Hello community, here is the log from the commit of package xulrunner for openSUSE:Factory checked in at 2015-07-05 18:02:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xulrunner (Old) and /work/SRC/openSUSE:Factory/.xulrunner.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "xulrunner" Changes: -------- --- /work/SRC/openSUSE:Factory/xulrunner/xulrunner.changes 2015-06-24 20:51:20.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.xulrunner.new/xulrunner.changes 2015-07-05 18:03:00.000000000 +0200 @@ -1,0 +2,26 @@ +Sat Jun 27 15:26:00 UTC 2015 - wr@rosenauer.org + +- update to 31.8.0 (bnc#935979) + * MFSA 2015-59/CVE-2015-2724 + Miscellaneous memory safety hazards + * MFSA 2015-61/CVE-2015-2728 (bmo#1142210) + Type confusion in Indexed Database Manager + * MFSA 2015-64/CVE-2015-2730 (bmo#1125025) + ECDSA signature validation fails to handle some signatures correctly + (this fix is shipped by NSS 3.19.1 externally) + * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867) + Use-after-free in workers while using XMLHttpRequest + * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737 + CVE-2015-2738/CVE-2015-2739/CVE-2015-2740 + Vulnerabilities found through code inspection + * MFSA 2015-69/CVE-2015-2743 (bmo#1163109) + Privilege escalation in PDF.js + * MFSA 2015-70/CVE-2015-4000 (bmo#1138554) + NSS accepts export-length DHE keys with regular DHE cipher suites + (this fix is shipped by NSS 3.19.1 externally) + * MFSA 2015-71/CVE-2015-2721 (bmo#1086145) + NSS incorrectly permits skipping of ServerKeyExchange + (this fix is shipped by NSS 3.19.1 externally) +- requires NSS 3.19.2 + +------------------------------------------------------------------- Old: ---- l10n-31.7.0.tar.xz xulrunner-31.7.0-source.tar.xz New: ---- l10n-31.8.0.tar.xz xulrunner-31.8.0-source.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xulrunner.spec ++++++ --- /var/tmp/diff_new_pack.XEVZcO/_old 2015-07-05 18:03:06.000000000 +0200 +++ /var/tmp/diff_new_pack.XEVZcO/_new 2015-07-05 18:03:06.000000000 +0200 @@ -17,10 +17,10 @@ # -%define version_internal 31.7.0 +%define version_internal 31.8.0 %define apiversion 31 -%define uaweight 3170000 -%define releasedate 2015050500 +%define uaweight 3180000 +%define releasedate 2015062600 %define shared_js 0 %define has_system_nspr 1 %define has_system_nss 1 @@ -68,7 +68,7 @@ BuildRequires: wireless-tools %endif BuildRequires: mozilla-nspr-devel >= 4.10.6 -BuildRequires: mozilla-nss-devel >= 3.16.5 +BuildRequires: mozilla-nss-devel >= 3.19.2 BuildRequires: pkgconfig(libpulse) %if %suse_version > 1210 BuildRequires: pkgconfig(gstreamer-%gstreamer_ver) ++++++ compare-locales.tar.xz ++++++ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.XEVZcO/_old 2015-07-05 18:03:07.000000000 +0200 +++ /var/tmp/diff_new_pack.XEVZcO/_new 2015-07-05 18:03:07.000000000 +0200 @@ -2,8 +2,8 @@ CHANNEL="esr31" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_31_7_0esr_RELEASE" -VERSION="31.7.0" +RELEASE_TAG="FIREFOX_31_8_0esr_RELEASE" +VERSION="31.8.0" # mozilla if [ -d mozilla ]; then ++++++ l10n-31.7.0.tar.xz -> l10n-31.8.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/xulrunner/l10n-31.7.0.tar.xz /work/SRC/openSUSE:Factory/.xulrunner.new/l10n-31.8.0.tar.xz differ: char 26, line 1 ++++++ source-stamp.txt ++++++ --- /var/tmp/diff_new_pack.XEVZcO/_old 2015-07-05 18:03:07.000000000 +0200 +++ /var/tmp/diff_new_pack.XEVZcO/_new 2015-07-05 18:03:07.000000000 +0200 @@ -1,2 +1,2 @@ -REV=06188a3eed1f +REV=c81c5e3eca8c REPO=http://hg.mozilla.org/releases/mozilla-esr31 ++++++ xulrunner-31.7.0-source.tar.xz -> xulrunner-31.8.0-source.tar.xz ++++++ /work/SRC/openSUSE:Factory/xulrunner/xulrunner-31.7.0-source.tar.xz /work/SRC/openSUSE:Factory/.xulrunner.new/xulrunner-31.8.0-source.tar.xz differ: char 26, line 1