rpm/MozillaFirefox
SHA256
1
0
Fork 0
forked from pool/MozillaFirefox
Code Pull Requests Activity

(boo#977373, boo#977375, boo#977376)

Browse Source 
* MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=506
This commit is contained in:
Wolfgang Rosenauer 2016-04-30 07:08:42 +00:00 committed by Git OBS Bridge
parent ad4dbca25f
commit 3b138f7f73
1 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
MozillaFirefox.changes
View File

@ -18,27 +18,29 @@ Wed Apr 27 06:09:30 UTC 2016 - wr@rosenauer.org
* Gtk3 builds not supported at the moment
security fixes:
* MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
(boo#977373, boo#977375, boo#977376)
Miscellaneous memory safety hazards
* MFSA 2016-40/CVE-2016-2809 (bmo#1212939)
* MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
Privilege escalation through file deletion by Maintenance Service updater
(Windows only)
* MFSA 2016-41/CVE-2016-2810 (bmo#1229681)
* MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
Content provider permission bypass allows malicious application
to access data (Android only)
* MFSA 2016-42/CVE-2016-2811/CVE-2016-2812 (bmo#1252330, bmo#1261776)
* MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
(bmo#1252330, bmo#1261776, boo#977379)
Use-after-free and buffer overflow in Service Workers
* MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650)
* MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
Disclosure of user actions through JavaScript with motion and
orientation sensors (only affects mobile variants)
* MFSA 2016-44/CVE-2016-2814 (bmo#1254721)
* MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
Buffer overflow in libstagefright with CENC offsets
* MFSA 2016-45/CVE-2016-2816 (bmo#1223743)
* MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
CSP not applied to pages sent with multipart/x-mixed-replace
* MFSA 2016-46/CVE-2016-2817 (bmo#1227462)
* MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
Elevation of privilege with chrome.tabs.update API in web extensions
* MFSA 2016-47/CVE-2016-2808 (bmo#1246061)
* MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
Write to invalid HashMap entry through JavaScript.watch()
* MFSA 2016-48/CVE-2016-2820 (bmo#870870)
* MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
Firefox Health Reports could accept events from untrusted domains
-------------------------------------------------------------------