diff -r ab93666f5ff7 -r 5561a483919b MozillaFirefox/firefox-esr.changes --- a/MozillaFirefox/firefox-esr.changes Thu Jan 30 22:17:50 2014 +0100 +++ b/MozillaFirefox/firefox-esr.changes Wed Feb 05 07:16:15 2014 +0100 @@ -1,4 +1,25 @@ ------------------------------------------------------------------- +Thu Jan 30 21:21:09 UTC 2014 - wr@rosenauer.org + +- update to Firefox 24.3.0esr (bnc#861847) + * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478 + Miscellaneous memory safety hazards (rv:27.0 / rv:24.3) + * MFSA 2014-02/CVE-2014-1479 (bmo#911864) + Clone protected content with XBL scopes + * MFSA 2014-04/CVE-2014-1482 (bmo#943803) + Incorrect use of discarded images by RasterImage + * MFSA 2014-08/CVE-2014-1486 (bmo#942164) + Use-after-free with imgRequestProxy and image proccessing + * MFSA 2014-09/CVE-2014-1487 (bmo#947592) + Cross-origin information leak through web workers + * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491 + (bmo#934545, bmo#930874, bmo#930857) + NSS ticket handling issues + * MFSA 2014-13/CVE-2014-1481(bmo#936056) + Inconsistent JavaScript handling of access to Window objects +- requires NSS 3.15.4 + +------------------------------------------------------------------- Sat Dec 7 17:30:18 UTC 2013 - wr@rosenauer.org - update to Firefox 24.2.0esr (bnc#854367, bnc#854370)