MozillaFirefox/MozillaFirefox.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Fri, 07 Aug 2015 09:43:50 +0200
branchfirefox40
changeset 872 f3a4634b3a4e
parent 871 4c6e8495720b
parent 870 09ffe9247f8a
child 875 2d6ccc01ea9e
permissions -rw-r--r--
merge from firefox39
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
539
b1134fe91f9a merge latest changes from firefox16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 536
diff changeset
     1
-------------------------------------------------------------------
871
4c6e8495720b beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 869
diff changeset
     2
Fri Jul 31 17:10:11 UTC 2015 - wr@rosenauer.org
4c6e8495720b beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 869
diff changeset
     3
4c6e8495720b beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 869
diff changeset
     4
- update to Firefox 40.0b9
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
     5
- added mozilla-no-stdcxx-check.patch
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
     6
- removed obsolete patches
868
284da266ec46 40beta rebase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 867
diff changeset
     7
  * mozilla-add-glibcxx_use_cxx11_abi.patch
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
     8
  * firefox-multilocale-chrome.patch
868
284da266ec46 40beta rebase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 867
diff changeset
     9
- rebased patches
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
    10
- requires version 40 of the branding package
871
4c6e8495720b beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 869
diff changeset
    11
- removed browser/searchplugins/ location as it's not valid anymore
867
3af93b7e5e3d merge from firefox39 and switch to 40beta branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    12
3af93b7e5e3d merge from firefox39 and switch to 40beta branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    13
-------------------------------------------------------------------
870
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    14
Fri Aug  7 07:09:39 UTC 2015 - wr@rosenauer.org
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    15
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    16
- security update to Firefox 39.0.3 (bnc#940918)
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    17
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    18
    Same origin violation and local file stealing via PDF reader
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    19
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
    20
-------------------------------------------------------------------
866
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    21
Wed Jul  1 06:43:02 UTC 2015 - wr@rosenauer.org
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    22
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    23
- update to Firefox 39.0 (bnc#935979)
863
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    24
  * Share Hello URLs with social networks
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    25
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    26
  * SafeBrowsing malware detection lookups enabled for downloads
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    27
    (Mac OS X and Linux)
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    28
  * Support for new Unicode 8.0 skin tone emoji
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    29
  * Removed support for insecure SSLv3 for network communications
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    30
  * Disable use of RC4 except for temporarily whitelisted hosts
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    31
  * NPAPI Plug-in performance improved via asynchronous initialization
866
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    32
  security fixes:
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    33
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    34
    Miscellaneous memory safety hazards
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    35
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    36
    Local files or privileged URLs in pages can be opened into new tabs
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    37
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    38
    Type confusion in Indexed Database Manager
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    39
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    40
    Out-of-bound read while computing an oscillator rendering range in Web Audio
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    41
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    42
    Use-after-free in Content Policy due to microtask execution error
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    43
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    44
    ECDSA signature validation fails to handle some signatures correctly
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    45
    (this fix is shipped by NSS 3.19.1 externally)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    46
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    47
    Use-after-free in workers while using XMLHttpRequest
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    48
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    49
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    50
    Vulnerabilities found through code inspection
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    51
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    52
    Key pinning is ignored when overridable errors are encountered
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    53
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    54
    OS X crash reports may contain entered key press information
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    55
    (not relevant under Linux)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    56
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    57
    Privilege escalation in PDF.js
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    58
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    59
    NSS accepts export-length DHE keys with regular DHE cipher suites
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    60
    (this fix is shipped by NSS 3.19.1 externally)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    61
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    62
    NSS incorrectly permits skipping of ServerKeyExchange
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
    63
    (this fix is shipped by NSS 3.19.1 externally)
857
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
    64
- dropped mozilla-prefer_plugin_pref.patch as this feature is
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
    65
  likely not worth maintaining further
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
    66
- rebased patches
863
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
    67
- require NSS 3.19.2
857
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
    68
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
    69
-------------------------------------------------------------------
862
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
    70
Thu Jun 18 10:30:18 UTC 2015 - schwab@suse.de
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
    71
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
    72
- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
    73
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
    74
-------------------------------------------------------------------
854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
    75
Sun Jun  7 07:09:12 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
    76
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
    77
- update to Firefox 38.0.6
855
1f860c829900 correct changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 854
diff changeset
    78
  * fixes bmo#1171730 which is not really relevant to oS builds
1f860c829900 correct changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 854
diff changeset
    79
- fix KDE regression from 38.0.5 builds (bsc#933439)
854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
    80
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
    81
-------------------------------------------------------------------
853
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    82
Sat May 23 21:13:49 UTC 2015 - wr@rosenauer.org
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    83
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    84
- update to Firefox 38.0.5
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    85
  * Keep track of articles and videos with Pocket
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    86
  * Clean formatting for articles and blog posts with Reader View
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    87
  * Share the active tab or window in a Hello conversation
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    88
- add changes file as source for SRPM (bsc#932142)
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    89
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
    90
-------------------------------------------------------------------
852
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    91
Fri May 15 10:40:19 UTC 2015 - normand@linux.vnet.ibm.com
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    92
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    93
- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    94
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    95
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    96
-------------------------------------------------------------------
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    97
Fri May 15 07:37:46 UTC 2015 - wr@rosenauer.org
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    98
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
    99
- update to Firefox 38.0.1
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   100
  stability and regression fixes
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   101
  * Systems with first generation NVidia Optimus graphics cards
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   102
    may crash on start-up
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   103
  * Users who import cookies from Google Chrome can end up with
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   104
    broken websites
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   105
  * Large animated images may fail to play and may stop other
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   106
    images from loading
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   107
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   108
-------------------------------------------------------------------
851
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   109
Sun May 10 07:07:49 UTC 2015 - wr@rosenauer.org
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   110
852
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   111
- update to Firefox 38.0 (bnc#930622)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   112
  * New tab-based preferences
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   113
  * Ruby annotation support
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   114
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   115
  security fixes:
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   116
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   117
    Miscellaneous memory safety hazards
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   118
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   119
    Buffer overflow parsing H.264 video with Linux Gstreamer
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   120
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   121
    Buffer overflow with SVG content and CSS
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   122
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   123
    Referrer policy ignored when links opened by middle-click and
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   124
    context menu
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   125
