Hello community, here is the log from the commit of package MozillaFirefox for openSUSE:11.3 checked in at Wed Mar 2 10:40:03 CET 2011. -------- --- old-versions/11.3/UPDATES/all/MozillaFirefox/MozillaFirefox.changes 2010-12-10 11:46:24.000000000 +0100 +++ 11.3/MozillaFirefox/MozillaFirefox.changes 2011-03-02 08:27:36.000000000 +0100 @@ -1,0 +2,23 @@ +Tue Feb 22 08:17:39 UTC 2011 - wr@rosenauer.org + +- security update to 3.6.14 (build3) (bnc#667155) + * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062 + Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17) + * MFSA 2011-02/CVE-2011-0051 (bmo#616659) + Recursive eval call causes confirm dialogs to evaluate to true + * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255) + Use-after-free error in JSON.stringify + * MFSA 2011-04/CVE-2011-0054 (bmo#615657) + Buffer overflow in JavaScript upvarMap + * MFSA 2011-05/CVE-2011-0056 (bmo#622015) + Buffer overflow in JavaScript atom map + * MFSA 2011-06/CVE-2011-0057 (bmo#626631) + Use-after-free error using Web Workers + * MFSA 2011-08/CVE-2010-1585 (bmo#562547) + ParanoidFragmentSink allows javascript: URLs in chrome documents + * MFSA 2011-09/CVE-2011-0061 (bmo#610601) + Crash caused by corrupted JPEG image + * MFSA 2011-10/CVE-2011-0059 (bmo#573873) + CSRF risk with plugins and 307 redirects + +------------------------------------------------------------------- calling whatdependson for 11.3-i586 Old: ---- firefox-3.6.13-source.tar.bz2 l10n-3.6.13.tar.bz2 New: ---- firefox-3.6.14-source.tar.bz2 l10n-3.6.14.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaFirefox.spec ++++++ --- /var/tmp/diff_new_pack.rej0qO/_old 2011-03-02 10:39:50.000000000 +0100 +++ /var/tmp/diff_new_pack.rej0qO/_new 2011-03-02 10:39:50.000000000 +0100 @@ -1,8 +1,8 @@ # -# spec file for package MozillaFirefox (Version 3.6.13) +# spec file for package MozillaFirefox # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. -# 2006-2010 Wolfgang Rosenauer +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# 2006-2011 Wolfgang Rosenauer # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ Name: MozillaFirefox %define xulrunner mozilla-xulrunner192 BuildRequires: autoconf213 gcc-c++ libcurl-devel libgnomeui-devel libidl-devel libnotify-devel python unzip update-desktop-files zip -BuildRequires: %{xulrunner}-devel = 1.9.2.13 +BuildRequires: %{xulrunner}-devel = 1.9.2.14 %if %suse_version > 1020 BuildRequires: fdupes %endif @@ -32,11 +32,11 @@ BuildRequires: wireless-tools %endif License: GPLv2+ ; LGPLv2.1+ ; MPLv1.1+ -Version: 3.6.13 -Release: 0.<RELEASE1> +Version: 3.6.14 +Release: 0.<RELEASE2> Provides: web_browser Provides: firefox = %{version} -%define releasedate 2010120300 +%define releasedate 2011022100 Summary: Mozilla Firefox Web Browser Url: http://www.mozilla.org/ Group: Productivity/Networking/Web/Browsers ++++++ firefox-3.6.13-source.tar.bz2 -> firefox-3.6.14-source.tar.bz2 ++++++ old-versions/11.3/UPDATES/all/MozillaFirefox/firefox-3.6.13-source.tar.bz2 11.3/MozillaFirefox/firefox-3.6.14-source.tar.bz2 differ: char 11, line 1 ++++++ l10n-3.6.13.tar.bz2 -> l10n-3.6.14.tar.bz2 ++++++ old-versions/11.3/UPDATES/all/MozillaFirefox/l10n-3.6.13.tar.bz2 11.3/MozillaFirefox/l10n-3.6.14.tar.bz2 differ: char 11, line 1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org