable startup notification (bnc#701465)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   867
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   868
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   869
Mon Jun 20 19:37:01 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   870
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   871
- update to 5.0 final
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   872
- included fixes for security issues: (bnc#701296, bnc#700578)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   873
  * MFSA 2011-19/CVE-2011-2374 CVE-2011-2375
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   874
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   875
  * MFSA 2011-20/CVE-2011-2373 (bmo#617247)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   876
    Use-after-free vulnerability when viewing XUL document with
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   877
    script disabled
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   878
  * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   879
    Memory corruption due to multipart/x-mixed-replace images
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   880
  * MFSA 2011-22/CVE-2011-2371 (bmo#664009)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   881
    Integer overflow and arbitrary code execution in
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   882
    Array.reduceRight()
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   883
  * MFSA 2011-25/CVE-2011-2366
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   884
    Stealing of cross-domain images using WebGL textures
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   885
  * MFSA 2011-26/CVE-2011-2367 CVE-2011-2368
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   886
    Multiple WebGL crashes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   887
  * MFSA 2011-27/CVE-2011-2369 (bmo#650001)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   888
    XSS encoding hazard with inline SVG
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   889
  * MFSA 2011-28/CVE-2011-2370 (bmo#645699)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   890
    Non-whitelisted site can trigger xpinstall
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   891
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   892
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   893
Mon Jun 20 09:17:42 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   894
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   895
- update to 5.0b7
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   896
  * updated supported locales
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   897
- do not build dump_syms static (not needed for us)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   898
  -> fix build for openSUSE 12.1 and above
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   899
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   900
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   901
Wed Jun 15 14:59:32 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   902
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   903
- update to 5.0b6
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   904
- include proper revision information into the build
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   905
- speedier find-external-requires.sh
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   906
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   907
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   908
Tue May 31 06:53:55 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   909
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   910
- update to 5.0b3
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   911
- transformed to standalone Firefox (not xulrunner based)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   912
  (with new Firefox rapid release cycle it makes no sense anymore)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   913
  * imported all relevant xulrunner patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   914
- do not compile in build timestamp
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   915
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   916
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   917
Fri Apr 15 07:08:53 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   918
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   919
- security update to 4.0.1 (bnc#689281)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   920
  * MFSA 2011-12/ CVE-2011-0069 CVE-2011-0070 CVE-2011-0079
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   921
    CVE-2011-0080 CVE-2011-0081
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   922
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   923
  * MFSA 2011-17/CVE-2011-0068 (bmo#623791)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   924
    WebGLES vulnerabilities
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   925
  * MFSA 2011-18/CVE-2011-1202 (bmo#640339)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   926
    XSLT generate-id() function heap address leak
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   927
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   928
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   929
Wed Mar 30 11:24:36 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   930
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   931
- add all available icon sizes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   932
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   933
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   934
Tue Mar 29 11:55:53 UTC 2011 - cfarrell@novell.com
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   935
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   936
- license update: MPLv1.1 or GPLv2+ or LGPLv2+
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   937
  Sync licenses with Fedora. MPL does not state ^or later^
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   938
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   939
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   940
Fri Mar 18 08:49:15 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   941
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   942
- update to version 4.0rc2
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   943
- fixed rpm macros delivered with devel package (bnc#679950)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   944
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   945
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   946
Wed Feb 23 07:52:04 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   947
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   948
- update to version 4.0b12
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   949
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   950
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   951
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   952
Fri Feb  4 09:32:50 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   953
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   954
- update to version 4.0b11
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   955
  * loads of bugfixes compared to last beta
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   956
  * added "Do Not Track" option
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   957
- rebased patches
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   958
- disable testpilot
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   959
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   960
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   961
Fri Jan 28 08:56:12 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   962
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   963
- set correct desktop file name within KDE for 11.4 and up
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   964
- add devel package with macros for extensions (from lnussel@suse.de)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   965
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   966
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   967
Sat Jan 22 22:21:52 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   968
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   969
- update to version 4.0b10
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   970
- removed obsolete firefox-shell-bmo624267.patch
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   971
- testpilot moved to distribution/extensions
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   972
- updated locale provides and removed bn-IN from locales
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   973
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   974
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   975
Tue Jan 11 06:13:40 UTC 2011 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   976
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   977
- update to version 4.0b9
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   978
- added x-scheme-handler for http and https to desktop file for
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   979
  newer Gnome environments
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   980
- fixed default browser check/set for GIO (bmo#611953)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   981
  (mozilla-shellservice.patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   982
- removed obsolete firefox-appname.patch (integrated into
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   983
  shellservice patch)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   984
- renamed desktop file to firefox.desktop for 11.4 and newer
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   985
  (bnc#664211)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   986
- removed support for 10.3 and older from the spec file
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   987
- removed obsolete "Ximian" categories from desktop file
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   988
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   989
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   990
Mon Jan  3 17:35:46 CET 2011 - meissner@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   991
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   992
- Mirror ac_add_options --disable-ipc from xulrunner for PowerPC.