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   126
    Out-of-bounds read and write in asm.js validation
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   127
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   128
    Use-after-free during text processing with vertical text enabled
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   129
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   130
    Use-after-free due to Media Decoder Thread creation during shutdown
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   131
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   132
    Buffer overflow when parsing compressed XML
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   133
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   134
    Buffer overflow and out-of-bounds read while parsing MP4 video
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   135
    metadata
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   136
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   137
    Untrusted site hosting trusted page can intercept webchannel
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   138
    responses
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   139
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   140
    Privilege escalation through IPC channel messages
850
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   141
- requires NSS 3.18.1
851
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   142
- removed obsolete patches:
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   143
  * mozilla-skia-bmo1136958.patch
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   144
- remove gnomevfs build options as it is removed from sources
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   145
- rebased patches
850
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   146
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   147
-------------------------------------------------------------------
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   148
Fri Apr 17 16:39:20 UTC 2015 - wr@rosenauer.org
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   149
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   150
- update to Firefox 37.0.2 (bnc#928116)
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   151
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   152
    Memory corruption during failed plugin initialization
845
a704b2a17e39 38.0 beta series
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 844
diff changeset
   153
a704b2a17e39 38.0 beta series
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 844
diff changeset
   154
-------------------------------------------------------------------
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   155
Fri Apr  3 08:27:24 UTC 2015 - wr@rosenauer.org
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   156
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   157
- update to Firefox 37.0.1 (bnc#926166)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   158
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   159
    Loading privileged content through Reader mode
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   160
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   161
    Certificate verification bypass through the HTTP/2 Alt-Svc header
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   162
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   163
-------------------------------------------------------------------
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   164
Sat Mar 28 09:46:48 UTC 2015 - wr@rosenauer.org
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   165
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   166
- update to Firefox 37.0 (bnc#925368)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   167
  * Heartbeat user rating system
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   168
  * Yandex set as default search provider for the Turkish locale
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   169
  * Bing search now uses HTTPS for secure searching
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   170
  * Improved protection against site impersonation via OneCRL
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   171
    centralized certificate revocation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   172
  * Opportunistically encrypt HTTP traffic where the server supports
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   173
    HTTP/2 AltSvc
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   174
  * some more behaviour changes for TLS
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   175
  security fixes:
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   176
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   177
    Miscellaneous memory safety hazards
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   178
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   179
    Use-after-free when using the Fluendo MP3 GStreamer plugin
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   180
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   181
    Add-on lightweight theme installation approval bypassed through
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   182
    MITM attack
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   183
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   184
    resource:// documents can load privileged pages
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   185
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   186
    Out of bounds read in QCMS library
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   187
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   188
    Cursor clickjacking with flash and images (OS X only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   189
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   190
    Incorrect memory management for simple-type arrays in WebRTC
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   191
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   192
    CORS requests should not follow 30x redirections after preflight
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   193
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   194
    Memory corruption crashes in Off Main Thread Compositing
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   195
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   196
    Use-after-free due to type confusion flaws
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   197
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   198
    Same-origin bypass through anchor navigation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   199
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   200
    PRNG weakness allows for DNS poisoning on Android (only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   201
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   202
    Windows can retain access to privileged content on navigation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   203
    to unprivileged pages
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   204
- removed obsolete patches
837
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 836
diff changeset
   205
  * mozilla-bmo1088588.patch
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   206
  * mozilla-bmo1108834.patch
836
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   207
- requires NSPR 4.10.8
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   208
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   209
-------------------------------------------------------------------
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   210
Tue Mar 24 15:35:24 UTC 2015 - dvaleev@suse.com
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   211
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   212
- Fix builds with skia on Power
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   213
  mozilla-skia-be-le.patch (patch from #bmo1136958)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   214
  mozilla-bmo1108834.patch
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   215
  mozilla-bmo1005535.patch
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   216
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   217
-------------------------------------------------------------------
839
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   218
Sat Mar 21 09:03:12 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   219
840
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
   220
- update to Firefox 36.0.4 (bnc#923534)
839
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   221
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   222
    Privilege escalation through SVG navigation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   223
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   224
    Code execution through incorrect JavaScript bounds checking
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   225
    elimination
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   226
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   227
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   228
Fri Mar 20 15:02:33 UTC 2015 - dimstar@opensuse.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   229
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   230
- Copy the icons to /usr/share/icons instead of symlinking them:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   231
  in preparation for containerized apps (e.g. xdg-app) as well as
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   232
  AppStream metadata extraction, there are a couple locations that
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   233
  need to be real files for system integration (.desktop files,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   234
  icons, mime-type info).
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   235
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   236
-------------------------------------------------------------------
838
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   237
Sat Mar  7 07:40:56 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   238
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   239
- update to Firefox 36.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   240
  Bugfixes:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   241
  * Disable the usage of the ANY DNS query type (bmo#1093983)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   242
  * Hello may become inactive until restart (bmo#1137469)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   243
  * Print preferences may not be preserved (bmo#1136855)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   244
  * Hello contact tabs may not be visible (bmo#1137141)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   245
  * Accept hostnames that include an underscore character ("_")
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   246
    (bmo#1136616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   247
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   248
  * Option -remote has been restored (bmo#1080319)
840
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
   249
- added mozilla-skia-bmo1136958.patch to fix build issues for
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
   250
  ARM and PPC
838
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   251
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   252
-------------------------------------------------------------------
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   253
Fri Feb 20 22:53:39 UTC 2015 - wr@rosenauer.org
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   254
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   255
- update to Firefox 36.0 (bnc#917597)
828
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
   256
  * mozilla-xremote-client was removed
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
   257
  * added libclearkey.so media plugin
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   258
  * Pinned tiles on the new tab page can be synced
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   259
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   260
    more scalable, and more responsive web.
