1 -------------------------------------------------------------------

     2 Fri Aug 12 21:16:19 UTC 2011 - wr@rosenauer.org

     3 

     4 - update to 6.0 (bnc#712224)

     5   included security fixes MFSA 2011-29

     6   * CVE-2011-2989/CVE-2011-2991/CVE-2011-2992/CVE-2011-2985

     7     Miscellaneous memory safety hazards

     8   * CVE-2011-2993 (bmo#657267)

     9     Unsigned scripts can call script inside signed JAR

    10   * CVE-2011-2988 (bmo#665934)

    11     Heap overflow in ANGLE library

    12   * CVE-2011-0084 (bmo#648094)

    13     Crash in SVGTextElement.getCharNumAtPosition()

    14   * CVE-2011-2990

    15     Credential leakage using Content Security Policy reports

    16   * CVE-2011-2986 (bmo#655836)

    17     Cross-origin data theft using canvas and Windows D2D

    18 - removed obsolete curl header dependency (mozilla-curl.patch)

    19