MozillaFirefox/MozillaFirefox.changes
branchmozilla-1.9.2
changeset 348 ebdb6a9e0132
parent 331 ea85aeecf72f
child 362 92e81e89dc95
--- a/MozillaFirefox/MozillaFirefox.changes	Wed Sep 21 12:31:47 2011 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Tue Nov 01 21:59:24 2011 +0100
@@ -1,7 +1,22 @@
+-------------------------------------------------------------------
+Tue Nov  1 20:58:48 UTC 2011 - wr@rosenauer.org
+
+- security update to 3.6.24
+
 -------------------------------------------------------------------
 Wed Sep 21 10:20:43 UTC 2011 - wr@rosenauer.org
 
-- security update to 3.6.23
+- security update to 3.6.23 (bnc#720264)
+  * MFSA 2011-36/CVE-2011-2996 (bmo#555018)
+    Miscellaneous memory safety hazards
+  * MFSA 2011-37/CVE-2011-2998 (bmo#684815)
+    Integer underflow when using JavaScript RegExp
+  * MFSA 2011-38/CVE-2011-2999 (bmo#665548)
+    XSS via plugins and shadowed window.location object
+  * MFSA 2011-39/CVE-2011-3000 (bmo#655389)
+    Defense against multiple Location headers due to CRLF Injection
+  * MFSA 2011-40/CVE-2011-2372/CVE-2011-3001
+    Code installation through holding down Enter
 
 -------------------------------------------------------------------
 Wed Sep  7 14:30:34 UTC 2011 - pcerny@suse.com