Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mozjs102 for openSUSE:Factory checked in at 2023-09-06 18:56:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mozjs102 (Old) and /work/SRC/openSUSE:Factory/.mozjs102.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mozjs102" Wed Sep 6 18:56:05 2023 rev:15 rq:1109057 version:102.15.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mozjs102/mozjs102.changes 2023-08-15 16:39:44.162876491 +0200 +++ /work/SRC/openSUSE:Factory/.mozjs102.new.1766/mozjs102.changes 2023-09-06 18:57:23.797854775 +0200 @@ -1,0 +2,17 @@ +Tue Sep 5 09:46:01 UTC 2023 - Bjørn Lie <[email protected]> + +- Update to version 102.15.0: + + Various security fixes and other quality improvements. + + CVE-2023-4573: Memory corruption in IPC CanvasTranslator + + CVE-2023-4574: Memory corruption in IPC + ColorPickerShownCallback + + CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback + + CVE-2023-4576: Integer Overflow in + RecordedSourceSurfaceCreation + + CVE-2023-4581: XLL file extensions were downloadable without + warnings + + CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox + ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and + Thunderbird 115.2 + +------------------------------------------------------------------- Old: ---- firefox-102.14.0esr.source.tar.xz firefox-102.14.0esr.source.tar.xz.asc New: ---- firefox-102.15.0esr.source.tar.xz firefox-102.15.0esr.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mozjs102.spec ++++++ --- /var/tmp/diff_new_pack.OYU9ZP/_old 2023-09-06 18:57:30.346088206 +0200 +++ /var/tmp/diff_new_pack.OYU9ZP/_new 2023-09-06 18:57:30.350088349 +0200 @@ -41,7 +41,7 @@ %global big_endian 1 %endif Name: mozjs%{major} -Version: 102.14.0 +Version: 102.15.0 Release: 1%{?dist} Summary: SpiderMonkey JavaScript library License: MPL-2.0 ++++++ firefox-102.14.0esr.source.tar.xz -> firefox-102.15.0esr.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/mozjs102/firefox-102.14.0esr.source.tar.xz /work/SRC/openSUSE:Factory/.mozjs102.new.1766/firefox-102.15.0esr.source.tar.xz differ: char 15, line 1
