MozillaFirefox/MozillaFirefox.changes
branchesr24
changeset 685 5d3925bbfd3b
child 687 8d64394d1c0c
equal deleted inserted replaced
684:7627f28354d4 685:5d3925bbfd3b
       
     1 -------------------------------------------------------------------
       
     2 Thu Oct 24 16:46:31 UTC 2013 - wr@rosenauer.org
       
     3 
       
     4 - update to Firefox 24.1.0esr (bnc#847708)
       
     5   * switched to mozilla-esr24 branch
       
     6   * requires NSS 3.15.2 or above
       
     7   * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
       
     8     Miscellaneous memory safety hazards
       
     9   * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
       
    10     Spoofing addressbar through SELECT element
       
    11   * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
       
    12     Access violation with XSLT and uninitialized data
       
    13   * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
       
    14     Improperly initialized memory and overflows in some JavaScript
       
    15     functions
       
    16   * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
       
    17     Writing to cycle collected object during image decoding
       
    18   * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
       
    19     Use-after-free when updating offline cache
       
    20   * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
       
    21     Security bypass of PDF.js checks using iframes
       
    22   * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
       
    23     (bmo#915210, bmo#915576, bmo#916685)
       
    24     Miscellaneous use-after-free issues found through ASAN fuzzing
       
    25   * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
       
    26     Memory corruption in workers
       
    27   * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
       
    28     Use-after-free in HTML document templates
       
    29 
       
    30 -------------------------------------------------------------------
       
    31 Tue Sep 24 07:31:30 UTC 2013 - wr@rosenauer.org
       
    32 
       
    33 - as GStreamer is not automatically required anymore but loaded
       
    34   dynamically if available, require it explicitely
       
    35 - recommend optional GStreamer plugins for comprehensive media
       
    36   support
       
    37 
       
    38 -------------------------------------------------------------------
       
    39 Mon Sep 16 11:59:18 UTC 2013 - lnussel@suse.de
       
    40 
       
    41 - move greek to the translations-common package (bnc#840551)
       
    42 
       
    43 -------------------------------------------------------------------
       
    44 Sat Sep 14 14:39:58 UTC 2013 - wr@rosenauer.org
       
    45 
       
    46 - update to Firefox 24.0 (bnc#840485)
       
    47   * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
       
    48     Miscellaneous memory safety hazards
       
    49   * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
       
    50     Improper state in HTML5 Tree Builder with templates
       
    51   * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
       
    52     Integer overflow in ANGLE library
       
    53   * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
       
    54     Use-after-free in Animation Manager during stylesheet cloning
       
    55   * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
       
    56     NativeKey continues handling key messages after widget is destroyed
       
    57   * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
       
    58     Use-after-free with select element
       
    59   * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
       
    60     Calling scope for new Javascript objects can lead to memory corruption
       
    61   * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
       
    62     Uninitialized data in IonMonkey
       
    63   * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
       
    64     Compartment mismatch re-attaching XBL-backed nodes
       
    65   * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
       
    66     Buffer overflow with multi-column, lists, and floats
       
    67   * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
       
    68     Memory corruption involving scrolling
       
    69   * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
       
    70     User-defined properties on DOM proxies get the wrong "this" object
       
    71   * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
       
    72     GC hazard with default compartments and frame chain restoration
       
    73 - enable gstreamer explicitely via pref (gecko.js)
       
    74 - require NSS 3.15.1
       
    75 
       
    76 -------------------------------------------------------------------
       
    77 Mon Aug 26 07:35:36 UTC 2013 - wr@rosenauer.org
       
    78 
       
    79 - update to Firefox 23.0.1
       
    80   * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
       
    81     (bmo#901527)
       
    82 
       
    83 -------------------------------------------------------------------
       
    84 Sun Aug  4 18:30:11 UTC 2013 - wr@rosenauer.org
       
    85 
       
    86 - update to Firefox 23.0 (bnc#833389)
       
    87   * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
       
    88     Miscellaneous memory safety hazards
       
    89   * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
       
    90     Use after free mutating DOM during SetBody
       
    91   * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
       
    92     Buffer underflow when generating CRMF requests
       
    93   * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
       
    94     Crash during WAV audio file decoding
       
    95   * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
       
    96     Document URI misrepresentation and masquerading
       
    97   * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
       
    98     CRMF requests allow for code execution and XSS attacks
       
    99   * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
       
   100     Bypass of XrayWrappers using XBL Scopes
       
   101   * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
       
   102     Wrong principal used for validating URI for some Javascript
       
   103     components
       
   104   * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
       
   105     Same-origin bypass with web workers and XMLHttpRequest
       
   106   * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
       
   107     Local Java applets may read contents of local file system
       
   108 - requires NSPR 4.10 and NSS 3.15
       
   109 
       
   110 -------------------------------------------------------------------
       
   111 Wed Jul  3 17:14:35 UTC 2013 - dmueller@suse.com
       
   112 
       
   113 - fix build on ARM (/-g/ matches /-grecord-switches/)
       
   114 
       
   115 -------------------------------------------------------------------
       
   116 Sat Jun 22 17:48:06 UTC 2013 - wr@rosenauer.org
       
   117 
       
   118 - update to Firefox 22.0 (bnc#825935)
       
   119   * removed obsolete patches
       
   120     + mozilla-qcms-ppc.patch
       
   121     + mozilla-gstreamer-760140.patch
       
   122   * GStreamer support does not build on 12.1 anymore (build only
       
   123     on 12.2 and later)
       
   124   * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
       
   125     Miscellaneous memory safety hazards
       
   126   * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
       
   127     Memory corruption found using Address Sanitizer
       
   128   * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
       
   129     Privileged content access and execution via XBL
       
   130   * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
       
   131     Arbitrary code execution within Profiler
       
   132   * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
       
   133     Execution of unmapped memory through onreadystatechange event
       
   134   * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
       
   135     Data in the body of XHR HEAD requests leads to CSRF attacks
       
   136   * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
       
   137     SVG filters can lead to information disclosure
       
   138   * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
       
   139     PreserveWrapper has inconsistent behavior
       
   140   * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
       
   141     Sandbox restrictions not applied to nested frame elements
       
   142   * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
       
   143     X-Frame-Options ignored when using server push with multi-part
       
   144     responses
       
   145   * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
       
   146     XrayWrappers can be bypassed to run user defined methods in a
       
   147     privileged context
       
   148   * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
       
   149     getUserMedia permission dialog incorrectly displays location
       
   150   * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
       
   151     Homograph domain spoofing in .com, .net and .name
       
   152 
       
   153 -------------------------------------------------------------------
       
   154 Tue Jun 11 21:06:58 UTC 2013 - dvaleev@suse.com
       
   155 
       
   156 - Fix qcms altivec include (mozilla-qcms-ppc.patch)
       
   157 
       
   158 -------------------------------------------------------------------
       
   159 Fri May 10 05:25:39 UTC 2013 - wr@rosenauer.org
       
   160 
       
   161 - update to Firefox 21.0 (bnc#819204)
       
   162   * removed upstreamed patch firefox-712763.patch
       
   163   * removed disabled mozilla-disable-neon-option.patch
       
   164   * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
       
   165     Miscellaneous memory safety hazards
       
   166   * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
       
   167     Privileged access for content level constructor
       
   168   * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
       
   169     File input control has access to full path
       
   170   * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
       
   171     Use-after-free with video and onresize event
       
   172   * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
       
   173     Uninitialized functions in DOMSVGZoomEvent
       
   174   * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
       
   175     CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
       
   176     Memory corruption found using Address Sanitizer
       
   177 
       
   178 -------------------------------------------------------------------
       
   179 Tue Apr  9 06:41:31 UTC 2013 - wr@rosenauer.org
       
   180 
       
   181 - revert to use GStreamer 0.10 on 12.3 (bnc#814101)
       
   182   (remove mozilla-gstreamer-1.patch)
       
   183 
       
   184 -------------------------------------------------------------------
       
   185 Fri Apr  5 17:04:11 UTC 2013 - schwab@linux-m68k.org
       
   186 
       
   187 - Explicitly disable WebRTC support on non-x86, the configure script
       
   188   disables it only half-heartedly
       
   189 
       
   190 -------------------------------------------------------------------
       
   191 Fri Mar 29 22:15:21 UTC 2013 - wr@rosenauer.org
       
   192 
       
   193 - update to Firefox 20.0 (bnc#813026)
       
   194   * requires NSPR 4.9.5 and NSS 3.14.3
       
   195   * mozilla-webrtc-ppc.patch included upstream
       
   196   * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
       
   197     Miscellaneous memory safety hazards
       
   198   * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
       
   199     Out-of-bounds write in Cairo library
       
   200   * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
       
   201     WebGL crash with Mesa graphics driver on Linux
       
   202   * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
       
   203     Bypass of SOW protections allows cloning of protected nodes
       
   204   * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
       
   205     Bypass of tab-modal dialog origin disclosure
       
   206   * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
       
   207     Cross-site scripting (XSS) using timed history navigations
       
   208   * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
       
   209     Memory corruption while rendering grayscale PNG images
       
   210 - use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)
       
   211 
       
   212 -------------------------------------------------------------------
       
   213 Tue Mar 12 23:08:15 UTC 2013 - dmueller@suse.com
       
   214 
       
   215 - build fixes for armv7hl:
       
   216   * disable debug build as armv7hl does not have enough memory
       
   217   * disable webrtc on armv7hl as it is non-compiling
       
   218 
       
   219 -------------------------------------------------------------------
       
   220 Thu Mar  7 19:03:32 UTC 2013 - wr@rosenauer.org
       
   221 
       
   222 - update to Firefox 19.0.2 (bnc#808243)
       
   223   * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
       
   224     Use-after-free in HTML Editor
       
   225 
       
   226 -------------------------------------------------------------------
       
   227 Thu Feb 28 22:06:36 UTC 2013 - wr@rosenauer.org
       
   228 
       
   229 - update to Firefox 19.0.1
       
   230   * blocklist updates
       
   231 
       
   232 -------------------------------------------------------------------
       
   233 Sat Feb 16 07:08:55 UTC 2013 - wr@rosenauer.org
       
   234 
       
   235 - update to Firefox 19.0 (bnc#804248)
       
   236   * MFSA 2013-21/CVE-2013-0783/2013-0784
       
   237     Miscellaneous memory safety hazards
       
   238   * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
       
   239     Out-of-bounds read in image rendering
       
   240   * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
       
   241     Wrapped WebIDL objects can be wrapped again
       
   242   * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
       
   243     Web content bypass of COW and SOW security wrappers
       
   244   * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
       
   245     Privacy leak in JavaScript Workers
       
   246   * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
       
   247     Use-after-free in nsImageLoadingContent
       
   248   * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
       
   249     Phishing on HTTPS connection through malicious proxy
       
   250   * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
       
   251     CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
       
   252     Use-after-free, out of bounds read, and buffer overflow issues
       
   253     found using Address Sanitizer
       
   254 - removed obsolete patches
       
   255   * mozilla-webrtc.patch
       
   256   * mozilla-gstreamer-803287.patch
       
   257 - added patch to fix session restore window order (bmo#712763)
       
   258 
       
   259 -------------------------------------------------------------------
       
   260 Sat Feb  2 08:40:52 UTC 2013 - wr@rosenauer.org
       
   261 
       
   262 - update to Firefox 18.0.2
       
   263   * blocklist and CTP updates
       
   264   * fixes in JS engine
       
   265 
       
   266 -------------------------------------------------------------------
       
   267 Wed Jan 16 20:51:55 UTC 2013 - wr@rosenauer.org
       
   268 
       
   269 - update to Firefox 18.0.1
       
   270   * blocklist updates
       
   271   * backed out bmo#677092 (removed patch)
       
   272   * fixed problems involving HTTP proxy transactions
       
   273 
       
   274 -------------------------------------------------------------------
       
   275 Sat Jan 12 17:25:11 UTC 2013 - schwab@linux-m68k.org
       
   276 
       
   277 - Fix WebRTC to build on powerpc
       
   278 
       
   279 -------------------------------------------------------------------
       
   280 Sun Jan  6 21:54:18 UTC 2013 - wr@rosenauer.org
       
   281 
       
   282 - update to Firefox 18.0 (bnc#796895)
       
   283   * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
       
   284     Miscellaneous memory safety hazards
       
   285   * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
       
   286     CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
       
   287     Use-after-free and buffer overflow issues found using Address Sanitizer
       
   288   * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
       
   289     Buffer Overflow in Canvas
       
   290   * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
       
   291     URL spoofing in addressbar during page loads
       
   292   * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
       
   293     Use-after-free when displaying table with many columns and column groups
       
   294   * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
       
   295     Touch events are shared across iframes
       
   296   * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
       
   297     Crash due to handling of SSL on threads
       
   298   * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
       
   299     AutoWrapperChanger fails to keep objects alive during garbage collection
       
   300   * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
       
   301     Compartment mismatch with quickstubs returned values
       
   302   * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
       
   303     Event manipulation in plugin handler to bypass same-origin policy
       
   304   * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
       
   305     Address space layout leaked in XBL objects
       
   306   * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
       
   307     Buffer overflow in Javascript string concatenation
       
   308   * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
       
   309     Memory corruption in XBL with XML bindings containing SVG
       
   310   * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
       
   311     Chrome Object Wrapper (COW) bypass through changing prototype
       
   312   * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
       
   313     Privilege escalation through plugin objects
       
   314   * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
       
   315     Use-after-free in serializeToStream
       
   316   * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
       
   317     Use-after-free in ListenerManager
       
   318   * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
       
   319     Use-after-free in Vibrate
       
   320   * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
       
   321     Use-after-free in Javascript Proxy objects
       
   322 - requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
       
   323 - removed obsolete SLE11 patches (mozilla-gcc43*)
       
   324 - reenable WebRTC
       
   325 - added mozilla-libproxy-compat.patch for libproxy API compat
       
   326   on openSUSE 11.2 and earlier
       
   327 - backed out restartless language packs as it broke multi-locale
       
   328   setup (bmo#677092, bmo#818468)
       
   329 
       
   330 -------------------------------------------------------------------
       
   331 Thu Nov 29 19:56:51 UTC 2012 - wr@rosenauer.org
       
   332 
       
   333 - update to Firefox 17.0.1
       
   334   * revert some useragent changes introduced in 17.0
       
   335   * leaving private browsing with social enabled doesn't reset all
       
   336     social components (bmo#815042)
       
   337 - fix KDE integration for file dialogs
       
   338 
       
   339 -------------------------------------------------------------------
       
   340 Tue Nov 20 19:52:02 UTC 2012 - wr@rosenauer.org
       
   341 
       
   342 - update to Firefox 17.0 (bnc#790140)
       
   343   * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
       
   344     Miscellaneous memory safety hazards
       
   345   * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
       
   346     Buffer overflow while rendering GIF images
       
   347   * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
       
   348     evalInSanbox location context incorrectly applied
       
   349   * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
       
   350     Crash when combining SVG text on path with CSS
       
   351   * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
       
   352     Javascript: URLs run in privileged context on New Tab page
       
   353   * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
       
   354     Memory corruption in str_unescape
       
   355   * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
       
   356     XMLHttpRequest inherits incorrect principal within sandbox
       
   357   * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
       
   358     XrayWrappers exposes chrome-only properties when not in chrome
       
   359     compartment
       
   360   * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
       
   361     Improper security filtering for cross-origin wrappers
       
   362   * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
       
   363     Improper character decoding in HZ-GB-2312 charset
       
   364   * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
       
   365     Script entered into Developer Toolbar runs with chrome privileges
       
   366   * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
       
   367     Frames can shadow top.location
       
   368   * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
       
   369     CSS and HTML injection through Style Inspector
       
   370   * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
       
   371     CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
       
   372     CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
       
   373     Use-after-free and buffer overflow issues found using Address
       
   374     Sanitizer
       
   375   * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
       
   376     Use-after-free, buffer overflow, and memory corruption issues
       
   377     found using Address Sanitizer
       
   378 - rebased patches
       
   379 - disabled WebRTC since build is broken (bmo#776877)
       
   380 
       
   381 -------------------------------------------------------------------
       
   382 Tue Nov 20 15:42:55 UTC 2012 - pcerny@suse.com
       
   383 
       
   384 - build on SLE11
       
   385   * mozilla-gcc43-enums.patch
       
   386   * mozilla-gcc43-template_hacks.patch
       
   387   * mozilla-gcc43-templates_instantiation.patch
       
   388 
       
   389 -------------------------------------------------------------------
       
   390 Wed Oct 24 08:27:29 UTC 2012 - wr@rosenauer.org
       
   391 
       
   392 - update to Firefox 16.0.2 (bnc#786522)
       
   393   * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
       
   394     (bmo#800666, bmo#793121, bmo#802557)
       
   395     Fixes for Location object issues
       
   396 - bring back Obsoletes for libproxy's mozjs plugin for distributions
       
   397   before 12.2 to avoid crashes
       
   398 
       
   399 -------------------------------------------------------------------
       
   400 Thu Oct 11 01:51:16 UTC 2012 - wr@rosenauer.org
       
   401 
       
   402 - update to Firefox 16.0.1 (bnc#783533)
       
   403   * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
       
   404     Miscellaneous memory safety hazards
       
   405   * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
       
   406     defaultValue security checks not applied
       
   407 
       
   408 -------------------------------------------------------------------
       
   409 Sun Oct  7 21:40:14 UTC 2012 - wr@rosenauer.org
       
   410 
       
   411 - update to Firefox 16.0 (bnc#783533)
       
   412   * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
       
   413     Miscellaneous memory safety hazards
       
   414   * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
       
   415     select element persistance allows for attacks
       
   416   * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
       
   417     Continued access to initial origin after setting document.domain
       
   418   * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
       
   419     Some DOMWindowUtils methods bypass security checks
       
   420   * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
       
   421     DOS and crash with full screen and history navigation
       
   422   * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
       
   423     Crash with invalid cast when using instanceof operator
       
   424   * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
       
   425     GetProperty function can bypass security checks
       
   426   * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
       
   427     top object and location property accessible by plugins
       
   428   * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
       
   429     Chrome Object Wrapper (COW) does not disallow acces to privileged
       
   430     functions or properties
       
   431   * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
       
   432     Spoofing and script injection through location.hash
       
   433   * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
       
   434     CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
       
   435     Use-after-free, buffer overflow, and out of bounds read issues
       
   436     found using Address Sanitizer
       
   437   * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
       
   438     CVE-2012-4188
       
   439     Heap memory corruption issues found using Address Sanitizer
       
   440   * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
       
   441     Use-after-free in the IME State Manager
       
   442 - requires NSPR 4.9.2
       
   443 - improve GStreamer integration (bmo#760140)
       
   444 - removed upstreamed mozilla-crashreporter-restart-args.patch
       
   445 - webapprt now included
       
   446 - use kmozillahelper's new REVEAL command (bnc#777415)
       
   447   (requires mozilla-kde4-integration >= 0.6.4)
       
   448 - updated translations-other with new languages
       
   449 
       
   450 -------------------------------------------------------------------
       
   451 Mon Sep 10 19:37:56 UTC 2012 - wr@rosenauer.org
       
   452 
       
   453 - update to Firefox 15.0.1 (bnc#779936)
       
   454   * Sites visited while in Private Browsing mode could be found
       
   455     through manual browser cache inspection (bmo#787743)
       
   456 
       
   457 -------------------------------------------------------------------
       
   458 Sun Aug 26 13:47:43 UTC 2012 - wr@rosenauer.org
       
   459 
       
   460 - update to Firefox 15.0 (bnc#777588)
       
