From fc87750066956ea96977a750b71e298f0265f589441cc42f0d8477694ea9de16 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Thu, 15 Jan 2015 06:21:00 +0000 Subject: [PATCH] * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 Miscellaneous memory safety hazards * MFSA 2015-03/CVE-2014-8638 (bmo#1080987) sendBeacon requests lack an Origin header * MFSA 2015-04/CVE-2014-8639 (bmo#1095859) Cookie injection through Proxy Authenticate responses OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=273 --- MozillaThunderbird.changes | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index d5c775d..dea88b3 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -2,6 +2,12 @@ Sat Jan 10 18:33:52 UTC 2015 - wr@rosenauer.org - update to Thunderbird 31.4.0 (bnc#910669) + * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 + Miscellaneous memory safety hazards + * MFSA 2015-03/CVE-2014-8638 (bmo#1080987) + sendBeacon requests lack an Origin header + * MFSA 2015-04/CVE-2014-8639 (bmo#1095859) + Cookie injection through Proxy Authenticate responses - added mozilla-icu-strncat.patch to fix post build checks -------------------------------------------------------------------