Hello community, here is the log from the commit of package xulrunner for openSUSE:Factory checked in at 2015-12-21 12:05:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xulrunner (Old) and /work/SRC/openSUSE:Factory/.xulrunner.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xulrunner" Changes: -------- --- /work/SRC/openSUSE:Factory/xulrunner/xulrunner.changes 2015-11-08 14:36:05.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.xulrunner.new/xulrunner.changes 2015-12-21 12:05:20.000000000 +0100 @@ -1,0 +2,21 @@ +Sat Dec 12 12:51:46 UTC 2015 - [email protected] + +- update to xulrunner 38.5.0 (bnc#959277) + * MFSA 2015-134/CVE-2015-7201 + Miscellaneous memory safety hazards + * MFSA 2015-138/CVE-2015-7210 (bmo#1218326) + Use-after-free in WebRTC when datachannel is used after being + destroyed + * MFSA 2015-139/CVE-2015-7212 (bmo#1222809) + Integer overflow allocating extremely large textures + * MFSA 2015-145/CVE-2015-7205 (bmo#1220493) + Underflow through code inspection + * MFSA 2015-146/CVE-2015-7213 (bmo#1206211) + Integer overflow in MP4 playback in 64-bit versions + * MFSA 2015-147/CVE-2015-7222 (bmo#1216748) + Integer underflow and buffer overflow processing MP4 metadata in + libstagefright + * MFSA 2015-149/CVE-2015-7214 (bmo#1228950) + Cross-site reading attack through data and view-source URIs + +------------------------------------------------------------------- Old: ---- l10n-38.4.0.tar.xz xulrunner-38.4.0-source.tar.xz New: ---- l10n-38.5.0.tar.xz xulrunner-38.5.0-source.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xulrunner.spec ++++++ --- /var/tmp/diff_new_pack.d2oXk6/_old 2015-12-21 12:05:31.000000000 +0100 +++ /var/tmp/diff_new_pack.d2oXk6/_new 2015-12-21 12:05:31.000000000 +0100 @@ -17,10 +17,10 @@ # -%define version_internal 38.4.0 +%define version_internal 38.5.0 %define apiversion 38 -%define uaweight 3840000 -%define releasedate 2015102700 +%define uaweight 3850000 +%define releasedate 2015121000 %define shared_js 0 %define has_system_nspr 1 %define has_system_nss 1 ++++++ compare-locales.tar.xz ++++++ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.d2oXk6/_old 2015-12-21 12:05:31.000000000 +0100 +++ /var/tmp/diff_new_pack.d2oXk6/_new 2015-12-21 12:05:31.000000000 +0100 @@ -2,8 +2,8 @@ CHANNEL="esr38" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_38_4_0esr_RELEASE" -VERSION="38.4.0" +RELEASE_TAG="FIREFOX_38_5_0esr_RELEASE" +VERSION="38.5.0" # mozilla if [ -d mozilla ]; then ++++++ l10n-38.4.0.tar.xz -> l10n-38.5.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/xulrunner/l10n-38.4.0.tar.xz /work/SRC/openSUSE:Factory/.xulrunner.new/l10n-38.5.0.tar.xz differ: char 26, line 1 ++++++ source-stamp.txt ++++++ --- /var/tmp/diff_new_pack.d2oXk6/_old 2015-12-21 12:05:31.000000000 +0100 +++ /var/tmp/diff_new_pack.d2oXk6/_new 2015-12-21 12:05:31.000000000 +0100 @@ -1,2 +1,2 @@ -REV=6afcba951b0f +REV=033aa21860a4 REPO=http://hg.mozilla.org/releases/mozilla-esr38 ++++++ xulrunner-38.4.0-source.tar.xz -> xulrunner-38.5.0-source.tar.xz ++++++ /work/SRC/openSUSE:Factory/xulrunner/xulrunner-38.4.0-source.tar.xz /work/SRC/openSUSE:Factory/.xulrunner.new/xulrunner-38.5.0-source.tar.xz differ: char 26, line 1
