MozillaFirefox/MozillaFirefox.changes
changeset 762 f20576d5885a
parent 761 c748af0c7534
child 765 0955f22b3f4f
child 768 af83869ba02e
--- a/MozillaFirefox/MozillaFirefox.changes	Wed Jul 09 14:56:22 2014 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Sun Sep 14 21:55:52 2014 +0200
@@ -1,18 +1,68 @@
 -------------------------------------------------------------------
-Wed Jul  9 05:13:39 UTC 2014 - wr@rosenauer.org
-
-- update to Aurora 32 (20140707)
+Sat Sep 13 16:58:16 UTC 2014 - wr@rosenauer.org
+
+- update to Firefox 32.0.1
+  * fixed stability issues for computers with multiple graphics cards
+  * mixed content icon may be incorrectly displayed instead of lock
+    icon for SSL sites in 32.0 (
+  * WebRTC: setRemoteDescription() silently fails if no success
+    callback is specified (bmo#1063971)
+
+-------------------------------------------------------------------
+Sun Aug 31 07:44:54 UTC 2014 - wr@rosenauer.org
+
+- update to Firefox 32.0 (bnc#894370)
+  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
+    Miscellaneous memory safety hazards
+  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
+    Use-after-free during DOM interactions with SVG
+  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
+    Uninitialized memory use during GIF rendering
+  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
+    Out-of-bounds read in Web Audio audio timeline
+  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
+    Use-after-free setting text directionality
 - rebased patches
-- requires NSS 3.16.3
+- requires NSS 3.16.4
 - removed upstreamed patch
   * mozilla-aarch64-bmo-810631.patch
 
 -------------------------------------------------------------------
-Sat Jul  5 12:28:20 UTC 2014 - wr@rosenauer.org
-
-- update to Firefox 31beta7
+Wed Aug 20 13:50:58 CEST 2014 - behlert@suse.de
+
+- adapted _constraints, used more than 3900MB on s390x during
+  last build
+
+-------------------------------------------------------------------
+Sun Jul 20 18:11:44 UTC 2014 - wr@rosenauer.org
+
+- update to Firefox 31.0 (bnc#887746)
+  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
+    Miscellaneous memory safety hazards
+  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
+    Buffer overflow during Web Audio buffering for playback
+  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
+    Use-after-free in Web Audio due to incorrect control message ordering
+  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
+    Toolbar dialog customization event spoofing
+  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
+    Use-after-free with FireOnStateChange event
+  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
+    Exploitable WebGL crash with Cesium JavaScript library
+  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
+    Use-after-free while when manipulating certificates in the trusted cache
+    (solved with NSS 3.16.2 requirement)
+  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
+    Crash in Skia library when scaling high quality images
+  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
+    (bmo#1015973, bmo#1026022, bmo#997795)
+    Certificate parsing broken by non-standard character encoding
+  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
+    IFRAME sandbox same-origin access through redirect
+- use EGL on ARM
 - rebased patches
 - requires NSS 3.16.2
+- requires python-devel (not only python)
 
 -------------------------------------------------------------------
 Mon Jun  9 08:28:17 UTC 2014 - wr@rosenauer.org