Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mozjs102 for openSUSE:Factory checked in at 2023-03-15 18:53:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mozjs102 (Old) and /work/SRC/openSUSE:Factory/.mozjs102.new.31432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mozjs102" Wed Mar 15 18:53:55 2023 rev:9 rq:1071841 version:102.9.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mozjs102/mozjs102.changes 2023-02-16 16:55:17.202563323 +0100 +++ /work/SRC/openSUSE:Factory/.mozjs102.new.31432/mozjs102.changes 2023-03-15 18:54:10.204275643 +0100 @@ -1,0 +2,17 @@ +Tue Mar 14 14:32:18 UTC 2023 - Bjørn Lie <bjorn....@gmail.com> + +- Update to version 102.9.0: + + Various security fixes. + + CVE-2023-25751: Incorrect code generation during JIT + compilation. + + CVE-2023-28164: URL being dragged from a removed cross-origin + iframe into the same tab triggered navigation. + + CVE-2023-28162: Invalid downcast in Worklets. + + CVE-2023-25752: Potential out-of-bounds when accessing + throttled streams. + + CVE-2023-28163: Windows Save As dialog resolved environment + variables. + + CVE-2023-28176: Memory safety bugs fixed in Firefox 111 and + Firefox ESR 102.9. + +------------------------------------------------------------------- Old: ---- firefox-102.8.0esr.source.tar.xz firefox-102.8.0esr.source.tar.xz.asc New: ---- firefox-102.9.0esr.source.tar.xz firefox-102.9.0esr.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mozjs102.spec ++++++ --- /var/tmp/diff_new_pack.bga12A/_old 2023-03-15 18:54:15.764305219 +0100 +++ /var/tmp/diff_new_pack.bga12A/_new 2023-03-15 18:54:15.768305240 +0100 @@ -39,7 +39,7 @@ %global big_endian 1 %endif Name: mozjs%{major} -Version: 102.8.0 +Version: 102.9.0 Release: 1%{?dist} Summary: SpiderMonkey JavaScript library License: MPL-2.0 ++++++ firefox-102.8.0esr.source.tar.xz -> firefox-102.9.0esr.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/mozjs102/firefox-102.8.0esr.source.tar.xz /work/SRC/openSUSE:Factory/.mozjs102.new.31432/firefox-102.9.0esr.source.tar.xz differ: char 15, line 1