Hello community, here is the log from the commit of package seamonkey for openSUSE:Factory checked in at 2013-08-11 11:21:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/seamonkey (Old) and /work/SRC/openSUSE:Factory/.seamonkey.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "seamonkey" Changes: -------- --- /work/SRC/openSUSE:Factory/seamonkey/seamonkey.changes 2013-07-06 07:03:56.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.seamonkey.new/seamonkey.changes 2013-08-11 11:21:09.000000000 +0200 @@ -1,0 +2,28 @@ +Mon Aug 5 17:26:03 UTC 2013 - [email protected] + +- update to SeaMonkey 2.20 (bnc#833389) + * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702 + Miscellaneous memory safety hazards + * MFSA 2013-64/CVE-2013-1704 (bmo#883313) + Use after free mutating DOM during SetBody + * MFSA 2013-65/CVE-2013-1705 (bmo#882865) + Buffer underflow when generating CRMF requests + * MFSA 2013-67/CVE-2013-1708 (bmo#879924) + Crash during WAV audio file decoding + * MFSA 2013-68/CVE-2013-1709 (bmo#838253) + Document URI misrepresentation and masquerading + * MFSA 2013-69/CVE-2013-1710 (bmo#871368) + CRMF requests allow for code execution and XSS attacks + * MFSA 2013-70/CVE-2013-1711 (bmo#843829) + Bypass of XrayWrappers using XBL Scopes + * MFSA 2013-72/CVE-2013-1713 (bmo#887098) + Wrong principal used for validating URI for some Javascript + components + * MFSA 2013-73/CVE-2013-1714 (bmo#879787) + Same-origin bypass with web workers and XMLHttpRequest + * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397) + Local Java applets may read contents of local file system +- requires NSPR 4.10 and NSS 3.15 +- removed obsolete seamonkey-shared-nss-db.patch + +------------------------------------------------------------------- Old: ---- l10n-2.19.tar.bz2 seamonkey-2.19-source.tar.bz2 seamonkey-shared-nss-db.patch New: ---- l10n-2.20.tar.bz2 seamonkey-2.20-source.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ seamonkey.spec ++++++ --- /var/tmp/diff_new_pack.t4ikfa/_old 2013-08-11 11:21:14.000000000 +0200 +++ /var/tmp/diff_new_pack.t4ikfa/_new 2013-08-11 11:21:14.000000000 +0200 @@ -54,9 +54,9 @@ %endif Provides: web_browser Provides: browser(npapi) -Version: 2.19 +Version: 2.20 Release: 0 -%define releasedate 2013062900 +%define releasedate 2013080300 Summary: The successor of the Mozilla Application Suite License: MPL-2.0 Group: Productivity/Networking/Web/Browsers @@ -82,7 +82,6 @@ Patch9: mozilla-ppc.patch Patch12: mozilla-libproxy-compat.patch Patch20: seamonkey-ua-locale.patch -Patch21: seamonkey-shared-nss-db.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: /bin/sh coreutils Provides: seamonkey-mail = %{version} @@ -105,7 +104,7 @@ # so using %opensuse_bs is secure for now BuildRequires: mozilla-nspr-devel PreReq: mozilla-nspr >= %(rpm -q --queryformat '%{VERSION}' mozilla-nspr) -BuildRequires: mozilla-nss-devel >= 3.14.3 +BuildRequires: mozilla-nss-devel >= 3.15 PreReq: mozilla-nss >= %(rpm -q --queryformat '%{VERSION}' mozilla-nss) %description @@ -189,7 +188,6 @@ popd # comm patches %patch20 -p1 -%patch21 -p1 %build # no need to add build time to binaries ++++++ compare-locales.tar.bz2 ++++++ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.t4ikfa/_old 2013-08-11 11:21:14.000000000 +0200 +++ /var/tmp/diff_new_pack.t4ikfa/_new 2013-08-11 11:21:14.000000000 +0200 @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/comm-$CHANNEL" -RELEASE_TAG="SEAMONKEY_2_19_RELEASE" -VERSION="2.19" +RELEASE_TAG="SEAMONKEY_2_20_RELEASE" +VERSION="2.20" echo "cloning $BRANCH..." hg clone http://hg.mozilla.org/$BRANCH seamonkey ++++++ l10n-2.19.tar.bz2 -> l10n-2.20.