rpm/MozillaFirefox
SHA256
1
0
Fork 0
forked from pool/MozillaFirefox
Code Pull Requests Activity

Updating link to change in openSUSE:Factory/MozillaFirefox revision 72.0

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=c9654f309cbb13a8859e6dd8e971a40a
This commit is contained in:
OBS User buildservice-autocommit
2009-11-10 09:49:37 +00:00
committed by Git OBS Bridge
parent b450e39010
commit fbbc8b5a7f
6 changed files with 37 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
MozillaFirefox.changes
View File

@@ -1,7 +1,34 @@
-------------------------------------------------------------------
Thu Nov 5 19:49:33 UTC 2009 - wr@rosenauer.org
- update to version 3.5.5 (bnc#553172)
-------------------------------------------------------------------
Sat Oct 17 23:19:23 CEST 2009 - wr@rosenauer.org
- security update to version 3.5.4 (bnc#545277)
* MFSA 2009-52/CVE-2009-3370 (bmo#511615)
Form history vulnerable to stealing
* MFSA 2009-53/CVE-2009-3274 (bmo#514823)
Local downloaded file tampering
* MFSA 2009-54/CVE-2009-3371 (bmo#514554)
Crash with recursive web-worker calls
* MFSA 2009-55/CVE-2009-3372 (bmo#500644)
Crash in proxy auto-configuration regexp parsing
* MFSA 2009-56/CVE-2009-3373 (bmo#511689)
Heap buffer overflow in GIF color map parser
* MFSA 2009-57/CVE-2009-3374 (bmo#505988)
Chrome privilege escalation in XPCVariant::VariantDataToJS()
* MFSA 2009-59/CVE-2009-1563 (bmo#516396, bmo#516862)
Heap buffer overflow in string to number conversion
* MFSA 2009-61/CVE-2009-3375 (bmo#503226)
Cross-origin data theft through document.getSelection()
* MFSA 2009-62/CVE-2009-3376 (bmo#511521)
Download filename spoofing with RTL override
* MFSA 2009-63/CVE-2009-3377/CVE-2009-3379/CVE-2009-3378
Upgrade media libraries to fix memory safety bugs
* MFSA 2009-64/CVE-2009-3380/CVE-2009-3381/CVE-2009-3383
Crashes with evidence of memory corruption
- removed upstreamed patch
* firefox-bug506901.patch