   461   * MFSA 2012-57/CVE-2012-1970
       
   462     Miscellaneous memory safety hazards
       
   463   * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
       
   464     CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
       
   465     CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
       
   466     Use-after-free issues found using Address Sanitizer
       
   467   * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
       
   468     Location object can be shadowed using Object.defineProperty
       
   469   * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
       
   470     Escalation of privilege through about:newtab
       
   471   * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
       
   472     Memory corruption with bitmap format images with negative height
       
   473   * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
       
   474     WebGL use-after-free and memory corruption
       
   475   * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
       
   476     SVG buffer overflow and use-after-free issues
       
   477   * MFSA 2012-64/CVE-2012-3971
       
   478     Graphite 2 memory corruption
       
   479   * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
       
   480     Out-of-bounds read in format-number in XSLT
       
   481   * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
       
   482     HTTPMonitor extension allows for remote debugging without explicit
       
   483     activation
       
   484   * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
       
   485     DOMParser loads linked resources in extensions when parsing
       
   486     text/html
       
   487   * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
       
   488     Incorrect site SSL certificate data display
       
   489   * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
       
   490     Location object security checks bypassed by chrome code
       
   491   * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
       
   492     Web console eval capable of executing chrome-privileged code
       
   493 - fix HTML5 video crash with GStreamer enabled (bmo#761030)
       
   494 - GStreamer is only used for MP4 (no WebM, OGG)
       
   495 - updated filelist
       
   496 - moved browser specific preferences to correct location
       
   497 
       
   498 -------------------------------------------------------------------
       
   499 Sun Jul 29 08:34:39 UTC 2012 - aj@suse.de
       
   500 
       
   501 - Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)
       
   502 
       
   503 -------------------------------------------------------------------
       
   504 Sat Jul 14 19:31:51 UTC 2012 - wr@rosenauer.org
       
   505 
       
   506 - update to 14.0.1 (bnc#771583)
       
   507   * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
       
   508     Miscellaneous memory safety hazards
       
   509   * MFSA 2012-43/CVE-2012-1950
       
   510     Incorrect URL displayed in addressbar through drag and drop
       
   511   * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
       
   512     Gecko memory corruption
       
   513   * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
       
   514     Spoofing issue with location
       
   515   * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
       
   516     XSS through data: URLs
       
   517   * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
       
   518     Improper filtering of javascript in HTML feed-view
       
   519   * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
       
   520     use-after-free in nsGlobalWindow::PageHidden
       
   521   * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
       
   522     Same-compartment Security Wrappers can be bypassed
       
   523   * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
       
   524     Out of bounds read in QCMS
       
   525   * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
       
   526     X-Frame-Options header ignored when duplicated
       
   527   * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
       
   528     JSDependentString::undepend string conversion results in memory
       
   529     corruption
       
   530   * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
       
   531     Content Security Policy 1.0 implementation errors cause data
       
   532     leakage
       
   533   * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
       
   534     feed: URLs with an innerURI inherit security context of page
       
   535   * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
       
   536     Code execution through javascript: URLs
       
   537 - license change from tri license to MPL-2.0
       
   538 - fix crashreporter restart option (bmo#762780)
       
   539 - require NSS 3.13.5
       
   540 - remove mozjs pacrunner obsoletes again for now
       
   541 - adopted mozilla-prefer_plugin_pref.patch
       
   542 - PPC fixes:
       
   543   * reenabled mozilla-yarr-pcre.patch to fix build for PPC
       
   544   * add patches for bmo#750620 and bmo#746112
       
   545   * fix xpcshell segfault on ppc
       
   546 
       
   547 -------------------------------------------------------------------
       
   548 Fri Jun 15 12:37:09 UTC 2012 - wr@rosenauer.org
       
   549 
       
   550 - update to Firefox 13.0.1
       
   551   * bugfix release
       
   552 - obsolete libproxy's mozjs pacrunner (bnc#759123)
       
   553 
       
   554 -------------------------------------------------------------------
       
   555 Sat Jun  2 08:22:51 UTC 2012 - wr@rosenauer.org
       
   556 
       
   557 - update to Firefox 13.0 (bnc#765204)
       
   558   * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
       
   559     Miscellaneous memory safety hazards
       
   560   * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
       
   561     Content Security Policy inline-script bypass
       
   562   * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
       
   563     Information disclosure though Windows file shares and shortcut
       
   564     files
       
   565   * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
       
   566     Use-after-free while replacing/inserting a node in a document
       
   567   * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
       
   568     Buffer overflow and use-after-free issues found using Address
       
   569     Sanitizer
       
   570 - require NSS 3.13.4
       
   571   * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
       
   572 - fix sound notifications when filename/path contains a whitespace
       
   573   (bmo#749739)
       
   574 
       
   575 -------------------------------------------------------------------
       
   576 Wed May 23 14:40:16 UTC 2012 - adrian@suse.de
       
   577 
       
   578 - fix build on arm
       
   579 
       
   580 -------------------------------------------------------------------
       
   581 Wed May 16 05:34:01 UTC 2012 - wr@rosenauer.org
       
   582 
       
   583 - reenabled crashreporter for Factory/12.2
       
   584   (fix in mozilla-gcc47.patch)
       
   585 
       
   586 -------------------------------------------------------------------
       
   587 Sat Apr 21 10:02:37 UTC 2012 - wr@rosenauer.org
       
   588 
       
   589 - update to Firefox 12.0 (bnc#758408)
       
   590   * rebased patches
       
   591   * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
       
   592     Miscellaneous memory safety hazards
       
   593   * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
       
   594     use-after-free in IDBKeyRange
       
   595   * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
       
   596     Invalid frees causes heap corruption in gfxImageSurface
       
   597   * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
       
   598     Potential XSS via multibyte content processing errors
       
   599   * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
       
   600     Potential memory corruption during font rendering using cairo-dwrite
       
   601   * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
       
   602     WebGL.drawElements may read illegal video memory due to
       
   603     FindMaxUshortElement error
       
   604   * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
       
   605     Page load short-circuit can lead to XSS
       
   606   * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
       
   607     Ambiguous IPv6 in Origin headers may bypass webserver access
       
   608     restrictions
       
   609   * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
       
   610     Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
       
   611   * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
       
   612     Crash with WebGL content using textImage2D
       
   613   * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
       
   614     Off-by-one error in OpenType Sanitizer
       
   615   * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
       
   616     HTTP Redirections and remote content can be read by javascript errors
       
   617   * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
       
   618     Potential site identity spoofing when loading RSS and Atom feeds
       
   619 - added mozilla-libnotify.patch to allow fallback from libnotify
       
   620   to xul based events if no notification-daemon is running
       
   621 - gcc 4.7 fixes
       
   622   * mozilla-gcc47.patch
       
   623   * disabled crashreporter temporarily for Factory
       
   624 - recommend libcanberra0 for proper sound notifications
       
   625 
       
   626 -------------------------------------------------------------------
       
   627 Fri Mar  9 21:47:07 UTC 2012 - wr@rosenauer.org
       
   628 
       
   629 - update to Firefox 11.0 (bnc#750044)
       
   630   * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
       
   631     XSS with Drag and Drop and Javascript: URL
       
   632   * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
       
   633     SVG issues found with Address Sanitizer
       
   634   * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
       
   635     XSS with multiple Content Security Policy headers
       
   636   * MFSA 2012-16/CVE-2012-0458
       
   637     Escalation of privilege with Javascript: URL as home page
       
   638   * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
       
   639     Crash when accessing keyframe cssText after dynamic modification
       
   640   * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
       
   641     window.fullScreen writeable by untrusted content
       
   642   * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
       
   643     CVE-2012-0463
       
   644     Miscellaneous memory safety hazards
       
   645 - ported and reenabled KDE integration (bnc#746591)
       
   646 - explicitely build-require X libs
       
   647 
       
   648 -------------------------------------------------------------------
       
   649 Mon Mar  5 13:31:48 UTC 2012 - vdziewiecki@suse.com
       
   650 
       
   651 - add Provides: browser(npapi) FATE#313084
       
   652 
       
   653 -------------------------------------------------------------------
       
   654 Fri Feb 17 17:41:11 UTC 2012 - pcerny@suse.com
       
   655 
       
   656 - better plugin directory resolution (bnc#747320)
       
   657 
       
   658 -------------------------------------------------------------------
       
   659 Thu Feb 16 08:47:31 UTC 2012 - wr@rosenauer.org
       
   660 
       
   661 - update to Firefox 10.0.2 (bnc#747328)
       
   662   * CVE-2011-3026 (bmo#727401)
       
   663     libpng: integer overflow leading to heap-buffer overflow
       
   664 
       
   665 -------------------------------------------------------------------
       
   666 Thu Feb  9 09:26:11 UTC 2012 - wr@rosenauer.org
       
   667 
       
   668 - update to Firefox 10.0.1 (bnc#746616)
       
   669   * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
       
   670     use after free in nsXBLDocumentInfo::ReadPrototypeBindings
       
   671 
       
   672 -------------------------------------------------------------------
       
   673 Tue Feb  7 10:40:58 UTC 2012 - dvaleev@suse.com
       
   674 
       
   675 - Use YARR interpreter instead of PCRE on platforms where YARR JIT
       
   676   is not supported, since PCRE doesnt build (bmo#691898)
       
   677 - fix ppc64 build (bmo#703534)
       
   678 
       
   679 -------------------------------------------------------------------
       
   680 Mon Jan 30 09:41:59 UTC 2012 - wr@rosenauer.org
       
   681 
       
   682 - update to Firefox 10.0 (bnc#744275)
       
   683   * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
       
   684     Miscellaneous memory safety hazards
       
   685   * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
       
   686     <iframe> element exposed across domains via name attribute
       
   687   * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
       
   688     Child nodes from nsDOMAttribute still accessible after removal
       
   689     of nodes
       
   690   * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
       
   691     Frame scripts calling into untrusted objects bypass security
       
   692     checks
       
   693   * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
       
   694     Uninitialized memory appended when encoding icon images may
       
   695     cause information disclosure
       
   696   * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
       
   697     Potential Memory Corruption When Decoding Ogg Vorbis files
       
   698   * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
       
   699     Crash with malformed embedded XSLT stylesheets
       
   700 - KDE integration has been disabled since it needs refactoring
       
   701 - removed obsolete ppc64 patch
       
   702 
       
   703 -------------------------------------------------------------------
       
   704 Sun Jan 22 12:08:07 UTC 2012 - joop.boonen@opensuse.org
       
   705 
       
   706 - Disable neon for arm as it doesn't build correctly
       
   707 
       
   708 -------------------------------------------------------------------
       
   709 Fri Dec 23 17:02:01 UTC 2011 - wr@rosenauer.org
       
   710 
       
   711 - update to Firefox 9.0.1
       
   712   * (strongparent) parentNode of element gets lost (bmo#335998)
       
   713 
       
   714 -------------------------------------------------------------------
       
   715 Sun Dec 18 09:58:52 UTC 2011 - adrian@suse.de
       
   716 
       
   717 - fix arm build, don't package crashreporter there
       
   718 
       
   719 -------------------------------------------------------------------
       
   720 Sun Dec 18 09:52:08 UTC 2011 - wr@rosenauer.org
       
   721 
       
   722 - update to Firefox 9 (bnc#737533)
       
   723   * MFSA 2011-53/CVE-2011-3660
       
   724     Miscellaneous memory safety hazards (rv:9.0)
       
   725   * MFSA 2011-54/CVE-2011-3661 (bmo#691299)
       
   726     Potentially exploitable crash in the YARR regular expression
       
   727     library
       
   728   * MFSA 2011-55/CVE-2011-3658 (bmo#708186)
       
   729     nsSVGValue out-of-bounds access
       
   730   * MFSA 2011-56/CVE-2011-3663 (bmo#704482)
       
   731     Key detection without JavaScript via SVG animation
       
   732   * MFSA 2011-58/VE-2011-3665 (bmo#701259)
       
   733     Crash scaling <video> to extreme sizes
       
   734 
       
   735 -------------------------------------------------------------------
       
   736 Sun Nov 27 03:51:54 UTC 2011 - mgorse@suse.com
       
   737 
       
   738 - Fix accessibility under GNOME 3 (bnc#732898)
       
   739 
       
   740 -------------------------------------------------------------------
       
   741 Sat Nov 12 15:16:38 UTC 2011 - dvaleev@suse.com
       
   742 
       
   743 - fix ppc64 build
       
   744 
       
   745 -------------------------------------------------------------------
       
   746 Sun Nov  6 08:20:59 UTC 2011 - wr@rosenauer.org
       
   747 
       
   748 - update to Firefox 8 (bnc#728520)
       
   749   * MFSA 2011-47/CVE-2011-3648 (bmo#690225)
       
   750     Potential XSS against sites using Shift-JIS
       
   751   * MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654
       
   752     Miscellaneous memory safety hazards
       
   753   * MFSA 2011-49/CVE-2011-3650 (bmo#674776)
       
   754     Memory corruption while profiling using Firebug
       
   755   * MFSA 2011-52/CVE-2011-3655 (bmo#672182)
       
   756     Code execution via NoWaiverWrapper
       
   757 - rebased patches
       
   758 
       
   759 -------------------------------------------------------------------
       
   760 Thu Oct 20 12:34:47 UTC 2011 - wr@rosenauer.org
       
   761 
       
   762 - enable telemetry prompt
       
   763 
       
   764 -------------------------------------------------------------------
       
   765 Fri Sep 30 10:52:36 UTC 2011 - wr@rosenauer.org
       
   766 
       
   767 - update to minor release 7.0.1
       
   768   * fixed staged addon updates
       
   769 - set intl.locale.matchOS=true in the base package as it causes
       
   770   too much confusion when it's only available with branding-openSUSE
       
   771 
       
   772 -------------------------------------------------------------------
       
   773 Fri Sep 23 11:22:22 UTC 2011 - wr@rosenauer.org
       
   774 
       
   775 - update to Firefox 7 (bnc#720264)
       
   776   including
       
   777   * Improve Responsiveness with Memory Reductions
       
   778   * Instant Sync
       
   779   * WebSocket protocol 8
       
   780   * MFSA 2011-36/CVE-2011-2995/CVE-2011-2996/CVE-2011-2997
       
   781     Miscellaneous memory safety hazards
       
   782   * MFSA 2011-39/CVE-2011-3000 (bmo#655389)
       
   783     Defense against multiple Location headers due to CRLF Injection
       
   784   * MFSA 2011-40/CVE-2011-2372/CVE-2011-3001
       
   785     Code installation through holding down Enter
       
   786   * MFSA 2011-41/CVE-2011-3002/CVE-2011-3003 (bmo#680840, bmo#682335)
       
   787     Potentially exploitable WebGL crashes
       
   788   * MFSA 2011-42/CVE-2011-3232 (bmo#653672)
       
   789     Potentially exploitable crash in the YARR regular expression
       
   790     library
       
   791   * MFSA 2011-43/CVE-2011-3004 (bmo#653926)
       
   792     loadSubScript unwraps XPCNativeWrapper scope parameter
       
   793   * MFSA 2011-44/CVE-2011-3005 (bmo#675747)
       
   794     Use after free reading OGG headers
       
   795   * MFSA 2011-45
       
   796     Inferring keystrokes from motion data
       
   797 - removed obsolete mozilla-cairo-lcd.patch
       
   798 - rebased patches
       
   799 - removed XLIB_SKIP_ARGB_VISUALS=1 from environment in
       
   800   mozilla.sh.in (bnc#680758)
       
   801 
       
   802 -------------------------------------------------------------------
       
   803 Fri Sep 16 06:57:38 UTC 2011 - wr@rosenauer.org
       
   804 
       
   805 - fixed loading of kde.js under KDE (bnc#718311)
       
   806 
       
   807 -------------------------------------------------------------------
       
   808 Wed Sep 14 07:02:04 UTC 2011 - wr@rosenauer.org
       
   809 
       
   810 - add dbus-1-glib-devel to BuildRequires (not pulled in
       
   811   automatically anymore on 12.1)
       
   812 - increase minversions for NSPR and NSS
       
   813 
       
   814 -------------------------------------------------------------------
       
   815 Fri Sep  9 20:44:15 UTC 2011 - wr@rosenauer.org
       
   816 
       
   817 - recreated source archive to get correct source-stamp.txt
       
   818 
       
   819 -------------------------------------------------------------------
       
   820 Wed Sep  7 14:30:34 UTC 2011 - pcerny@suse.com
       
   821 
       
   822 - security update to 6.0.2 (bnc#714931)
       
   823   * Complete blocking of certificates issued by DigiNotar
       
   824     (bmo#683449)
       
   825 
       
   826 -------------------------------------------------------------------
       
   827 Fri Sep  2 14:40:07 UTC 2011 - pcerny@suse.com
       
   828 
       
   829 - security update to 6.0.1 (bnc#714931)
       
   830   * MFSA 2011-34
       
   831     Protection against fraudulent DigiNotar certificates
       
   832     (bmo#682927)
       
   833 
       
   834 -------------------------------------------------------------------
       
   835 Fri Aug 12 21:16:19 UTC 2011 - wr@rosenauer.org
       
   836 
       
   837 - update to 6.0 (bnc#712224)
       
   838   included security fixes MFSA 2011-29
       
   839   * CVE-2011-2989/CVE-2011-2991/CVE-2011-2992/CVE-2011-2985
       
   840     Miscellaneous memory safety hazards
       
   841   * CVE-2011-2993 (bmo#657267)
       
   842     Unsigned scripts can call script inside signed JAR
       
   843   * CVE-2011-2988 (bmo#665934)
       
   844     Heap overflow in ANGLE library
       
   845   * CVE-2011-0084 (bmo#648094)
       
   846     Crash in SVGTextElement.getCharNumAtPosition()
       
   847   * CVE-2011-2990
       
   848     Credential leakage using Content Security Policy reports
       
   849   * CVE-2011-2986 (bmo#655836)
       
   850     Cross-origin data theft using canvas and Windows D2D
       
   851 - removed obsolete curl header dependency (mozilla-curl.patch)
       
   852 
       
   853 -------------------------------------------------------------------
       
   854 Fri Jul 22 13:34:12 UTC 2011 - wr@rosenauer.org
       
   855 
       
   856 - update to 6.0b3
       
   857   * removed obsolete patches
       
   858     - firefox-shellservice.patch
       
   859     - mozilla-gio.patch
       
   860     - mozilla-ppc-ipc.patch
       
   861     - firefox-linkorder.patch
       
   862     - firefox-no-sync-l10n.patch
       
   863 - recognize linux3 as platform for symbolstore.py
       
   864 
       
   865 -------------------------------------------------------------------
       
   866 Fri Jul  1 19:53:18 CEST 2011 - vuntz@opensuse.org
       
   867 
       
   868 - Add x-scheme-handler/ftp to the MimeType key in the .desktop, to
       
   869   let desktops know that Firefox can deal with ftp: URIs.
       
