2 Tue Nov 25 20:20:46 UTC 2014 - wr@rosenauer.org

     2 Sat Nov 29 21:23:03 UTC 2014 - wr@rosenauer.org

     3 

     3 

     4 - update to Firefox 34.0b11

     4 - update to Firefox 34.0.5 (bnc#908009)

     5   * Default search engine changed to Yahoo! for North America

     6   * Default search engine changed to Yandex for Belarusian, Kazakh,

     7     and Russian locales

     8   * Improved search bar (en-US only)

     9   * Firefox Hello real-time communication client

    10   * Easily switch themes/personas directly in the Customizing mode

    11   * Implementation of HTTP/2 (draft14) and ALPN

    12   * Disabled SSLv3

    13   * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588

    14     Miscellaneous memory safety hazards

    15   * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)

    16     XBL bindings accessible via improper CSS declarations

    17   * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)

    18     XMLHttpRequest crashes with some input streams

    19   * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)

    20     CSP leaks redirect data via violation reports

    21   * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)

    22     Use-after-free during HTML5 parsing

    23   * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)

    24     Buffer overflow while parsing media content

    25   * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)

    26     Bad casting from the BasicThebesLayer to BasicContainerLayer

    27 - rebased patches