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   993
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   994
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   995
Wed Dec 15 07:49:45 UTC 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   996
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   997
- update to version 4.0beta8
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   998
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
   999
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1000
Tue Nov 30 14:19:59 UTC 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1001
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1002
- major update to version 4.0beta7
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1003
  * based on mozilla-xulrunner20
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1004
  * far too many internal changes to list
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1005
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1006
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1007
Wed Oct 27 07:12:14 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1008
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1009
- security update to 3.6.12 (bnc#649492)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1010
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1011
    Heap buffer overflow mixing document.write and DOM insertion
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1012
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1013
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1014
Wed Oct  6 07:13:52 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1015
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1016
- security update to 3.6.11 (bnc#645315)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1017
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1018
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1019
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1020
    Buffer overflow and memory corruption using document.write
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1021
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1022
    Use-after-free error in nsBarProp
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1023
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1024
    Dangling pointer vulnerability in LookupGetterOrSetter
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1025
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1026
    XSS in gopher parser when parsing hrefs
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1027
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1028
    Cross-site information disclosure via modal calls
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1029
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1030
    SSL wildcard certificate matching IP addresses
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1031
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1032
    Unsafe library loading vulnerabilities
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1033
  * MFSA 2010-72/CVE-2010-3173
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1034
    Insecure Diffie-Hellman key exchange
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1035
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1036
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1037
Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1038
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1039
- update to 3.6.10
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1040
  * fixing startup topcrash (bmo#594699)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1041
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1042
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1043
Thu Aug 26 07:40:28 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1044
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1045
- security update to 3.6.9 (bnc#637303)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1046
  * MFSA 2010-49/CVE-2010-3169
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1047
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1048
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1049
    Frameset integer overflow vulnerability
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1050
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1051
    Dangling pointer vulnerability using DOM plugin array
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1052
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1053
    Heap buffer overflow in nsTextFrameUtils::TransformText
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1054
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1055
    Dangling pointer vulnerability in nsTreeSelection
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1056
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1057
    XUL tree removal crash and remote code execution
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1058
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1059
    Dangling pointer vulnerability in nsTreeContentView
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1060
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1061
    Crash and remote code execution in normalizeDocument
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1062
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1063
    SJOW creates scope chains ending in outer object
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1064
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1065
    UTF-7 XSS by overriding document charset using <object> type
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1066
    attribute
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1067
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1068
    Copy-and-paste or drag-and-drop into designMode document allows
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1069
    XSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1070
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1071
    Information leak via XMLHttpRequest statusText
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1072
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1073
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1074
Wed Jul 28 08:33:14 CEST 2010 - meissner@suse.de
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1075
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1076
- disable crash reporter for non x86/x86_64 to make it build.
