xulrunner/xulrunner.changes
branchfirefox16
changeset 533 6bcb1bfae08e
parent 510 d7c8f4d57734
child 535 cba7622bad5d
equal deleted inserted replaced
529:4812378b5646 533:6bcb1bfae08e
     1 -------------------------------------------------------------------
     1 -------------------------------------------------------------------
     2 Fri Jul 20 07:39:54 UTC 2012 - wr@rosenauer.org
     2 Sun Aug 26 13:48:04 UTC 2012 - wr@rosenauer.org
     3 
     3 
     4 - update to 15.0b1
     4 - update to 15.0 (bnc#777588)
       
     5   * MFSA 2012-57/CVE-2012-1970
       
     6     Miscellaneous memory safety hazards
       
     7   * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
       
     8     CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
       
     9     CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
       
    10     Use-after-free issues found using Address Sanitizer
       
    11   * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
       
    12     Location object can be shadowed using Object.defineProperty
       
    13   * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
       
    14     Escalation of privilege through about:newtab
       
    15   * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
       
    16     Memory corruption with bitmap format images with negative height
       
    17   * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
       
    18     WebGL use-after-free and memory corruption
       
    19   * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
       
    20     SVG buffer overflow and use-after-free issues
       
    21   * MFSA 2012-64/CVE-2012-3971
       
    22     Graphite 2 memory corruption
       
    23   * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
       
    24     Out-of-bounds read in format-number in XSLT
       
    25   * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
       
    26     HTTPMonitor extension allows for remote debugging without explicit
       
    27     activation
       
    28   * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
       
    29     DOMParser loads linked resources in extensions when parsing
       
    30     text/html
       
    31   * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
       
    32     Incorrect site SSL certificate data display
       
    33   * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
       
    34     Location object security checks bypassed by chrome code
       
    35   * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
       
    36     Web console eval capable of executing chrome-privileged code
       
    37 - fix HTML5 video crash with GStreamer enabled (bmo#761030)
       
    38 - fixed filelist
     5 
    39 
     6 -------------------------------------------------------------------
    40 -------------------------------------------------------------------
     7 Sat Jul 14 19:33:44 UTC 2012 - wr@rosenauer.org
    41 Sat Jul 14 19:33:44 UTC 2012 - wr@rosenauer.org
     8 
    42 
     9 - update to 14.0.1 (bnc#771583)
    43 - update to 14.0.1 (bnc#771583)