Hello community, here is the log from the commit of package MozillaFirefox for openSUSE:Factory checked in at 2017-06-20 10:57:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaFirefox (Old) and /work/SRC/openSUSE:Factory/.MozillaFirefox.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaFirefox" Tue Jun 20 10:57:52 2017 rev:255 rq:503675 version:52.2 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaFirefox/MozillaFirefox.changes 2017-05-27 13:09:56.346979887 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaFirefox.new/MozillaFirefox.changes 2017-06-20 10:57:54.452589765 +0200 @@ -1,0 +2,55 @@ +Wed Jun 14 07:08:29 UTC 2017 - [email protected] + +- update to Firefox 52.2esr (boo#1043960) + MFSA 2017-16 + * CVE-2017-5472 (bmo#1365602) + Use-after-free using destroyed node when regenerating trees + * CVE-2017-7749 (bmo#1355039) + Use-after-free during docshell reloading + * CVE-2017-7750 (bmo#1356558) + Use-after-free with track elements + * CVE-2017-7751 (bmo#1363396) + Use-after-free with content viewer listeners + * CVE-2017-7752 (bmo#1359547) + Use-after-free with IME input + * CVE-2017-7754 (bmo#1357090) + Out-of-bounds read in WebGL with ImageInfo object + * CVE-2017-7755 (bmo#1361326) + Privilege escalation through Firefox Installer with same + directory DLL files (Windows only) + * CVE-2017-7756 (bmo#1366595) + Use-after-free and use-after-scope logging XHR header errors + * CVE-2017-7757 (bmo#1356824) + Use-after-free in IndexedDB + * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772, + CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776, + CVE-2017-7777 + Vulnerabilities in the Graphite 2 library + * CVE-2017-7758 (bmo#1368490) + Out-of-bounds read in Opus encoder + * CVE-2017-7760 (bmo#1348645) + File manipulation and privilege escalation via callback parameter + in Mozilla Windows Updater and Maintenance Service (Windows only) + * CVE-2017-7761 (bmo#1215648) + File deletion and privilege escalation through Mozilla Maintenance + Service helper.exe application (Windows only) + * CVE-2017-7764 (bmo#1364283) + Domain spoofing with combination of Canadian Syllabics and other + unicode blocks + * CVE-2017-7765 (bmo#1273265) + Mark of the Web bypass when saving executable files (Windows only) + * CVE-2017-7766 (bmo#1342742) + File execution and privilege escalation through updater.ini, + Mozilla Windows Updater, and Mozilla Maintenance Service + (Windows only) + * CVE-2017-7767 (bmo#1336964) + Privilege escalation and arbitrary file overwrites through Mozilla + Windows Updater and Mozilla Maintenance Service (Windows only) + * CVE-2017-7768 (bmo#1336979) + 32 byte arbitrary file read through Mozilla Maintenance Service + (Windows only) + * CVE-2017-5470 + Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2 +- requires NSS 3.28.5 + +------------------------------------------------------------------- Old: ---- firefox-52.1.1-source.tar.xz l10n-52.1.1.tar.xz New: ---- firefox-52.2-source.tar.xz l10n-52.2.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaFirefox.spec ++++++ --- /var/tmp/diff_new_pack.ggjwjR/_old 2017-06-20 10:59:15.689139101 +0200 +++ /var/tmp/diff_new_pack.ggjwjR/_new 2017-06-20 10:59:15.693138537 +0200 @@ -19,9 +19,9 @@ # changed with every update %define major 52 -%define mainver %major.1.1 +%define mainver %major.2 %define update_channel esr52 -%define releasedate 20170504000000 +%define releasedate 20170612000000 # PIE, full relro (x86_64 for now) %define build_hardened 1 @@ -82,7 +82,7 @@ BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.13.1 -BuildRequires: mozilla-nss-devel >= 3.28.4 +BuildRequires: mozilla-nss-devel >= 3.28.5 BuildRequires: nss-shared-helper-devel BuildRequires: python-devel BuildRequires: startup-notification-devel ++++++ compare-locales.tar.xz ++++++ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.ggjwjR/_old 2017-06-20 10:59:15.921106404 +0200 +++ /var/tmp/diff_new_pack.ggjwjR/_new 2017-06-20 10:59:15.925105840 +0200 @@ -7,8 +7,8 @@ CHANNEL="esr52" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_52_1_1esr_RELEASE" -VERSION="52.1.1" +RELEASE_TAG="FIREFOX_52_2_0esr_RELEASE" +VERSION="52.2" # mozilla if [ -d mozilla ]; then ++++++ firefox-52.1.1-source.tar.xz -> firefox-52.2-source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaFirefox/firefox-52.1.1-source.tar.xz /work/SRC/openSUSE:Factory/.MozillaFirefox.new/firefox-52.2-source.tar.xz differ: char 26, line 1 ++++++ l10n-52.1.1.tar.xz -> l10n-52.2.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaFirefox/l10n-52.1.1.tar.xz /work/SRC/openSUSE:Factory/.MozillaFirefox.new/l10n-52.2.tar.xz differ: char 26, line 1 ++++++ source-stamp.txt ++++++ --- /var/tmp/diff_new_pack.ggjwjR/_old 2017-06-20 10:59:16.193068069 +0200 +++ /var/tmp/diff_new_pack.ggjwjR/_new 2017-06-20 10:59:16.197067506 +0200 @@ -1,2 +1,2 @@ -REV=120111e65bc4 +REV=f68e0d98a22a REPO=http://hg.mozilla.org/releases/mozilla-esr52