   870 
       
   871 -------------------------------------------------------------------
       
   872 Fri Jul  1 06:45:08 UTC 2011 - wr@rosenauer.org
       
   873 
       
   874 - create upstream branding package again (supposedly empty)
       
   875   (bnc#703401)
       
   876 - fix build on SLE11 (changes do not affect/are not applied for
       
   877   later versions)
       
   878 
       
   879 -------------------------------------------------------------------
       
   880 Wed Jun 22 06:41:17 UTC 2011 - wr@rosenauer.org
       
   881 
       
   882 - enable startup notification (bnc#701465)
       
   883 
       
   884 -------------------------------------------------------------------
       
   885 Mon Jun 20 19:37:01 UTC 2011 - wr@rosenauer.org
       
   886 
       
   887 - update to 5.0 final
       
   888 - included fixes for security issues: (bnc#701296, bnc#700578)
       
   889   * MFSA 2011-19/CVE-2011-2374 CVE-2011-2375
       
   890     Miscellaneous memory safety hazards
       
   891   * MFSA 2011-20/CVE-2011-2373 (bmo#617247)
       
   892     Use-after-free vulnerability when viewing XUL document with
       
   893     script disabled
       
   894   * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303)
       
   895     Memory corruption due to multipart/x-mixed-replace images
       
   896   * MFSA 2011-22/CVE-2011-2371 (bmo#664009)
       
   897     Integer overflow and arbitrary code execution in
       
   898     Array.reduceRight()
       
   899   * MFSA 2011-25/CVE-2011-2366
       
   900     Stealing of cross-domain images using WebGL textures
       
   901   * MFSA 2011-26/CVE-2011-2367 CVE-2011-2368
       
   902     Multiple WebGL crashes
       
   903   * MFSA 2011-27/CVE-2011-2369 (bmo#650001)
       
   904     XSS encoding hazard with inline SVG
       
   905   * MFSA 2011-28/CVE-2011-2370 (bmo#645699)
       
   906     Non-whitelisted site can trigger xpinstall
       
   907 
       
   908 -------------------------------------------------------------------
       
   909 Mon Jun 20 09:17:42 UTC 2011 - wr@rosenauer.org
       
   910 
       
   911 - update to 5.0b7
       
   912   * updated supported locales
       
   913 - do not build dump_syms static (not needed for us)
       
   914   -> fix build for openSUSE 12.1 and above
       
   915 
       
   916 -------------------------------------------------------------------
       
   917 Wed Jun 15 14:59:32 UTC 2011 - wr@rosenauer.org
       
   918 
       
   919 - update to 5.0b6
       
   920 - include proper revision information into the build
       
   921 - speedier find-external-requires.sh
       
   922 
       
   923 -------------------------------------------------------------------
       
   924 Tue May 31 06:53:55 UTC 2011 - wr@rosenauer.org
       
   925 
       
   926 - update to 5.0b3
       
   927 - transformed to standalone Firefox (not xulrunner based)
       
   928   (with new Firefox rapid release cycle it makes no sense anymore)
       
   929   * imported all relevant xulrunner patches
       
   930 - do not compile in build timestamp
       
   931 
       
   932 -------------------------------------------------------------------
       
   933 Fri Apr 15 07:08:53 UTC 2011 - wr@rosenauer.org
       
   934 
       
   935 - security update to 4.0.1 (bnc#689281)
       
   936   * MFSA 2011-12/ CVE-2011-0069 CVE-2011-0070 CVE-2011-0079
       
   937     CVE-2011-0080 CVE-2011-0081
       
   938     Miscellaneous memory safety hazards
       
   939   * MFSA 2011-17/CVE-2011-0068 (bmo#623791)
       
   940     WebGLES vulnerabilities
       
   941   * MFSA 2011-18/CVE-2011-1202 (bmo#640339)
       
   942     XSLT generate-id() function heap address leak
       
   943 
       
   944 -------------------------------------------------------------------
       
   945 Wed Mar 30 11:24:36 UTC 2011 - wr@rosenauer.org
       
   946 
       
   947 - add all available icon sizes
       
   948 
       
   949 -------------------------------------------------------------------
       
   950 Tue Mar 29 11:55:53 UTC 2011 - cfarrell@novell.com
       
   951 
       
   952 - license update: MPLv1.1 or GPLv2+ or LGPLv2+
       
   953   Sync licenses with Fedora. MPL does not state ^or later^
       
   954 
       
   955 -------------------------------------------------------------------
       
   956 Fri Mar 18 08:49:15 UTC 2011 - wr@rosenauer.org
       
   957 
       
   958 - update to version 4.0rc2
       
   959 - fixed rpm macros delivered with devel package (bnc#679950)
       
   960 
       
   961 -------------------------------------------------------------------
       
   962 Wed Feb 23 07:52:04 UTC 2011 - wr@rosenauer.org
       
   963 
       
   964 - update to version 4.0b12
       
   965 - rebased patches
       
   966 
       
   967 -------------------------------------------------------------------
       
   968 Fri Feb  4 09:32:50 UTC 2011 - wr@rosenauer.org
       
   969 
       
   970 - update to version 4.0b11
       
   971   * loads of bugfixes compared to last beta
       
   972   * added "Do Not Track" option
       
   973 - rebased patches
       
   974 - disable testpilot
       
   975 
       
   976 -------------------------------------------------------------------
       
   977 Fri Jan 28 08:56:12 UTC 2011 - wr@rosenauer.org
       
   978 
       
   979 - set correct desktop file name within KDE for 11.4 and up
       
   980 - add devel package with macros for extensions (from lnussel@suse.de)
       
   981 
       
   982 -------------------------------------------------------------------
       
   983 Sat Jan 22 22:21:52 UTC 2011 - wr@rosenauer.org
       
   984 
       
   985 - update to version 4.0b10
       
   986 - removed obsolete firefox-shell-bmo624267.patch
       
   987 - testpilot moved to distribution/extensions
       
   988 - updated locale provides and removed bn-IN from locales
       
   989 
       
   990 -------------------------------------------------------------------
       
   991 Tue Jan 11 06:13:40 UTC 2011 - wr@rosenauer.org
       
   992 
       
   993 - update to version 4.0b9
       
   994 - added x-scheme-handler for http and https to desktop file for
       
   995   newer Gnome environments
       
   996 - fixed default browser check/set for GIO (bmo#611953)
       
   997   (mozilla-shellservice.patch)
       
   998 - removed obsolete firefox-appname.patch (integrated into
       
   999   shellservice patch)
       
  1000 - renamed desktop file to firefox.desktop for 11.4 and newer
       
  1001   (bnc#664211)
       
  1002 - removed support for 10.3 and older from the spec file
       
  1003 - removed obsolete "Ximian" categories from desktop file
       
  1004 
       
  1005 -------------------------------------------------------------------
       
  1006 Mon Jan  3 17:35:46 CET 2011 - meissner@suse.de
       
  1007 
       
  1008 - Mirror ac_add_options --disable-ipc from xulrunner for PowerPC.
       
  1009 
       
  1010 -------------------------------------------------------------------
       
  1011 Wed Dec 15 07:49:45 UTC 2010 - wr@rosenauer.org
       
  1012 
       
  1013 - update to version 4.0beta8
       
  1014 
       
  1015 -------------------------------------------------------------------
       
  1016 Tue Nov 30 14:19:59 UTC 2010 - wr@rosenauer.org
       
  1017 
       
  1018 - major update to version 4.0beta7
       
  1019   * based on mozilla-xulrunner20
       
  1020   * far too many internal changes to list
       
  1021 
       
  1022 -------------------------------------------------------------------
       
  1023 Wed Oct 27 07:12:14 CEST 2010 - wr@rosenauer.org
       
  1024 
       
  1025 - security update to 3.6.12 (bnc#649492)
       
  1026   * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
       
  1027     Heap buffer overflow mixing document.write and DOM insertion
       
  1028 
       
  1029 -------------------------------------------------------------------
       
  1030 Wed Oct  6 07:13:52 CEST 2010 - wr@rosenauer.org
       
  1031 
       
  1032 - security update to 3.6.11 (bnc#645315)
       
  1033   * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
       
  1034     Miscellaneous memory safety hazards
       
  1035   * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
       
  1036     Buffer overflow and memory corruption using document.write
       
  1037   * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
       
  1038     Use-after-free error in nsBarProp
       
  1039   * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
       
  1040     Dangling pointer vulnerability in LookupGetterOrSetter
       
  1041   * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
       
  1042     XSS in gopher parser when parsing hrefs
       
  1043   * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
       
  1044     Cross-site information disclosure via modal calls
       
  1045   * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
       
  1046     SSL wildcard certificate matching IP addresses
       
  1047   * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
       
  1048     Unsafe library loading vulnerabilities
       
  1049   * MFSA 2010-72/CVE-2010-3173
       
  1050     Insecure Diffie-Hellman key exchange
       
  1051 
       
  1052 -------------------------------------------------------------------
       
  1053 Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org
       
  1054 
       
  1055 - update to 3.6.10
       
  1056   * fixing startup topcrash (bmo#594699)
       
  1057 
       
  1058 -------------------------------------------------------------------
       
  1059 Thu Aug 26 07:40:28 CEST 2010 - wr@rosenauer.org
       
  1060 
       
  1061 - security update to 3.6.9 (bnc#637303)
       
  1062   * MFSA 2010-49/CVE-2010-3169
       
  1063     Miscellaneous memory safety hazards
       
  1064   * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
       
  1065     Frameset integer overflow vulnerability
       
  1066   * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
       
  1067     Dangling pointer vulnerability using DOM plugin array
       
  1068   * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
       
  1069     Heap buffer overflow in nsTextFrameUtils::TransformText
       
  1070   * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
       
  1071     Dangling pointer vulnerability in nsTreeSelection
       
  1072   * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
       
  1073     XUL tree removal crash and remote code execution
       
  1074   * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
       
  1075     Dangling pointer vulnerability in nsTreeContentView
       
  1076   * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
       
  1077     Crash and remote code execution in normalizeDocument
       
  1078   * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
       
  1079     SJOW creates scope chains ending in outer object
       
  1080   * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
       
  1081     UTF-7 XSS by overriding document charset using <object> type
       
  1082     attribute
       
  1083   * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
       
  1084     Copy-and-paste or drag-and-drop into designMode document allows
       
  1085     XSS
       
  1086   * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
       
  1087     Information leak via XMLHttpRequest statusText
       
  1088 
       
  1089 -------------------------------------------------------------------
       
  1090 Wed Jul 28 08:33:14 CEST 2010 - meissner@suse.de
       
  1091 
       
  1092 - disable crash reporter for non x86/x86_64 to make it build.
       
  1093 
       
  1094 -------------------------------------------------------------------
       
  1095 Sat Jul 24 12:42:58 CEST 2010 - wr@rosenauer.org
       
  1096 
       
  1097 - security update to 3.6.8 (bnc#622506)
       
  1098   * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
       
  1099     Dangling pointer crash regression from plugin parameter array
       
  1100     fix
       
  1101 
       
  1102 -------------------------------------------------------------------
       
  1103 Fri Jul 16 06:48:44 CEST 2010 - wr@rosenauer.org
       
  1104 
       
  1105 - security update to 3.6.7 (bnc#622506)
       
  1106   * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
       
  1107     Miscellaneous memory safety hazards
       
  1108   * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
       
  1109     DOM attribute cloning remote code execution vulnerability
       
  1110   * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
       
  1111     Use-after-free error in NodeIterator
       
  1112   * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
       
  1113     Plugin parameter EnsureCachedAttrParamArrays remote code
       
  1114     execution vulnerability
       
  1115   * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
       
  1116     Arbitrary code execution using SJOW and fast native function
       
  1117   * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
       
  1118     nsCSSValue::Array index integer overflow
       
  1119   * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
       
  1120     nsTreeSelection dangling pointer remote code execution
       
  1121     vulnerability
       
  1122   * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
       
  1123     Remote code execution using malformed PNG image
       
  1124   * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
       
  1125     Cross-origin data disclosure via Web Workers and importScripts
       
  1126   * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
       
  1127     Same-origin bypass using canvas context
       
  1128   * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
       
  1129     Characters mapped to U+FFFD in 8 bit encodings cause subsequent
       
  1130     character to vanish
       
  1131   * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
       
  1132     Multiple location bar spoofing vulnerabilities
       
  1133   * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
       
  1134     Cross-domain data theft using CSS
       
  1135   * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
       
  1136     Cross-origin data leakage from script filename in error messages
       
  1137 
       
  1138 -------------------------------------------------------------------
       
  1139 Sun Jun 27 20:24:31 CEST 2010 - wr@rosenauer.org
       
  1140 
       
  1141 - update to 3.6.6 release
       
  1142   * modifies the crash protection feature to increase the amount 
       
  1143     of time that plugins are allowed to be non-responsive before 
       
  1144     being terminated.
       
  1145 
       
  1146 -------------------------------------------------------------------
       
  1147 Wed Jun 23 14:40:35 CEST 2010 - wr@rosenauer.org
       
  1148 
       
  1149 - update to final 3.6.4 release (bnc#603356)
       
  1150   * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
       
  1151     CVE-2010-1203
       
  1152     Crashes with evidence of memory corruption (rv:1.9.2.4)
       
  1153   * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
       
  1154     Freed object reuse across plugin instances
       
  1155   * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
       
  1156     Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
       
  1157   * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
       
  1158     Integer Overflow in XSLT Node Sorting
       
  1159   * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
       
  1160     focus() behavior can be used to inject or steal keystrokes
       
  1161   * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
       
  1162     Content-Disposition: attachment ignored if
       
  1163     Content-Type: multipart also present
       
  1164   * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
       
  1165     User tracking across sites using Math.random()
       
  1166 
       
  1167 -------------------------------------------------------------------
       
  1168 Mon Jun  7 07:07:33 CEST 2010 - wr@rosenauer.org
       
  1169 
       
  1170 - update to 3.6.4(build6)
       
  1171 
       
  1172 -------------------------------------------------------------------
       
  1173 Sun Apr 18 09:42:40 CEST 2010 - wr@rosenauer.org
       
  1174 
       
  1175 - security update to 3.6.4 (Lorentz)
       
  1176   * enable crashreporter also for x86-64
       
  1177   * Flash runs in a separate process to avoid crashing Firefox
       
  1178     (ix86 only; x86-64 still uses nspluginwrapper)
       
  1179 
       
  1180 -------------------------------------------------------------------
       
  1181 Thu Apr  1 11:15:38 UTC 2010 - wr@rosenauer.org
       
  1182 
       
  1183 - security update to 3.6.3
       
  1184   * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
       
  1185     Re-use of freed object due to scope confusion
       
  1186 
       
  1187 -------------------------------------------------------------------
       
  1188 Thu Mar 18 06:43:33 CET 2010 - wr@rosenauer.org
       
  1189 
       
  1190 - security update to version 3.6.2 (bnc#586567)
       
  1191   * MFSA 2010-08/CVE-2010-1028
       
  1192     WOFF heap corruption due to integer overflow
       
  1193   * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
       
  1194     Deleted frame reuse in multipart/x-mixed-replace image
       
  1195   * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
       
  1196     XSS via plugins and unprotected Location object
       
  1197   * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
       
  1198     Crashes with evidence of memory corruption
       
  1199   * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
       
  1200     XSS using addEventListener and setTimeout on a wrapped object
       
  1201   * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
       
  1202     Content policy bypass with image preloading
       
  1203   * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
       
  1204     Browser chrome defacement via cached XUL stylesheets
       
  1205   * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
       
  1206     Asynchronous Auth Prompt attaches to wrong window
       
  1207   * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
       
  1208     Crashes with evidence of memory corruption
       
  1209   * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
       
  1210     Dangling pointer vulnerability in nsTreeContentView
       
  1211   * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
       
  1212     Dangling pointer vulnerability in nsPluginArray
       
  1213   * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
       
  1214     Chrome privilege escalation via forced URL drag and drop
       
  1215   * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
       
  1216     Update NSS to support TLS renegotiation indication
       
  1217   * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
       
  1218     Image src redirect to mailto: URL opens email editor
       
  1219   * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
       
  1220     XMLDocument::load() doesn't check nsIContentPolicy
       
  1221 
       
  1222 -------------------------------------------------------------------
       
  1223 Mon Jan 18 09:42:50 CET 2010 - wr@rosenauer.org
       
  1224 
       
  1225 - update to 3.6rc2 (already named 3.6.0)
       
  1226 - removed obsolete orbit-devel build requirement
       
  1227 
       
  1228 -------------------------------------------------------------------
       
  1229 Wed Jan  6 17:15:40 CET 2010 - wr@rosenauer.org
       
  1230 
       
  1231 - major update to 3.6rc1
       
  1232 
       
  1233 -------------------------------------------------------------------
       
  1234 Fri Dec 25 09:39:42 CET 2009 - wr@rosenauer.org
       
  1235 
       
  1236 - update to version 3.5.7 (bnc#568011)
       
  1237   * DNS resolution in MakeSN of nsAuthSSPI causing issues for
       
  1238     proxy servers that support NTLM auth (bmo#535193)
       
  1239 - added missing lockdown preferences (bnc#567131)
       
  1240 
       
  1241 -------------------------------------------------------------------
       
  1242 Thu Dec 17 20:06:38 CET 2009 - wr@rosenauer.org
       
  1243 
       
  1244 - readded firefox-ui-lockdown.patch (bnc#546158)
       
  1245 
       
  1246 -------------------------------------------------------------------
       
  1247 Thu Dec  3 21:53:59 CET 2009 - wr@rosenauer.org
       
  1248 
       
  1249 - security update to version 3.5.6 (bnc#559807)
       
  1250   * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
       
  1251     Crashes with evidence of memory corruption (rv:1.9.1.6)
       
  1252   * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
       
  1253     Memory safety fixes in liboggplay media library
       
  1254   * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
       
  1255     Integer overflow, crash in libtheora video library
       
  1256   * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
       
  1257     NTLM reflection vulnerability
       
  1258   * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
       
  1259     Location bar spoofing vulnerabilities
       
  1260   * MFSA 2009-70/VE-2009-3986 (bmo#522430)
       
  1261     Privilege escalation via chrome window.opener
       
  1262 - fixed firefox-browser-css.patch (bnc#561027)
       
  1263 
       
  1264 -------------------------------------------------------------------
       
  1265 Mon Nov 23 22:31:21 CET 2009 - wr@rosenauer.org
       
  1266 
       
  1267 - rebased patches for fuzz=0
       
  1268 
       
  1269 -------------------------------------------------------------------
       
  1270 Thu Nov  5 19:49:33 UTC 2009 - wr@rosenauer.org
       
  1271 
       
  1272 - update to version 3.5.5 (bnc#553172)
       
  1273 
       
  1274 -------------------------------------------------------------------
       
  1275 Sat Oct 17 23:19:23 CEST 2009 - wr@rosenauer.org
       
  1276 
       
  1277 - security update to version 3.5.4 (bnc#545277)
       
  1278   * MFSA 2009-52/CVE-2009-3370 (bmo#511615)
       
  1279     Form history vulnerable to stealing
       
  1280   * MFSA 2009-53/CVE-2009-3274 (bmo#514823)
       
  1281     Local downloaded file tampering
       
  1282   * MFSA 2009-54/CVE-2009-3371 (bmo#514554)
       
  1283     Crash with recursive web-worker calls
       
  1284   * MFSA 2009-55/CVE-2009-3372 (bmo#500644)
       
  1285     Crash in proxy auto-configuration regexp parsing
       
  1286   * MFSA 2009-56/CVE-2009-3373 (bmo#511689)
       
  1287     Heap buffer overflow in GIF color map parser
       
  1288   * MFSA 2009-57/CVE-2009-3374 (bmo#505988)
       
  1289     Chrome privilege escalation in XPCVariant::VariantDataToJS()
       
  1290   * MFSA 2009-59/CVE-2009-1563 (bmo#516396, bmo#516862)
       
  1291     Heap buffer overflow in string to number conversion
       
  1292   * MFSA 2009-61/CVE-2009-3375 (bmo#503226)
       
  1293     Cross-origin data theft through document.getSelection()
       
  1294   * MFSA 2009-62/CVE-2009-3376 (bmo#511521)
       
  1295     Download filename spoofing with RTL override
       
  1296   * MFSA 2009-63/CVE-2009-3377/CVE-2009-3379/CVE-2009-3378
       
  1297     Upgrade media libraries to fix memory safety bugs
       
  1298   * MFSA 2009-64/CVE-2009-3380/CVE-2009-3381/CVE-2009-3383
       
  1299     Crashes with evidence of memory corruption
       
  1300 - removed upstreamed patch
       
  1301   * firefox-bug506901.patch 
       
  1302 
       
  1303 -------------------------------------------------------------------
       
  1304 Wed Oct  7 20:11:24 CEST 2009 - llunak@novell.com
       
  1305 
       
  1306 - fix KDE button order in one more place (bnc#170055)
       
  1307 
       
  1308 -------------------------------------------------------------------
       
  1309 Fri Oct  2 20:26:49 CEST 2009 - wr@rosenauer.org
       
  1310 
       
  1311 - improve UI colors to be usable with dark themes at all 
       
  1312   (firefox-browser-css.patch) (bnc#503351)
       
