Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:11.4 checked in at Tue Jun 28 01:08:49 CEST 2011.
-------- --- old-versions/11.4/UPDATES/all/MozillaThunderbird/MozillaThunderbird.changes 2011-04-29 07:52:48.000000000 +0200 +++ 11.4/MozillaThunderbird/MozillaThunderbird.changes 2011-06-21 18:47:11.000000000 +0200 @@ -1,0 +2,23 @@ +Mon Jun 20 09:36:22 UTC 2011 - [email protected] + +- security update to version 3.1.11 (bnc#701296) + * MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 + CVE-2011-2365 + Miscellaneous memory safety hazards + * MFSA 2011-20/CVE-2011-2373 (bmo#617247) + Use-after-free vulnerability when viewing XUL document with + script disabled + * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303) + Memory corruption due to multipart/x-mixed-replace images + * MFSA 2011-22/CVE-2011-2371 (bmo#664009) + Integer overflow and arbitrary code execution in + Array.reduceRight() + * MFSA 2011-23/CVE-2011-0083 CVE-2011-0085 CVE-2011-2363 + Multiple dangling pointer vulnerabilities + * MFSA 2011-24/CVE-2011-2362 (bmo#616264) + Cookie isolation error +- speed up find-external-requires.sh +- do not build dump_syms static as it is not needed for us + -> fixes build for 12.1 and above + +------------------------------------------------------------------- calling whatdependson for 11.4-i586 Old: ---- l10n-3.1.10.tar.bz2 thunderbird-3.1.10-source.tar.bz2 New: ---- l10n-3.1.11.tar.bz2 mozilla-dump_syms-static.patch thunderbird-3.1.11-source.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.J7iqWL/_old 2011-06-28 01:08:33.000000000 +0200 +++ /var/tmp/diff_new_pack.J7iqWL/_new 2011-06-28 01:08:33.000000000 +0200 @@ -26,10 +26,10 @@ BuildRequires: nss-shared-helper-devel %endif License: MPLv1.1 or GPLv2+ or LGPLv2+ -%define mainversion 3.1.10 +%define mainversion 3.1.11 Version: %{mainversion} Release: 0.<RELEASE2> -%define releasedate 2011041400 +%define releasedate 2011061600 Provides: thunderbird = %{version} Summary: The Stand-Alone Mozilla Mail Component Url: http://www.mozilla.org/products/thunderbird/ @@ -45,6 +45,7 @@ Source8: MozillaThunderbird-rpmlintrc Source9: enigmail-1.1.2.tar.bz2 Source10: create-tar.sh +Patch1: mozilla-dump_syms-static.patch Patch2: thunderbird-appname.patch Patch4: tb-ssldap.patch Patch5: tb-develdirs.patch @@ -140,7 +141,7 @@ %package -n enigmail Version: 1.1.2 -Release: 9.<RELEASE5> +Release: 9.<RELEASE7> License: MPLv1.1 or GPLv2+ Summary: OpenPGP addon for Thunderbird and SeaMonkey Group: Productivity/Networking/Email/Clients @@ -164,6 +165,7 @@ %endif # xulrunner patches pushd mozilla +%patch1 -p1 %patch9 -p1 %patch10 -p1 %patch13 -p1 ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.J7iqWL/_old 2011-06-28 01:08:33.000000000 +0200 +++ /var/tmp/diff_new_pack.J7iqWL/_new 2011-06-28 01:08:33.000000000 +0200 @@ -2,8 +2,8 @@ BRANCH="releases/comm-1.9.2" # comm-central -RELEASE_TAG="THUNDERBIRD_3_1_10_RELEASE" -VERSION="3.1.10" +RELEASE_TAG="THUNDERBIRD_3_1_11_RELEASE" +VERSION="3.1.11" echo "cloning $BRANCH..." hg clone http://hg.mozilla.org/$BRANCH thunderbird ++++++ find-external-requires.sh ++++++ --- /var/tmp/diff_new_pack.J7iqWL/_old 2011-06-28 01:08:33.000000000 +0200 +++ /var/tmp/diff_new_pack.J7iqWL/_new 2011-06-28 01:08:33.000000000 +0200 @@ -1,23 +1,9 @@ #!/bin/sh - # Finds requirements provided outside of the current file set -filelist=`sed "s/[]['\"*?{}]/\\\\\&/g"` - -provides=`echo "$filelist" | /usr/lib/rpm/find-provides` - -{ -for f in $filelist ; do - echo $f | /usr/lib/rpm/find-requires | while read req ; do - found=0 - for p in $provides ; do - if [ "$req" = "$p" ]; then - found=1 - fi - done - if [ "$found" = "0" ]; then - echo $req - fi - done -done -} | sort -u +filelist=$( sed "s/[]['\"*?{}]/\\\\\&/g" ) +provides=$( echo "$filelist" | /usr/lib/rpm/find-provides ) +echo "$filelist" \ + | /usr/lib/rpm/find-requires \ + | grep -F -v "$provides" \ + | sort -u ++++++ l10n-3.1.10.tar.bz2 -> l10n-3.1.11.tar.bz2 ++++++ old-versions/11.4/UPDATES/all/MozillaThunderbird/l10n-3.1.10.tar.bz2 11.4/MozillaThunderbird/l10n-3.1.11.tar.bz2 differ: char 11, line 1 ++++++ mozilla-dump_syms-static.patch ++++++ # HG changeset patch # Parent e589abb2c4d6aaa6083d254416211ac90360dbdd NO-BUG: Ignore a hack which is not needed in distribution build environments. diff --git a/toolkit/crashreporter/google-breakpad/src/tools/linux/dump_syms/Makefile.in b/toolkit/crashreporter/google-breakpad/src/tools/linux/dump_syms/Makefile.in --- a/toolkit/crashreporter/google-breakpad/src/tools/linux/dump_syms/Makefile.in +++ b/toolkit/crashreporter/google-breakpad/src/tools/linux/dump_syms/Makefile.in @@ -59,11 +59,11 @@ HOST_LIBS += \ $(NULL) # force C++ linking CPP_PROG_LINK = 1 FORCE_USE_PIC = 1 #XXX: bug 554854 causes us to be unable to run binaries on the build slaves # due to them having an older libstdc++ -HOST_LDFLAGS += -static +#HOST_LDFLAGS += -static include $(topsrcdir)/config/rules.mk ++++++ thunderbird-3.1.10-source.tar.bz2 -> thunderbird-3.1.11-source.tar.bz2 ++++++ old-versions/11.4/UPDATES/all/MozillaThunderbird/thunderbird-3.1.10-source.tar.bz2 11.4/MozillaThunderbird/thunderbird-3.1.11-source.tar.bz2 differ: char 11, line 1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
