1 -------------------------------------------------------------------

     2 Thu May  1 15:29:04 UTC 2014 - wr@rosenauer.org

     3 

     4 - general.useragent.locale gets overwritten with en-US while it

     5   should be using the active langpack's setting

     6 

    11   * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519

    12     Miscellaneous memory safety hazards

    13   * MFSA 2014-36/CVE-2014-1522 (bmo#995289)

    14     Web Audio memory corruption issues

    15   * MFSA 2014-37/CVE-2014-1523 (bmo#969226)

    16     Out of bounds read while decoding JPG images

    17   * MFSA 2014-38/CVE-2014-1524 (bmo#989183)

    18     Buffer overflow when using non-XBL object as XBL

    19   * MFSA 2014-39/CVE-2014-1525 (bmo#989210)

    20     Use-after-free in the Text Track Manager for HTML video

    21   * MFSA 2014-41/CVE-2014-1528 (bmo#963962)

    22     Out-of-bounds write in Cairo

    23   * MFSA 2014-42/CVE-2014-1529 (bmo#987003)

    24     Privilege escalation through Web Notification API

    25   * MFSA 2014-43/CVE-2014-1530 (bmo#895557)

    26     Cross-site scripting (XSS) using history navigations

    27   * MFSA 2014-44/CVE-2014-1531 (bmo#987140)

    28     Use-after-free in imgLoader while resizing images

    29   * MFSA 2014-45/CVE-2014-1492 (bmo#903885)

    30     Incorrect IDNA domain name matching for wildcard certificates

    31     (fixed by NSS 3.16)

    32   * MFSA 2014-46/CVE-2014-1532 (bmo#966006)

    33     Use-after-free in nsHostResolver

    34   * MFSA 2014-47/CVE-2014-1526 (bmo#988106)

    35     Debugger can bypass XrayWrappers with JavaScript