Mercurial Mercurial > hg > mozilla / changeset
summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | raw | help
Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
merge from firefox34
authorWolfgang Rosenauer <wr@rosenauer.org>
Sat, 06 Dec 2014 19:15:35 +0100
changeset 816 5551f1ff7e1d
parent 809 af47260a332c (current diff)
parent 813 9e3063dcc69e (diff)
child 817 8ee1122377bb
child 827 3caf8b25f146
merge from firefox34
MozillaFirefox/MozillaFirefox.changes file | annotate | diff | comparison | revisions
MozillaFirefox/MozillaFirefox.spec file | annotate | diff | comparison | revisions
MozillaFirefox/create-tar.sh file | annotate | diff | comparison | revisions
firefox-kde.patch file | annotate | diff | comparison | revisions
firefox-multilocale-chrome.patch file | annotate | diff | comparison | revisions
firefox-no-default-ualocale.patch file | annotate | diff | comparison | revisions 
--- a/MozillaFirefox/MozillaFirefox.changes	Mon Nov 17 17:22:06 2014 +0100
+++ b/MozillaFirefox/MozillaFirefox.changes	Sat Dec 06 19:15:35 2014 +0100
@@ -13,9 +13,32 @@
 - added mozilla-openaes-decl.patch to fix implicit declarations
 
 -------------------------------------------------------------------
-Sat Nov 15 10:01:21 UTC 2014 - wr@rosenauer.org
-
-- update to Firefox 34.0b9
+Sat Nov 29 21:23:03 UTC 2014 - wr@rosenauer.org
+
+- update to Firefox 34.0.5 (bnc#908009)
+  * Default search engine changed to Yahoo! for North America
+  * Default search engine changed to Yandex for Belarusian, Kazakh,
+    and Russian locales
+  * Improved search bar (en-US only)
+  * Firefox Hello real-time communication client
+  * Easily switch themes/personas directly in the Customizing mode
+  * Implementation of HTTP/2 (draft14) and ALPN
+  * Disabled SSLv3
+  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
+    Miscellaneous memory safety hazards
+  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
+    XBL bindings accessible via improper CSS declarations
+  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
+    XMLHttpRequest crashes with some input streams
+  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
+    CSP leaks redirect data via violation reports
+  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
+    Use-after-free during HTML5 parsing
+  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
+    Buffer overflow while parsing media content
+  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
+    Bad casting from the BasicThebesLayer to BasicContainerLayer
+- rebased patches
 - limit linker memory usage for %ix86
 - rebased patches
mozilla