  1313 - extend list of supported architectures as ABI identifier
       
  1314   (mozilla-abi.patch) (bnc#543460)
       
  1315 
       
  1316 -------------------------------------------------------------------
       
  1317 Mon Sep 14 00:07:55 CEST 2009 - wr@rosenauer.org
       
  1318 
       
  1319 - added KDE integration patch from llunak@novell.com  
       
  1320   (firefox-kde.patch)  
       
  1321   * support for knotify, making -kde4-addon obsolete  
       
  1322   * KDE-specific support functional (bnc#170055)
       
  1323 - do not build libnkgnomevfs (bmo#512671) (firefox-no-gnomevfs)
       
  1324 
       
  1325 -------------------------------------------------------------------
       
  1326 Thu Sep 10 09:34:26 CEST 2009 - wr@rosenauer.org
       
  1327 
       
  1328 - security update to version 3.5.3 (bnc#534458)
       
  1329   * MFSA 2009-47/CVE-2009-3069/CVE-2009-3070/CVE-2009-3071/
       
  1330     CVE-2009-3072/CVE-2009-3073/CVE-2009-3074/CVE-2009-3075
       
  1331     Crashes with evidence of memory corruption
       
  1332   * MFSA 2009-49/CVE-2009-3077 (bmo#506871)
       
  1333     TreeColumns dangling pointer vulnerability
       
  1334   * MFSA 2009-50/CVE-2009-3078 (bmo#453827)
       
  1335     Location bar spoofing via tall line-height Unicode characters
       
  1336   * MFSA 2009-51/CVE-2009-3079 (bmo#454363)
       
  1337     Chrome privilege escalation with FeedWriter
       
  1338 
       
  1339 -------------------------------------------------------------------
       
  1340 Wed Aug 19 22:14:07 CEST 2009 - wr@rosenauer.org
       
  1341 
       
  1342 - renamed patch firefox-contextmenu-gnome to firefox-cross-desktop
       
  1343   as it contains more tweaks to handle non-Gnome environments and
       
  1344   especially KDE integration: 
       
  1345   * added the ability to set the KDE default browser 
       
  1346     (still part of bnc#170055)
       
  1347 
       
  1348 -------------------------------------------------------------------
       
  1349 Sat Aug  8 00:14:18 CEST 2009 - wr@rosenauer.org
       
  1350 
       
  1351 - split -translations package into -common and -other
       
  1352   (bnc#529180)
       
  1353 - remove "set as background" from context menu if not running in
       
  1354   Gnome (part of bnc#170055)
       
  1355 
       
  1356 -------------------------------------------------------------------
       
  1357 Fri Jul 31 09:01:57 CEST 2009 - wr@rosenauer.org
       
  1358 
       
  1359 - security update to version 3.5.2
       
  1360   * MFSA 2009-38/CVE-2009-2470 (bmo#459524)
       
  1361     Data corruption with SOCKS5 reply containing DNS name longer
       
  1362     than 15 characters
       
  1363   * MFSA 2009-44/CVE-2009-2654 (bmo#451898)
       
  1364     Location bar and SSL indicator spoofing via window.open() on
       
  1365     invalid URL
       
  1366   * MFSA 2009-45
       
  1367     Crashes with evidence of memory corruption
       
  1368   * MFSA 2009-46 (bmo#498897)
       
  1369     Chrome privilege escalation due to incorrectly cached wrapper
       
  1370   * various other stability fixes
       
  1371 - export MOZ_APP_LAUNCHER in the startscript (bmo#453689)
       
  1372 
       
  1373 -------------------------------------------------------------------
       
  1374 Tue Jul 28 14:54:46 CEST 2009 - wr@rosenauer.org
       
  1375 
       
  1376 - fixed %exclude usage
       
  1377 - fixed preferences' advanced pane for fresh profiles (bmo#506901)
       
  1378 
       
  1379 -------------------------------------------------------------------
       
  1380 Wed Jul 15 20:13:19 CEST 2009 - wr@rosenauer.org
       
  1381 
       
  1382 - security update to version 3.5.1
       
  1383   * MFSA 2009-41
       
  1384     Corrupt JIT state after deep return from native function
       
  1385 
       
  1386 -------------------------------------------------------------------
       
  1387 Mon Jul  6 12:33:47 CEST 2009 - wr@rosenauer.org
       
  1388 
       
  1389 - added mozilla-linkorder.patch to fix build with --as-needed
       
  1390 
       
  1391 -------------------------------------------------------------------
       
  1392 Tue Jun 30 08:52:00 CEST 2009 - wr@rosenauer.org
       
  1393 
       
  1394 - update to final version 3.5 (20090623)
       
  1395 
       
  1396 -------------------------------------------------------------------
       
  1397 Tue Jun 23 09:39:50 CEST 2009 - wr@rosenauer.org
       
  1398 
       
  1399 - fixed build by linking to a real file
       
  1400 
       
  1401 -------------------------------------------------------------------
       
  1402 Thu Jun 18 10:19:40 CEST 2009 - wr@rosenauer.org
       
  1403 
       
  1404 - update to version 3.5rc2 (20090617)
       
  1405 - BuildRequire mozilla-xulrunner191 = 1.9.1.0
       
  1406 
       
  1407 -------------------------------------------------------------------
       
  1408 Sat Jun  6 15:59:02 CEST 2009 - wr@rosenauer.org
       
  1409 
       
  1410 - update to version 3.5b99 (20090604)
       
  1411 - BuildRequire mozilla-xulrunner191 = 1.9.1b99
       
  1412 
       
  1413 -------------------------------------------------------------------
       
  1414 Wed May 27 08:03:16 CEST 2009 - wr@rosenauer.org
       
  1415 
       
  1416 - fixed typos in improved xulrunner dependencies
       
  1417 
       
  1418 -------------------------------------------------------------------
       
  1419 Mon May 11 18:25:12 CEST 2009 - wr@rosenauer.org
       
  1420 
       
  1421 - use non-localized Downloads folder (bnc#501724)
       
  1422 
       
  1423 -------------------------------------------------------------------
       
  1424 Mon May  4 07:57:50 CEST 2009 - wr@rosenauer.org
       
  1425 
       
  1426 - update to new major version 3.5b4
       
  1427   * based on Gecko 1.9.1 (mozilla-xulrunner191)
       
  1428   * Private Browsing Mode
       
  1429   * TraceMonkey JavaScript engine
       
  1430   * Geolocation support
       
  1431   * native JSON and web worker threads support
       
  1432   * speculative parsing for faster content rendering
       
  1433   * Some HTML5 support
       
  1434 - updated firefox.schemas
       
  1435 - improved firefox-no-update.patch
       
  1436 
       
  1437 -------------------------------------------------------------------
       
  1438 Tue Apr 28 10:47:54 CEST 2009 - wr@rosenauer.org
       
  1439 
       
  1440 - security update to 3.0.10
       
  1441   * MFSA 2009-23/CVE-2009-1313 (bmo#489647)
       
  1442       Crash in nsTextFrame::ClearTextRun()
       
  1443 
       
  1444 -------------------------------------------------------------------
       
  1445 Thu Apr 16 13:52:21 CEST 2009 - wr@rosenauer.org
       
  1446 
       
  1447 - security update to 3.0.9 (bnc#495473)
       
  1448   * MFSA 2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304/CVE-2009-1305
       
  1449       Crashes with evidence of memory corruption (rv:1.9.0.9)
       
  1450   * MFSA 2009-15/CVE-2009-0652 (bmo#479336)
       
  1451       URL spoofing with box drawing character
       
  1452   * MFSA 2009-16/CVE-2009-1306 (bmo#474536)
       
  1453       jar: scheme ignores the content-disposition: header on the
       
  1454       inner URI
       
  1455   * MFSA 2009-17/CVE-2009-1307 (bmo#481342)
       
  1456       Same-origin violations when Adobe Flash loaded via
       
  1457       view-source: scheme
       
  1458   * MFSA 2009-18/CVE-2009-1308 (bmo#481558)
       
  1459       XSS hazard using third-party stylesheets and XBL bindings
       
  1460   * MFSA 2009-19/CVE-2009-1309 (bmo#482206,478433)
       
  1461       Same-origin violations in XMLHttpRequest and
       
  1462       XPCNativeWrapper.toString
       
  1463   * MFSA 2009-20/CVE-2009-1310 (bmo#483086)
       
  1464       Malicious search plugins can inject code into arbitrary sites
       
  1465   * MFSA 2009-21/CVE-2009-1311 (bmo#471962)
       
  1466       POST data sent to wrong site when saving web page with
       
  1467       embedded frame
       
  1468   * MFSA 2009-22/CVE-2009-1312 (bmo#475636)
       
  1469       Firefox allows Refresh header to redirect to javascript: URIs
       
  1470 
       
  1471 -------------------------------------------------------------------
       
  1472 Fri Mar 27 09:43:43 CET 2009 - wr@rosenauer.org
       
  1473 
       
  1474 - security update to 1.9.0.8 (bnc#488955,489411)
       
  1475   * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
       
  1476       Crash and remote code execution in XSL transformation
       
  1477   * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
       
  1478       Arbitrary code execution via XUL tree moveToEdgeShift
       
  1479 - allow RPM provides for stuff besides shared libraries
       
  1480   (e.g. mime-types)
       
  1481 
       
  1482 -------------------------------------------------------------------
       
  1483 Sun Mar  1 11:08:58 CET 2009 - wr@rosenauer.org
       
  1484 
       
  1485 - security update to 3.0.7 (bnc#478625)
       
  1486   * MFSA 2009-07 - Crashes with evidence of memory corruption
       
  1487     CVE-2009-0771 - Layout Engine Crashes
       
  1488     CVE-2009-0772 - Layout Engine Crashes
       
  1489     CVE-2009-0773 - crashes in the JavaScript engine
       
  1490     CVE-2009-0774 - Layout Engine Crashes
       
  1491   * MFSA 2009-08/CVE-2009-0775 - (bmo#474456)
       
  1492     Mozilla Firefox XUL Linked Clones Double Free Vulnerability
       
  1493   * MFSA 2009-09/CVE-2009-0776 (bmo#414540)
       
  1494     XML data theft via RDFXMLDataSource and cross-domain redirect
       
  1495   * MFSA 2009-10/CVE-2009-0040 (bmo#478901)
       
  1496     Upgrade PNG library to fix memory safety hazards
       
  1497   * MFSA 2009-11/CVE-2009-0777 (bmo#452979)
       
  1498     URL spoofing with invisible control characters
       
  1499 
       
  1500 -------------------------------------------------------------------
       
  1501 Wed Feb  4 18:58:59 EST 2009 - hfiguiere@suse.de
       
  1502 
       
  1503 - Review and approve changes.
       
  1504 
       
  1505 -------------------------------------------------------------------
       
  1506 Wed Jan 28 13:48:00 CET 2009 - wr@rosenauer.org
       
  1507 
       
  1508 - security update to 3.0.6 (bnc#470074)
       
  1509   * MFSA 2009-06/CVE-2009-0358: Directives to not cache pages ignored
       
  1510     (bmo#441751)
       
  1511   * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading 
       
  1512     HTTPOnly cookies (bmo#380418)
       
  1513   * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via 
       
  1514     local .desktop files (bmo#460425)
       
  1515   * MFSA 2009-03/CVE-2009-0355: Local file stealing with SessionStore
       
  1516     (bmo#466937)
       
  1517   * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method 
       
  1518     and window.eval (bmo#468581)
       
  1519   * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with 
       
  1520     evidence of memory corruption (rv:1.9.0.6) (bmo#452913, 
       
  1521     bmo#449006, bmo#331088, bmo#401042, bmo#416461, bmo#422283,
       
  1522     bmo#422301, bmo#431705, bmo#437142, bmo#421839, bmo#420697,
       
  1523     bmo#461027)
       
  1524   * (non security) added lv locale
       
  1525 
       
  1526 -------------------------------------------------------------------
       
  1527 Thu Jan 22 11:09:42 EST 2009 - hfiguiere@suse.de
       
  1528 
       
  1529 - Fix the wrapper script for PowerPC 64-bits (bnc#464753)
       
  1530 
       
  1531 -------------------------------------------------------------------
       
  1532 Wed Dec 17 13:13:25 EST 2008 - hfiguiere@suse.de
       
  1533 
       
  1534 - Review and approve changes.
       
  1535 
       
  1536 -------------------------------------------------------------------
       
  1537 Mon Dec 15 16:41:57 CET 2008 - wr@rosenauer.org
       
  1538 
       
  1539 - security update to 1.9.0.5 (bnc#455804)
       
  1540   for details
       
  1541   http://www.mozilla.org/security/known-vulnerabilities/firefox30.html
       
  1542   * removed aboutRights workaround again
       
  1543   * added et locale
       
  1544 
       
  1545 -------------------------------------------------------------------
       
  1546 Tue Nov 25 10:14:45 EST 2008 - hfiguiere@suse.de
       
  1547 
       
  1548 - Review and approve changes.
       
  1549 
       
  1550 -------------------------------------------------------------------
       
  1551 Sat Nov 22 13:26:03 CET 2008 - wr@rosenauer.org
       
  1552 
       
  1553 - replace license agreement with about:rights toolbar
       
  1554   (backported from upcoming FF 3.0.5) (bnc#436054, bmo#456439)
       
  1555   (it's always displayed in en-US)
       
  1556 
       
  1557 -------------------------------------------------------------------
       
  1558 Fri Nov 21 03:11:41 EST 2008 - hfiguiere@suse.de
       
  1559 
       
  1560 - Update firefox-lockdown-ui.patch
       
  1561   * Print Setup is now properly locked down. bnc#431028
       
  1562   * Bookmark editing it now properly locked down. bnc#439335
       
  1563   * Bookmars are properly hidden.
       
  1564   * History is properly locked down. bnc#439343
       
  1565   * Make sure the search bar is not put back when resetting the 
       
  1566     toolbar. bnc#439358
       
  1567 
       
  1568 -------------------------------------------------------------------
       
  1569 Thu Nov 20 18:49:19 CST 2008 - maw@suse.de
       
  1570 
       
  1571 - Review and approve changes.
       
  1572 
       
  1573 -------------------------------------------------------------------
       
  1574 Thu Nov 13 08:22:13 CET 2008 - wr@rosenauer.org
       
  1575 
       
  1576 - lockdown cleanup
       
  1577   * removed gecko-lockdown.patch from Firefox (it's in xulrunner)
       
  1578   * stripped out some toolkit stuff from firefox-ui-lockdown
       
  1579   * added extra default preferences for lockdown
       
  1580 
       
  1581 -------------------------------------------------------------------
       
  1582 Wed Nov 12 17:55:19 CST 2008 - maw@suse.de
       
  1583 
       
  1584 - Review and approve changes.
       
  1585 
       
  1586 -------------------------------------------------------------------
       
  1587 Tue Nov 11 09:15:59 CET 2008 - wr@rosenauer.org
       
  1588 
       
  1589 - update to security/maintenance release 3.0.4 (bnc#439841)
       
  1590   * support additional locales (bg, cy, eo, oc)
       
  1591 - removed obsolete configure option (enable-gconf)
       
  1592 
       
  1593 -------------------------------------------------------------------
       
  1594 Fri Nov  7 15:39:54 CST 2008 - maw@suse.de
       
  1595 
       
  1596 - Review and approve changes.
       
  1597 
       
  1598 -------------------------------------------------------------------
       
  1599 Tue Nov  4 23:27:03 CET 2008 - wr@rosenauer.org
       
  1600 
       
  1601 - moved gconf schema into branding packages (bnc#441646)
       
  1602 
       
  1603 -------------------------------------------------------------------
       
  1604 Tue Oct 28 16:16:14 EDT 2008 - hfiguiere@suse.de
       
  1605 
       
  1606 - Fix missing %endif (for fix for bnc#434283)
       
  1607 
       
  1608 -------------------------------------------------------------------
       
  1609 Mon Oct 27 17:05:02 EDT 2008 - hfiguiere@suse.de
       
  1610 
       
  1611 - Add disable_show_passwords to firefox.schemas. (FATE #301534)
       
  1612 
       
  1613 -------------------------------------------------------------------
       
  1614 Mon Oct 27 11:57:29 CET 2008 - wr@rosenauer.org
       
  1615 
       
  1616 - make biarch dependencies work correctly (bnc#434283)
       
  1617 
       
  1618 -------------------------------------------------------------------
       
  1619 Thu Oct 23 10:14:22 EDT 2008 - hfiguiere@suse.de
       
  1620 
       
  1621 - Added firefox-ui-lockdown.patch and gecko-lockdown.patch
       
  1622   * Lockdown: FATE#302023, FATE#302024
       
  1623 
       
  1624 -------------------------------------------------------------------
       
  1625 Mon Oct  6 14:55:48 CEST 2008 - sbrabec@suse.cz
       
  1626 
       
  1627 - Conflict with other branding providers (FATE#304881).
       
  1628 
       
  1629 -------------------------------------------------------------------
       
  1630 Mon Sep 29 12:27:43 CDT 2008 - maw@suse.de
       
  1631 
       
  1632 - Review and approve changes.
       
  1633 
       
  1634 -------------------------------------------------------------------
       
  1635 Mon Sep 29 11:36:30 CDT 2008 - maw@suse.de
       
  1636 
       
  1637 - Remove a reference to a stale patch.
       
  1638 
       
  1639 -------------------------------------------------------------------
       
  1640 Sun Sep 28 18:19:26 CEST 2008 - wr@rosenauer.org
       
  1641 
       
  1642 - update to regression fix release 3.0.3
       
  1643   * Fixed a problem where users were unable to retrieve saved
       
  1644     passwords or save new passwords (bmo#454708, bnc#429179#c20,
       
  1645     CVE-2008-4063, CVE-2008-4064, CVE-2008-3836, andCVE-2008-4070)
       
  1646 
       
  1647 -------------------------------------------------------------------
       
  1648 Thu Sep 25 14:47:13 CDT 2008 - maw@suse.de
       
  1649 
       
  1650 - Review and approve changes.
       
  1651 
       
  1652 -------------------------------------------------------------------
       
  1653 Mon Sep 15 13:45:16 CEST 2008 - wr@rosenauer.org
       
  1654 
       
  1655 - update to security/maintenance release 3.0.2 (bnc#429179)
       
  1656 - removed unused files from sources
       
  1657 - fix more rpmlint complaints and provide a config file to filter
       
  1658   false positives
       
  1659 - disable Gnome crashreporter as it has no value
       
  1660 - brought man-page up to date for the firefox stub
       
  1661   (removing firefox-bin reference)
       
  1662 - en-US locale not longer packaged in translations subpackage
       
  1663 
       
  1664 -------------------------------------------------------------------
       
  1665 Fri Aug 15 18:56:26 CDT 2008 - maw@novell.com
       
  1666 
       
  1667 - Review and approve changes.
       
  1668 
       
  1669 -------------------------------------------------------------------
       
  1670 Mon Aug  4 09:26:05 CEST 2008 - wr@rosenauer.org
       
  1671 
       
  1672 - Tweak branding split
       
  1673 
       
  1674 -------------------------------------------------------------------
       
  1675 Tue Jul 29 15:02:47 CEST 2008 - vuntz@novell.com
       
  1676 
       
  1677 - Create branding package (bnc#390752):
       
  1678   + search-addons.tar.bz2, bookmarks.html.suse and
       
  1679     firefox-suse-default-prefs.js will be moved to
       
  1680     MozillaFirefox-branding-openSUSE
       
  1681   + create a MozillaFirefox-branding-upstream package
       
  1682 
       
  1683 -------------------------------------------------------------------
       
  1684 Mon Jul 28 20:54:22 CEST 2008 - mauro@suse.de
       
  1685 
       
  1686 - Update to stability/security release 3.0.1 (bnc#407573) 
       
  1687   (thanks, Wolfgang)
       
  1688   + MFSA 2008-36  Crash with malformed GIF file on Mac OS X
       
  1689   + MFSA 2008-35 Command-line URLs launch multiple tabs when 
       
  1690     Firefox not running
       
  1691   + MFSA 2008-34 Remote code execution by overflowing CSS reference counter
       
  1692 - Set browser.shell.checkDefaultBrowser to true (bnc#404119) 
       
  1693 
       
  1694 -------------------------------------------------------------------
       
  1695 Tue Jun 17 18:49:33 CEST 2008 - maw@suse.de
       
  1696 
       
  1697 - Merge changes from the build service (thanks, Wolfgang)
       
  1698   (bnc#400001 and SWAMP#18164).
       