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/seamonkey/l10n-2.19.tar.bz2 /work/SRC/openSUSE:Factory/.seamonkey.new/l10n-2.20.tar.bz2 differ: char 11, line 1 ++++++ mozilla-shared-nss-db.patch ++++++ --- /var/tmp/diff_new_pack.t4ikfa/_old 2013-08-11 11:21:14.000000000 +0200 +++ /var/tmp/diff_new_pack.t4ikfa/_new 2013-08-11 11:21:14.000000000 +0200 @@ -7,7 +7,7 @@ diff --git a/configure.in b/configure.in --- a/configure.in +++ b/configure.in -@@ -8303,16 +8303,31 @@ AC_SUBST(QCMS_LIBS) +@@ -8309,16 +8309,31 @@ AC_SUBST(QCMS_LIBS) dnl ======================================================== dnl HarfBuzz @@ -42,24 +42,18 @@ diff --git a/security/manager/ssl/src/Makefile.in b/security/manager/ssl/src/Makefile.in --- a/security/manager/ssl/src/Makefile.in +++ b/security/manager/ssl/src/Makefile.in -@@ -93,16 +93,19 @@ DEFINES += \ +@@ -87,10 +87,13 @@ endif + CSRCS += md4.c - EXPORTS += \ - CryptoTask.h \ - nsNSSShutDown.h \ - ScopedNSSTypes.h \ - nsRandomGenerator.h \ + DEFINES += \ + -DNSS_ENABLE_ECC \ + -DDLL_PREFIX=\"$(DLL_PREFIX)\" \ + -DDLL_SUFFIX=\"$(DLL_SUFFIX)\" \ $(NULL) +LOCAL_INCLUDES += $(NSSHELPER_CFLAGS) +EXTRA_DSO_LDOPTS += $(NSSHELPER_LIBS) + - EXPORTS_NAMESPACES = mozilla - - EXPORTS_mozilla += \ - PublicSSL.h \ - $(NULL) - include $(topsrcdir)/config/rules.mk diff --git a/security/manager/ssl/src/nsNSSComponent.cpp b/security/manager/ssl/src/nsNSSComponent.cpp @@ -82,14 +76,14 @@ +#endif + #include "nsNSSComponent.h" + + #include "CertVerifier.h" #include "nsNSSCallbacks.h" #include "nsNSSIOLayer.h" #include "nsCertVerificationThread.h" #include "nsNetUtil.h" - #include "nsAppDirectoryServiceDefs.h" - #include "nsDirectoryService.h" -@@ -1682,18 +1689,34 @@ nsNSSComponent::InitializeNSS(bool showW +@@ -1721,18 +1728,34 @@ nsNSSComponent::InitializeNSS(bool showW ConfigureInternalPKCS11Token(); // The NSS_INIT_NOROOTINIT flag turns off the loading of the root certs @@ -129,7 +123,7 @@ diff --git a/toolkit/library/Makefile.in b/toolkit/library/Makefile.in --- a/toolkit/library/Makefile.in +++ b/toolkit/library/Makefile.in -@@ -501,17 +501,17 @@ EXTRA_DSO_LDOPTS += -INCREMENTAL:NO +@@ -510,17 +510,17 @@ EXTRA_DSO_LDOPTS += -INCREMENTAL:NO endif endif endif ++++++ mozilla-ua-locale.patch ++++++ --- /var/tmp/diff_new_pack.t4ikfa/_old 2013-08-11 11:21:14.000000000 +0200 +++ /var/tmp/diff_new_pack.t4ikfa/_new 2013-08-11 11:21:14.000000000 +0200 @@ -7,8 +7,8 @@ diff --git a/chrome/src/nsChromeRegistryChrome.cpp b/chrome/src/nsChromeRegistryChrome.cpp --- a/chrome/src/nsChromeRegistryChrome.cpp +++ b/chrome/src/nsChromeRegistryChrome.cpp -@@ -281,20 +281,21 @@ nsChromeRegistryChrome::GetSelectedLocal - +@@ -307,20 +307,21 @@ nsChromeRegistryChrome::OverrideLocalePa + } return NS_OK; } ++++++ seamonkey-2.19-source.tar.bz2 -> seamonkey-2.20-source.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/seamonkey/seamonkey-2.19-source.tar.bz2 /work/SRC/openSUSE:Factory/.seamonkey.new/seamonkey-2.20-source.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
