# HG changeset patch # User Wolfgang Rosenauer # Date 1284530933 -7200 # Node ID 2a08bb18befb5e35e72572a5dfafc0f813cf67bb # Parent 416b9e491c6f7926ff5ad066a0b26c42a790323a Update to 1.9.2.10/3.6.10 diff -r 416b9e491c6f -r 2a08bb18befb MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Thu Sep 09 23:59:40 2010 +0200 +++ b/MozillaFirefox/MozillaFirefox.changes Wed Sep 15 08:08:53 2010 +0200 @@ -1,7 +1,39 @@ +------------------------------------------------------------------- +Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org + +- update to 3.6.10 + * fixing startup topcrash (bmo#594699) + ------------------------------------------------------------------- Thu Aug 26 07:40:28 CEST 2010 - wr@rosenauer.org -- security update to 3.6.9 +- security update to 3.6.9 (bnc#637303) + * MFSA 2010-49/CVE-2010-3169 + Miscellaneous memory safety hazards + * MFSA 2010-50/CVE-2010-2765 (bmo#576447) + Frameset integer overflow vulnerability + * MFSA 2010-51/CVE-2010-2767 (bmo#584512) + Dangling pointer vulnerability using DOM plugin array + * MFSA 2010-53/CVE-2010-3166 (bmo#579655) + Heap buffer overflow in nsTextFrameUtils::TransformText + * MFSA 2010-54/CVE-2010-2760 (bmo#585815) + Dangling pointer vulnerability in nsTreeSelection + * MFSA 2010-55/CVE-2010-3168 (bmo#576075) + XUL tree removal crash and remote code execution + * MFSA 2010-56/CVE-2010-3167 (bmo#576070) + Dangling pointer vulnerability in nsTreeContentView + * MFSA 2010-57/CVE-2010-2766 (bmo#580445) + Crash and remote code execution in normalizeDocument + * MFSA 2010-59/CVE-2010-2762 (bmo#584180) + SJOW creates scope chains ending in outer object + * MFSA 2010-61/CVE-2010-2768 (bmo#579744) + UTF-7 XSS by overriding document charset using type + attribute + * MFSA 2010-62/CVE-2010-2769 (bmo#520189) + Copy-and-paste or drag-and-drop into designMode document allows + XSS + * MFSA 2010-63/CVE-2010-2764 (bmo#552090) + Information leak via XMLHttpRequest statusText ------------------------------------------------------------------- Wed Jul 28 08:33:14 CEST 2010 - meissner@suse.de diff -r 416b9e491c6f -r 2a08bb18befb MozillaFirefox/MozillaFirefox.spec --- a/MozillaFirefox/MozillaFirefox.spec Thu Sep 09 23:59:40 2010 +0200 +++ b/MozillaFirefox/MozillaFirefox.spec Wed Sep 15 08:08:53 2010 +0200 @@ -1,5 +1,5 @@ # -# spec file for package MozillaFirefox (Version 3.6.9) +# spec file for package MozillaFirefox (Version 3.6.10) # # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. # 2006-2010 Wolfgang Rosenauer @@ -22,7 +22,7 @@ Name: MozillaFirefox %define xulrunner mozilla-xulrunner192 BuildRequires: autoconf213 gcc-c++ libcurl-devel libgnomeui-devel libidl-devel libnotify-devel python unzip update-desktop-files zip -BuildRequires: %{xulrunner}-devel = 1.9.2.9 +BuildRequires: %{xulrunner}-devel = 1.9.2.10 %if %suse_version > 1020 BuildRequires: fdupes %endif @@ -34,9 +34,9 @@ License: GPLv2+ ; LGPLv2.1+ ; MPLv1.1+ Provides: web_browser Provides: firefox -Version: 3.6.9 +Version: 3.6.10 Release: 1 -%define releasedate 2010082400 +%define releasedate 2010091400 Summary: Mozilla Firefox Web Browser Url: http://www.mozilla.org/ Group: Productivity/Networking/Web/Browsers diff -r 416b9e491c6f -r 2a08bb18befb mozilla-xulrunner192/create-tar.sh --- a/mozilla-xulrunner192/create-tar.sh Thu Sep 09 23:59:40 2010 +0200 +++ b/mozilla-xulrunner192/create-tar.sh Wed Sep 15 08:08:53 2010 +0200 @@ -1,7 +1,7 @@ #!/bin/bash -RELEASE_TAG="FIREFOX_3_6_9_RELEASE" -VERSION="1.9.2.9" +RELEASE_TAG="FIREFOX_3_6_10_RELEASE" +VERSION="1.9.2.10" # mozilla hg clone http://hg.mozilla.org/releases/mozilla-1.9.2 mozilla diff -r 416b9e491c6f -r 2a08bb18befb mozilla-xulrunner192/mozilla-xulrunner192.changes --- a/mozilla-xulrunner192/mozilla-xulrunner192.changes Thu Sep 09 23:59:40 2010 +0200 +++ b/mozilla-xulrunner192/mozilla-xulrunner192.changes Wed Sep 15 08:08:53 2010 +0200 @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org + +- update to 1.9.2.10 + * fixing startup topcrash (bmo#594699) + ------------------------------------------------------------------- Mon Aug 30 17:34:28 CEST 2010 - wr@rosenauer.org @@ -29,6 +35,8 @@ * MFSA 2010-63/CVE-2010-2764 (bmo#552090) Information leak via XMLHttpRequest statusText - honor LANGUAGE environment variable for UI locale (bmo#583793) +- fixed compilation against NSPR < 4.8.6 (mozilla-prlog.patch) + (bmo#567620) ------------------------------------------------------------------- Mon Aug 30 17:32:20 CEST 2010 - wr@rosenauer.org diff -r 416b9e491c6f -r 2a08bb18befb mozilla-xulrunner192/mozilla-xulrunner192.spec --- a/mozilla-xulrunner192/mozilla-xulrunner192.spec Thu Sep 09 23:59:40 2010 +0200 +++ b/mozilla-xulrunner192/mozilla-xulrunner192.spec Wed Sep 15 08:08:53 2010 +0200 @@ -1,5 +1,5 @@ # -# spec file for package mozilla-xulrunner192 (Version 1.9.2.9) +# spec file for package mozilla-xulrunner192 (Version 1.9.2.10) # # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. # 2006-2010 Wolfgang Rosenauer @@ -39,12 +39,12 @@ BuildRequires: wireless-tools %endif License: GPLv2+ ; LGPLv2.1+ ; MPLv1.1+ -Version: 1.9.2.9 +Version: 1.9.2.10 Release: 1 -%define releasedate 2010082400 -%define version_internal 1.9.2.9 +%define releasedate 2010091400 +%define version_internal 1.9.2.10 %define apiversion 1.9.2 -%define uaweight 192090 +%define uaweight 192100 Summary: Mozilla Runtime Environment 1.9.2 Url: http://www.mozilla.org Group: Productivity/Other