~mozillateam/seamonkey/seamonkey-1.1.dev : changes

~mozillateam/seamonkey/seamonkey-1.1.dev » Changes from revision 161

From Revision 161 to 142

Rev	Summary	Authors	Date
161	(merge) RELEASE 1.1.17+nobinonly-0ubuntu1 to ubuntu/karmic (merge) RELEASE 1.1.17+nobinonly-0ubuntu1 to ubuntu/karmic * New upstream security release: 1.1.17 (LP: #356274) - CVE-2009-1841: JavaScript chrome privilege escalation - CVE-2009-1838: Arbitrary code execution using event listeners attached to an element whose owner document is null - CVE-2009-1836: SSL tampering via non-200 responses to proxy CONNECT requests - CVE-2009-1835: Arbitrary domain cookie access by local file: resources - CVE-2009-1392, CVE-2009-1832, CVE-2009-1833: Crashes with evidence of memory corruption (rv:1.9.0.11) - CVE-2009-1311: POST data sent to wrong site when saving web page with embedded frame - CVE-2009-1307: Same-origin violations when Adobe Flash loaded via view-source: scheme - MFSA 2009-33 Crash viewing multipart/alternative message with text/enhanced part * removed debian/patches/90_181_484320_attachment_368977.patch * removed debian/patches/90_181_485217_attachment_369357.patch * removed debian/patches/90_181_485286_attachment_369457.patch - update debian/patches/series	Alexander Sack	2009-07-26
160	RELEASE 1.1.15+nobinonly-0ubuntu2 to ubuntu/jaunty with secu... RELEASE 1.1.15+nobinonly-0ubuntu2 to ubuntu/jaunty with security fixes * CVE-2009-1044: Arbitrary code execution via XUL tree element - add debian/patches/90_181_484320_attachment_368977.patch - update debian/patches/series * CVE-2009-1169: XSL Transformation vulnerability - add 90_181_485217_attachment_369357.patch - add debian/patches/90_181_485286_attachment_369457.patch	Alexander Sack	2009-03-31
159	(merge) RELEASE 1.1.15+nobinonly-0ubuntu1 to ubuntu/jaunty (merge) RELEASE 1.1.15+nobinonly-0ubuntu1 to ubuntu/jaunty * New security upstream release: 1.1.15 (LP: #309655) - CVE-2009-0040: Upgrade PNG library to fix memory safety hazard - CVE-2009-0352: Crashes with evidence of memory corruption (rv:1.9.0.6) - CVE-2009-0357: XMLHttpRequest allows reading HTTPOnly cookies - CVE-2009-0771: Crashes with evidence of memory corruption (rv:1.9.0.7) - CVE-2009-0776: XML data theft via RDFXMLDataSource and cross-domain redirect * New security upstream release: 1.1.14 (LP: #309655) - CVE-2008-5511: XSS and JavaScript privilege escalation - CVE-2008-5510: Escaped null characters ignored by CSS parser - CVE-2008-5508: Errors parsing URLs with leading whitespace and controlcharacters - CVE-2008-5507: Cross-domain data theft via script redirect error message - CVE-2008-5506: XMLHttpRequest 302 response disclosure - CVE-2008-5503: Information stealing via loadBindingDocument - CVE-2008-5501..5500: Crashes with evidence of memory corruption (rv:1.9.0.5/1.8.1.19)	Alexander Sack	2009-03-31
158	* new security upstream release: 1.1.14 * new security upstream release: 1.1.14 - CVE-... * drop patches applied upstream - delete debian/patches/35_zip_cache.patch - update debian/patches/series	Alexander Sack	2009-02-10
157	* RELEASE 1.1.13+nobinonly-0ubuntu1 to ubuntu/jaunty * RELEASE 1.1.13+nobinonly-0ubuntu1 to ubuntu/jaunty	Alexander Sack	2008-11-26