  1699 
       
  1700 -------------------------------------------------------------------
       
  1701 Tue Jun 17 14:40:04 CEST 2008 - wr@rosenauer.org
       
  1702 
       
  1703 - update to version 3.0
       
  1704 - fixed double entry in bookmarks for www.opensuse.org (bnc#396980
       
  1705 
       
  1706 -------------------------------------------------------------------
       
  1707 Thu May 15 13:45:51 CEST 2008 - aj@suse.de
       
  1708 
       
  1709 - Add Planet SUSE, forums.o.o and How to participate to default
       
  1710   URLs.
       
  1711 
       
  1712 -------------------------------------------------------------------
       
  1713 Fri May  2 16:25:24 CEST 2008 - maw@suse.de
       
  1714 
       
  1715 - network.protocol-handler.app.* prefs are no longer supported;
       
  1716   remove references to them from firefox-suse-default-prefs.js
       
  1717   (bnc#383697).
       
  1718 
       
  1719 -------------------------------------------------------------------
       
  1720 Thu Apr  3 01:42:34 CEST 2008 - maw@suse.de
       
  1721 
       
  1722 - Update to Firefox 3.0b5 (2.9.95) (thanks, Wolfgang).
       
  1723 
       
  1724 -------------------------------------------------------------------
       
  1725 Wed Mar 26 01:05:18 CET 2008 - maw@suse.de
       
  1726 
       
  1727 - Merge changes from the build service (thanks, Wolfgang)
       
  1728 - Update to the fourth Firefox 3.0 Beta (2.9.94):
       
  1729   + Based upon the Gecko 1.9 Web rendering platform, which improves
       
  1730     performance, stability, and rendering correctness; it also
       
  1731     boasts a considerable simplification in its code
       
  1732   + Security improvements:
       
  1733     * One-click site info
       
  1734     * Malware Protection
       
  1735     * New Web Forgery Protection page
       
  1736     * New SSL error pages
       
  1737     * Add-ons and Plugin version check
       
  1738     * Secure add-on updates
       
  1739     * Effective top-level domain (eTLD) service to better restrict
       
  1740       cookies and other restricted content to a single domain
       
  1741     * Better protection against cross-site JSON data leaks
       
  1742   + Usability improvements:
       
  1743     * Easier password management
       
  1744     * Simplified add-on installation
       
  1745     * New Download Manager
       
  1746     * Resumable downloading
       
  1747     * Full page zoom
       
  1748     * Podcasts and Videocasts can be associated with your media
       
  1749       playback tools
       
  1750     * Tab scrolling and quickmenu
       
  1751     * Save what you were doing: Firefox will prompt users to save
       
  1752       tabs on exit
       
  1753     * Optimized Open in Tabs behavior
       
  1754     * Location and Search bar size can now be customized with a
       
  1755       simple resizer item
       
  1756     * Text selection improvements
       
  1757     * Find toolbar
       
  1758     * Improved integration with Linux: Firefox's default icons,
       
  1759       buttons, and menu styles now use the native GTK theme
       
  1760   + Personalization improvements:
       
  1761     * Star button: quickly add bookmarks from the location bar
       
  1762       with a single click; a second click lets you file and tag them
       
  1763     * Tags: associate keywords with your bookmarks to sort them
       
  1764       by topic
       
  1765     * Location bar & auto-complete
       
  1766     * Smart Bookmarks Folder
       
  1767     * Places Organizer: view, organize and search through all
       
  1768       of your bookmarks, tags, and browsing history with multiple
       
  1769       views and smart folders to store your frequent searches
       
  1770     * Web-based protocol handlers
       
  1771     * Download & Install Add-ons
       
  1772     * Easy to use Download Actions
       
  1773   + Improved platform for web developers:
       
  1774     * New graphics and font handling: new graphics and text
       
  1775       rendering architectures in Gecko 1.9 provides rendering
       
  1776       improvements in CSS, SVG as well as improved display of
       
  1777       fonts with ligatures and complex scripts
       
  1778     * Color management: (set gfx.color_management.enabled on
       
  1779       in about:config and restart the browser to enable.);
       
  1780       Firefox can now adjust images with embedded color profiles
       
  1781     * Offline support: enables web applications to provide
       
  1782       offline functionality (website authors must add support
       
  1783       for offline browsing to their site for this feature
       
  1784       to be available to users)
       
  1785   + Improved performance:
       
  1786     * Speed: improvements to the JavaScript engine as well as
       
  1787       profile guided optimizations have resulted in significant
       
  1788       improvements in performance; compared to Firefox 2,
       
  1789       web applications like Google Mail and Zoho Office run
       
  1790       twice as fast in Firefox 3 Beta 4, and the popular
       
  1791       SunSpider test from Apple shows improvements over
       
  1792       previous releases
       
  1793     * Memory usage: Several new technologies work together to
       
  1794       reduce the amount of memory used by Firefox 3 Beta 4
       
  1795       over a web browsing session;  memory cycles are broken
       
  1796       and collected by an automated cycle collector, a new
       
  1797       memory allocator reduces fragmentation, hundreds of leaks
       
  1798       have been fixed, and caching strategies have been tuned
       
  1799     * Reliability: A user's bookmarks, history, cookies, and
       
  1800       preferences are now stored in a transactionally secure
       
  1801       database format which will prevent data loss even if their
       
  1802       system crashes
       
  1803 - This version depends upon the mozilla-xulrunner190 package
       
  1804 - Drop various stale packages, respin several that have been
       
  1805   kept around, and add a few new ones.
       
  1806 
       
  1807 -------------------------------------------------------------------
       
  1808 Mon Feb 11 18:18:14 CET 2008 - maw@suse.de
       
  1809 
       
  1810 - Security update to version 2.0.0.12 (bnc#354469):
       
  1811   + MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
       
  1812     overlay
       
  1813   + MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet
       
  1814     redirect
       
  1815   + MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain
       
  1816     text files
       
  1817   + MFSA 2008-08/CVE-2008-0591 File action dialog tampering
       
  1818   + MFSA 2008-06/CVE-2008-0419 Web browsing history and forward
       
  1819     navigation stealing
       
  1820   + MFSA 2008-05/CVE-2008-0418 Directory traversal via chrome: URI
       
  1821   + MFSA 2008-04/CVE-2008-0417 Stored password corruption
       
  1822   + MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS, Remote
       
  1823     Code Execution
       
  1824   + MFSA 2008-02/CVE-2008-0414 Multiple file input focus stealing
       
  1825     vulnerabilities
       
  1826   + MFSA 2008-01/CVE-2008-0412 Crashes with evidence of memory
       
  1827     corruption (rv:1.8.1.12)
       
  1828 - Reference libaoss.so in start script (bnc#117079)
       
  1829 - Remove mozilla-canvas-1.8.1.10.patch, as it has been upstreamed
       
  1830 - Update firefox-ui-lockdown.patch (FATE#301534, FATE#302023, and
       
  1831   FATE#302024)
       
  1832 - Add application/x-xpinstall mime type to MozillaFirefox.desktop
       
  1833 - Add MozillaFirefox.xml to bind .xpi to application/x-xpinstall
       
  1834   in desktop.
       
  1835 
       
  1836 -------------------------------------------------------------------
       
  1837 Thu Jan 17 17:52:47 CET 2008 - maw@suse.de
       
  1838 
       
  1839 - Add mozilla-maxpathlen.patch (#354150 and bmo #412610).
       
  1840 
       
  1841 -------------------------------------------------------------------
       
  1842 Fri Dec 21 18:46:50 CET 2007 - maw@suse.de
       
  1843 
       
  1844 - Add firefox-348446-empty-lists.patch (bnc#348446).
       
  1845 
       
  1846 -------------------------------------------------------------------
       
  1847 Wed Dec  5 02:21:26 CET 2007 - maw@suse.de
       
  1848 
       
  1849 - Respin proxy-dev.patch (bnc#340678) -- thanks, Anders!
       
  1850 
       
  1851 -------------------------------------------------------------------
       
  1852 Tue Nov 27 18:25:25 CET 2007 - maw@suse.de
       
  1853 
       
  1854 - Security update to version 2.0.0.10 (#341905, #341591):
       
  1855   + MFSA 2007-39  Referer-spoofing via window.location race condition
       
  1856   + MFSA 2007-38 Memory corruption vulnerabilities (rv:1.8.1.10)
       
  1857   + MFSA 2007-37 jar: URI scheme XSS hazard
       
  1858   + Fixes for regressions introduced in 2.0.0.8
       
  1859   + Updated dbus.patch, startup.patch, misc.dif, and configure.patch
       
  1860 - Add mozilla-gcc4.3-fixes.patch
       
  1861 - Add mozilla-canvas-1.8.1.10.patch (#341591#c10).
       
  1862 
       
  1863 -------------------------------------------------------------------
       
  1864 Mon Nov 26 18:27:25 CET 2007 - maw@suse.de
       
  1865 
       
  1866 - Build with -ftree-vrp -fwrapv, per advice in #342603#c17.
       
  1867 
       
  1868 -------------------------------------------------------------------
       
  1869 Tue Nov 13 17:49:01 CET 2007 - maw@suse.de
       
  1870 
       
  1871 - Add firefox-gcc4.3-fixes.patch.
       
  1872 
       
  1873 -------------------------------------------------------------------
       
  1874 Fri Oct 19 02:04:45 CEST 2007 - maw@suse.de
       
  1875 
       
  1876 - Security update to version 2.0.0.8 (#332512) (thanks, Wolfgang)
       
  1877   * MFSA 2007-29 Crashes with evidence of memory corruption
       
  1878   * MFSA 2007-30 onUnload Tailgating
       
  1879   * MFSA 2007-31 Digest authentication request splitting
       
  1880   * MFSA 2007-32 File input focus stealing vulnerability
       
  1881   * MFSA 2007-33 XUL pages can hide the window titlebar
       
  1882   * MFSA 2007-34 Possible file stealing through sftp protocol
       
  1883   * MFSA 2007-35 XPCNativeWraper pollution using Script object
       
  1884   complete advisories on
       
  1885   http://www.mozilla.org/projects/security/known-vulnerabilities.html
       
  1886 
       
  1887 -------------------------------------------------------------------
       
  1888 Sun Sep 23 19:49:12 CEST 2007 - maw@suse.de
       
  1889 
       
  1890 - Don't explicitly require libaoss.so (#326751).
       
  1891 
       
  1892 -------------------------------------------------------------------
       
  1893 Fri Sep 14 23:13:06 CEST 2007 - maw@suse.de
       
  1894 
       
  1895 - Update the Novell Support search plugin in search-addons.tar.bz2
       
  1896   (#297261)
       
  1897 - Set the browser.tabs.loadFolderAndReplace preference to false
       
  1898   by default (#230759).
       
  1899 
       
  1900 -------------------------------------------------------------------
       
  1901 Wed Sep 12 15:21:06 CEST 2007 - dmueller@suse.de
       
  1902 
       
  1903 - fix hardlinks accross partitions 
       
  1904 
       
  1905 -------------------------------------------------------------------
       
  1906 Thu Sep  6 16:07:12 CEST 2007 - maw@suse.de
       
  1907 
       
  1908 - Add http://software.opensuse.org/search?baseproject=openSUSE:10.3
       
  1909   to the default bookmarks (#308223).
       
  1910 
       
  1911 -------------------------------------------------------------------
       
  1912 Mon Sep  3 22:33:09 CEST 2007 - ro@suse.de
       
  1913 
       
  1914 - move last change a bit further in specfile 
       
  1915 
       
  1916 -------------------------------------------------------------------
       
  1917 Fri Aug 31 18:36:16 CEST 2007 - maw@suse.de
       
  1918 
       
  1919 - Mark a .png file as nonexecutable. 
       
  1920 
       
  1921 -------------------------------------------------------------------
       
  1922 Tue Aug 28 16:44:08 CEST 2007 - maw@suse.de
       
  1923 
       
  1924 - Minor .spec update (#305193)
       
  1925   + Remove two obsolete patches
       
  1926   + Correct releasedate
       
  1927   + Include only the officially supported locales.
       
  1928 
       
  1929 -------------------------------------------------------------------
       
  1930 Wed Aug 22 17:53:03 CEST 2007 - maw@suse.de
       
  1931 
       
  1932 - Merge changes from the build service (thanks, Wolfgang):
       
  1933   + Provide locale dependency information (#302288)
       
  1934   + Add x11-session.patch, supporting X11 session management
       
  1935     (#227047)
       
  1936   + Update to version 2.0.0.6
       
  1937     * MFSA 2007-26  Privilege escalation through chrome-loaded 
       
  1938                     about:blank windows
       
  1939     * MFSA 2007-27  Unescaped URIs passed to external programs
       
  1940                     (only relevant on Windows)
       
  1941 - Use %fdupes.
       
  1942 
       
  1943 -------------------------------------------------------------------
       
  1944 Tue Aug 21 09:45:35 CEST 2007 - aj@suse.de
       
  1945 
       
  1946 - Adjust bookmarks: Add news.opensuse.org, use new software.o.o
       
  1947   page.
       
  1948 
       
  1949 -------------------------------------------------------------------
       
  1950 Thu Aug 16 14:57:27 CEST 2007 - mauro@suse.de 
       
  1951 
       
  1952 - Revert previous change.
       
  1953 
       
  1954 -------------------------------------------------------------------
       
  1955 Tue Aug 14 11:58:23 CEST 2007 - mauro@suse.de
       
  1956 
       
  1957 - Added support for ymp in the mimetypes.rdf
       
  1958 - Added OneClickInstallUrlHandler for handing the actual call from firefox.
       
  1959 - Fixes bnc #295677 
       
  1960 
       
  1961 -------------------------------------------------------------------
       
  1962 Mon Jul 23 18:57:07 CEST 2007 - maw@suse.de
       
  1963 
       
  1964 - Security update to version 2.0.0.5 (#288115) which has fixes for:
       
  1965 MFSA 2007-18
       
  1966     CVE-2007-3734 - Browser flaws
       
  1967     CVE-2007-3735 - Javascript flaws
       
  1968 
       
  1969 MFSA 2007-19
       
  1970     CVE-2007-3736
       
  1971 
       
  1972 MFSA 2007-20
       
  1973     CVE-2007-3089
       
  1974 
       
  1975 MFSA 2007-21
       
  1976     CVE-2007-3737
       
  1977 
       
  1978 MFSA 2007-22
       
  1979     CVE-2007-3285
       
  1980 
       
  1981 MFSA 2007-23
       
  1982     CVE-2007-3670
       
  1983 
       
  1984 MFSA 2007-24
       
  1985     CVE-2007-3656
       
  1986 
       
  1987 MFSA 2007-25
       
  1988     CVE-2007-3738
       
  1989 
       
  1990 -------------------------------------------------------------------
       
  1991 Thu Jun 21 15:59:01 CEST 2007 - adrian@suse.de
       
  1992 
       
  1993 - fix changelog entry order
       
  1994 
       
  1995 -------------------------------------------------------------------
       
  1996 Mon Jun 18 13:22:42 CDT 2007 - maw@suse.de
       
  1997 
       
  1998 - Use mozilla.sh.in from the build service (#230681).
       
  1999 
       
  2000 -------------------------------------------------------------------
       
  2001 Tue Jun  5 15:55:08 CEST 2007 - sbrabec@suse.cz
       
  2002 
       
  2003 - Removed invalid desktop category "Application" (#254654).
       
  2004 
       
  2005 -------------------------------------------------------------------
       
  2006 Mon Jun  4 19:53:35 CDT 2007 - maw@suse.de
       
  2007 
       
  2008 - Security update to version 2.0.0.4
       
  2009 - Refresh configure.patch, startup.patch, and visibility.patch
       
  2010 - Now use l10n-%{version}.tar.bz2 instead of l10n.tar.bz2.
       
  2011 
       
  2012 -------------------------------------------------------------------
       
  2013 Mon Apr 30 16:49:55 CEST 2007 - ro@suse.de
       
  2014 
       
  2015 - added unzip to BuildRequires 
       
  2016 
       
  2017 -------------------------------------------------------------------
       
  2018 Wed Apr 18 14:16:44 CEST 2007 - mfabian@suse.de
       
  2019 
       
  2020 - add Japanese to the languages which get PANGO enabled in the
       
  2021   start script to support the Japanese combining characters
       
  2022   U+3099 U+309A (see bugzilla #262718 comment #29).
       
  2023 
       
  2024 -------------------------------------------------------------------
       
  2025 Mon Mar 12 11:06:10 CST 2007 - maw@suse.de
       
  2026 
       
  2027 - Package gconf stuff.
       
  2028 
       
  2029 -------------------------------------------------------------------
       
  2030 Wed Feb 21 16:37:25 CST 2007 - maw@suse.de
       
  2031 
       
  2032 - Security update to 2.0.0.2 (#244923), which covers:
       
  2033   + mfsa2007-01
       
  2034     * CVE-2007-0775 - layout engine crashes
       
  2035     * CVE-2007-0776 - SVG
       
  2036     * CVE-2007-0777 - javascript engine corruption
       
  2037   + mfsa2007-02
       
  2038     * CVE-2007-0995 - Invalid trailing characters in HTML tag attributes
       
  2039     * CVE-2007-0996 - Child frame character set inheritance
       
  2040     * CVE-2006-6077 - Injected password forms
       
  2041   + mfsa2007-02
       
  2042   + mfsa2007-03
       
  2043     * CVE-2007-0078
       
  2044   + mfsa2007-04
       
  2045     * CVE-2007-0079
       
  2046   + mfsa2007-05
       
  2047     * CVE-2007-0780
       
  2048     * CVE-2007-0800
       
  2049   + mfsa2007-06
       
  2050     * CVE-2007-0008 - client flaw
       
  2051     * CVE-2007-0009 - server flaw
       
  2052   + mfsa2007-07
       
  2053     * CVE-2007-0981
       
  2054 - Updates mozilla.sh.in (#230681)
       
  2055 - Fixes #232209
       
  2056 - Updates the man page (#243037)
       
  2057 - Properly propagates exit codes (#241492)
       
  2058 - Adds em-356370.patch (#217374)
       
  2059 
       
  2060 -------------------------------------------------------------------
       
  2061 Thu Jan 25 10:16:56 CST 2007 - maw@suse.de
       
  2062 
       
  2063 - Fixup the Gnome paths, keeping in closer sync with the
       
  2064  buildservice.
       
  2065 
       
  2066 -------------------------------------------------------------------
       
  2067 Thu Jan 18 09:27:54 CST 2007 - maw@suse.de
       
  2068 
       
  2069 - Gnome is now in /usr, so remove references to /opt/gnome
       
  2070 - Install firefox.png with the executable bit not set.
       
  2071 
       
  2072 -------------------------------------------------------------------
       
  2073 Wed Jan 10 12:57:39 CET 2007 - meissner@suse.de
       
  2074 
       
  2075 - readd MozillaFirebird provides (was incorrect in removing it).
       
  2076 
       
  2077 -------------------------------------------------------------------
       
  2078 Mon Jan  8 11:16:08 CET 2007 - meissner@suse.de
       
  2079 
       
  2080 - Do not provide MozillaFirebird, just obsolete it.
       
