SHA256
1
0
forked from pool/mozjs102
mozjs102/mozjs102.changes

40 lines
1.6 KiB
Plaintext
Raw Normal View History

-------------------------------------------------------------------
Tue Oct 18 14:14:17 UTC 2022 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 102.4.0:
+ Various stability, functionality, and security fixes.
+ CVE-2022-42927: Same-origin policy violation could have leaked
cross-origin URLs.
+ CVE-2022-42928: Memory Corruption in JS Engine.
+ CVE-2022-42929: Denial of Service via window.print.
+ CVE-2022-42932: Memory safety bugs fixed in Firefox 106 and
Firefox ESR 102.4.
-------------------------------------------------------------------
Tue Sep 27 14:13:15 UTC 2022 - Fabian Vogt <fvogt@suse.com>
- Adjust name of ICU data file to fix build on big-endian platforms
-------------------------------------------------------------------
Tue Sep 20 07:41:19 UTC 2022 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 102.3.0:
+ Various stability, functionality, and security fixes.
+ CVE-2022-3266: Out of bounds read when decoding H264.
+ CVE-2022-40959: Bypassing FeaturePolicy restrictions on
transient pages.
+ CVE-2022-40960: Data-race when parsing non-UTF-8 URLs in
threads.
+ CVE-2022-40958: Bypassing Secure Context restriction for
cookies with __Host and __Secure prefix.
+ CVE-2022-40956: Content-Security-Policy base-uri bypass.
+ CVE-2022-40957: Incoherent instruction cache when building WASM
on ARM64.
+ CVE-2022-40962: Memory safety bugs fixed in Firefox 105 and
Firefox ESR 102.3.
-------------------------------------------------------------------
Fri Aug 26 18:08:37 UTC 2022 - Bjørn Lie <bjorn.lie@gmail.com>
- Initial packaging for openSUSE.