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1077
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1078
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1079
Sat Jul 24 12:42:58 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1080
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1081
- security update to 3.6.8 (bnc#622506)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1082
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1083
    Dangling pointer crash regression from plugin parameter array
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1084
    fix
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1085
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1086
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1087
Fri Jul 16 06:48:44 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1088
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1089
- security update to 3.6.7 (bnc#622506)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1090
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1091
    Miscellaneous memory safety hazards
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1092
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1093
    DOM attribute cloning remote code execution vulnerability
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1094
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1095
    Use-after-free error in NodeIterator
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1096
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1097
    Plugin parameter EnsureCachedAttrParamArrays remote code
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1098
    execution vulnerability
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1099
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1100
    Arbitrary code execution using SJOW and fast native function
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1101
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1102
    nsCSSValue::Array index integer overflow
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1103
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1104
    nsTreeSelection dangling pointer remote code execution
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1105
    vulnerability
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1106
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1107
    Remote code execution using malformed PNG image
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1108
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1109
    Cross-origin data disclosure via Web Workers and importScripts
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1110
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1111
    Same-origin bypass using canvas context
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1112
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1113
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1114
    character to vanish
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1115
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1116
    Multiple location bar spoofing vulnerabilities
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1117
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1118
    Cross-domain data theft using CSS
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1119
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1120
    Cross-origin data leakage from script filename in error messages
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1121
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1122
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1123
Sun Jun 27 20:24:31 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1124
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1125
- update to 3.6.6 release
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1126
  * modifies the crash protection feature to increase the amount 
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1127
    of time that plugins are allowed to be non-responsive before 
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1128
    being terminated.
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1129
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1130
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1131
Wed Jun 23 14:40:35 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1132
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1133
- update to final 3.6.4 release (bnc#603356)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1134
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1135
    CVE-2010-1203
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1136
    Crashes with evidence of memory corruption (rv:1.9.2.4)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1137
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1138
    Freed object reuse across plugin instances
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1139
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1140
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1141
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1142
    Integer Overflow in XSLT Node Sorting
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1143
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1144
    focus() behavior can be used to inject or steal keystrokes
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1145
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1146
    Content-Disposition: attachment ignored if
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1147
    Content-Type: multipart also present
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1148
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1149
    User tracking across sites using Math.random()
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1150
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1151
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1152
Mon Jun  7 07:07:33 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1153
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1154
- update to 3.6.4(build6)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1155
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1156
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1157
Sun Apr 18 09:42:40 CEST 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1158
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1159
- security update to 3.6.4 (Lorentz)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1160
  * enable crashreporter also for x86-64
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1161
  * Flash runs in a separate process to avoid crashing Firefox
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1162
    (ix86 only; x86-64 still uses nspluginwrapper)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1163
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1164
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1165
Thu Apr  1 11:15:38 UTC 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1166
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1167
- security update to 3.6.3
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1168
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1169
    Re-use of freed object due to scope confusion
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1170
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1171
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1172
Thu Mar 18 06:43:33 CET 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1173
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1174
- security update to version 3.6.2 (bnc#586567)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1175
  * MFSA 2010-08/CVE-2010-1028
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1176
    WOFF heap corruption due to integer overflow
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1177
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1178
    Deleted frame reuse in multipart/x-mixed-replace image
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1179
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1180
    XSS via plugins and unprotected Location object
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1181
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1182
    Crashes with evidence of memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1183
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1184
    XSS using addEventListener and setTimeout on a wrapped object
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1185
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1186
    Content policy bypass with image preloading
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1187
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1188
    Browser chrome defacement via cached XUL stylesheets
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1189
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1190
    Asynchronous Auth Prompt attaches to wrong window
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1191
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1192
    Crashes with evidence of memory corruption
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1193
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1194
    Dangling pointer vulnerability in nsTreeContentView
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1195
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1196
    Dangling pointer vulnerability in nsPluginArray
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1197
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1198
    Chrome privilege escalation via forced URL drag and drop
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1199
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1200
    Update NSS to support TLS renegotiation indication
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1201
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1202
    Image src redirect to mailto: URL opens email editor
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1203
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1204
    XMLDocument::load() doesn't check nsIContentPolicy
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1205
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1206
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1207
Mon Jan 18 09:42:50 CET 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1208
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1209
- update to 3.6rc2 (already named 3.6.0)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1210
- removed obsolete orbit-devel build requirement
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1211
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1212
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1213
Wed Jan  6 17:15:40 CET 2010 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1214
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1215
- major update to 3.6rc1
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1216
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1217
-------------------------------------------------------------------
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1218
Fri Dec 25 09:39:42 CET 2009 - wr@rosenauer.org
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1219
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1220
- update to version 3.5.7 (bnc#568011)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1221
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1222
    proxy servers that support NTLM auth (bmo#535193)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  1223
- added missing lockdown preferences (bnc#567131)
f0a52a36c6ec create esr24 branch
Wolfgang Rosenauer <wr@rosenauer.o