diff -r e8d4a33582b8 -r 554cd9503f75 MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Mon Dec 10 22:33:01 2018 +0100 +++ b/MozillaFirefox/MozillaFirefox.changes Tue Mar 19 09:49:20 2019 +0100 @@ -1,8 +1,39 @@ ------------------------------------------------------------------- +Wed Jan 23 23:17:37 UTC 2019 - Wolfgang Rosenauer + +- Mozilla Firefox 60.5.0esr +- requires NSS >= 3.36.7 +- removed obsolete patch: + mozilla-no-stdcxx-check.patch + +------------------------------------------------------------------- +Wed Jan 9 15:01:00 UTC 2019 - Guillaume GARDET + +- Add patch to fix armv7 build (boo#1121255): + * mozilla-bmo1463035.patch + +------------------------------------------------------------------- Mon Dec 10 21:25:38 UTC 2018 - Wolfgang Rosenauer - Mozilla Firefox 60.4.0esr: - MFSA 2018-29 + * Updated list of currency codes to include Unidad Previsional (UYW) + (bmo#1499028) + MFSA 2018-30 (bsc#1119105) + * CVE-2018-17466 bmo#1488295 + Buffer overflow and out-of-bounds read in ANGLE library with + TextureStorage11 + * CVE-2018-18492 bmo#1499861 + Use-after-free with select element + * CVE-2018-18493 bmo#1504452 + Buffer overflow in accelerated 2D canvas with Skia + * CVE-2018-18494 bmo#1487964 + Same-origin policy violation using location attribute and + performance.getEntries to steal cross-origin URLs + * CVE-2018-18498 bmo#1500011 + Integer overflow when calculating buffer sizes for images + * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759 + bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471 + Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4 - requires NSS >= 3.36.6 -------------------------------------------------------------------