156	* re-run autoconf2.13 to update configure patch to changed u... * re-run autoconf2.13 to update configure patch to changed upstream codebase - update debian/patches/99_configure.patch	Alexander Sack	2008-11-26
155	* New security upstream release: 1.1.13 (LP: #297789) * New security upstream release: 1.1.13 (LP: #297789) - CVE-2008-4582: Information stealing via local shortcut files - CVE-2008-5012: Image stealing via canvas and HTTP redirect - CVE-2008-5013: Arbitrary code execution via Flash Player dynamic module unloading - CVE-2008-5014: Crash and remote code execution via __proto__ tampering - CVE-2008-5017: Browser engine crash - Firefox 2 and 3 - CVE-2008-5018: JavaScript engine crashes - Firefox 2 and 3 - CVE-2008-5019: XSS and JavaScript privilege escalation via session restore - CVE-2008-0017: Buffer overflow in http-index-format parser - CVE-2008-5021: Crash and remote code execution in nsFrameManager - CVE-2008-5022: nsXMLHttpRequest::NotifyEventListeners() same-origin violation - CVE-2008-5023: -moz-binding property bypasses security checks on codebase principals - CVE-2008-5024: Parsing error in E4X default namespace - CVE-NOTASSIGN (MFSA2008-59): Script access to .documentURI and .textContent in mail	Alexander Sack	2008-11-26
154	* RELEASE 1.1.12+nobinonly-0ubuntu1 to ubuntu/intrepid * RELEASE 1.1.12+nobinonly-0ubuntu1 to ubuntu/intrepid	Fabien Tassin	2008-09-30
153	* New security upstream release: 1.1.12 (LP: #276437) * New security upstream release: 1.1.12 (LP: #276437)	Fabien Tassin	2008-09-30
152	* RELEASE 1.1.11+nobinonly-0ubuntu1 to ubuntu/intrepid * RELEASE 1.1.11+nobinonly-0ubuntu1 to ubuntu/intrepid	Fabien Tassin	2008-07-30
151	* Update list of USN for this security release * Update list of USN for this security release	Fabien Tassin	2008-07-30
150	* Document last few commits * Document last few commits - update debian/changelog	Fabien Tassin	2008-07-29
149	* Fix FTBFS with missing -lfontconfig * Fix FTBFS with missing -lfontconfig - add debian/patches/11_fix_ftbfs_with_fontconfig.patch - update debian/patches/series	Fabien Tassin	2008-07-29
148	* Refresh diverged patch: * Refresh diverged patch: - update debian/patches/80_security_build.patch	Fabien Tassin	2008-07-29
147	* workaround multiple crashes in Intrepid (at least 3 in rea... * workaround multiple crashes in Intrepid (at least 3 in realpath()) caused by Intrepid shipping gcc 4.3 with -D_FORTIFY_SOURCE=2 by default - update debian/rules	Fabien Tassin	2008-07-29
146	* Build with default gcc (hardy: 4.2, intrepid: 4.3) * Build with default gcc (hardy: 4.2, intrepid: 4.3) - update debian/rules - update debian/control	Fabien Tassin	2008-05-02
145	* RELEASE 1.1.9+nobinonly-0ubuntu1 to hardy * RELEASE 1.1.9+nobinonly-0ubuntu1 to hardy	Fabien Tassin	2008-03-27
144	* Add sponsor bug to changelog * Add sponsor bug to changelog - update debian/changelog	Fabien Tassin	2008-03-27
143	* Update previous changelog for missing MFSA 2008-08/13, jus... * Update previous changelog for missing MFSA 2008-08/13, just to clarify - update debian/changelog	Fabien Tassin	2008-03-26
142	* Add missing Ubuntu-specific menu items (LP: #190845) * Add missing Ubuntu-specific menu items (LP: #190845) - add debian/patches/85_ubuntu_menu.patch - update debian/patches/series Contributed by Andrea Colangelo <warp10@libero.it>	Fabien Tassin	2008-03-26

Older »