  2081 
       
  2082 -------------------------------------------------------------------
       
  2083 Fri Dec  1 02:22:49 CET 2006 - maw@suse.de
       
  2084 
       
  2085 - Update gecko-lockdown.patch (#220616).
       
  2086 
       
  2087 -------------------------------------------------------------------
       
  2088 Thu Nov 30 19:02:54 CET 2006 - maw@suse.de
       
  2089 
       
  2090 - Update firefox-suse-default-prefs.js, adding
       
  2091   'pref("browser.backspace_action", 2);' (#217374)
       
  2092 
       
  2093 -------------------------------------------------------------------
       
  2094 Thu Nov 30 08:17:28 CET 2006 - aj@suse.de
       
  2095 
       
  2096 - Fix last change (#224431).
       
  2097 
       
  2098 -------------------------------------------------------------------
       
  2099 Wed Nov 29 11:45:47 CET 2006 - aj@suse.de
       
  2100 
       
  2101 - Change download bookmark (#224431).
       
  2102 - Rename bookmark folder to openSUSE.
       
  2103 
       
  2104 -------------------------------------------------------------------
       
  2105 Tue Nov 28 08:09:48 CET 2006 - aj@suse.de
       
  2106 
       
  2107 - Sync from Buildservice with following critical fixes (thanks
       
  2108   Wolfgang Rosenauer!):
       
  2109   * fixed system-proxies.patch to actually work (#223881).
       
  2110   * Rearrange Bookmarks to pass trademark review.
       
  2111 
       
  2112 -------------------------------------------------------------------
       
  2113 Mon Nov 27 19:40:44 CET 2006 - aj@suse.de
       
  2114 
       
  2115 - Fix tango theme (#223796).
       
  2116 
       
  2117 -------------------------------------------------------------------
       
  2118 Mon Nov 27 17:40:50 CET 2006 - aj@suse.de
       
  2119 
       
  2120 - Use www.opensuse.org as home page.
       
  2121 
       
  2122 -------------------------------------------------------------------
       
  2123 Sun Nov 12 11:28:00 CET 2006 - aj@suse.de
       
  2124 
       
  2125 - Set novell.com as home page.
       
  2126 - Update from BuildService (thanks Wolfgang!):
       
  2127   - fixed crash in htmlparser (#217257, bmo #358797)
       
  2128   - added gconf2 as PreReq (#212505)
       
  2129   - added 32bit libaoss.so as requirement (#216266)
       
  2130   - Removed SUSE searchplugin (Portal not available anymore)
       
  2131     (#216054)
       
  2132   - Removed obsolete xul-picker.patch and system-nspr.patch
       
  2133   - Fixed building on 10.1 and 10.0 (dbus)
       
  2134   - Removed obsolete throbber preference
       
  2135 
       
  2136 -------------------------------------------------------------------
       
  2137 Thu Nov  9 19:09:46 CET 2006 - jhargadon@suse.de
       
  2138 
       
  2139 - updated tango theme 
       
  2140 
       
  2141 -------------------------------------------------------------------
       
  2142 Sun Oct 29 12:05:46 CET 2006 - aj@suse.de
       
  2143 
       
  2144 - Another fix for 214125, patch by Wolfgang Rosenauer.
       
  2145 
       
  2146 -------------------------------------------------------------------
       
  2147 Thu Oct 26 06:58:59 CEST 2006 - aj@suse.de
       
  2148 
       
  2149 - Fix gcc warnings about undefined operations, patch by
       
  2150   Robert O'Callahan.
       
  2151 - Update system-proxies.patch to fix error box (214125), patch by
       
  2152   Robert O'Callahan.
       
  2153 
       
  2154 -------------------------------------------------------------------
       
  2155 Mon Oct 23 21:54:54 CEST 2006 - aj@suse.de
       
  2156 
       
  2157 - Update to current CVS version of 2.0.
       
  2158 - Use www.opensuse.org as default home page for now (#203547).
       
  2159 
       
  2160 -------------------------------------------------------------------
       
  2161 Sat Oct 21 08:53:50 CEST 2006 - aj@suse.de
       
  2162 
       
  2163 - Disable non-working plasticfox and tango themes.
       
  2164 
       
  2165 -------------------------------------------------------------------
       
  2166 Fri Oct 20 20:16:29 CEST 2006 - aj@suse.de
       
  2167 
       
  2168 - Fix building of locales.
       
  2169 
       
  2170 -------------------------------------------------------------------
       
  2171 Fri Oct 20 11:27:23 CEST 2006 - mkoenig@suse.de
       
  2172 
       
  2173 - update to version 2.0rc3:
       
  2174   * New features: Visual Refresh, Built-in phishing protection,
       
  2175     Enhanced search capabilities, Improved tabbed browsing,
       
  2176     Resuming your browsing session, Previewing and subscribing 
       
  2177     to Web feeds, Inline spell checking, Live Titles,
       
  2178     Improved Add-ons manager, JavaScript 1.7, Extended search 
       
  2179     plugin format, Updates to the extension system, 
       
  2180     Client-side session and persistent storage, SVG text
       
  2181 
       
  2182 -------------------------------------------------------------------
       
  2183 Tue Oct 17 11:26:44 CEST 2006 - meissner@suse.de
       
  2184 
       
  2185 - disabled debugging.
       
  2186 
       
  2187 -------------------------------------------------------------------
       
  2188 Tue Sep 12 20:27:02 CEST 2006 - stark@suse.de
       
  2189 
       
  2190 - security update to version 1.5.0.7
       
  2191 
       
  2192 -------------------------------------------------------------------
       
  2193 Mon Aug 21 12:53:50 CEST 2006 - stark@suse.de
       
  2194 
       
  2195 - added greasemonkey helper change (#199920)
       
  2196 - fixed packager.mk for new make version
       
  2197 
       
  2198 -------------------------------------------------------------------
       
  2199 Fri Aug 11 20:51:48 CEST 2006 - stark@suse.de
       
  2200 
       
  2201 - fixed crash in dbus component (patch by thoenig #197928) 
       
  2202 - use external adresses for PAC configuration (#196506)
       
  2203 
       
  2204 -------------------------------------------------------------------
       
  2205 Mon Aug  7 09:26:58 CEST 2006 - stark@suse.de
       
  2206 
       
  2207 - added symlink for Firefox 1.0.x compatibility
       
  2208 
       
  2209 -------------------------------------------------------------------
       
  2210 Sat Jul 29 08:48:53 CEST 2006 - stark@suse.de
       
  2211 
       
  2212 - update to regression release 1.5.0.6 (#195043)
       
  2213 
       
  2214 -------------------------------------------------------------------
       
  2215 Thu Jul 27 06:20:36 CEST 2006 - stark@suse.de
       
  2216 
       
  2217 - security update to version 1.5.0.5 (#195043)
       
  2218   * observer-lock.patch integrated now
       
  2219 - fixed leak in JS' liveconnect (#186066)
       
  2220 - fixed desktop file for old distributions
       
  2221   (StartupNotify=false)
       
  2222 
       
  2223 -------------------------------------------------------------------
       
  2224 Thu Jun 29 20:13:28 CEST 2006 - stark@suse.de
       
  2225 
       
  2226 - fixed printing crash if the last used printer is not available
       
  2227   anymore (#187013)
       
  2228   
       
  2229 -------------------------------------------------------------------
       
  2230 Fri Jun 16 22:11:22 CEST 2006 - stark@suse.de
       
  2231 
       
  2232 - added 48x48 icon (#185777)
       
  2233 
       
  2234 -------------------------------------------------------------------
       
  2235 Mon Jun 12 20:20:02 CEST 2006 - stark@suse.de
       
  2236 
       
  2237 - fix overwrite confirmation for GTK filesaver (#179531)
       
  2238 - get network.negotiate-auth.trusted-uris and
       
  2239   network.negotiate-auth.delegation-uris from gconf if
       
  2240   system-settings are enabled (#184489)
       
  2241 
       
  2242 -------------------------------------------------------------------
       
  2243 Thu Jun  1 20:34:43 CEST 2006 - stark@suse.de
       
  2244 
       
  2245 - update to security/stability release 1.5.0.4 (#179011)
       
  2246 - moved locale-global prefs to browserconfig.properties (#177881)
       
  2247 
       
  2248 -------------------------------------------------------------------
       
  2249 Tue May 23 21:11:11 CEST 2006 - stark@suse.de
       
  2250 
       
  2251 - complete implementation of startup-notification (#115417)
       
  2252   (including autoconf and remote support)
       
  2253 - different home-pages for SLE10 and SL (#177881)
       
  2254 
       
  2255 -------------------------------------------------------------------
       
  2256 Tue May 16 06:27:26 CEST 2006 - stark@suse.de
       
  2257 
       
  2258 - fixed potential deadlock in nsObserverList::RemoveObserver
       
  2259   (#173986, bmo #338069)
       
  2260 - base startup notification on libstartup-notification (#115417)
       
  2261 
       
  2262 -------------------------------------------------------------------
       
  2263 Thu May 11 09:39:27 CEST 2006 - stark@suse.de
       
  2264 
       
  2265 - save printer settings properly (#174082, bmo #324072)
       
  2266 - added startup notification support for showing load activity
       
  2267   in Gnome and to avoid focus stealing prevention (#115417)
       
  2268 - added StartupNotify=true to desktop file (#115417)
       
  2269 - provide legacy symlink for NLD9 update compatibility (#173138)
       
  2270 - fixed system-proxies patch to avoid unwanted wpad requests
       
  2271   (#171743, #167613)
       
  2272 
       
  2273 -------------------------------------------------------------------
       
  2274 Mon May  8 14:55:52 CEST 2006 - stark@suse.de
       
  2275 
       
  2276 - preconfigure the theme according to the used desktop (#151163)
       
  2277 
       
  2278 -------------------------------------------------------------------
       
  2279 Thu Apr 27 10:24:07 CEST 2006 - stark@suse.de
       
  2280 
       
  2281 - last minute change for 1.5.0.3
       
  2282 
       
  2283 -------------------------------------------------------------------
       
  2284 Wed Apr 26 14:23:33 CEST 2006 - stark@suse.de
       
  2285 
       
  2286 - security update to 1.5.0.3
       
  2287 - fix for typo in postscript.patch
       
  2288 
       
  2289 -------------------------------------------------------------------
       
  2290 Tue Apr 25 14:14:51 CEST 2006 - stark@suse.de
       
  2291 
       
  2292 - fixed iframe crash (#169039, bmo #334515)
       
  2293 - fixed img tag misuse (#168710, bmo #334341)
       
  2294 
       
  2295 -------------------------------------------------------------------
       
  2296 Mon Apr 24 08:04:16 CEST 2006 - stark@suse.de
       
  2297 
       
  2298 - improved postscript output (bmo #334485)
       
  2299 - changed defaults for printer properties (#6534)
       
  2300 - overwrite gnome-vfs' file protocol by providing "desktop-launch"
       
  2301   (#131501)
       
  2302 - get available paper sizes from CUPS (#65482)
       
  2303 - replaced/removed complicated gconfd reload in %post (#167989)
       
  2304 - fixed memory leak in clipboard caching (bmo #289897)
       
  2305   
       
  2306 -------------------------------------------------------------------
       
  2307 Tue Apr 11 08:35:53 CEST 2006 - stark@suse.de
       
  2308 
       
  2309 - added (optional) plastikfox theme (#151163)
       
  2310 - get some more security related patches (#148876)
       
  2311 - finally fixed the default proxy configuration by adding a new
       
  2312   UI option (#132398)
       
  2313 
       
  2314 -------------------------------------------------------------------
       
  2315 Mon Apr  3 11:41:13 CEST 2006 - stark@suse.de
       
  2316 
       
  2317 - fixed keyword fixup patch (#162532)
       
  2318 
       
  2319 -------------------------------------------------------------------
       
  2320 Tue Mar 28 07:17:04 CEST 2006 - stark@suse.de
       
  2321 
       
  2322 - don't use keyword fixup for pasted text (#160034, bmo #331522)
       
  2323 
       
  2324 -------------------------------------------------------------------
       
  2325 Mon Mar 20 09:28:58 CET 2006 - stark@suse.de
       
  2326 
       
  2327 - added Tango theme
       
  2328 - fixed reading proxies from gconf (#132398)
       
  2329 
       
  2330 -------------------------------------------------------------------
       
  2331 Sun Mar 12 09:04:05 CET 2006 - stark@suse.de
       
  2332 
       
  2333 - tweaked bookmarks (fixed URLs)
       
  2334 - added Khmer (km-*) to pango locales (#157397)
       
  2335 
       
  2336 -------------------------------------------------------------------
       
  2337 Sat Mar  4 21:08:45 CET 2006 - stark@suse.de
       
  2338 
       
  2339 - fixed crash with multipart JPEGs (bmo #328684) (#140416)
       
  2340 - got latest security fixes from upstream (#148876)
       
  2341 
       
  2342 -------------------------------------------------------------------
       
  2343 Wed Feb 22 13:24:58 CET 2006 - stark@suse.de
       
  2344 
       
  2345 - fixed plugin loading when launched from Thunderbird (#151614)
       
  2346 - merged dbus reconnection patch (#150042)
       
  2347 - default to autodetect proxy (network.proxy.type=4) (#151811)
       
  2348 - added GTK category to desktop file
       
  2349 
       
  2350 -------------------------------------------------------------------
       
  2351 Tue Feb 14 06:45:24 CET 2006 - stark@suse.de
       
  2352 
       
  2353 - modified lockdown patches (#67281, #67282)
       
  2354 - applied set of security patches (#148876) 
       
  2355   bmo bugs: 282105, 307989, 315625, 320459, 323634, 325403, 325947
       
  2356 
       
  2357 -------------------------------------------------------------------
       
  2358 Tue Feb  7 20:09:43 CET 2006 - stark@suse.de
       
  2359 
       
  2360 - fixed disabling of Pango (#148788)
       
  2361 
       
  2362 -------------------------------------------------------------------
       
  2363 Thu Feb  2 21:51:30 CET 2006 - stark@suse.de
       
  2364 
       
  2365 - define gssapi lib explicitely (#147670)
       
  2366 - use only official Firefox-Icon
       
  2367 - changed home-download patch
       
  2368 
       
  2369 -------------------------------------------------------------------
       
  2370 Sun Jan 29 09:54:49 CET 2006 - stark@suse.de
       
  2371 
       
  2372 - throbber URL is default again
       
  2373 - removed firefox-showpass patch
       
  2374 - removed additional CA certs from builtin NSS
       
  2375 
       
  2376 -------------------------------------------------------------------
       
  2377 Fri Jan 27 17:55:21 CET 2006 - stark@suse.de
       
  2378 
       
  2379 - got some l10n changes from 1.8.0 branch
       
  2380 
       
  2381 -------------------------------------------------------------------
       
  2382 Fri Jan 27 08:15:09 CET 2006 - stark@suse.de
       
  2383 
       
  2384 - final 1.5.0.1 version
       
  2385 - make it possible to choose $HOME as download directory
       
  2386   (#144894, bmo #300856)
       
  2387 
       
  2388 -------------------------------------------------------------------
       
  2389 Wed Jan 25 21:33:43 CET 2006 - mls@suse.de
       
  2390 
       
  2391 - converted neededforbuild to BuildRequires
       
  2392 
       
  2393 -------------------------------------------------------------------
       
  2394 Sun Jan 22 17:06:57 CET 2006 - stark@suse.de
       
  2395 
       
  2396 - disable Pango if MOZ_ENABLE_PANGO is not set 
       
  2397   and no typical language which needs Pango is used (#143428)
       
  2398 
       
  2399 -------------------------------------------------------------------
       
  2400 Wed Jan 18 10:27:30 CET 2006 - stark@suse.de
       
  2401 
       
  2402 - fixed DumpStackToFile() for glibc 2.4
       
  2403 - added default (font) settings
       
  2404 
       
  2405 -------------------------------------------------------------------
       
  2406 Thu Jan 12 10:23:58 CET 2006 - stark@suse.de
       
  2407 
       
  2408 - update to 1.5.0.1pre (20060111)
       
  2409 - updated man-page
       
  2410 - fixed hovered tab close button
       
  2411 - only Requires mozilla-nspr instead of PreReq since
       
  2412   there is no postinstall registration necessary anymore
       
  2413 - use system NSS from CODE10 on
       
  2414 - use -fstack-protector where available
       
  2415 - changed unixproxy component to work on older distributions
       
  2416 
       
  2417 -------------------------------------------------------------------
       
  2418 Mon Jan  2 13:39:09 CET 2006 - stark@suse.de
       
  2419 
       
  2420 - added unixproxy component written by Robert O'Callahan (#132398)
       
  2421   (bmo #66057)
       
  2422 - added official translations
       
  2423 - preload libaoss for plugin sound (#117079)
       
  2424 
       
  2425 -------------------------------------------------------------------
       
  2426 Wed Dec 28 08:16:03 CET 2005 - stark@suse.de
       
  2427 
       
  2428 - get some patches from 1.8.0 branch
       
  2429 - readded modification to gconf-backend (bmo #321315)
       
  2430 - readded lockdown stuff
       
  2431 - enable additional extension install directory (#120329)
       
  2432   (/usr/lib/browser-extensions/firefox)
       
  2433 - added patch to make the XUL filechooser optional
       
  2434   (MOZ_XUL_PICKER)
       
  2435 
       
  2436 -------------------------------------------------------------------
       
  2437 Wed Dec 14 16:08:12 CET 2005 - stark@suse.de
       
  2438 
       
  2439 - fixed patch for parsing -remote parameter
       
  2440 - removed default-plugin patch (not needed anymore)
       
  2441 
       
  2442 -------------------------------------------------------------------
       
  2443 Fri Dec  9 17:21:29 CET 2005 - stark@suse.de
       
  2444 
       
  2445 - fix to ignore X composite extension (#135373)
       
  2446 - fixed parsing of -remote parameters (#134396)
       
  2447 - activated locales as released
       
  2448 
       
  2449 -------------------------------------------------------------------
       
  2450 Tue Nov 29 21:33:13 CET 2005 - stark@suse.de
       
  2451 
       
  2452 - update to 1.5 (20051128)
       
  2453 - don't override startup URL when changing Gecko versions (#135314)
       
  2454 - added patch for GTK2 handling (#134831)
       
  2455 - readded add-plugins stuff for compatibility
       
  2456 
       
  2457 -------------------------------------------------------------------
       
  2458 Fri Nov 18 07:41:41 CET 2005 - stark@suse.de
       
  2459 
       
  2460 - update to 1.5rc3 (20051117) 
       
  2461 
       
  2462 -------------------------------------------------------------------
       
  2463 Mon Oct 31 08:58:14 CET 2005 - stark@suse.de
       
  2464 
       
  2465 - updated l10n archive (20051030)
       
  2466 - fixed postinstall script to copy plugin links instead of files
       
  2467 
       
  2468 -------------------------------------------------------------------
       
  2469 Fri Oct 28 06:43:27 CEST 2005 - stark@suse.de
       
  2470 
       
  2471 - update to 1.5rc1 (20051027)
       
  2472 - fixed profile locking on FAT partitions (bmo #313360)
       
  2473 - introduced an rpath again
       
  2474 
       
  2475 -------------------------------------------------------------------
       
  2476 Wed Oct 19 20:03:48 CEST 2005 - stark@suse.de
       
  2477 
       
  2478 - update to snapshot 1.5 (20051019)
       
  2479 - moved installation to /usr/%{_lib}/firefox
       
  2480 - added dbus component to be able to get network status from
       
  2481   NetworkManager (bmo #312793)
       
  2482 - remove all update UI for application
       
  2483 - removed diable-gconf (no registration at build time anymore)
       
  2484 - removed rebuild-databases.sh (no system registration anymore)
       
  2485 - open links in new windows (#128087)
       
  2486 
       
  2487 -------------------------------------------------------------------
       
  2488 Thu Oct  6 20:44:53 CEST 2005 - stark@suse.de
       
  2489 
       
  2490 - update to Firefox 1.5b2 (20051005)
       
  2491 - added supported translations
       
  2492 
       
  2493 -------------------------------------------------------------------
       
  2494 Sat Oct  1 15:09:18 CEST 2005 - stark@suse.de
       
  2495 
       
  2496 - update to Firefox 1.5b1 (20050930) RPM version 1.4.1
       
  2497 - removed rebuild-databases.sh calls
       
  2498 - removed add-plugins.sh calls and corresponding triggers
       
  2499 - enabled SVG and Canvas support
       
  2500 - fixed gconf urlhandler registration
       
  2501 
       
  2502 -------------------------------------------------------------------
       
  2503 Tue Sep 20 10:24:16 CEST 2005 - stark@suse.de
       
  2504 
       
  2505 - security update to 1.0.7 (#117619)
       
  2506   * MFSA 2005-57: IDN heap overrun using soft-hyphens (bmo #307259)
       
  2507     (enabled IDN pref again)
       
  2508   * MFSA 2005-58: 
       
  2509       CAN-2005-2701 Heap overrun in XBM image processing
       
  2510       CAN-2005-2702 Crash on "zero-width non-joiner" sequence
       
  2511       CAN-2005-2703 XMLHttpRequest header spoofing
       
  2512       CAN-2005-2704 Object spoofing using XBL <implements>
       
  2513       CAN-2005-2705 JavaScript integer overflow
       
  2514       CAN-2005-2706 Privilege escalation using about: scheme
       
  2515       CAN-2005-2707 Chrome window spoofing
       
  2516                     Regression fixes
       
  2517 - register beagle extension if it gets installed (#116787)
       
  2518 
       
  2519 -------------------------------------------------------------------
       
  2520 Tue Sep 13 15:41:37 CEST 2005 - aj@suse.de
       
  2521 
       
  2522 - Change SUSE bookmarks.
       
