Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2019-05-28 09:40:54
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5148 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird"
Tue May 28 09:40:54 2019 rev:211 rq:705454 version:60.7.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-04-25 17:52:11.765013389 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5148/MozillaThunderbird.changes
2019-05-28 09:40:56.233892393 +0200
@@ -1,0 +2,44 @@
+Fri May 24 08:53:57 UTC 2019 - Wolfgang Rosenauer <w...@rosenauer.org>
+
+- Mozilla Thunderbird 60.7.0
+ * Attachment pane of Write window no longer focussed when attaching
+ files using a keyboard shortcut
+ MFSA 2019-15 (boo#1135824)
+ * CVE-2019-9815 (bmo#1546544)
+ Disable hyperthreading on content JavaScript threads on macOS
+ * CVE-2019-9816 (bmo#1536768)
+ Type confusion with object groups and UnboxedObjects
+ * CVE-2019-9817 (bmo#1540221)
+ Stealing of cross-domain images using canvas
+ * CVE-2019-9818 (bmo#1542581) (Windows only)
+ Use-after-free in crash generation server
+ * CVE-2019-9819 (bmo#1532553)
+ Compartment mismatch with fetch API
+ * CVE-2019-9820 (bmo#1536405)
+ Use-after-free of ChromeEventHandler by DocShell
+ * CVE-2019-11691 (bmo#1542465)
+ Use-after-free in XMLHttpRequest
+ * CVE-2019-11692 (bmo#1544670)
+ Use-after-free removing listeners in the event listener manager
+ * CVE-2019-11693 (bmo#1532525)
+ Buffer overflow in WebGL bufferdata on Linux
+ * CVE-2019-7317 (bmo#1542829)
+ Use-after-free in png_image_free of libpng library
+ * CVE-2019-9797 (bmo#1528909)
+ Cross-origin theft of images with createImageBitmap
+ * CVE-2018-18511 (bmo#1526218)
+ Cross-origin theft of images with ImageBitmapRenderingContext
+ * CVE-2019-11694 (bmo#1534196) (Windows only)
+ Uninitialized memory memory leakage in Windows sandbox
+ * CVE-2019-11698 (bmo#1543191)
+ Theft of user history data through drag and drop of hyperlinks
+ to and from bookmarks
+ * CVE-2019-5798 (bmo#1535518)
+ Out-of-bounds read in Skia
+ * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
+ bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
+ bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
+ bmo#1532465, bmo#1533554, bmo#1541580)
+ Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
+
+-------------------------------------------------------------------
Old:
----
l10n-60.6.1.tar.xz
thunderbird-60.6.1.source.tar.xz
thunderbird-60.6.1.source.tar.xz.asc
New:
----
l10n-60.7.0.tar.xz
thunderbird-60.7.0.source.tar.xz
thunderbird-60.7.0.source.tar.xz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ MozillaThunderbird.spec ++++++
--- /var/tmp/diff_new_pack.k83Pf0/_old 2019-05-28 09:41:05.969889185 +0200
+++ /var/tmp/diff_new_pack.k83Pf0/_new 2019-05-28 09:41:05.969889185 +0200
@@ -17,9 +17,9 @@
#
-%define mainversion 60.6.1
+%define mainversion 60.7.0
%define update_channel release
-%define releasedate 20190314112142
+%define releasedate 20190517095026
%bcond_without mozilla_tb_kde4
%bcond_with mozilla_tb_valgrind
++++++ compare-locales.tar.xz ++++++
++++++ create-tar.sh ++++++
--- /var/tmp/diff_new_pack.k83Pf0/_old 2019-05-28 09:41:06.245889094 +0200
+++ /var/tmp/diff_new_pack.k83Pf0/_new 2019-05-28 09:41:06.245889094 +0200
@@ -2,9 +2,9 @@
CHANNEL="esr60"
BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="ed1296af783ca23d9b07aac774cd104b14d246c3"
-MOZ_RELEASE_TAG="ac46edc9c4223fb6613501d3287705f49d1dfc57"
-VERSION="60.6.1"
+RELEASE_TAG="5822a83963e333699a33099c37c65bcd6527b988"
+MOZ_RELEASE_TAG="2ae9b50be57173c299c10df512590e2feb164977"
+VERSION="60.7.0"
VERSION_SUFFIX=""
LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
++++++ l10n-60.6.1.tar.xz -> l10n-60.7.0.tar.xz ++++++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.6.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5148/l10n-60.7.0.tar.xz
differ: char 26, line 1
++++++ mozilla-bmo1519629.patch ++++++
--- /var/tmp/diff_new_pack.k83Pf0/_old 2019-05-28 09:41:06.281889082 +0200
+++ /var/tmp/diff_new_pack.k83Pf0/_new 2019-05-28 09:41:06.281889082 +0200
@@ -1,32 +1,47 @@
-diff -rup thunderbird-60.6.1.orig/servo/components/style/lib.rs
thunderbird-60.6.1/servo/components/style/lib.rs
---- thunderbird-60.6.1.orig/servo/components/style/lib.rs 2019-03-25
02:38:41.000000000 +0100
-+++ thunderbird-60.6.1/servo/components/style/lib.rs 2019-03-30
14:46:10.491001809 +0100
-@@ -23,7 +23,7 @@
+# HG changeset patch
+# Parent ba0e794338a92e82d4b19e9fb012c848302b7dbd
+
+diff --git a/servo/components/style/lib.rs b/servo/components/style/lib.rs
+--- a/servo/components/style/lib.rs
++++ b/servo/components/style/lib.rs
+@@ -18,17 +18,17 @@
+ //! [recalc_style_at]: traversal/fn.recalc_style_at.html
+ //!
+ //! Major dependencies are the [cssparser][cssparser] and
[selectors][selectors]
+ //! crates.
+ //!
//! [cssparser]: ../cssparser/index.html
//! [selectors]: ../selectors/index.html
-#![deny(missing_docs)]
-+/// #![deny(missing_docs)]
++//#![deny(missing_docs)]
extern crate app_units;
extern crate arrayvec;
-diff -rup thunderbird-60.6.1.orig/servo/components/style_traits/values.rs
thunderbird-60.6.1/servo/components/style_traits/values.rs
---- thunderbird-60.6.1.orig/servo/components/style_traits/values.rs
2019-03-25 02:38:43.000000000 +0100
-+++ thunderbird-60.6.1/servo/components/style_traits/values.rs 2019-03-30
12:31:55.070634646 +0100
-@@ -135,6 +135,7 @@ where
- }
- }
-
-+/// Documentation needed here, but the macro appears to be unused anyway...
- #[macro_export]
- macro_rules! serialize_function {
- ($dest: expr, $name: ident($( $arg: expr, )+)) => {
-@@ -404,6 +405,8 @@ impl_to_css_for_predefined_type!(::csspa
- impl_to_css_for_predefined_type!(::cssparser::Color);
- impl_to_css_for_predefined_type!(::cssparser::UnicodeRange);
-
-+
-+/// Define an enum type with unit variants that each correspond to a CSS
keyword.
- #[macro_export]
- macro_rules! define_css_keyword_enum {
- (pub enum $name:ident { $($variant:ident = $css:expr,)+ }) => {
+ extern crate atomic_refcell;
+ #[macro_use]
+ extern crate bitflags;
+ #[allow(unused_extern_crates)] extern crate byteorder;
+ #[cfg(feature = "gecko")] #[macro_use] #[no_link] extern crate cfg_if;
+diff --git a/servo/components/style_traits/lib.rs
b/servo/components/style_traits/lib.rs
+--- a/servo/components/style_traits/lib.rs
++++ b/servo/components/style_traits/lib.rs
+@@ -4,17 +4,17 @@
+
+ //! This module contains shared types and messages for use by devtools/script.
+ //! The traits are here instead of in script so that the devtools crate can be
+ //! modified independently of the rest of Servo.
+
+ #![crate_name = "style_traits"]
+ #![crate_type = "rlib"]
+
+-#![deny(unsafe_code, missing_docs)]
++#![deny(unsafe_code)]
+
+ extern crate app_units;
+ #[macro_use] extern crate bitflags;
+ #[macro_use] extern crate cssparser;
+ extern crate euclid;
+ extern crate malloc_size_of;
+ #[macro_use] extern crate malloc_size_of_derive;
+ extern crate selectors;
++++++ thunderbird-60.6.1.source.tar.xz -> thunderbird-60.7.0.source.tar.xz
++++++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.6.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5148/thunderbird-60.7.0.source.tar.xz
differ: char 15, line 1
