diff -r 7af5d6a0c962 -r e6df4625c730 MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Fri Aug 05 13:38:05 2011 +0200 +++ b/MozillaFirefox/MozillaFirefox.changes Fri Aug 19 19:19:32 2011 +0200 @@ -1,3 +1,22 @@ +------------------------------------------------------------------- +Fri Aug 12 21:16:19 UTC 2011 - wr@rosenauer.org + +- update to 6.0 (bnc#712224) + included security fixes MFSA 2011-29 + * CVE-2011-2989/CVE-2011-2991/CVE-2011-2992/CVE-2011-2985 + Miscellaneous memory safety hazards + * CVE-2011-2993 (bmo#657267) + Unsigned scripts can call script inside signed JAR + * CVE-2011-2988 (bmo#665934) + Heap overflow in ANGLE library + * CVE-2011-0084 (bmo#648094) + Crash in SVGTextElement.getCharNumAtPosition() + * CVE-2011-2990 + Credential leakage using Content Security Policy reports + * CVE-2011-2986 (bmo#655836) + Cross-origin data theft using canvas and Windows D2D +- removed obsolete curl header dependency (mozilla-curl.patch) + ------------------------------------------------------------------- Fri Jul 22 13:34:12 UTC 2011 - wr@rosenauer.org