Hello community, here is the log from the commit of package xulrunner for openSUSE:Factory checked in at 2013-06-26 20:25:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xulrunner (Old) and /work/SRC/openSUSE:Factory/.xulrunner.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xulrunner" Changes: -------- --- /work/SRC/openSUSE:Factory/xulrunner/xulrunner.changes 2013-06-13 22:55:20.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.xulrunner.new/xulrunner.changes 2013-06-26 20:25:35.000000000 +0200 @@ -1,0 +2,22 @@ +Mon Jun 24 15:26:27 UTC 2013 - [email protected] + +- update to 17.0.7esr (bnc#825935) + * MFSA 2013-49/CVE-2013-1682 + Miscellaneous memory safety hazards + * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 + Memory corruption found using Address Sanitizer + * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823) + Privileged content access and execution via XBL + * MFSA 2013-53/CVE-2013-1690 (bmo#857883) + Execution of unmapped memory through onreadystatechange event + * MFSA 2013-54/CVE-2013-1692 (bmo#866915) + Data in the body of XHR HEAD requests leads to CSRF attacks + * MFSA 2013-55/CVE-2013-1693 (bmo#711043) + SVG filters can lead to information disclosure + * MFSA 2013-56/CVE-2013-1694 (bmo#848535) + PreserveWrapper has inconsistent behavior + * MFSA 2013-59/CVE-2013-1697 (bmo#858101) + XrayWrappers can be bypassed to run user defined methods in a + privileged context + +------------------------------------------------------------------- Old: ---- l10n-17.0.6.tar.bz2 xulrunner-17.0.6-source.tar.bz2 New: ---- l10n-17.0.7.tar.bz2 xulrunner-17.0.7-source.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xulrunner.spec ++++++ --- /var/tmp/diff_new_pack.zxsE5Y/_old 2013-06-26 20:25:40.000000000 +0200 +++ /var/tmp/diff_new_pack.zxsE5Y/_new 2013-06-26 20:25:40.000000000 +0200 @@ -44,12 +44,12 @@ %endif BuildRequires: mozilla-nspr-devel >= 4.9.5 BuildRequires: mozilla-nss-devel >= 3.14.3 -Version: 17.0.6 +Version: 17.0.7 Release: 0 -%define releasedate 2013051000 -%define version_internal 17.0.6 +%define releasedate 2013062000 +%define version_internal 17.0.7 %define apiversion 17 -%define uaweight 1700006 +%define uaweight 1700007 Summary: Mozilla Runtime Environment License: MPL-2.0 Group: Productivity/Other ++++++ compare-locales.tar.bz2 ++++++ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.zxsE5Y/_old 2013-06-26 20:25:40.000000000 +0200 +++ /var/tmp/diff_new_pack.zxsE5Y/_new 2013-06-26 20:25:40.000000000 +0200 @@ -2,8 +2,8 @@ CHANNEL="esr17" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_17_0_6esr_RELEASE" -VERSION="17.0.6" +RELEASE_TAG="FIREFOX_17_0_7esr_RELEASE" +VERSION="17.0.7" # mozilla echo "cloning $BRANCH..." ++++++ l10n-17.0.6.tar.bz2 -> l10n-17.0.7.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/xulrunner/l10n-17.0.6.tar.bz2 /work/SRC/openSUSE:Factory/.xulrunner.new/l10n-17.0.7.tar.bz2 differ: char 11, line 1 ++++++ source-stamp.txt ++++++ --- /var/tmp/diff_new_pack.zxsE5Y/_old 2013-06-26 20:25:40.000000000 +0200 +++ /var/tmp/diff_new_pack.zxsE5Y/_new 2013-06-26 20:25:40.000000000 +0200 @@ -1,2 +1,2 @@ -REV=876e9d2c7721 +REV=5ec62d38e162 REPO=http://hg.mozilla.org/releases/mozilla-esr17 ++++++ xulrunner-17.0.6-source.tar.bz2 -> xulrunner-17.0.7-source.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/xulrunner/xulrunner-17.0.6-source.tar.bz2 /work/SRC/openSUSE:Factory/.xulrunner.new/xulrunner-17.0.7-source.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