  2523 
       
  2524 -------------------------------------------------------------------
       
  2525 Sun Sep 11 17:05:07 CEST 2005 - stark@suse.de
       
  2526 
       
  2527 - disable IDN per default (#116070)
       
  2528 - unlocalize bookmarks (#114279)
       
  2529 
       
  2530 -------------------------------------------------------------------
       
  2531 Thu Sep  8 08:52:13 CEST 2005 - stark@suse.de
       
  2532 
       
  2533 - fixed some filemodes (#114849)
       
  2534 
       
  2535 -------------------------------------------------------------------
       
  2536 Sun Sep  4 00:03:53 CEST 2005 - stark@suse.de
       
  2537 
       
  2538 - fixed gconf-backend patch to be able to use
       
  2539   system prefs (#114054)
       
  2540 
       
  2541 -------------------------------------------------------------------
       
  2542 Thu Sep  1 13:22:17 CEST 2005 - stark@suse.de
       
  2543 
       
  2544 - changed default font to sans-serif (#114464)
       
  2545 - removed de-de parts of the bookmark-links (#114279)
       
  2546 
       
  2547 -------------------------------------------------------------------
       
  2548 Mon Aug 22 06:10:12 CEST 2005 - stark@suse.de
       
  2549 
       
  2550 - install gconf schema for lockdown also on non-NLD
       
  2551 - added backports (firefox-backports.patch)
       
  2552   * gtk_im_context_set_cursor_location() is not used (bmo #281339)
       
  2553   * fixed crash in imgCacheValidator::OnStartRequest() 
       
  2554     (bmo #293307)
       
  2555 - workaround for linking with pangoxft and pangox
       
  2556   (broken by gtk 2.8 update) (#105764)
       
  2557 - remove extensions on deinstallation
       
  2558 - include dragonegg (kparts) plugin (#105468)
       
  2559 
       
  2560 -------------------------------------------------------------------
       
  2561 Thu Aug 18 13:08:55 CEST 2005 - stark@suse.de
       
  2562 
       
  2563 - fixed regression in profile locking change (bmo #303633)
       
  2564 - added rtsp handler to global config (#104434)
       
  2565 - don't blacklist help: protocol (bmo #304833)
       
  2566 - fixed Gdk-WARNING at startup (gtk.patch)
       
  2567 - fixed crash with gtk 2.7 (bmo #300226, bnc #104586)
       
  2568 - fixed installation of the beagle plugin
       
  2569 - update industrial theme to 1.0.11 (#104564)
       
  2570 - included lockdownV2 (removed obsolete gconf.diff)
       
  2571 - linked firefox-bin with rpath to progdir
       
  2572 
       
  2573 -------------------------------------------------------------------
       
  2574 Fri Aug  5 09:51:26 CEST 2005 - stark@suse.de
       
  2575 
       
  2576 - fixed profile locking (bmo #151188)
       
  2577 - install beagle extension globally
       
  2578 
       
  2579 -------------------------------------------------------------------
       
  2580 Fri Jul 29 06:58:24 CEST 2005 - stark@suse.de
       
  2581 
       
  2582 - don't require and provide NSS libs (#98002)
       
  2583 - fixed printing error 'You cannot print while in print preview'
       
  2584   (#96991, bmo #302445)
       
  2585 
       
  2586 -------------------------------------------------------------------
       
  2587 Wed Jul 27 09:34:12 CEST 2005 - stark@suse.de
       
  2588 
       
  2589 - fixed Firefox on ppc (stack-direction.patch) (#97359)
       
  2590 - removed open-pref from startscript as it is done
       
  2591   automatically now (#73042)
       
  2592 - updated Novell searchplugins
       
  2593 
       
  2594 -------------------------------------------------------------------
       
  2595 Mon Jul 25 12:32:13 CEST 2005 - stark@suse.de
       
  2596 
       
  2597 - GTK filechooser is now modal (#8533)
       
  2598 - backed out patch to add tooltips to print-preview
       
  2599   because it breaks localization
       
  2600 
       
  2601 -------------------------------------------------------------------
       
  2602 Fri Jul 22 10:54:39 CEST 2005 - stark@suse.de
       
  2603 
       
  2604 - fixed another problem in printing patch
       
  2605 
       
  2606 -------------------------------------------------------------------
       
  2607 Tue Jul 19 10:44:59 CEST 2005 - stark@suse.de
       
  2608 
       
  2609 - fixed error in ft-xft-ps2.patch
       
  2610 - disabled stripping in spec instead of patch
       
  2611 - added NSPR to PreReq
       
  2612 
       
  2613 -------------------------------------------------------------------
       
  2614 Mon Jul 18 08:43:24 CEST 2005 - stark@suse.de
       
  2615 
       
  2616 - fixed some more regressions with final 1.0.6
       
  2617 - fixed width calculation in Postscript module (bmo #290292)
       
  2618 - fixed plugin event starvation (bnc #94749, #94751, bmo #301161)
       
  2619 
       
  2620 -------------------------------------------------------------------
       
  2621 Fri Jul 15 11:24:47 CEST 2005 - stark@suse.de
       
  2622 
       
  2623 - searchplugins can now be installed per profile (#8176)
       
  2624 
       
  2625 -------------------------------------------------------------------
       
  2626 Fri Jul 15 06:54:02 CEST 2005 - stark@suse.de
       
  2627 
       
  2628 - update to 1.0.6 which restores API compatibility
       
  2629 
       
  2630 -------------------------------------------------------------------
       
  2631 Tue Jul 12 06:20:37 CEST 2005 - stark@suse.de
       
  2632 
       
  2633 - update to 1.0.5 final (#88509)
       
  2634 - don't strip explicitely
       
  2635 - don't ship beagle.xpi
       
  2636 
       
  2637 -------------------------------------------------------------------
       
  2638 Wed Jul  6 14:13:09 CEST 2005 - stark@suse.de
       
  2639 
       
  2640 - update to 1.0.5-pre (20050705)
       
  2641 - use RPM_OPT_FLAGS for NSS component
       
  2642 - fixed implicit declarations and uninitialized used variables
       
  2643 - added patch for bmo #87969
       
  2644 
       
  2645 -------------------------------------------------------------------
       
  2646 Tue Jul  5 10:17:16 CEST 2005 - stark@suse.de
       
  2647 
       
  2648 - fixed regression from security update (#95069, bmo #298478)
       
  2649 
       
  2650 -------------------------------------------------------------------
       
  2651 Mon Jun 27 21:46:58 CEST 2005 - stark@suse.de
       
  2652 
       
  2653 - don't use system-prefs by default on NLD
       
  2654 - removed basic lockdown stuff for SUSE Linux
       
  2655   (it's not needed and caused problems: bnc #75418)
       
  2656 - fixed NLD lockdown patch (bnc #75418)
       
  2657 - don't write prefs back to gconf for now
       
  2658 
       
  2659 -------------------------------------------------------------------
       
  2660 Wed Jun 22 07:32:42 CEST 2005 - stark@suse.de
       
  2661 
       
  2662 - new NLD lockdown patch which is syncing user prefs to gconf
       
  2663 - update to 1.0.5pre security-release
       
  2664 
       
  2665 -------------------------------------------------------------------
       
  2666 Thu Jun  9 06:56:02 CEST 2005 - stark@suse.de
       
  2667 
       
  2668 - new revision of NLD lockdown patch
       
  2669 - fixed remote usage behaviour in start script (bnc #41903)
       
  2670 - got more bugfixes from the branch
       
  2671 
       
  2672 -------------------------------------------------------------------
       
  2673 Thu Jun  2 10:31:48 CEST 2005 - stark@suse.de
       
  2674 
       
  2675 - fixed neededforbuild
       
  2676 
       
  2677 -------------------------------------------------------------------
       
  2678 Wed Jun  1 20:15:25 CEST 2005 - stark@suse.de
       
  2679 
       
  2680 - fixed IDN for 64bit platforms (bmo #236425, bnc #46268)
       
  2681 
       
  2682 -------------------------------------------------------------------
       
  2683 Fri May 20 15:12:06 CEST 2005 - stark@suse.de
       
  2684 
       
  2685 - fixed keybinding for KP separator (bnc #84147)
       
  2686 - pulled security related patch from upstream branch
       
  2687 - update plastikfox theme to version 1.6
       
  2688 
       
  2689 -------------------------------------------------------------------
       
  2690 Thu May 12 06:16:25 CEST 2005 - stark@suse.de
       
  2691 
       
  2692 - update to final 1.0.4 release
       
  2693 
       
  2694 -------------------------------------------------------------------
       
  2695 Tue May 10 06:38:05 CEST 2005 - stark@suse.de
       
  2696 
       
  2697 - update to 1.0.4 security release
       
  2698 - removed s390(x) patches (upstream)
       
  2699 - made two more files %verify (81692)
       
  2700 - updated NLD lockdown patch (81304)
       
  2701 
       
  2702 -------------------------------------------------------------------
       
  2703 Thu Apr 28 09:45:53 CEST 2005 - stark@suse.de
       
  2704 
       
  2705 - use static NSPR libs from new location
       
  2706 
       
  2707 -------------------------------------------------------------------
       
  2708 Sat Apr 23 15:56:08 CEST 2005 - stark@suse.de
       
  2709 
       
  2710 - activate usage of system NSPR for distributions after 9.3
       
  2711 - add patch to be able to use systen NSPR at all
       
  2712 
       
  2713 -------------------------------------------------------------------
       
  2714 Fri Apr 22 02:06:06 CEST 2005 - ro@suse.de
       
  2715 
       
  2716 - use mozilla-gcc4.patch 
       
  2717 
       
  2718 -------------------------------------------------------------------
       
  2719 Thu Apr 21 12:51:19 CEST 2005 - stark@suse.de
       
  2720 
       
  2721 - don't execute gconf magic within build environment
       
  2722 
       
  2723 -------------------------------------------------------------------
       
  2724 Sat Apr 16 13:05:37 CEST 2005 - stark@suse.de
       
  2725 
       
  2726 - update to final 1.0.3 release
       
  2727 
       
  2728 -------------------------------------------------------------------
       
  2729 Fri Apr 15 00:10:54 CEST 2005 - ro@suse.de
       
  2730 
       
  2731 - fix problem in postinstall script 
       
  2732 
       
  2733 -------------------------------------------------------------------
       
  2734 Wed Apr 14 09:20:02 CEST 2005 - stark@suse.de
       
  2735 
       
  2736 - included fixed lockdown patch for NLD
       
  2737 - linked proxies within Firefox with gnome settings (NLD)
       
  2738 - added gconfd restart procedure to install script 
       
  2739   (only needed if gconf changes are done) (#76852)
       
  2740 
       
  2741 -------------------------------------------------------------------
       
  2742 Sat Apr  2 21:03:11 CEST 2005 - stark@suse.de
       
  2743 
       
  2744 - update to security pre-release 1.0.3 (#75692)
       
  2745   * Manual plug-in install, javascript vulnerability (bmo #288556)
       
  2746   * Access memory vulnerability (bmo #288688)
       
  2747 
       
  2748 -------------------------------------------------------------------
       
  2749 Fri Apr  1 11:32:44 CEST 2005 - stark@suse.de
       
  2750 
       
  2751 - added advanced lockdown features for ZLM integration (NLD-only)
       
  2752 
       
  2753 -------------------------------------------------------------------
       
  2754 Tue Mar 22 12:33:15 CET 2005 - stark@suse.de
       
  2755 
       
  2756 - update to final 1.0.2
       
  2757 - use new theme handling on NLD
       
  2758 - added default-plugin-less-annoying from mozilla
       
  2759 - use GTK2 for Flash
       
  2760 - use system NSPR on SUSE releases after 9.3
       
  2761 - made startscript PIS aware 
       
  2762 - set g-application-name correctly (bmo #281979)
       
  2763 - added man-page
       
  2764 - use GTK system colors
       
  2765 - modify useragent string and add vendor id
       
  2766 - activate smooth-scrolling by default (#74310)
       
  2767 
       
  2768 -------------------------------------------------------------------
       
  2769 Tue Mar 22 08:59:06 CET 2005 - stark@suse.de
       
  2770 
       
  2771 - don't register beagle automatically (#74062)
       
  2772 - added default bookmarks for SUSE LINUX
       
  2773 
       
  2774 -------------------------------------------------------------------
       
  2775 Mon Mar 21 18:20:39 CET 2005 - max@suse.de
       
  2776 
       
  2777 - Fixed a typo in the shell code that handles inclusion of the
       
  2778   Acrobat Reader plugin (#70861).
       
  2779 
       
  2780 -------------------------------------------------------------------
       
  2781 Thu Mar 17 21:01:11 CET 2005 - stark@suse.de
       
  2782 
       
  2783 - updates from upcoming 1.0.2 
       
  2784 - added again logic to use Adobe Reader 7 (#70861)
       
  2785 - fixed crash in ICO decoding (#67142, bmo #245631)
       
  2786 - preinstall beagle extension (#72920)
       
  2787 - bugfixes in trigger scripts
       
  2788 - fixed industrial theming for Gnome (#72918)
       
  2789 
       
  2790 -------------------------------------------------------------------
       
  2791 Sat Mar 12 12:42:16 CET 2005 - stark@suse.de
       
  2792 
       
  2793 - fixed more security related bugs
       
  2794   (bmo #284551, #284627, #285595)
       
  2795 
       
  2796 -------------------------------------------------------------------
       
  2797 Wed Mar  9 21:42:05 CET 2005 - stark@suse.de
       
  2798 
       
  2799 - update also GNOME desktop file (#71810)
       
  2800 - added firefox-gnome.png to filelist
       
  2801 - use correct Firefox icon
       
  2802 
       
  2803 -------------------------------------------------------------------
       
  2804 Mon Mar  7 20:47:00 CET 2005 - stark@suse.de
       
  2805 
       
  2806 - disable inclusion of acrobat plugin again (#70861)
       
  2807 - don't use gconfd in registration phase (#66381) 
       
  2808 
       
  2809 -------------------------------------------------------------------
       
  2810 Mon Mar  7 16:13:29 CET 2005 - adrian@suse.de
       
  2811 
       
  2812 - use standard icon again for the default desktop file and
       
  2813   add a Gnome-only desktop file for the Gnome icon
       
  2814 - add plastikfox chrome theme to fix button order within KDE
       
  2815 - add patch for automatic theme selection for KDE and Gnome
       
  2816 - do register extensions in rebuild-databases.sh instead of %install,
       
  2817   to fix needed timestamps
       
  2818 
       
  2819 -------------------------------------------------------------------
       
  2820 Fri Mar  4 07:54:47 CET 2005 - stark@suse.de
       
  2821 
       
  2822 - extend add-plugins to recognize Java 1.5 (#66909)
       
  2823 - changed comment in desktop-file (#66867)
       
  2824 
       
  2825 -------------------------------------------------------------------
       
  2826 Tue Feb 22 09:33:44 CET 2005 - stark@suse.de
       
  2827 
       
  2828 - make --display parameter working in all cases (bnc #66043)
       
  2829 - revised postscript patch
       
  2830 - final 1.0.1 codebase
       
  2831 
       
  2832 -------------------------------------------------------------------
       
  2833 Mon Feb 21 13:09:30 CET 2005 - stark@suse.de
       
  2834 
       
  2835 - added patch to create Postscript level 2 (instead of 3)
       
  2836   (special thanks to Jungshik Shin)
       
  2837 - disabled freetype explicitly to be able to use the above patch
       
  2838   (freetype wasn't used anymore since some time anyway)
       
  2839 
       
  2840 -------------------------------------------------------------------
       
  2841 Fri Feb 18 09:10:10 CET 2005 - stark@suse.de
       
  2842 
       
  2843 - got more patches from branch to get another IDN fix and to
       
  2844   fix bug #51019
       
  2845 - enabled IDN again
       
  2846 
       
  2847 -------------------------------------------------------------------
       
  2848 Wed Feb 16 09:20:39 CET 2005 - stark@suse.de
       
  2849 
       
  2850 - bumped version number to 1.0.1
       
  2851 
       
  2852 -------------------------------------------------------------------
       
  2853 Tue Feb 15 10:26:04 CET 2005 - stark@suse.de
       
  2854 
       
  2855 - got updates from 1.0.1 branch
       
  2856 
       
  2857 -------------------------------------------------------------------
       
  2858 Thu Feb 10 06:57:33 CET 2005 - stark@suse.de
       
  2859 
       
  2860 - additional fireflashing fix (#50635, bmo #280664)
       
  2861 - some more security related fixes 
       
  2862   (bmo #268483, #273498, #277322)
       
  2863 - fire up GTK2 filepicker if GNOME is running
       
  2864   
       
  2865 -------------------------------------------------------------------
       
  2866 Tue Feb  8 07:51:13 CET 2005 - stark@suse.de
       
  2867 
       
  2868 - some prefs are ignored (bmo #261934)
       
  2869 - disabled default IDN (#50566)
       
  2870 - fixed some more bugzilla.mozilla.org bugs:
       
  2871   #276482, #280056, #280603
       
  2872 
       
  2873 -------------------------------------------------------------------
       
  2874 Sun Feb  6 13:10:12 CET 2005 - stark@suse.de
       
  2875 
       
  2876 - use same desktop categories for Professional and NLD
       
  2877 - added some lockdown stuff for printing and page saving
       
  2878   (bmo #280488)
       
  2879 
       
  2880 -------------------------------------------------------------------
       
  2881 Wed Feb  2 13:58:53 CET 2005 - stark@suse.de
       
  2882 
       
  2883 - modified gconf.diff to honor ignore_hosts (bmo #280742)
       
  2884 - added a JS crasher fix (bmo #268535)
       
  2885 - added more fixes (bmo #255441, #273024, #275405, #275634)
       
  2886 
       
  2887 -------------------------------------------------------------------
       
  2888 Fri Jan 28 12:39:37 CET 2005 - stark@suse.de
       
  2889 
       
  2890 - added gplflash inclusion
       
  2891 - improved JRE inclusion
       
  2892 - reactivated usage of Acrobat Reader plugin
       
  2893   (ready for acroread 7)
       
