From c564aa1b8dc418dae2655fa16293ecac57ba43b239d037690843ddfe6feb92e6 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 21 Jul 2010 05:38:44 +0000 Subject: [PATCH] update changelog OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=87 --- MozillaThunderbird.changes | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 7ca23a4..0be775b 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -2,6 +2,21 @@ Fri Jul 16 07:19:40 CEST 2010 - wr@rosenauer.org - security update to 3.0.6 (bnc#622506) + * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212 + Miscellaneous memory safety hazards + * MFSA 2010-39/CVE-2010-2752 (bmo#574059) + nsCSSValue::Array index integer overflow + * MFSA 2010-40/CVE-2010-2753 (bmo#571106) + nsTreeSelection dangling pointer remote code execution + vulnerability + * MFSA 2010-41/CVE-2010-1205 (bmo#570451) + Remote code execution using malformed PNG image + * MFSA 2010-42/CVE-2010-1213 (bmo#568148) + Cross-origin data disclosure via Web Workers and importScripts + * MFSA 2010-46/CVE-2010-0654 (bmo#524223) + Cross-domain data theft using CSS + * MFSA 2010-47/CVE-2010-2754 (bmo#568564) + Cross-origin data leakage from script filename in error messages ------------------------------------------------------------------- Fri May 21 07:31:34 CEST 2010 - wr@rosenauer.org