MozillaFirefox/MozillaFirefox.changes
branchfirefox22
changeset 656 1f947ce4bf72
parent 654 3b3a6d8cdaab
equal deleted inserted replaced
654:3b3a6d8cdaab 656:1f947ce4bf72
     5   * removed obsolete patches
     5   * removed obsolete patches
     6     + mozilla-qcms-ppc.patch
     6     + mozilla-qcms-ppc.patch
     7     + mozilla-gstreamer-760140.patch
     7     + mozilla-gstreamer-760140.patch
     8   * GStreamer support does not build on 12.1 anymore (build only
     8   * GStreamer support does not build on 12.1 anymore (build only
     9     on 12.2 and later)
     9     on 12.2 and later)
       
    10   * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
       
    11     Miscellaneous memory safety hazards
       
    12   * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
       
    13     Memory corruption found using Address Sanitizer
       
    14   * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
       
    15     Privileged content access and execution via XBL
       
    16   * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
       
    17     Arbitrary code execution within Profiler
       
    18   * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
       
    19     Execution of unmapped memory through onreadystatechange event
       
    20   * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
       
    21     Data in the body of XHR HEAD requests leads to CSRF attacks
       
    22   * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
       
    23     SVG filters can lead to information disclosure
       
    24   * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
       
    25     PreserveWrapper has inconsistent behavior
       
    26   * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
       
    27     Sandbox restrictions not applied to nested frame elements
       
    28   * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
       
    29     X-Frame-Options ignored when using server push with multi-part
       
    30     responses
       
    31   * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
       
    32     XrayWrappers can be bypassed to run user defined methods in a
       
    33     privileged context
       
    34   * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
       
    35     getUserMedia permission dialog incorrectly displays location
       
    36   * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
       
    37     Homograph domain spoofing in .com, .net and .name
    10 
    38 
    11 -------------------------------------------------------------------
    39 -------------------------------------------------------------------
    12 Tue Jun 11 21:06:58 UTC 2013 - dvaleev@suse.com
    40 Tue Jun 11 21:06:58 UTC 2013 - dvaleev@suse.com
    13 
    41 
    14 - Fix qcms altivec include (mozilla-qcms-ppc.patch)
    42 - Fix qcms altivec include (mozilla-qcms-ppc.patch)