Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2015-12-03 13:29:04
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird"
Changes:
--------
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-10-12 10:00:51.000000000 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes
2015-12-03 13:29:06.000000000 +0100
@@ -1,0 +2,29 @@
+Tue Nov 17 07:58:43 UTC 2015 - [email protected]
+
+- update to Thunderbird 38.4.0 (bnc#952810)
+ * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
+ Miscellaneous memory safety hazards
+ * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
+ Trailing whitespace in IP address hostnames can bypass same-origin policy
+ * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
+ Buffer overflow during image interactions in canvas
+ * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
+ CORS preflight is bypassed when non-standard Content-Type headers
+ are received
+ * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
+ Memory corruption in libjar through zip files
+ * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
+ JavaScript garbage collection crash with Java applet
+ * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
+ (bmo#1188010, bmo#1204061, bmo#1204155)
+ Vulnerabilities found through code inspection
+ * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
+ Mixed content WebSocket policy bypass through workers
+ * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
+ (bmo#1202868, bmo#1205157)
+ NSS and NSPR memory corruption issues
+ (fixed in mozilla-nspr and mozilla-nss packages)
+- requires NSPR 4.10.10 and NSS 3.19.2.1
+- added explicit appdata provides (bnc#952325)
+
+-------------------------------------------------------------------
@@ -116 +145 @@
--------------------------------------------------------------------
+--------------------------------------------------------------------
Old:
----
l10n-38.3.0.tar.xz
thunderbird-38.3.0-source.tar.xz
New:
----
l10n-38.4.0.tar.xz
thunderbird-38.4.0-source.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ MozillaThunderbird.spec ++++++
--- /var/tmp/diff_new_pack.5pUTmM/_old 2015-12-03 13:29:21.000000000 +0100
+++ /var/tmp/diff_new_pack.5pUTmM/_new 2015-12-03 13:29:21.000000000 +0100
@@ -17,7 +17,7 @@
#
-%define mainversion 38.3.0
+%define mainversion 38.4.0
%define update_channel release
%if %suse_version > 1210
@@ -42,8 +42,8 @@
BuildRequires: libgnomeui-devel
BuildRequires: libidl-devel
BuildRequires: libnotify-devel
-BuildRequires: mozilla-nspr-devel >= 4.10.8
-BuildRequires: mozilla-nss-devel >= 3.19.2
+BuildRequires: mozilla-nspr-devel >= 4.10.10
+BuildRequires: mozilla-nss-devel >= 3.19.2.1
BuildRequires: python
BuildRequires: startup-notification-devel
BuildRequires: unzip
@@ -71,6 +71,8 @@
Release: 0
%define releasedate 2015092700
Provides: thunderbird = %{version}
+Provides: appdata()
+Provides: appdata(thunderbird.appdata.xml)
%if %{with_kde}
# this is needed to match this package with the kde4 helper package without
the main package
# having a hard requirement on the kde4 package
@@ -100,7 +102,7 @@
Patch4: mozilla-arm-disable-edsp.patch
Patch5: mozilla-develdirs.patch
Patch6: mozilla-icu-strncat.patch
-Patch17: mozilla-arm64-libjpeg-turbo.patch
+Patch7: mozilla-arm64-libjpeg-turbo.patch
# Thunderbird/mail
Patch20: tb-ssldap.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
@@ -197,7 +199,7 @@
%patch4 -p1
%patch5 -p1
%patch6 -p1
-%patch17 -p1
+%patch7 -p1
popd
# comm-central patches
%patch20 -p1
@@ -317,6 +319,16 @@
make -C mail/locales langpack-$locale || continue
cp -rL dist/xpi-stage/locale-$locale \
$RPM_BUILD_ROOT%{progdir}/extensions/[email protected]
+ # Lightning
+ _shipcalendar=0
+ #for callocale in in $(awk '{ print $1; }'
../thunderbird/calendar/locales/shipped-locales); do
+ # if [ "$locale" = "$callocale" ]; then
+ # make -C mail/locales calendar-langpack-$locale || continue
+ # cp -rL dist/xpi-stage/lightning-$locale \
+ #
$RPM_BUILD_ROOT%{progdir}/extensions/[email protected]
+ # _shipcalendar=1
+ # fi
+ #done
# remove prefs and profile defaults from langpack
rm -rf
$RPM_BUILD_ROOT%{progdir}/extensions/[email protected]/defaults
# check against the fixed common list and sort into the right filelist
@@ -327,6 +339,10 @@
[ $_matched -eq 1 ] && _l10ntarget=common || _l10ntarget=other
echo %{progdir}/extensions/[email protected] \
>> %{_tmppath}/translations.$_l10ntarget
+ if [ $_shipcalendar -eq 1 ]; then
+ echo
%{progdir}/extensions/[email protected] \
+ >> %{_tmppath}/translations.$_l10ntarget
+ fi
esac
done
%endif
++++++ compare-locales.tar.xz ++++++
++++++ create-tar.sh ++++++
--- /var/tmp/diff_new_pack.5pUTmM/_old 2015-12-03 13:29:22.000000000 +0100
+++ /var/tmp/diff_new_pack.5pUTmM/_new 2015-12-03 13:29:22.000000000 +0100
@@ -2,8 +2,8 @@
CHANNEL="esr38"
BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_3_0_RELEASE"
-VERSION="38.3.0"
+RELEASE_TAG="THUNDERBIRD_38_4_0_RELEASE"
+VERSION="38.4.0"
echo "cloning $BRANCH..."
hg clone http://hg.mozilla.org/$BRANCH thunderbird
@@ -40,7 +40,7 @@
done
echo "creating l10n archive..."
tar cJf l10n-$VERSION.tar.xz \
- --exclude=.hgtags --exclude=.hgignore --exclude=.hg --exclude=browser
--exclude=calendar \
+ --exclude=.hgtags --exclude=.hgignore --exclude=.hg --exclude=browser \
--exclude=suite \
l10n
++++++ l10n-38.3.0.tar.xz -> l10n-38.4.0.tar.xz ++++++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.3.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.4.0.tar.xz differ:
char 26, line 1
++++++ thunderbird-38.3.0-source.tar.xz -> thunderbird-38.4.0-source.tar.xz
++++++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.3.0-source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.4.0-source.tar.xz
differ: char 27, line 1
