Update to 1.9.2.10/3.6.10 mozilla-1.9.2
authorWolfgang Rosenauer <wr@rosenauer.org>
Wed, 15 Sep 2010 08:08:53 +0200
branchmozilla-1.9.2
changeset 160 2a08bb18befb
parent 159 416b9e491c6f
child 174 b3f909e83302
Update to 1.9.2.10/3.6.10
MozillaFirefox/MozillaFirefox.changes
MozillaFirefox/MozillaFirefox.spec
mozilla-xulrunner192/create-tar.sh
mozilla-xulrunner192/mozilla-xulrunner192.changes
mozilla-xulrunner192/mozilla-xulrunner192.spec
--- a/MozillaFirefox/MozillaFirefox.changes	Thu Sep 09 23:59:40 2010 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Wed Sep 15 08:08:53 2010 +0200
@@ -1,7 +1,39 @@
+-------------------------------------------------------------------
+Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org
+
+- update to 3.6.10
+  * fixing startup topcrash (bmo#594699)
+
 -------------------------------------------------------------------
 Thu Aug 26 07:40:28 CEST 2010 - wr@rosenauer.org
 
-- security update to 3.6.9
+- security update to 3.6.9 (bnc#637303)
+  * MFSA 2010-49/CVE-2010-3169
+    Miscellaneous memory safety hazards
+  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
+    Frameset integer overflow vulnerability
+  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
+    Dangling pointer vulnerability using DOM plugin array
+  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
+    Heap buffer overflow in nsTextFrameUtils::TransformText
+  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
+    Dangling pointer vulnerability in nsTreeSelection
+  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
+    XUL tree removal crash and remote code execution
+  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
+    Dangling pointer vulnerability in nsTreeContentView
+  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
+    Crash and remote code execution in normalizeDocument
+  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
+    SJOW creates scope chains ending in outer object
+  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
+    UTF-7 XSS by overriding document charset using <object> type
+    attribute
+  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
+    Copy-and-paste or drag-and-drop into designMode document allows
+    XSS
+  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
+    Information leak via XMLHttpRequest statusText
 
 -------------------------------------------------------------------
 Wed Jul 28 08:33:14 CEST 2010 - meissner@suse.de
--- a/MozillaFirefox/MozillaFirefox.spec	Thu Sep 09 23:59:40 2010 +0200
+++ b/MozillaFirefox/MozillaFirefox.spec	Wed Sep 15 08:08:53 2010 +0200
@@ -1,5 +1,5 @@
 #
-# spec file for package MozillaFirefox (Version 3.6.9)
+# spec file for package MozillaFirefox (Version 3.6.10)
 #
 # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #               2006-2010 Wolfgang Rosenauer
@@ -22,7 +22,7 @@
 Name:           MozillaFirefox
 %define xulrunner mozilla-xulrunner192
 BuildRequires:  autoconf213 gcc-c++ libcurl-devel libgnomeui-devel libidl-devel libnotify-devel python unzip update-desktop-files zip
-BuildRequires:  %{xulrunner}-devel = 1.9.2.9
+BuildRequires:  %{xulrunner}-devel = 1.9.2.10
 %if %suse_version > 1020
 BuildRequires:  fdupes
 %endif
@@ -34,9 +34,9 @@
 License:        GPLv2+ ; LGPLv2.1+ ; MPLv1.1+
 Provides:       web_browser
 Provides:       firefox
-Version:        3.6.9
+Version:        3.6.10
 Release:        1
-%define         releasedate 2010082400
+%define         releasedate 2010091400
 Summary:        Mozilla Firefox Web Browser
 Url:            http://www.mozilla.org/
 Group:          Productivity/Networking/Web/Browsers
--- a/mozilla-xulrunner192/create-tar.sh	Thu Sep 09 23:59:40 2010 +0200
+++ b/mozilla-xulrunner192/create-tar.sh	Wed Sep 15 08:08:53 2010 +0200
@@ -1,7 +1,7 @@
 #!/bin/bash
 
-RELEASE_TAG="FIREFOX_3_6_9_RELEASE"
-VERSION="1.9.2.9"
+RELEASE_TAG="FIREFOX_3_6_10_RELEASE"
+VERSION="1.9.2.10"
 
 # mozilla
 hg clone http://hg.mozilla.org/releases/mozilla-1.9.2 mozilla
--- a/mozilla-xulrunner192/mozilla-xulrunner192.changes	Thu Sep 09 23:59:40 2010 +0200
+++ b/mozilla-xulrunner192/mozilla-xulrunner192.changes	Wed Sep 15 08:08:53 2010 +0200
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org
+
+- update to 1.9.2.10
+  * fixing startup topcrash (bmo#594699)
+
 -------------------------------------------------------------------
 Mon Aug 30 17:34:28 CEST 2010 - wr@rosenauer.org
 
@@ -29,6 +35,8 @@
   * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
     Information leak via XMLHttpRequest statusText
 - honor LANGUAGE environment variable for UI locale (bmo#583793)
+- fixed compilation against NSPR < 4.8.6 (mozilla-prlog.patch)
+  (bmo#567620)
 
 -------------------------------------------------------------------
 Mon Aug 30 17:32:20 CEST 2010 - wr@rosenauer.org
--- a/mozilla-xulrunner192/mozilla-xulrunner192.spec	Thu Sep 09 23:59:40 2010 +0200
+++ b/mozilla-xulrunner192/mozilla-xulrunner192.spec	Wed Sep 15 08:08:53 2010 +0200
@@ -1,5 +1,5 @@
 #
-# spec file for package mozilla-xulrunner192 (Version 1.9.2.9)
+# spec file for package mozilla-xulrunner192 (Version 1.9.2.10)
 #
 # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #               2006-2010 Wolfgang Rosenauer
@@ -39,12 +39,12 @@
 BuildRequires:  wireless-tools
 %endif
 License:        GPLv2+ ; LGPLv2.1+ ; MPLv1.1+
-Version:        1.9.2.9
+Version:        1.9.2.10
 Release:        1
-%define         releasedate 2010082400
-%define         version_internal 1.9.2.9
+%define         releasedate 2010091400
+%define         version_internal 1.9.2.10
 %define         apiversion 1.9.2
-%define         uaweight 192090
+%define         uaweight 192100
 Summary:        Mozilla Runtime Environment 1.9.2
 Url:            http://www.mozilla.org
 Group:          Productivity/Other