Changelog update mozilla-1.9.2
authorWolfgang Rosenauer <wr@rosenauer.org>
Thu, 09 Sep 2010 23:59:40 +0200
branchmozilla-1.9.2
changeset 159 416b9e491c6f
parent 152 8f9e6663d94c
child 160 2a08bb18befb
Changelog update Fix build against NSPR < 4.8.6
mozilla-prlog.patch
mozilla-xulrunner192/mozilla-prlog.patch
mozilla-xulrunner192/mozilla-xulrunner192.changes
mozilla-xulrunner192/mozilla-xulrunner192.spec
series
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mozilla-prlog.patch	Thu Sep 09 23:59:40 2010 +0200
@@ -0,0 +1,20 @@
+# Patch originally from mozilla-1.9.1 branch
+# HG changeset patch
+# User Jonas Sicking <jonas@sicking.cc>
+# Date 1281670510 25200
+# Node ID d5ad248a92152333b5d6b22b802a3ac32a11b4b8
+# Parent  184125a9b1f8b98eddd8f3da39d4415e928b1d80
+Compatibility with NSPR < 4.8.6 (bmo#567620)
+
+diff --git a/content/html/content/src/nsHTMLFrameSetElement.cpp b/content/html/content/src/nsHTMLFrameSetElement.cpp
+--- a/content/html/content/src/nsHTMLFrameSetElement.cpp
++++ b/content/html/content/src/nsHTMLFrameSetElement.cpp
+@@ -43,6 +43,7 @@
+ #include "nsIFrameSetElement.h"
+ #include "nsIHTMLDocument.h"
+ #include "nsIDocument.h"
++#include "prlog.h"
+ 
+ class nsHTMLFrameSetElement : public nsGenericHTMLElement,
+                               public nsIDOMHTMLFrameSetElement,
+
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mozilla-xulrunner192/mozilla-prlog.patch	Thu Sep 09 23:59:40 2010 +0200
@@ -0,0 +1,1 @@
+../mozilla-prlog.patch
\ No newline at end of file
--- a/mozilla-xulrunner192/mozilla-xulrunner192.changes	Tue Aug 31 07:58:06 2010 +0200
+++ b/mozilla-xulrunner192/mozilla-xulrunner192.changes	Thu Sep 09 23:59:40 2010 +0200
@@ -1,7 +1,33 @@
 -------------------------------------------------------------------
 Mon Aug 30 17:34:28 CEST 2010 - wr@rosenauer.org
 
-- security update to 1.9.2.9
+- security update to 1.9.2.9 (bnc#637303)
+  * MFSA 2010-49/CVE-2010-3169
+    Miscellaneous memory safety hazards
+  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
+    Frameset integer overflow vulnerability
+  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
+    Dangling pointer vulnerability using DOM plugin array
+  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
+    Heap buffer overflow in nsTextFrameUtils::TransformText
+  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
+    Dangling pointer vulnerability in nsTreeSelection
+  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
+    XUL tree removal crash and remote code execution
+  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
+    Dangling pointer vulnerability in nsTreeContentView
+  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
+    Crash and remote code execution in normalizeDocument
+  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
+    SJOW creates scope chains ending in outer object
+  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
+    UTF-7 XSS by overriding document charset using <object> type 
+    attribute
+  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
+    Copy-and-paste or drag-and-drop into designMode document allows 
+    XSS
+  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
+    Information leak via XMLHttpRequest statusText
 - honor LANGUAGE environment variable for UI locale (bmo#583793)
 
 -------------------------------------------------------------------
--- a/mozilla-xulrunner192/mozilla-xulrunner192.spec	Tue Aug 31 07:58:06 2010 +0200
+++ b/mozilla-xulrunner192/mozilla-xulrunner192.spec	Thu Sep 09 23:59:40 2010 +0200
@@ -86,6 +86,7 @@
 Patch15:        mozilla-ua-locale-pref.patch
 Patch16:        mozilla-locale.patch
 Patch17:        mozilla-gdk-pixbuf.patch
+Patch18:        mozilla-prlog.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 Requires:       mozilla-js192 = %{version}
 Requires(post):  update-alternatives coreutils
@@ -236,6 +237,7 @@
 %patch15 -p1
 %patch16 -p1
 %patch17 -p1
+%patch18 -p1
 
 %build
 %if %suse_version >= 1110
--- a/series	Tue Aug 31 07:58:06 2010 +0200
+++ b/series	Thu Sep 09 23:59:40 2010 +0200
@@ -16,6 +16,7 @@
 mozilla-cairo-lcd.patch
 mozilla-locale.patch
 mozilla-gdk-pixbuf.patch
+mozilla-prlog.patch
 
 # Firefox patches
 firefox-libxul-sdk.patch