packages: xulrunner/xulrunner.spec - up to 1.9.2.14 (firefox 3.6.14) fixe...

[glen]

Author: glen                         Date: Wed Mar  2 08:45:48 2011 GMT
Module: packages                      Tag: HEAD
---- Log message:
- up to 1.9.2.14 (firefox 3.6.14)
  fixes CVE-2011-0059, CVE-2011-0061, CVE-2010-1585, CVE-2011-0058,
  CVE-2011-0057, CVE-2011-0056, CVE-2011-0054, CVE-2011-0055, CVE-2011-0051,
  CVE-2011-0053, CVE-2011-0062

---- Files affected:
packages/xulrunner:
   xulrunner.spec (1.168 -> 1.169) 

---- Diffs:

================================================================
Index: packages/xulrunner/xulrunner.spec
diff -u packages/xulrunner/xulrunner.spec:1.168 packages/xulrunner/xulrunner.spec:1.169
--- packages/xulrunner/xulrunner.spec:1.168	Sat Feb 26 08:51:13 2011
+++ packages/xulrunner/xulrunner.spec	Wed Mar  2 09:45:43 2011
@@ -13,9 +13,12 @@
 %undefine	with_gnomevfs
 %endif
 
+# On updating version, grab CVE links from:
+# https://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.14
+
 # convert firefox release number to platform version: 3.6 -> 1.9.2, 3.6.x -> 1.9.2.x
 %define		xulrunner_main	1.9.2
-%define		firefox_ver		3.6.13
+%define		firefox_ver		3.6.14
 %define		xulrunner_ver	%(v=%{firefox_ver}; echo %{xulrunner_main}${v#3.6})
 
 # The actual sqlite version (see RHBZ#480989):
@@ -25,14 +28,14 @@
 Summary(pl.UTF-8):	XULRunner - środowisko uruchomieniowe Mozilli dla aplikacji XUL+XPCOM
 Name:		xulrunner
 Version:	%{xulrunner_ver}
-Release:	2
+Release:	1
 Epoch:		2
 License:	MPL v1.1 or GPL v2+ or LGPL v2.1+
 Group:		X11/Applications
 # Source tarball for xulrunner is in fact firefox tarball (checked on 1.9), so lets use it
 # instead of waiting for mozilla to copy file on ftp.
 Source0:	http://releases.mozilla.org/pub/mozilla.org/firefox/releases/latest-3.6/source/firefox-%{firefox_ver}.source.tar.bz2
-# Source0-md5:	d7c90aed8209beefa74badf02e8eeae1
+# Source0-md5:	ab0d00cd33e6b2388429dda1c01abd01
 Patch0:		%{name}-install.patch
 Patch1:		%{name}-rpath.patch
 Patch2:		%{name}-mozldap.patch
@@ -566,6 +569,12 @@
 All persons listed below can be reached at <cvs_login>@pld-linux.org
 
 $Log$
+Revision 1.169  2011/03/02 08:45:43  glen
+- up to 1.9.2.14 (firefox 3.6.14)
+  fixes CVE-2011-0059, CVE-2011-0061, CVE-2010-1585, CVE-2011-0058,
+  CVE-2011-0057, CVE-2011-0056, CVE-2011-0054, CVE-2011-0055, CVE-2011-0051,
+  CVE-2011-0053, CVE-2011-0062
+
 Revision 1.168  2011/02/26 07:51:13  arekm
 - release 2
 
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/xulrunner/xulrunner.spec?r1=1.168&r2=1.169&f=u