  2894 
       
  2895 -------------------------------------------------------------------
       
  2896 Sat Jan 22 13:16:47 CET 2005 - stark@suse.de
       
  2897 
       
  2898 - added some backported bugfixes
       
  2899 
       
  2900 -------------------------------------------------------------------
       
  2901 Sat Dec 18 10:30:11 CET 2004 - stark@suse.de
       
  2902 
       
  2903 - updated industrial theme to 1.0.9
       
  2904 - use slightly changed icon for menu-entry (bnc #275)
       
  2905 - use original desktop file for NLD again
       
  2906 
       
  2907 -------------------------------------------------------------------
       
  2908 Thu Dec 16 19:37:48 CET 2004 - stark@suse.de
       
  2909 
       
  2910 - newer patch for GNOME associations (bnc #362)
       
  2911 - fix overwriting of files with GTK picker (Ximian #65068)
       
  2912 - readded the industrial default theme patch for NLD
       
  2913 
       
  2914 -------------------------------------------------------------------
       
  2915 Wed Dec 15 11:50:56 CET 2004 - stark@suse.de
       
  2916 
       
  2917 - activate GTK filepicker for NLD again
       
  2918 - fix for GNOME helper applications with parameters
       
  2919 - make GNOME associations the default on NLD
       
  2920 
       
  2921 -------------------------------------------------------------------
       
  2922 Sat Dec  4 16:11:01 CET 2004 - stark@suse.de
       
  2923 
       
  2924 - fixed build on s390/s390x
       
  2925 - added patch to be able to install-global without running X
       
  2926   (bmo #265859)
       
  2927 
       
  2928 -------------------------------------------------------------------
       
  2929 Thu Nov 18 21:48:05 CET 2004 - stark@suse.de
       
  2930 
       
  2931 - update industrial theme to 1.0.8 (still not activated)
       
  2932 - added patch to make home-directory the default download dir
       
  2933   (on NLD is still used Desktop)
       
  2934 
       
  2935 -------------------------------------------------------------------
       
  2936 Thu Nov 11 09:01:58 CET 2004 - stark@suse.de
       
  2937 
       
  2938 - made initial window height smaller again 
       
  2939 
       
  2940 -------------------------------------------------------------------
       
  2941 Tue Nov  9 09:09:06 CET 2004 - stark@suse.de
       
  2942 
       
  2943 - update to final 1.0 release (20041109)
       
  2944 
       
  2945 -------------------------------------------------------------------
       
  2946 Thu Nov  4 08:22:36 CET 2004 - stark@suse.de
       
  2947 
       
  2948 - update to 1.0rc2 
       
  2949 
       
  2950 -------------------------------------------------------------------
       
  2951 Sat Oct 30 21:27:29 CEST 2004 - stark@suse.de
       
  2952 
       
  2953 - added missing s390(x) patch
       
  2954 
       
  2955 -------------------------------------------------------------------
       
  2956 Wed Oct 27 07:26:25 CEST 2004 - stark@suse.de
       
  2957 
       
  2958 - update to 1.0rc1 codebase
       
  2959 - printing via XFT/fontconfig
       
  2960 - freetype changes to avoid API conflicts with newer freetype2
       
  2961 - fixed build for s390/s390x
       
  2962 - removed AMD64 patch (included upstream)
       
  2963 - added translations sub-package
       
  2964 - removed "Show folder" patch for NLD (resolved upstream)
       
  2965 - don't use gnome-filepicker patch for NLD for now
       
  2966 - removed hppa buildfix (included upstream)
       
  2967 - removed untitled.patch (bmo #24068) resolved by (bmo #262478)
       
  2968 - use make -C browser/installer now to prepare installation
       
  2969 - don't check for default browser at startup (#47587)
       
  2970 - updated industrial.jar (0.99.13) (disabled)
       
  2971 
       
  2972 -------------------------------------------------------------------
       
  2973 Fri Oct 15 13:51:54 CEST 2004 - stark@suse.de
       
  2974 
       
  2975 - inherit locale from system
       
  2976 - fixed chrome registration
       
  2977 
       
  2978 -------------------------------------------------------------------
       
  2979 Wed Oct  6 23:11:01 CEST 2004 - joeshaw@suse.de
       
  2980  
       
  2981  - disable gconf settings as default (Ximian #67718)
       
  2982 
       
  2983 -------------------------------------------------------------------
       
  2984 Wed Oct  6 07:04:05 CEST 2004 - stark@suse.de
       
  2985 
       
  2986 - fixed inclusion of RealPlayer plugin again
       
  2987 
       
  2988 -------------------------------------------------------------------
       
  2989 Tue Oct  5 10:09:04 CEST 2004 - stark@suse.de
       
  2990 
       
  2991 - small important fix in firefox-download.patch (Ximian #65472) 
       
  2992 
       
  2993 -------------------------------------------------------------------
       
  2994 Sun Oct  3 00:02:09 CEST 2004 - stark@suse.de
       
  2995 
       
  2996 - added security-fix from 0.10.1 (mozilla.org #259708) (#46687)
       
  2997 
       
  2998 -------------------------------------------------------------------
       
  2999 Fri Oct  1 12:49:38 CEST 2004 - stark@suse.de
       
  3000 
       
  3001 - final fix for downloading to Desktop folder (Ximian #65756)
       
  3002 - remove Postscript from printer names (Ximian #65560)
       
  3003 
       
  3004 -------------------------------------------------------------------
       
  3005 Thu Sep 30 16:14:10 CEST 2004 - shprasad@suse.de
       
  3006 
       
  3007 - Modified the MozillaFirefox.desktop file.
       
  3008   Changed the name 'Firefox' to 'Firefox Web Browser'.
       
  3009   Also changed it for all languages.
       
  3010 
       
  3011 -------------------------------------------------------------------
       
  3012 Wed Sep 29 15:54:46 CEST 2004 - stark@suse.de
       
  3013 
       
  3014 - fix inclusion of RealPlayer plugin (Ximian #65711) 
       
  3015 
       
  3016 -------------------------------------------------------------------
       
  3017 Mon Sep 27 17:51:24 CEST 2004 - joeshaw@suse.de
       
  3018 
       
  3019 - Update the industrial default patch, for some reason it didn't
       
  3020   take before.
       
  3021 
       
  3022 -------------------------------------------------------------------
       
  3023 Fri Sep 24 07:34:48 CEST 2004 - stark@suse.de
       
  3024 
       
  3025 - fix for Ximian #65176 (mozilla.org #240068)
       
  3026 - revised patch for update function (Ximian #65615)
       
  3027 
       
  3028 -------------------------------------------------------------------
       
  3029 Thu Sep 23 20:21:39 CEST 2004 - joeshaw@suse.de
       
  3030 
       
  3031 - Uncomment the patch which tells the UI that industrial is the
       
  3032   default.
       
  3033 
       
  3034 -------------------------------------------------------------------
       
  3035 Thu Sep 23 12:38:06 CEST 2004 - stark@suse.de
       
  3036 
       
  3037 - open Nautilus on NLD for 'Show folder' in download settings
       
  3038   (Ximian #65472) by sragavan@novell.com
       
  3039 - save to Desktop folder if selected (Ximian #65756)
       
  3040   by sragavan@novell.com
       
  3041 
       
  3042 -------------------------------------------------------------------
       
  3043 Wed Sep 22 10:23:01 CEST 2004 - stark@suse.de
       
  3044 
       
  3045 - synced NLD package with 9.2 version
       
  3046 - GTK2 filepicker does now ask for confirmation when overwriting
       
  3047   files (Ximian #65068) by sagarwala@novell.com
       
  3048 - no direct update function (Ximian #65615) by rganesan@novell.com 
       
  3049 - throbber linked to Novell (Ximian #66283) by rganesan@novell.com
       
  3050 - make industrial the default theme for NLD
       
  3051   (Ximian #65542) by joeshaw@suse.de
       
  3052 
       
  3053 -------------------------------------------------------------------
       
  3054 Mon Sep 20 22:00:55 CEST 2004 - joeshaw@suse.de
       
  3055 
       
  3056 - Add default bookmarks.  Ximian #65546.
       
  3057 - Add the industrial theme, but it's not the default yet.
       
  3058 - Remove acroread from add-plugins because it's badly behaved.
       
  3059   Ximian #65499.
       
  3060 
       
  3061 -------------------------------------------------------------------
       
  3062 Mon Sep 20 17:57:38 CEST 2004 - federico@ximian.com
       
  3063 
       
  3064 - Added MozillaFirefox-toplevel-window-height.diff for
       
  3065   http://bugzilla.ximian.com/show_bug.cgi?id=65543
       
  3066 
       
  3067 -------------------------------------------------------------------
       
  3068 Sun Sep 19 15:42:30 CEST 2004 - stark@suse.de
       
  3069 
       
  3070 - use GNOME system prefs only for NLD by default 
       
  3071   (fixes bug #45575)
       
  3072 
       
  3073 -------------------------------------------------------------------
       
  3074 Fri Sep 17 08:59:32 CEST 2004 - stark@suse.de
       
  3075 
       
  3076 - joeshaw@suse.de: Update GConf patch so that proxy settings work 
       
  3077   correctly (Ximian #64461)
       
  3078 - don't search Java on every path (Ximian #65383)
       
  3079 - added some missing fixes for official release
       
  3080 - added new java package name for triggers (#45257)
       
  3081 
       
  3082 -------------------------------------------------------------------
       
  3083 Sat Sep 11 13:25:41 CEST 2004 - stark@suse.de
       
  3084 
       
  3085 - update to official 1.0PR (0.10)
       
  3086 - adopted gnome-filepicker patch
       
  3087 - removed obsolete CUPS hack from start-script 
       
  3088   (Ximian #65635, #65560)
       
  3089 
       
  3090 -------------------------------------------------------------------
       
  3091 Thu Sep  9 21:35:42 CEST 2004 - stark@suse.de
       
  3092 
       
  3093 - fixed endianess on AMD64 in JS component (#34743)
       
  3094 
       
  3095 -------------------------------------------------------------------
       
  3096 Mon Sep  6 17:33:07 CEST 2004 - stark@suse.de
       
  3097 
       
  3098 - fixed filelist
       
  3099 
       
  3100 -------------------------------------------------------------------
       
  3101 Mon Sep  6 13:48:03 CEST 2004 - stark@suse.de
       
  3102 
       
  3103 - update to 1.0PR (aka 0.10) 
       
  3104 
       
  3105 -------------------------------------------------------------------
       
  3106 Fri Sep  3 21:35:47 CEST 2004 - stark@suse.de
       
  3107 
       
  3108 - added ppc64 patch
       
  3109 
       
  3110 -------------------------------------------------------------------
       
  3111 Thu Sep  2 03:08:59 CEST 2004 - dave@suse.de
       
  3112 
       
  3113 - Fixed up the .desktop installation on nld 
       
  3114 
       
  3115 -------------------------------------------------------------------
       
  3116 Wed Sep  1 15:05:48 CEST 2004 - shprasad@suse.de
       
  3117 
       
  3118 - Doesn't ask to set Firefox as default web-browser. 
       
  3119 
       
  3120 -------------------------------------------------------------------
       
  3121 Tue Aug 31 14:01:18 CEST 2004 - stark@suse.de
       
  3122 
       
  3123 - next new version for filepicker stuff
       
  3124 - deactivated native filepicker for NLD
       
  3125 - update to snapshot (20040831)
       
  3126 
       
  3127 -------------------------------------------------------------------
       
  3128 Tue Aug 24 17:35:52 CEST 2004 - stark@suse.de
       
  3129 
       
  3130 - new version of gnome-filepicker patch
       
  3131 - added patch for config
       
  3132 
       
  3133 -------------------------------------------------------------------
       
  3134 Fri Aug 20 17:12:48 CEST 2004 - stark@suse.de
       
  3135 
       
  3136 - update to snapshot (20040820) 
       
  3137 
       
  3138 -------------------------------------------------------------------
       
  3139 Thu Aug 19 08:46:42 CEST 2004 - stark@suse.de
       
  3140 
       
  3141 - added workaround for mozilla bug #246313
       
  3142   (Firefox does not start: getting "cannot open display" error)
       
  3143 
       
  3144 -------------------------------------------------------------------
       
  3145 Wed Aug 18 15:07:22 CEST 2004 - stark@suse.de
       
  3146 
       
  3147 - added some patches from Ximian
       
  3148   - use GNOME filepicker
       
  3149   - use more gconf settings
       
  3150   - set startup homepage to Novell
       
  3151 
       
  3152 -------------------------------------------------------------------
       
  3153 Tue Aug 17 13:12:35 CEST 2004 - stark@suse.de
       
  3154 
       
  3155 - update to pre-1.0.0 (20040817)
       
  3156 
       
  3157 -------------------------------------------------------------------
       
  3158 Thu Aug  5 06:27:41 CEST 2004 - stark@suse.de
       
  3159 
       
  3160 - security update to 0.9.3 
       
  3161   (including #43312 and others)
       
  3162 - handle RealPlayer 9 plugin
       
  3163 
       
  3164 -------------------------------------------------------------------
       
  3165 Mon Aug  2 15:11:51 CEST 2004 - ro@suse.de
       
  3166 
       
  3167 - recode desktop file to utf-8
       
  3168 
       
  3169 -------------------------------------------------------------------
       
  3170 Wed Jul 28 08:46:31 CEST 2004 - stark@suse.de
       
  3171 
       
  3172 - added fix against certificate spoofing (#43312) 
       
  3173 
       
  3174 -------------------------------------------------------------------
       
  3175 Fri Jul 23 06:31:41 CEST 2004 - stark@suse.de
       
  3176 
       
  3177 - update to 0.9.2
       
  3178 - added workaround for extension registry 
       
  3179 - removed old (incompatible) mozex extension
       
  3180 
       
  3181 -------------------------------------------------------------------
       
  3182 Tue Jun 29 06:27:59 CEST 2004 - stark@suse.de
       
  3183 
       
  3184 - update to 0.9.1
       
  3185 - added hint to run as root first
       
  3186 
       
  3187 -------------------------------------------------------------------
       
  3188 Tue Jun 15 12:42:28 CEST 2004 - stark@suse.de
       
  3189 
       
  3190 - update to 0.9 
       
  3191 - added patch for newer freetype
       
  3192 
       
  3193 -------------------------------------------------------------------
       
  3194 Fri Apr  2 10:31:45 CEST 2004 - stark@suse.de
       
  3195 
       
  3196 - removing relocation of TEMP directory (#34391)
       
  3197 
       
  3198 -------------------------------------------------------------------
       
  3199 Mon Mar 29 11:43:51 CEST 2004 - stark@suse.de
       
  3200 
       
  3201 - update to 0.8.0+ (20040503)
       
  3202 - removed firefox logos and activate official branding for
       
  3203   milestone builds
       
  3204 - changed profile-dir to .firefox
       
  3205 - added some needed files
       
  3206 - enabled gnomevfs extension 
       
  3207 
       
  3208 -------------------------------------------------------------------
       
  3209 Fri Mar 26 18:09:34 CET 2004 - uli@suse.de
       
  3210 
       
  3211 - fixed hang during build on s390* (bug #35440)
       
  3212 
       
  3213 -------------------------------------------------------------------
       
  3214 Wed Mar  3 06:52:00 CET 2004 - stark@suse.de
       
  3215 
       
  3216 - removed unused patches for GTK2 build 
       
  3217 - more fixes for (#35179)
       
  3218 
       
  3219 -------------------------------------------------------------------
       
  3220 Mon Mar  1 07:32:52 CET 2004 - stark@suse.de
       
  3221 
       
  3222 - improved start-script to interact with thunderbird (#35179) 
       
  3223 
       
  3224 -------------------------------------------------------------------
       
  3225 Thu Feb 26 06:57:05 CET 2004 - stark@suse.de
       
  3226 
       
  3227 - use official releasedate
       
  3228 - added official (trademarked) artwork
       
  3229 - added firefox icon to /usr/share/pixmaps
       
  3230 - cleaned up spec-file (there will be no GTK1 version)
       
  3231 
       
  3232 -------------------------------------------------------------------
       
  3233 Tue Feb 24 16:43:17 CET 2004 - stark@suse.de
       
  3234 
       
  3235 - fixed optimization for non-x86 archs 
       
  3236 
       
  3237 -------------------------------------------------------------------
       
  3238 Tue Feb 24 07:43:35 CET 2004 - stark@suse.de
       
  3239 
       
  3240 - adopted file-list and build options to original distribution 
       
  3241 - added prdtoa fix (#32963)
       
  3242 - added hook for static firefox build to rebuild-databases.sh
       
  3243 - added compiler flags for security/ (nss-opt.patch) 
       
  3244 - included mozex (mozex.mozdev.org)
       
  3245 - added -Os as optimization flag
       
  3246 
       
  3247 -------------------------------------------------------------------
       
  3248 Mon Feb  9 21:59:37 CET 2004 - stark@suse.de
       
  3249 
       
  3250 - renamed to MozillaFirefox
       
  3251 - update to final version 0.8 
       
  3252 
       
  3253 -------------------------------------------------------------------
       
  3254 Fri Feb  6 08:39:15 CET 2004 - stark@suse.de
       
  3255 
       
  3256 - update to Firebird 0.8 (20040205)
       
  3257 - added mips build fix
       
  3258 - set PS printer list in MozillaFirebird.sh 
       
  3259 - use lib64 again for biarch platforms
       
  3260 
       
  3261 -------------------------------------------------------------------
       
  3262 Sat Jan 10 10:33:54 CET 2004 - adrian@suse.de
       
  3263 
       
  3264 - build as user
       
  3265 
       
  3266 -------------------------------------------------------------------
       
  3267 Fri Aug 22 11:32:07 CEST 2003 - stark@suse.de
       
  3268 
       
  3269 - upstream sync for 0.6.1post
       
  3270 
       
  3271 -------------------------------------------------------------------
       
  3272 Sun Aug 10 22:01:12 CEST 2003 - stark@suse.de
       
  3273 
       
  3274 - removed dmoz from searchplugins-filelist
       
  3275 
       
  3276 -------------------------------------------------------------------
       
  3277 Fri Aug  8 10:30:50 CEST 2003 - stark@suse.de
       
  3278 
       
  3279 - update to 0.6.1post (TRUNK)
       
  3280 - use -fno-strict-aliasing
       
  3281 
       
  3282 -------------------------------------------------------------------
       
  3283 Thu Jul 31 11:25:39 CEST 2003 - stark@suse.de
       
  3284 
       
  3285 - update to 0.6.1 (MOZILLA_1_4_BRANCH)
       
  3286 - synchronized with mozilla-source
       
  3287 - created file-list
       
  3288 
       
  3289 -------------------------------------------------------------------
       
  3290 Thu Jul 10 09:45:49 CEST 2003 - stark@suse.de
       
  3291 
       
  3292 - update to snapshot 20030709
       
  3293 - fixed generation of symlink MozillaFirebird-xremote-client
       
  3294 
       
  3295 -------------------------------------------------------------------
       
  3296 Fri Jun 20 06:53:08 CEST 2003 - stark@suse.de
       
  3297 
       
  3298 - update to snapshot 20030622 (0.7pre) 
       
  3299 
       
  3300 -------------------------------------------------------------------
       
  3301 Mon May 19 08:54:46 CEST 2003 - stark@suse.de
       
  3302 
       
  3303 - update to snapshot 20030518 (0.6) 
       
  3304 
       
  3305 -------------------------------------------------------------------
       
  3306 Sun May  7 10:11:16 CEST 2003 - stark@suse.de
       
  3307 
       
  3308 - update to snapshot 20030507 
       
  3309 
       
  3310 -------------------------------------------------------------------
       
  3311 Wed Apr 30 13:26:43 CEST 2003 - stark@suse.de
       
  3312 
       
  3313 - initial SuSE package 
       
  3314