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   261
  * Locale added: Uzbek (uz)
835
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   262
  security fixes:
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   263
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   264
    Miscellaneous memory safety hazards
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   265
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   266
    Invoking Mozilla updater will load locally stored DLL files
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   267
    (Windows only)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   268
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   269
    Appended period to hostnames can bypass HPKP and HSTS protections
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   270
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   271
    Malicious WebGL content crash when writing strings
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   272
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   273
    TLS TURN and STUN connections silently fail to simple TCP connections
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   274
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   275
    Use-after-free in IndexedDB
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   276
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   277
    Buffer overflow in libstagefright during MP4 video playback
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   278
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   279
    Double-free when using non-default memory allocators with a
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   280
    zero-length XHR
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   281
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   282
    Out-of-bounds read and write while rendering SVG content
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   283
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   284
    Buffer overflow during CSS restyling
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   285
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   286
    Buffer underflow during MP3 playback
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   287
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   288
    Crash using DrawTarget in Cairo graphics library
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   289
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   290
    Use-after-free in Developer Console date with OpenType Sanitiser
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   291
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   292
    Reading of local files through manipulation of form autocomplete
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   293
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   294
    Local files or privileged URLs in pages can be opened into new tabs
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   295
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   296
    UI Tour whitelisted sites in background tab can spoof foreground
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   297
    tabs
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   298
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   299
    Caja Compiler JavaScript sandbox bypass
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   300
- rebased patches
830
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   301
- requires NSS 3.17.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   302
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   303
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   304
Sat Jan 31 18:37:38 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   305
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   306
- update to Firefox 35.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   307
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   308
  * Kerberos authentication did not work with alias (bmo#1108971)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   309
  * SVG / CSS animation had a regression causing rendering issues on
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   310
    websites like openstreemap.org (bmo#1083079)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   311
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   312
  * document.baseURI did not get updated to document.location after
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   313
    base tag was removed from DOM for site with a CSP (bmo#1121857)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   314
  * With a Right-to-left (RTL) version of Firefox, the text selection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   315
    could be broken (bmo#1104036)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   316
  * CSP had a change in behavior with regard to case sensitivity
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   317
    resources loading (bmo#1122445)
828
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
   318
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
   319
-------------------------------------------------------------------
826
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
   320
Sat Jan 10 18:36:37 UTC 2015 - wr@rosenauer.org
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
   321
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
   322
- update to Firefox 35.0 (bnc#910669)
827
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   323
  notable features:
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   324
  * Firefox Hello with new rooms-based conversations model
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   325
  * Implemented HTTP Public Key Pinning Extension (for enhanced
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   326
    authentication of encrypted connections)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   327
  security fixes:
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   328
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   329
    Miscellaneous memory safety hazards
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   330
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   331
    Uninitialized memory use during bitmap rendering
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   332
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   333
    sendBeacon requests lack an Origin header
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   334
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   335
    Cookie injection through Proxy Authenticate responses
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   336
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   337
    Read of uninitialized memory in Web Audio
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   338
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   339
    Read-after-free in WebRTC
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   340
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   341
    Gecko Media Plugin sandbox escape
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   342
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   343
    Delegated OCSP responder certificates failure with
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   344
    id-pkix-ocsp-nocheck extension
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   345
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   346
    XrayWrapper bypass through DOM objects
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
   347
- rebased patches
809
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   348
- dropped explicit support for everything older than 12.3
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   349
  (including SLES11)
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   350
  * merge firefox-kde.patch and firefox-kde-114.patch
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   351
  * dropped mozilla-sle11.patch
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   352
- reworked specfile to build conditionally based on release channel
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   353
  either Firefox or Firefox Developer Edition
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   354
- added mozilla-openaes-decl.patch to fix implicit declarations
819
5a18bd66e46c [Bug 908892] Updated Firefox (33.0-1.90.1 -> 34.0.5-1.94.3) crashes in tracker-miner-firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 818
diff changeset
   355
- obsolete tracker-miner-firefox < 0.15 because it leads to startup
5a18bd66e46c [Bug 908892] Updated Firefox (33.0-1.90.1 -> 34.0.5-1.94.3) crashes in tracker-miner-firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 818
diff changeset
   356
  crashes (bnc#908892)
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
   357
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
   358
-------------------------------------------------------------------
820
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   359
Sat Dec 13 22:13:00 UTC 2014 - Led <ledest@gmail.com>
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   360
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   361
- fix bashism in mozilla.sh script
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   362
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   363
-------------------------------------------------------------------
813
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   364
Sat Nov 29 21:23:03 UTC 2014 - wr@rosenauer.org
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   365
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   366
- update to Firefox 34.0.5 (bnc#908009)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   367
  * Default search engine changed to Yahoo! for North America
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   368
  * Default search engine changed to Yandex for Belarusian, Kazakh,
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   369
    and Russian locales
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   370
  * Improved search bar (en-US only)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   371
  * Firefox Hello real-time communication client
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   372
  * Easily switch themes/personas directly in the Customizing mode
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   373
  * Implementation of HTTP/2 (draft14) and ALPN
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   374
  * Disabled SSLv3
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   375
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   376
    Miscellaneous memory safety hazards
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   377
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   378
    XBL bindings accessible via improper CSS declarations
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   379
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   380
    XMLHttpRequest crashes with some input streams
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   381
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   382
    CSP leaks redirect data via violation reports
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   383
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   384
    Use-after-free during HTML5 parsing
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   385
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   386
    Buffer overflow while parsing media content
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   387
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   388
    Bad casting from the BasicThebesLayer to BasicContainerLayer
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   389
- rebased patches
806
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 805
diff changeset
   390
- limit linker memory usage for %ix86
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
   391
- rebased patches
805
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 802
diff changeset
   392
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 802
diff changeset
   393
-------------------------------------------------------------------
801
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   394
Fri Nov  7 20:14:32 UTC 2014 - wr@rosenauer.org
787
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   395
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   396
- update to Firefox 33.1
802
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
   397
  * Adding DuckDuckGo as a search option (upstream)
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
   398
  * Forget Button added
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
   399
  * Enhanced Tiles
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
   400
  * Privacy tour introduced
797
3b2d52457c91 fix typo on Recommends
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 789
diff changeset
   401
- fix typo in GStreamer Recommends
787
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   402
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   403
-------------------------------------------------------------------
801
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   404
Tue Nov  4 18:00:35 UTC 2014 - guillaume@opensuse.org
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   405
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   406
- Disable elf-hack for aarch64
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   407
- Enable EGL for aarch64
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   408
- Limit RAM usage during link for %arm
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   409
- Fix _constraints for ARM
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   410
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   411
-------------------------------------------------------------------
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   412
Mon Nov  3 11:36:04 UTC 2014 - dmueller@suse.com
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   413
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   414
- use proper macros for ARM
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   415
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   416
-------------------------------------------------------------------
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   417
Mon Nov  3 11:26:23 UTC 2014 - josua.mayer97@gmail.com
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   418
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   419
- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   420
  to fix compiling.
