OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=50

MozillaFirefox.changes

@@ -1,3 +1,29 @@
+-------------------------------------------------------------------
+Wed Feb  4 18:58:59 EST 2009 - hfiguiere@suse.de
+
+- Review and approve changes.
+
+-------------------------------------------------------------------
+Wed Jan 28 13:48:00 CET 2009 - wr@rosenauer.org
+
+- security update to 3.0.6 (bnc#470074)
+  * MFSA 2009-06/CVE-2009-0358: Directives to not cache pages ignored
+    (bmo#441751)
+  * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading 
+    HTTPOnly cookies (bmo#380418)
+  * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via 
+    local .desktop files (bmo#460425)
+  * MFSA 2009-03/CVE-2009-0355: Local file stealing with SessionStore
+    (bmo#466937)
+  * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method 
+    and window.eval (bmo#468581)
+  * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with 
+    evidence of memory corruption (rv:1.9.0.6) (bmo#452913, 
+    bmo#449006, bmo#331088, bmo#401042, bmo#416461, bmo#422283,
+    bmo#422301, bmo#431705, bmo#437142, bmo#421839, bmo#420697,
+    bmo#461027)
+  * (non security) added lv locale
+
 -------------------------------------------------------------------
 Thu Jan 22 11:09:42 EST 2009 - hfiguiere@suse.de
 

MozillaFirefox.spec

@@ -1,5 +1,5 @@
 #
-# spec file for package MozillaFirefox (Version 3.0.5)
+# spec file for package MozillaFirefox (Version 3.0.6)
 #
 # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
@@ -26,7 +26,7 @@ BuildRequires:  fdupes
 License:        GPL v2 or later; LGPL v2.1 or later; MOZILLA PUBLIC LICENSE (MPL/NPL)
 Provides:       web_browser
 Provides:       firefox
-Version:        3.0.5
+Version:        3.0.6
 Release:        2
 Summary:        Mozilla Firefox Web Browser
 Url:            http://www.mozilla.org/
@@ -59,7 +59,7 @@ Requires:       %{name}-branding >= 3.0
 %define _use_internal_dependency_generator 0
 %define __find_requires sh %{SOURCE4}
 %define __find_provides %{nil}
-%define releasedate 2008121300
+%define releasedate 2009012700
 %define progname firefox
 %define progdir %{_prefix}/%_lib/%{progname}
 %if %suse_version > 1020
@@ -88,7 +88,7 @@ Authors:
 %package translations
 Summary:        Translations for MozillaFirefox
 License:        GPL v2 or later; LGPL v2.1 or later; MOZILLA PUBLIC LICENSE (MPL/NPL)
-Provides:       locale(%{name}:af;ar;be;bg;bn_IN;ca;cs;cy;da;de;el;en_GB;eo;es_AR;es_ES;et;eu;fi;fr;fy_NL;ga_IE;gl;gu_IN;he;hi_IN;hu;id;is;it;ja;ka;kn;ko;ku;lt;mk;mn;mr;nb_NO;nl;nn_NO;oc;pa_IN;pl;pt_BR;pt_PT;ro;ru;si;sk;sl;sq;sr;sv_SE;te;th;tr;uk;zh_CN;zh_TW)
+Provides:       locale(%{name}:af;ar;be;bg;bn_IN;ca;cs;cy;da;de;el;en_GB;eo;es_AR;es_ES;et;eu;fi;fr;fy_NL;ga_IE;gl;gu_IN;he;hi_IN;hu;id;is;it;ja;ka;kn;ko;ku;lt;lv;mk;mn;mr;nb_NO;nl;nn_NO;oc;pa_IN;pl;pt_BR;pt_PT;ro;ru;si;sk;sl;sq;sr;sv_SE;te;th;tr;uk;zh_CN;zh_TW)
 Group:          System/Localization
 PreReq:         %{name} = %{version}
 Requires:       mozilla-xulrunner190-translations
@@ -105,13 +105,13 @@ Authors:
 
 %endif
 
-%package branding-upstream
+%package branding-upstream  
 License:        GPL v2 or later; LGPL v2.1 or later; MOZILLA PUBLIC LICENSE (MPL/NPL)
 Summary:        Upstream branding for MozillaFirefox
 Group:          Productivity/Networking/Web/Browsers
-Provides:       %{name}-branding = %{version}
+Provides:       %{name}-branding = %{version}  
 Conflicts:      otherproviders(MozillaFirefox-branding)
-Supplements:    packageand(%{name}:branding-upstream)
+Supplements:    packageand(%{name}:branding-upstream)  
 #BRAND: Provide three files -
 #BRAND: /usr/lib/firefox/browserconfig.properties that contains the
 #BRAND: default homepage and some other default configuration options
@@ -124,7 +124,7 @@ Supplements:    packageand(%{name}:branding-upstream)
 #BRAND: custom preference overrides.
 #BRAND: It's also possible to drop files in /usr/lib/firefox/searchplugins
 
-%description branding-upstream
+%description branding-upstream  
 This package provides upstream look and feel for MozillaFirefox.
 
 
@@ -140,7 +140,7 @@ cd $RPM_BUILD_DIR/mozilla
 %patch2
 %patch14
 %patch17
-%patch20 
+%patch20
 
 %build
 export MOZ_BUILD_DATE=%{releasedate}
@@ -339,6 +339,26 @@ fi
 %{progdir}/defaults/profile/bookmarks.html
 
 %changelog
+* Wed Feb 04 2009 hfiguiere@suse.de
+- Review and approve changes.
+* Wed Jan 28 2009 wr@rosenauer.org
+- security update to 3.0.6 (bnc#470074)
+  * MFSA 2009-06/CVE-2009-0358: Directives to not cache pages ignored
+  (bmo#441751)
+  * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading
+  HTTPOnly cookies (bmo#380418)
+  * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via
+  local .desktop files (bmo#460425)
+  * MFSA 2009-03/CVE-2009-0355: Local file stealing with SessionStore
+  (bmo#466937)
+  * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method
+  and window.eval (bmo#468581)
+  * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with
+  evidence of memory corruption (rv:1.9.0.6) (bmo#452913,
+  bmo#449006, bmo#331088, bmo#401042, bmo#416461, bmo#422283,
+  bmo#422301, bmo#431705, bmo#437142, bmo#421839, bmo#420697,
+  bmo#461027)
+  * (non security) added lv locale
 * Thu Jan 22 2009 hfiguiere@suse.de
 - Fix the wrapper script for PowerPC 64-bits (bnc#464753)
 * Wed Dec 17 2008 hfiguiere@suse.de

firefox-3.0.5-source.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2ec44fe80de096cb0f93b2845c2be7f286e9fde371d73633785176dc66218153
-size 36839445

firefox-3.0.6-source.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b3e08fb462882822b4ec9b962cc517c0c33401d58ab740c85e9edef1b5cd698d
+size 36878860

l10n-3.0.5.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f5ef3f0fbf956f26d1ffb0d9e014351e05c831f1e06653ba84b43131a70ae4f3
-size 29344087

l10n-3.0.6.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9163c6906f7a702942ff91eb91305f6ad98f44559a14560eba11139e3d9b3ce5
+size 29350247