SEARCH
NEW RPMS
DIRECTORIES
ABOUT
FAQ
VARIOUS
BLOG

 
 
Changelog for libmozjs-115-0-115.4.0-4.2.x86_64.rpm :

* Thu Apr 04 2024 Dominique Leuenberger - Properly tag patches.
* Thu Dec 07 2023 Yifan Jiang - mozjs115 requires gcc >= 8.1, icu >= 73.1. Specify them in spec.
* Wed Dec 06 2023 Yifan Jiang - Update icu data file name in spec to build in big endian machine.
* Tue Nov 28 2023 Dominique Leuenberger - Use %patch -p N instead of deprecated %patchN.
* Thu Nov 09 2023 Bjørn Lie - Update to version 115.4.0: + Various security fixes and other quality improvements. + CVE-2023-5721: Queued up rendering could have allowed websites to clickjack + CVE-2023-5732: Address bar spoofing via bidirectional characters + CVE-2023-5724: Large WebGL draw could have led to a crash + CVE-2023-5725: WebExtensions could open arbitrary URLs + CVE-2023-5726: Full screen notification obscured by file open dialog on macOS + CVE-2023-5727: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows + CVE-2023-5728: Improper object tracking during GC in the JavaScript engine could have led to a crash + CVE-2023-5730: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1
* Sun Oct 01 2023 Bjørn Lie - Update to version 115.3.1: + Security fix: CVE-2023-5217: Heap buffer overflow in libvpx.- Changes from version 115.3.0: + Various security fixes and other quality improvements. + CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 + CVE-2023-5169: Out-of-bounds write in PathOps + CVE-2023-5171: Use-after-free in Ion Compiler + CVE-2023-5174: Double-free in process spawning on Windows + CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3
* Mon Sep 25 2023 Bjørn Lie - Update to version 115.2.1: + Security fix: CVE-2023-4863: Heap buffer overflow in libwebp.
* Tue Sep 05 2023 Bjørn Lie - Update to version 115.2.0: + Various security fixes and other quality improvements. + CVE-2023-4573: Memory corruption in IPC CanvasTranslator + CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback + CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback + CVE-2023-4576: Integer Overflow in RecordedSourceSurfaceCreation + CVE-2023-4577: Memory corruption in JIT UpdateRegExpStatics + CVE-2023-4051: Full screen notification obscured by file open dialog + CVE-2023-4578: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception + CVE-2023-4053: Full screen notification obscured by external program + CVE-2023-4580: Push notifications saved to disk unencrypted + CVE-2023-4581: XLL file extensions were downloadable without warnings + CVE-2023-4582: Buffer Overflow in WebGL glGetProgramiv + CVE-2023-4583: Browsing Context potentially not cleared when closing Private Window + CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 + CVE-2023-4585: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
* Fri Aug 11 2023 Bjørn Lie - Initial packaging for openSUSE, based on mozjs102.
 
ICM