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   421
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   422
  linking on arm.
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   423
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
   424
-------------------------------------------------------------------
788
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   425
Thu Oct 30 11:31:05 UTC 2014 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   426
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   427
- update to Firefox 33.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   428
  * Fix a startup crash with some combination of hardware and drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   429
  33.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   430
  * Firefox displays a black screen at start-up with certain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   431
    graphics drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   432
- adjusted _constraints for ARM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   433
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
   434
-------------------------------------------------------------------
786
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
   435
Tue Oct 28 15:23:09 UTC 2014 - josua.mayer97@gmail.com
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
   436
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
   437
- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)
785
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 781
diff changeset
   438
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 781
diff changeset
   439
-------------------------------------------------------------------
781
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
   440
Sat Oct 25 08:45:43 UTC 2014 - wr@rosenauer.org
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
   441
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
   442
- define /usr/share/myspell as additional dictionary location
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
   443
  and remove add-plugins.sh finally (bnc#900639)
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
   444
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
   445
-------------------------------------------------------------------
780
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
   446
Sun Oct 19 12:59:28 UTC 2014 - vindex17@outlook.it
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
   447
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
   448
- use Firefox default optimization flags instead of -Os
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
   449
- specfile cleanup
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
   450
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
   451
-------------------------------------------------------------------
777
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   452
Wed Oct 15 08:05:33 UTC 2014 - wr@rosenauer.org
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   453
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   454
- fix build for all ppc by not enabling elf-hack
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   455
  (bnc#901213)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   456
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   457
-------------------------------------------------------------------
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
   458
Sat Oct 11 08:48:24 UTC 2014 - wr@rosenauer.org
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
   459
777
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   460
- update to Firefox 33.0 (bnc#900941)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   461
  New features:
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   462
  * OpenH264 support (sandboxed)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   463
  * Enhanced Tiles
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   464
  * Improved search experience through the location bar
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   465
  * Slimmer and faster JavaScript strings
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   466
  * New CSP (Content Security Policy) backend
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   467
  * Support for connecting to HTTP proxy over HTTPS
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   468
  * Improved reliability of the session restoration
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   469
  * Proprietary window.crypto properties/functions removed
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   470
  Security:
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   471
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   472
    Miscellaneous memory safety hazards
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   473
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   474
    Buffer overflow during CSS manipulation
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   475
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   476
    Web Audio memory corruption issues with custom waveforms
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   477
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   478
    Out-of-bounds write with WebM video
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   479
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   480
    Further uninitialized memory use during GIF rendering
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   481
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   482
    Use-after-free interacting with text directionality
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   483
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   484
    Key pinning bypasses
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   485
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   486
    Inconsistent video sharing within iframe
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   487
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   488
    Accessing cross-origin objects via the Alarms API
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
   489
    (only relevant for installed web apps)
765
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
   490
- requires NSPR 4.10.7
773
22545f50497c update to 33.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 769
diff changeset
   491
- requires NSS 3.17.1
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
   492
- removed obsolete patches:
773
22545f50497c update to 33.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 769
diff changeset
   493
  * mozilla-ppc.patch
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
   494
  * mozilla-libproxy-compat.patch
774
f61bd1cd52c2 added basic appstream appdata information
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 773
diff changeset
   495
- added basic appdata information
769
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   496
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   497
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   498
Sat Sep 20 13:33:51 UTC 2014 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   499
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   500
- update to Firefox 32.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   501
  * just a version bump for our builds
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   502
  * fixed the in application update process for certain environments
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   503
    (in application update is not enabled in openSUSE and Linux
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   504
    is unaffected in any case)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   505
- build with --disable-optimize for 13.1 and above for i586 to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
   506
  workaround miscompilations (bnc#896624)
767
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 765
diff changeset
   507
- use some more build flags to align with upstream
765
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
   508
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
   509
-------------------------------------------------------------------
761
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   510
Sat Sep 13 16:58:16 UTC 2014 - wr@rosenauer.org
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   511
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   512
- update to Firefox 32.0.1
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   513
  * fixed stability issues for computers with multiple graphics cards
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   514
  * mixed content icon may be incorrectly displayed instead of lock
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   515
    icon for SSL sites in 32.0 (
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   516
  * WebRTC: setRemoteDescription() silently fails if no success
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   517
    callback is specified (bmo#1063971)
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   518
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
   519
-------------------------------------------------------------------
759
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   520
Sun Aug 31 07:44:54 UTC 2014 - wr@rosenauer.org
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   521
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   522
- update to Firefox 32.0 (bnc#894370)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   523
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   524
    Miscellaneous memory safety hazards
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   525
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   526
    Use-after-free during DOM interactions with SVG
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   527
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   528
    Uninitialized memory use during GIF rendering
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   529
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   530
    Out-of-bounds read in Web Audio audio timeline
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   531
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   532
    Use-after-free setting text directionality
748
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
   533
- rebased patches
756
e4fa9844604e update to beta8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 753
diff changeset
   534
- requires NSS 3.16.4
748
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
   535
- removed upstreamed patch
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
   536
  * mozilla-aarch64-bmo-810631.patch
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
   537
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
   538
-------------------------------------------------------------------
759
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   539
Wed Aug 20 13:50:58 CEST 2014 - behlert@suse.de
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   540
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   541
