# HG changeset patch
# User Wolfgang Rosenauer <wr@rosenauer.org>
# Date 1424989514 -3600
# Node ID e7e5b3d0f1b3cc0538670246b1c74adf48f5575e
# Parent  4d52d2b45cf0b964387f9f559567b19f40f46017
changelog

diff -r 4d52d2b45cf0 -r e7e5b3d0f1b3 MozillaFirefox/MozillaFirefox.changes
--- a/MozillaFirefox/MozillaFirefox.changes	Fri Feb 20 23:56:56 2015 +0100
+++ b/MozillaFirefox/MozillaFirefox.changes	Thu Feb 26 23:25:14 2015 +0100
@@ -8,6 +8,44 @@
   * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
     more scalable, and more responsive web.
   * Locale added: Uzbek (uz)
+  security fixes:
+  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
+    Miscellaneous memory safety hazards
+  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
+    Invoking Mozilla updater will load locally stored DLL files
+    (Windows only)
+  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
+    Appended period to hostnames can bypass HPKP and HSTS protections
+  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
+    Malicious WebGL content crash when writing strings
+  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
+    TLS TURN and STUN connections silently fail to simple TCP connections
+  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
+    Use-after-free in IndexedDB
+  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
+    Buffer overflow in libstagefright during MP4 video playback
+  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
+    Double-free when using non-default memory allocators with a
+    zero-length XHR
+  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
+    Out-of-bounds read and write while rendering SVG content
+  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
+    Buffer overflow during CSS restyling
+  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
+    Buffer underflow during MP3 playback
+  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
+    Crash using DrawTarget in Cairo graphics library
+  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
+    Use-after-free in Developer Console date with OpenType Sanitiser
+  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
+    Reading of local files through manipulation of form autocomplete
+  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
+    Local files or privileged URLs in pages can be opened into new tabs
+  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
+    UI Tour whitelisted sites in background tab can spoof foreground
+    tabs
+  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
+    Caja Compiler JavaScript sandbox bypass
 - rebased patches
 - requires NSS 3.17.4
 
diff -r 4d52d2b45cf0 -r e7e5b3d0f1b3 MozillaFirefox/MozillaFirefox.spec
--- a/MozillaFirefox/MozillaFirefox.spec	Fri Feb 20 23:56:56 2015 +0100
+++ b/MozillaFirefox/MozillaFirefox.spec	Thu Feb 26 23:25:14 2015 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package MozillaFirefox
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #               2006-2015 Wolfgang Rosenauer
 #
 # All modifications and additions to the file contributed by third parties
@@ -16,6 +16,7 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
+
 # changed with every update
 %define major 36
 %define mainver %major.0
@@ -71,8 +72,13 @@
 BuildRequires:  libcurl-devel
 BuildRequires:  libgnomeui-devel
 BuildRequires:  libidl-devel
+BuildRequires:  libiw-devel
 BuildRequires:  libnotify-devel
+BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
+BuildRequires:  mozilla-nspr-devel >= 4.10.7
+BuildRequires:  mozilla-nss-devel >= 3.17.4
+BuildRequires:  nss-shared-helper-devel
 BuildRequires:  python-devel
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip
@@ -80,15 +86,10 @@
 BuildRequires:  xorg-x11-libXt-devel
 BuildRequires:  yasm
 BuildRequires:  zip
-BuildRequires:  libiw-devel
-BuildRequires:  libproxy-devel
-BuildRequires:  mozilla-nspr-devel >= 4.10.7
-BuildRequires:  mozilla-nss-devel >= 3.17.4
-BuildRequires:  nss-shared-helper-devel
-BuildRequires:  pkgconfig(libpulse)
 BuildRequires:  pkgconfig(gstreamer-%gstreamer_ver)
 BuildRequires:  pkgconfig(gstreamer-app-%gstreamer_ver)
 BuildRequires:  pkgconfig(gstreamer-plugins-base-%gstreamer_ver)
+BuildRequires:  pkgconfig(libpulse)
 %if 0%{?gstreamer} == 1
 Requires:       libgstreamer-1_0-0
 Recommends:     gstreamer-fluendo-mp3