1 ------------------------------------------------------------------- |
1 ------------------------------------------------------------------- |
2 Sat Jul 13 20:53:28 UTC 2013 - wr@rosenauer.org |
2 Wed Aug 14 16:59:25 UTC 2013 - wr@rosenauer.org |
3 |
3 |
4 - update to Firefox 24.0pre (20130713) |
4 - update to Firefox 24.0beta2 |
|
5 - enable gstreamer via pref |
|
6 |
|
7 ------------------------------------------------------------------- |
|
8 Sun Aug 4 18:30:11 UTC 2013 - wr@rosenauer.org |
|
9 |
|
10 - update to Firefox 23.0 (bnc#833389) |
|
11 * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702 |
|
12 Miscellaneous memory safety hazards |
|
13 * MFSA 2013-64/CVE-2013-1704 (bmo#883313) |
|
14 Use after free mutating DOM during SetBody |
|
15 * MFSA 2013-65/CVE-2013-1705 (bmo#882865) |
|
16 Buffer underflow when generating CRMF requests |
|
17 * MFSA 2013-67/CVE-2013-1708 (bmo#879924) |
|
18 Crash during WAV audio file decoding |
|
19 * MFSA 2013-68/CVE-2013-1709 (bmo#838253) |
|
20 Document URI misrepresentation and masquerading |
|
21 * MFSA 2013-69/CVE-2013-1710 (bmo#871368) |
|
22 CRMF requests allow for code execution and XSS attacks |
|
23 * MFSA 2013-70/CVE-2013-1711 (bmo#843829) |
|
24 Bypass of XrayWrappers using XBL Scopes |
|
25 * MFSA 2013-72/CVE-2013-1713 (bmo#887098) |
|
26 Wrong principal used for validating URI for some Javascript |
|
27 components |
|
28 * MFSA 2013-73/CVE-2013-1714 (bmo#879787) |
|
29 Same-origin bypass with web workers and XMLHttpRequest |
|
30 * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397) |
|
31 Local Java applets may read contents of local file system |
5 - requires NSPR 4.10 and NSS 3.15 |
32 - requires NSPR 4.10 and NSS 3.15 |
6 - enable gstreamer via pref |
|
7 |
33 |
8 ------------------------------------------------------------------- |
34 ------------------------------------------------------------------- |
9 Wed Jul 3 17:14:35 UTC 2013 - dmueller@suse.com |
35 Wed Jul 3 17:14:35 UTC 2013 - dmueller@suse.com |
10 |
36 |
11 - fix build on ARM (/-g/ matches /-grecord-switches/) |
37 - fix build on ARM (/-g/ matches /-grecord-switches/) |