- adapted _constraints, used more than 3900MB on s390x during
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   542
  last build
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   543
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
   544
-------------------------------------------------------------------
753
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   545
Sun Jul 20 18:11:44 UTC 2014 - wr@rosenauer.org
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   546
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   547
- update to Firefox 31.0 (bnc#887746)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   548
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   549
    Miscellaneous memory safety hazards
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   550
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   551
    Buffer overflow during Web Audio buffering for playback
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   552
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   553
    Use-after-free in Web Audio due to incorrect control message ordering
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   554
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   555
    Toolbar dialog customization event spoofing
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   556
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   557
    Use-after-free with FireOnStateChange event
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   558
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   559
    Exploitable WebGL crash with Cesium JavaScript library
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   560
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   561
    Use-after-free while when manipulating certificates in the trusted cache
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   562
    (solved with NSS 3.16.2 requirement)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   563
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   564
    Crash in Skia library when scaling high quality images
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   565
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   566
    (bmo#1015973, bmo#1026022, bmo#997795)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   567
    Certificate parsing broken by non-standard character encoding
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   568
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   569
    IFRAME sandbox same-origin access through redirect
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   570
- use EGL on ARM
746
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
   571
- rebased patches
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
   572
- requires NSS 3.16.2
753
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
   573
- requires python-devel (not only python)
746
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
   574
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
   575
-------------------------------------------------------------------
744
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   576
Mon Jun  9 08:28:17 UTC 2014 - wr@rosenauer.org
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   577
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   578
- update to Firefox 30.0 (bnc#881874)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   579
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   580
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   581
     bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   582
     bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   583
     bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   584
     bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   585
     bmo#1009952, bmo#1011007)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   586
    Miscellaneous memory safety hazards (rv:30.0)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   587
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   588
    (bmo#989994, bmo#999274, bmo#1005584)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   589
    Use-after-free and out of bounds issues found using Address
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   590
    Sanitizer
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   591
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   592
    Clickjacking through cursor invisability after Flash interaction
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   593
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   594
    Use-after-free in Event Listener Manager
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   595
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   596
    Use-after-free with SMIL Animation Controller
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   597
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   598
    Buffer overflow in Web Audio Speex resampler
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   599
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   600
    Buffer overflow in Gamepad API
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   601
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   602
    Out of bounds write in NSPR
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   603
- rebased patches
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   604
- removed obsolete patches
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   605
  * firefox-browser-css.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   606
  * mozilla-aarch64-bmo-962488.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   607
  * mozilla-aarch64-bmo-963023.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   608
  * mozilla-aarch64-bmo-963024.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   609
  * mozilla-aarch64-bmo-963027.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   610
  * mozilla-ppc64-xpcom.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   611
  * mozilla-ppc64le-javascript.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   612
  * mozilla-ppc64le-libffi.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   613
  * mozilla-ppc64le-mfbt.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   614
  * mozilla-ppc64le-webrtc.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   615
  * mozilla-ppc64le-xpcom.patch
744
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   616
  * mozilla-ppc64le-build.patch
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
   617
- requires NSPR 4.10.6
725
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
   618
- enabled GStreamer 1.0 usage for 13.2 and above
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
   619
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
   620
-------------------------------------------------------------------
738
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
   621
Sat May 10 06:09:37 UTC 2014 - wr@rosenauer.org
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
   622
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
   623
- update to Firefox 29.0.1
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
   624
  * Seer disabled by default (bmo#1005958)
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
   625
  * Session Restore failed with a corrupted sessionstore.js file
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
   626
    (bmo#1001167)
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
   627
  * pdf.js printing white page (bmo#1003707, bnc#876833)
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   628
- general.useragent.locale gets overwritten with en-US while it
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   629
  should be using the active langpack's setting
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   630
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   631
-------------------------------------------------------------------
727
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   632
Sat Apr 26 12:18:07 UTC 2014 - wr@rosenauer.org
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   633
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   634
- update to Firefox 29.0 (bnc#875378)
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   635
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   636
    Miscellaneous memory safety hazards
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   637
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   638
    Web Audio memory corruption issues
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   639
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   640
    Out of bounds read while decoding JPG images
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   641
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   642
    Buffer overflow when using non-XBL object as XBL
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   643
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   644
    Use-after-free in the Text Track Manager for HTML video
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   645
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   646
    Out-of-bounds write in Cairo
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   647
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   648
    Privilege escalation through Web Notification API
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   649
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   650
    Cross-site scripting (XSS) using history navigations
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   651
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   652
    Use-after-free in imgLoader while resizing images
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   653
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   654
    Incorrect IDNA domain name matching for wildcard certificates
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   655
    (fixed by NSS 3.16)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   656
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   657
    Use-after-free in nsHostResolver
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   658
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
   659
    Debugger can bypass XrayWrappers with JavaScript
727
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   660
- rebased patches
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   661
- removed obsolete patches
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   662
  * firefox-browser-css.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   663
  * mozilla-aarch64-599882cfb998.diff
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   664
  * mozilla-aarch64-bmo-963028.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   665
  * mozilla-aarch64-bmo-963029.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   666
  * mozilla-aarch64-bmo-963030.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
   667
  * mozilla-aarch64-bmo-963031.patch
716
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
   668
- requires NSS 3.16
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
   669
- added mozilla-icu-strncat.patch to fix post build checks
