Changelog for
seamonkey-psm-1.1.4-alt1.i586.rpm :
Sat Aug 4 08:00:00 2007 Damir Shayhutdinov
1:1.1.4-alt1
- 1.1.4 security update
+ MFSA 2007-27 Unescaped URIs passed to external programs
+ MFSA 2007-26 Privilege escalation through chrome-loaded about:blank windows
+ MFSA 2007-23 Remote code execution by launching SeaMonkey from Internet Explorer
- During postun, call rebuild-databases.sh only if it exists
Wed Aug 1 08:00:00 2007 Damir Shayhutdinov 1:1.1.3-alt1
- 1.1.3 security update
+ MFSA 2007-25 XPCNativeWrapper pollution
+ MFSA 2007-24 Unauthorized access to wyciwyg:// documents
+ MFSA 2007-22 File type confusion due to %00 in name
+ MFSA 2007-21 Privilege escalation using an event handler attached to an element not in the document
+ MFSA 2007-20 Frame spoofing while window is loading
+ MFSA 2007-19 XSS using addEventListener and setTimeout
+ MFSA 2007-18 Crashes with evidence of memory corruption (rv:1.8.1.5)
- All subpackages with postun sections require seamonkey package during postun (#12002)
Thu May 31 08:00:00 2007 Damir Shayhutdinov 1:1.1.2-alt1
- 1.1.2 security update
+ MFSA 2007-17 XUL Popup Spoofing
+ MFSA 2007-16 XSS using addEventListener
+ MFSA 2007-15 Security Vulnerability in APOP Authentication
+ MFSA 2007-14 Path Abuse in Cookies
+ MFSA 2007-12 Crashes with evidence of memory corruption (rv:1.8.0.12/1.8.1.4)
Tue Mar 13 07:00:00 2007 Damir Shayhutdinov 1:1.1.1-alt1.1
- Built with new libnspr
- Cool version with six 1\'s: 1:1.1.1-alt1.1 :)
Wed Feb 28 07:00:00 2007 Damir Shayhutdinov 1:1.1.1-alt1
- New upstream release (1.1.1)
- Following critical security vulnerabilities were fixed:
+ MFSA 2007-08 onUnload + document.write() memory corruption
+ MFSA 2007-07 Embedded nulls in location.hostname confuse same-domain checks
+ MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow
+ MFSA 2007-05 XSS and local file access by opening blocked popups
+ MFSA 2007-04 Spoofing using custom cursor and CSS3 hotspot
+ MFSA 2007-03 Information disclosure through cache collisions
+ MFSA 2007-02 Improvements to help protect against Cross-Site Scripting attacks
+ MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2)
- The tab-preview tooltips no longer show a preview for the active tab.
Thu Jan 18 07:00:00 2007 Damir Shayhutdinov 1:1.1-alt1
- New upstream release (1.1)
- seamonkey-caledar subpackage removed by upstream.
Fri Dec 29 07:00:00 2006 Damir Shayhutdinov 1:1.0.7-alt2
- Added dependancy for seamonkey-psm (#2316)
Wed Dec 20 07:00:00 2006 Damir Shayhutdinov 1:1.0.7-alt1
- New upstream release (1.0.7)
- Following critical security vulnerabilities were fixed:
+ MFSA 2006-75 RSS Feed-preview referrer leak
+ MFSA 2006-74 Mail header processing heap overflows
+ MFSA 2006-73 Mozilla SVG Processing Remote Code Execution
+ MFSA 2006-72 XSS by setting img.src to javascript: URI
+ MFSA 2006-71 LiveConnect crash finalizing JS objects
+ MFSA 2006-70 Privilege escallation using watch point
+ MFSA 2006-69 CSS cursor image buffer overflow (Windows only)
+ MFSA 2006-68 Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1)
Wed Nov 15 07:00:00 2006 Damir Shayhutdinov 1:1.0.6-alt2
- Removed -fstack-protector and -D_FORTIFY_SOURCE=2 from optflags
- Moved \"enigmail\" upper as suggested by Dmitry Katsubo
- Packed seamonkey-xremote-client (fixes #10299)
- Moved macros to rpm-build-seamonkey package.
- seamonkey-devel now requires rpm-build-seamonkey package to preserve backward compatibility.
Mon Nov 13 07:00:00 2006 Damir Shayhutdinov 1:1.0.6-alt1
- New upstream release (1.0.6)
- Following critical security vulnerabilities were fixed:
+ MFSA 2006-67 Running Script can be recompiled
+ MFSA 2006-66 RSA signature forgery (variant)
+ MFSA 2006-65 Crashes with evidence of memory corruption (rv:1.8.0.8)
Fri Oct 20 08:00:00 2006 Damir Shayhutdinov 1:1.0.5-alt3
- Removed libssp-devel from BuildReqs
Sun Oct 8 08:00:00 2006 Damir Shayhutdinov 1:1.0.5-alt2
- Updated enigmail to 0.94.1
- Changed libdir in seamonkey-*.pc to /usr/lib/mozilla
Sat Sep 16 08:00:00 2006 Damir Shayhutdinov 1:1.0.5-alt1
- 1.0.5 version.
Sun Aug 27 08:00:00 2006 Damir Shayhutdinov 1:1.0.4-alt5
- Marked installed-chrome.txt as a config file, this should save language
and skin selection after an upgrade.
- Corrected seamonkey-mail desktop file.
- Enabled extensions building.
Fri Aug 18 08:00:00 2006 Damir Shayhutdinov 1:1.0.4-alt4
- Provides: mozilla = 1.8
- Built with system mozldap
Wed Aug 16 08:00:00 2006 Damir Shayhutdinov 1:1.0.4-alt3
- Added searching plugins in %browser_plugins_path
- Fixed pkgconfig and seamonkey-config (replaced /usr/lib/seamonkey-1.0.4 with /usr/lib)
- Fixed #4352
Thu Aug 10 08:00:00 2006 Damir Shayhutdinov 1:1.0.4-alt2
- Disabled link prefetching by default to be more traffic friendly
- Added Provides and Obsoletes: mozilla-*
- Move all from /usr/lib/seamonkey to /usr/lib/mozilla
Sun Aug 6 08:00:00 2006 Damir Shayhutdinov 1.0.4-alt1
- 1.0.4
- more spec cleanup as suggested by php-coderAATT
Tue Jul 4 08:00:00 2006 Damir Shayhutdinov 1.0.3-alt1
- first build for Sisyphus
- based on cleaned up mozilla.spec