# HG changeset patch # User Wolfgang Rosenauer # Date 1338917700 -7200 # Node ID d17e60d0804a68458807ab53e8ab3fab7bdbbaeb # Parent 3880f0f192a833a231458da386c407208275409d 13.0 changelogs diff -r 3880f0f192a8 -r d17e60d0804a MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Mon Jun 04 14:26:21 2012 +0200 +++ b/MozillaFirefox/MozillaFirefox.changes Tue Jun 05 19:35:00 2012 +0200 @@ -2,7 +2,20 @@ Sat Jun 2 08:22:51 UTC 2012 - wr@rosenauer.org - update to Firefox 13.0 (bnc#765204) + * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 + Miscellaneous memory safety hazards + * MFSA 2012-36/CVE-2012-1944 (bmo#751422) + Content Security Policy inline-script bypass + * MFSA 2012-37/CVE-2012-1945 (bmo#670514) + Information disclosure though Windows file shares and shortcut + files + * MFSA 2012-38/CVE-2012-1946 (bmo#750109) + Use-after-free while replacing/inserting a node in a document + * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941 + Buffer overflow and use-after-free issues found using Address + Sanitizer - require NSS 3.13.4 + * MFSA 2012-39/CVE-2012-0441 (bmo#715073) - fix sound notifications when filename/path contains a whitespace (bmo#749739) diff -r 3880f0f192a8 -r d17e60d0804a xulrunner/xulrunner.changes --- a/xulrunner/xulrunner.changes Mon Jun 04 14:26:21 2012 +0200 +++ b/xulrunner/xulrunner.changes Tue Jun 05 19:35:00 2012 +0200 @@ -2,6 +2,20 @@ Sat Jun 2 09:16:34 UTC 2012 - wr@rosenauer.org - update to 13.0 (bnc#765204) + * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 + Miscellaneous memory safety hazards + * MFSA 2012-36/CVE-2012-1944 (bmo#751422) + Content Security Policy inline-script bypass + * MFSA 2012-37/CVE-2012-1945 (bmo#670514) + Information disclosure though Windows file shares and shortcut + files + * MFSA 2012-38/CVE-2012-1946 (bmo#750109) + Use-after-free while replacing/inserting a node in a document + * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941 + Buffer overflow and use-after-free issues found using Address + Sanitizer +- require NSS 3.13.4 + * MFSA 2012-39/CVE-2012-0441 (bmo#715073) - reenabled crashreporter for Factory/12.2 (fixed in mozilla-gcc47.patch)