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
   670
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
   671
-------------------------------------------------------------------
715
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   672
Mon Apr  7 15:34:31 UTC 2014 - dmueller@suse.com
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   673
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   674
- add mozilla-aarch64-599882cfb998.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   675
      mozilla-aarch64-bmo-810631.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   676
      mozilla-aarch64-bmo-962488.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   677
      mozilla-aarch64-bmo-963030.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   678
      mozilla-aarch64-bmo-963027.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   679
      mozilla-aarch64-bmo-963028.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   680
      mozilla-aarch64-bmo-963029.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   681
      mozilla-aarch64-bmo-963023.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   682
      mozilla-aarch64-bmo-963024.patch,
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   683
      mozilla-aarch64-bmo-963031.patch: AArch64 porting
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   684
e1c226a4de34 AArch64 porting
Dirk M?ller <dmueller@suse.com>
parents: 714
diff changeset
   685
-------------------------------------------------------------------
714
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   686
Mon Mar 24 16:18:44 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   687
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   688
- Add patch for bmo#973977
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   689
  * mozilla-ppc64-xpcom.patch
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   690
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   691
-------------------------------------------------------------------
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   692
Mon Mar 24 14:29:12 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   693
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   694
- Refresh mozilla-ppc64le-xpcom.patch patch
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   695
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   696
-------------------------------------------------------------------
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   697
Fri Mar 21 19:01:42 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   698
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   699
- Adapt mozilla-ppc64le-xpcom.patch to Mozilla > 24.0 build system
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   700
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   701
-------------------------------------------------------------------
711
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
   702
Sun Mar 16 13:39:15 UTC 2014 - wr@rosenauer.org
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
   703
712
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   704
- update to Firefox 28.0 (bnc#868603)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   705
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   706
    Miscellaneous memory safety hazards
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   707
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   708
    Out of bounds read during WAV file decoding
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   709
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   710
    crypto.generateCRMFRequest does not validate type of key
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   711
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   712
    Spoofing attack on WebRTC permission prompt
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   713
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   714
    onbeforeunload and Javascript navigation DOS
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   715
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   716
    WebGL content injection from one domain to rendering in another
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   717
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   718
    Content Security Policy for data: documents not preserved by
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   719
    session restore
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   720
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   721
    Information disclosure through polygon rendering in MathML
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   722
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   723
    Memory corruption in Cairo during PDF font rendering
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   724
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   725
    SVG filters information disclosure through feDisplacementMap
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   726
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   727
    Privilege escalation using WebIDL-implemented APIs
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   728
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   729
    Use-after-free in TypeObject
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   730
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   731
    Out-of-bounds read/write through neutering ArrayBuffer objects
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   732
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   733
    Out-of-bounds write through TypedArrayObject after neutering
707
bfa2e0576454 update to 28.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 705
diff changeset
   734
- requires NSPR 4.10.3 and NSS 3.15.5
712
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
   735
- new build dependency (and recommends):
703
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   736
  * libpulse
710
5341dc98d26c update of PPC64LE patches taken from
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 707
diff changeset
   737
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
711
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
   738
- rebased patches
703
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   739
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   740
-------------------------------------------------------------------
704
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   741
Mon Feb 17 11:59:28 UTC 2014 - wr@rosenauer.org
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   742
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   743
- update to Firefox 27.0.1
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   744
  * Fixed stability issues with Greasemonkey and other JS that used
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   745
    ClearTimeoutOrInterval
714
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
   746
  * JS math correctness issue (bmo#941381)
704
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   747
- incorporate Google API key for geolocation (bnc#864170)
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   748
- updated list of "other" locales in RPM requirements
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   749
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
   750
-------------------------------------------------------------------
699
f810fbe5fece update to 27.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 697
diff changeset
   751
Tue Jan 28 15:45:41 UTC 2014 - wr@rosenauer.org
f810fbe5fece update to 27.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 697
diff changeset
   752
700
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   753
- update to Firefox 27.0 (bnc#861847)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   754
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   755
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   756
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   757
    Clone protected content with XBL scopes
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   758
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   759
    UI selection timeout missing on download prompts
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   760
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   761
    Incorrect use of discarded images by RasterImage
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   762
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   763
    Information disclosure with *FromPoint on iframes
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   764
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   765
    Profile path leaks to Android system log
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   766
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   767
    XSLT stylesheets treated as styles in Content Security Policy
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   768
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   769
    Use-after-free with imgRequestProxy and image proccessing
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   770
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   771
    Cross-origin information leak through web workers
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   772
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   773
    Firefox default start page UI content invokable by script
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   774
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   775
    Crash when using web workers with asm.js
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   776
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   777
    (bmo#934545, bmo#930874, bmo#930857)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   778
    NSS ticket handling issues
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   779
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
   780
    Inconsistent JavaScript handling of access to Window objects
691
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
   781
- requires NSS 3.15.4 or higher
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
   782
- rebased/reworked patches
697
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
   783
- removed obsolete mozilla-bug929439.patch
691
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
   784
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
   785
-------------------------------------------------------------------
692
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
   786
Thu Dec 12 21:19:54 UTC 2013 - uweigand@de.ibm.com
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
   787
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
   788
- Add support for powerpc64le-linux.
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
   789
  * mozilla-ppc64le.patch: general support
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
   790
  * mozilla-libffi-ppc64le.patch: libffi backport
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
   791
  * mozilla-xpcom-ppc64le.patch: port xpcom
697
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
   792
- Add build fix from mainline.
