1 -------------------------------------------------------------------

     2 Sat Dec 12 12:51:46 UTC 2015 - wr@rosenauer.org

     3 

     4 - update to xulrunner 38.5.0 (bnc#959277)

     5   * MFSA 2015-134/CVE-2015-7201

     6     Miscellaneous memory safety hazards

     7   * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)

     8     Use-after-free in WebRTC when datachannel is used after being

     9     destroyed

    10   * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)

    11     Integer overflow allocating extremely large textures

    12   * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)

    13     Underflow through code inspection

    14   * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)

    15     Integer overflow in MP4 playback in 64-bit versions

    16   * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)

    17     Integer underflow and buffer overflow processing MP4 metadata in

    18     libstagefright

    19   * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)

    20     Cross-site reading attack through data and view-source URIs

    21