1 -------------------------------------------------------------------

     2 Sun Jun 12 20:09:41 UTC 2016 - wr@rosenauer.org

     3 

     4 - update to Firefox 45.2.0esr

     5   * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818

     6     (boo#983638)

     7     (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,

     8      bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,

     9      bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,

    10      bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,

    11      bmo#1269729, bmo#1273202, bmo#1273701)

    12     Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)

    13   * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)

    14     Buffer overflow parsing HTML5 fragments

    15   * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)

    16     Use-after-free deleting tables from a contenteditable document

    17   * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)

    18     Addressbar spoofing though the SELECT element

    19   * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)

    20     Out-of-bounds write with WebGL shader

    21   * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)

    22     Use-after-free when textures are used in WebGL operations

    23     after recycle pool destruction

    24   * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)

    25     Entering fullscreen and persistent pointerlock without user

    26     permission

    27   security fixes in 45.1

    28   * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807

    29     (boo#977373, boo#977375, boo#977376)

    30     Miscellaneous memory safety hazards

    31   * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)

    32     Buffer overflow in libstagefright with CENC offsets

    33   * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)

    34     Write to invalid HashMap entry through JavaScript.watch()

    35