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
   793
  * mozilla-bug929439.patch
692
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
   794
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
   795
-------------------------------------------------------------------
688
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
   796
Sun Dec  8 20:26:23 UTC 2013 - wr@rosenauer.org
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
   797
689
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   798
- update to Firefox 26.0 (bnc#854367, bnc#854370)
686
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
   799
  * rebased patches
688
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
   800
  * requires NSPR 4.10.2 and NSS 3.15.3.1
689
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   801
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   802
    Miscellaneous memory safety hazards
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   803
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   804
    Application Installation doorhanger persists on navigation
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   805
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   806
    Character encoding cross-origin XSS attack
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   807
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   808
    Sandbox restrictions not applied to nested object elements
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   809
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   810
    Use-after-free in event listeners
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   811
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   812
    Use-after-free during Table Editing
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   813
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   814
    Potential overflow in JavaScript binary search algorithms
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   815
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   816
    Segmentation violation when replacing ordered list elements
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   817
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   818
    Linux clipboard information disclosure though selection paste
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   819
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   820
    Trust settings for built-in roots ignored during EV certificate
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   821
    validation
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   822
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   823
    Use-after-free in synthetic mouse movement
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   824
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   825
    GetElementIC typed array stubs can be generated outside observed
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   826
    typesets
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   827
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   828
    JPEG information leak
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   829
  * MFSA 2013-117 (bmo#946351)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   830
    Mis-issued ANSSI/DCSSI certificate
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
   831
    (fixed via NSS 3.15.3.1)
686
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
   832
- removed gecko.js preference file as GStreamer is enabled by
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
   833
  default now
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
   834
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
   835
-------------------------------------------------------------------
681
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
   836
Thu Oct 24 18:16:19 UTC 2013 - wr@rosenauer.org
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
   837
682
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   838
- update to Firefox 25.0 (bnc#847708)
680
be770d3cbc02 Firefox 25 beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 676
diff changeset
   839
  * rebased patches
681
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
   840
  * requires NSS 3.15.2 or above
682
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   841
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   842
    Miscellaneous memory safety hazards
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   843
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   844
    Spoofing addressbar through SELECT element
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   845
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   846
    Access violation with XSLT and uninitialized data
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   847
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   848
    Improperly initialized memory and overflows in some JavaScript
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   849
    functions
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   850
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   851
    Writing to cycle collected object during image decoding
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   852
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   853
    Use-after-free when updating offline cache
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   854
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   855
    Security bypass of PDF.js checks using iframes
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   856
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   857
    (bmo#915210, bmo#915576, bmo#916685)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   858
    Miscellaneous use-after-free issues found through ASAN fuzzing
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   859
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   860
    Memory corruption in workers
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   861
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
   862
    Use-after-free in HTML document templates
676
ed32bb3eb2f0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 672
diff changeset
   863
ed32bb3eb2f0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 672
diff changeset
   864
-------------------------------------------------------------------
672
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
   865
Tue Sep 24 07:31:30 UTC 2013 - wr@rosenauer.org
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
   866
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
   867
- as GStreamer is not automatically required anymore but loaded
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
   868
  dynamically if available, require it explicitely
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
   869
- recommend optional GStreamer plugins for comprehensive media
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
   870
  support
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
   871
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
   872
-------------------------------------------------------------------
666
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
   873
Mon Sep 16 11:59:18 UTC 2013 - lnussel@suse.de
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
   874
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
   875
- move greek to the translations-common package (bnc#840551)
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
   876
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
   877
-------------------------------------------------------------------
664
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   878
Sat Sep 14 14:39:58 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   879
666
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
   880
- update to Firefox 24.0 (bnc#840485)
667
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   881
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   882
    Miscellaneous memory safety hazards
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   883
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   884
    Improper state in HTML5 Tree Builder with templates
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   885
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   886
    Integer overflow in ANGLE library
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   887
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   888
    Use-after-free in Animation Manager during stylesheet cloning
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   889
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   890
    NativeKey continues handling key messages after widget is destroyed
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   891
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   892
    Use-after-free with select element
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   893
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   894
    Calling scope for new Javascript objects can lead to memory corruption
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   895
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   896
    Uninitialized data in IonMonkey
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   897
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   898
    Compartment mismatch re-attaching XBL-backed nodes
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   899
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   900
    Buffer overflow with multi-column, lists, and floats
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   901
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   902
    Memory corruption involving scrolling
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   903
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   904
    User-defined properties on DOM proxies get the wrong "this" object
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   905
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   906
    GC hazard with default compartments and frame chain restoration
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
   907
- enable gstreamer explicitely via pref (gecko.js)
663
faf4f017af5c require NSS 3.15.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 661
diff changeset
   908
- require NSS 3.15.1
661
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   909
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   910
-------------------------------------------------------------------
664
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   911
Mon Aug 26 07:35:36 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   912
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   913
- update to Firefox 23.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   914
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   915
    (bmo#901527)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   916
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
   917
-------------------------------------------------------------------
661
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   918
Sun Aug  4 18:30:11 UTC 2013 - wr@rosenauer.org
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   919
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   920
- update to Firefox 23.0 (bnc#833389)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   921
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   922
    Miscellaneous memory safety hazards
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   923
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   924
    Use after free mutating DOM during SetBody
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   925
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   926
    Buffer underflow when generating CRMF requests
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   927
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   928
    Crash during WAV audio file decoding
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   929
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   930
    Document URI misrepresentation and masquerading
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   931
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   932
    CRMF requests allow for code execution and XSS attacks
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   933
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   934
    Bypass of XrayWrappers using XBL Scopes
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   935
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   936
    Wrong principal used for validating URI for some Javascript
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   937
    components
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   938
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   939
    Same-origin bypass with web workers and XMLHttpRequest
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   940
