xulrunner/xulrunner.changes
changeset 539 b1134fe91f9a
parent 535 cba7622bad5d
child 542 890521f49a09
child 562 9069817b5cac
child 585 5a44d417c9b5
equal deleted inserted replaced
529:4812378b5646 539:b1134fe91f9a
     1 -------------------------------------------------------------------
     1 -------------------------------------------------------------------
     2 Fri Jul 20 07:39:54 UTC 2012 - wr@rosenauer.org
     2 Tue Sep 11 09:26:09 UTC 2012 - wr@rosenauer.org
     3 
     3 
     4 - update to 15.0b1
     4 - update to 16.0b2
       
     5 
       
     6 -------------------------------------------------------------------
       
     7 Sun Aug 26 13:48:04 UTC 2012 - wr@rosenauer.org
       
     8 
       
     9 - update to 15.0 (bnc#777588)
       
    10   * MFSA 2012-57/CVE-2012-1970
       
    11     Miscellaneous memory safety hazards
       
    12   * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
       
    13     CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
       
    14     CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
       
    15     Use-after-free issues found using Address Sanitizer
       
    16   * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
       
    17     Location object can be shadowed using Object.defineProperty
       
    18   * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
       
    19     Escalation of privilege through about:newtab
       
    20   * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
       
    21     Memory corruption with bitmap format images with negative height
       
    22   * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
       
    23     WebGL use-after-free and memory corruption
       
    24   * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
       
    25     SVG buffer overflow and use-after-free issues
       
    26   * MFSA 2012-64/CVE-2012-3971
       
    27     Graphite 2 memory corruption
       
    28   * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
       
    29     Out-of-bounds read in format-number in XSLT
       
    30   * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
       
    31     HTTPMonitor extension allows for remote debugging without explicit
       
    32     activation
       
    33   * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
       
    34     DOMParser loads linked resources in extensions when parsing
       
    35     text/html
       
    36   * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
       
    37     Incorrect site SSL certificate data display
       
    38   * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
       
    39     Location object security checks bypassed by chrome code
       
    40   * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
       
    41     Web console eval capable of executing chrome-privileged code
       
    42 - fix HTML5 video crash with GStreamer enabled (bmo#761030)
       
    43 - fixed filelist
       
    44 
       
    45 -------------------------------------------------------------------
       
    46 Fri Aug 17 13:09:49 UTC 2012 - dmueller@suse.com
       
    47 
       
    48 - fix build on ARM:
       
    49   * disable crashreporter, it does not build
       
    50   * reduce debuginfo during built to avoid running out of memory
     5 
    51 
     6 -------------------------------------------------------------------
    52 -------------------------------------------------------------------
     7 Sat Jul 14 19:33:44 UTC 2012 - wr@rosenauer.org
    53 Sat Jul 14 19:33:44 UTC 2012 - wr@rosenauer.org
     8 
    54 
     9 - update to 14.0.1 (bnc#771583)
    55 - update to 14.0.1 (bnc#771583)