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
   941
    Local Java applets may read contents of local file system
653
38c67b6b2f37 Aurora 23 (20130616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 650
diff changeset
   942
- requires NSPR 4.10 and NSS 3.15
659
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   943
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   944
-------------------------------------------------------------------
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   945
Wed Jul  3 17:14:35 UTC 2013 - dmueller@suse.com
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   946
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   947
- fix build on ARM (/-g/ matches /-grecord-switches/)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   948
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   949
-------------------------------------------------------------------
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   950
Sat Jun 22 17:48:06 UTC 2013 - wr@rosenauer.org
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   951
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   952
- update to Firefox 22.0 (bnc#825935)
650
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   953
  * removed obsolete patches
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   954
    + mozilla-qcms-ppc.patch
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   955
    + mozilla-gstreamer-760140.patch
659
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   956
  * GStreamer support does not build on 12.1 anymore (build only
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   957
    on 12.2 and later)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   958
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   959
    Miscellaneous memory safety hazards
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   960
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   961
    Memory corruption found using Address Sanitizer
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   962
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   963
    Privileged content access and execution via XBL
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   964
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   965
    Arbitrary code execution within Profiler
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   966
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   967
    Execution of unmapped memory through onreadystatechange event
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   968
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   969
    Data in the body of XHR HEAD requests leads to CSRF attacks
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   970
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   971
    SVG filters can lead to information disclosure
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   972
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   973
    PreserveWrapper has inconsistent behavior
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   974
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   975
    Sandbox restrictions not applied to nested frame elements
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   976
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   977
    X-Frame-Options ignored when using server push with multi-part
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   978
    responses
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   979
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   980
    XrayWrappers can be bypassed to run user defined methods in a
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   981
    privileged context
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   982
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   983
    getUserMedia permission dialog incorrectly displays location
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   984
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
   985
    Homograph domain spoofing in .com, .net and .name
650
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   986
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   987
-------------------------------------------------------------------
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   988
Tue Jun 11 21:06:58 UTC 2013 - dvaleev@suse.com
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   989
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   990
- Fix qcms altivec include (mozilla-qcms-ppc.patch)
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   991
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
   992
-------------------------------------------------------------------
647
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
   993
Fri May 10 05:25:39 UTC 2013 - wr@rosenauer.org
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
   994
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
   995
- update to Firefox 21.0 (bnc#819204)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
   996
  * removed upstreamed patch firefox-712763.patch
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
   997
  * removed disabled mozilla-disable-neon-option.patch
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
   998
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
   999
    Miscellaneous memory safety hazards
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1000
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1001
    Privileged access for content level constructor
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1002
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1003
    File input control has access to full path
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1004
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1005
    Use-after-free with video and onresize event
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1006
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1007
    Uninitialized functions in DOMSVGZoomEvent
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1008
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1009
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  1010
    Memory corruption found using Address Sanitizer
645
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  1011
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  1012
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  1013
Tue Apr  9 06:41:31 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  1014
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  1015
- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  1016
  (remove mozilla-gstreamer-1.patch)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  1017
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  1018
-------------------------------------------------------------------
640
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  1019
Fri Apr  5 17:04:11 UTC 2013 - schwab@linux-m68k.org
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  1020
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  1021
- Explicitly disable WebRTC support on non-x86, the configure script
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  1022
  disables it only half-heartedly
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  1023
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  1024
-------------------------------------------------------------------
639
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1025
Fri Mar 29 22:15:21 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1026
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1027
- update to Firefox 20.0 (bnc#813026)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1028
  * requires NSPR 4.9.5 and NSS 3.14.3
640
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  1029
  * mozilla-webrtc-ppc.patch included upstream
639
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1030
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1031
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1032
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1033
    Out-of-bounds write in Cairo library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1034
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1035
    WebGL crash with Mesa graphics driver on Linux
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1036
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1037
    Bypass of SOW protections allows cloning of protected nodes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1038
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1039
    Bypass of tab-modal dialog origin disclosure
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1040
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1041
    Cross-site scripting (XSS) using timed history navigations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1042
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  1043
    Memory corruption while rendering grayscale PNG images
625
9f6e14430916 Bug 806917 - support GStreamer 1.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 624
diff changeset
  1044
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)
633
7c6f56a37ed6 armv7hl build fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 629 631
diff changeset
  1045
7c6f56a37ed6 armv7hl build fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 629 631
diff changeset
  1046
-------------------------------------------------------------------
631
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1047
Tue Mar 12 23:08:15 UTC 2013 - dmueller@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1048
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1049
- build fixes for armv7hl:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1050
  * disable debug build as armv7hl does not have enough memory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1051
  * disable webrtc on armv7hl as it is non-compiling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1052
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1053
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1054
Thu Mar  7 19:03:32 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1055
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1056
- update to Firefox 19.0.2 (bnc#808243)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1057
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1058
    Use-after-free in HTML Editor
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1059
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  1060
-------------------------------------------------------------------
623
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  1061
Thu Feb 28 22:06:36 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  1062
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  1063
- update to Firefox 19.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  1064
  * blocklist updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  1066
-------------------------------------------------------------------
615
fb49ee6e3828 Firefox 19.0 goes release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 613
diff changeset
  1067
Sat Feb 16 07:08:55 UTC 2013 - wr@rosenauer.org
fb49ee6e3828 Firefox 19.0 goes release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 613
diff changeset
  1068
619
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1069
- update to Firefox 19.0 (bnc#804248)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1070
  * MFSA 2013-21/CVE-2013-0783/2013-0784
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1071
    Miscellaneous memory safety hazards
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1072
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1073
    Out-of-bounds read in image rendering
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1074
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1075
    Wrapped WebIDL objects can be wrapped again
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1076
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1077
    Web content bypass of COW and SOW security wrappers
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1078
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1079
    Privacy leak in JavaScript Workers
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1080
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1081
    Use-after-free in nsImageLoadingContent
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1082
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1083
    Phishing on HTTPS connection through malicious proxy
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1084
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1085
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1086
    Use-after-free, out of bounds read, and buffer overflow issues
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1087
    found using Address Sanitizer
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  1088
- removed obsolete patches
666cf9899b82 changelog
Wolfgang