Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2019-07-16 08:38:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1887 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird" Tue Jul 16 08:38:45 2019 rev:214 rq:714774 version:60.8.0 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2019-06-25 22:16:58.252675919 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1887/MozillaThunderbird.changes 2019-07-16 08:38:47.467071952 +0200 @@ -1,0 +2,38 @@ +Wed Jul 10 13:47:41 UTC 2019 - Bernhard Wiedemann <[email protected]> + +- Generate langpacks sequentially to avoid file corruption + from racy file writes (boo#1137970) + +------------------------------------------------------------------- +Mon Jul 8 10:25:24 UTC 2019 - Wolfgang Rosenauer <[email protected]> + +- Mozilla Thunderbird 60.8.0 + * Calendar: Problems when editing event times, some related to + AM/PM setting in non-English locales + MFSA 2019-23 (boo#1140868) + * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327) + Sandbox escape via installation of malicious languagepack + * CVE-2019-11711 (bmo#1552541) + Script injection within domain through inner window reuse + * CVE-2019-11712 (bmo#1543804) + Cross-origin POST requests can be made with NPAPI plugins by + following 308 redirects + * CVE-2019-11713 (bmo#1528481) + Use-after-free with HTTP/2 cached stream + * CVE-2019-11729 (bmo#1515342) + Empty or malformed p256-ECDH public keys may trigger a segmentation fault + * CVE-2019-11715 (bmo#1555523) + HTML parsing error can contribute to content XSS + * CVE-2019-11717 (bmo#1548306) + Caret character improperly escaped in origins + * CVE-2019-11719 (bmo#1540541) + Out-of-bounds read when importing curve25519 private key + * CVE-2019-11730 (bmo#1558299) + Same-origin policy treats all files in a directory as having the + same-origin + * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498 + bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522) + Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 and + Thunderbird 60.8 + +------------------------------------------------------------------- Old: ---- l10n-60.7.2.tar.xz thunderbird-60.7.2.source.tar.xz thunderbird-60.7.2.source.tar.xz.asc New: ---- l10n-60.8.0.tar.xz thunderbird-60.8.0.source.tar.xz thunderbird-60.8.0.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.OSDuKH/_old 2019-07-16 08:38:58.243066526 +0200 +++ /var/tmp/diff_new_pack.OSDuKH/_new 2019-07-16 08:38:58.247066524 +0200 @@ -17,9 +17,9 @@ # -%define mainversion 60.7.2 +%define mainversion 60.8.0 %define update_channel release -%define releasedate 20190620083217 +%define releasedate 20190703133823 %bcond_without mozilla_tb_kde4 %bcond_with mozilla_tb_valgrind @@ -44,7 +44,7 @@ BuildRequires: libnotify-devel BuildRequires: memory-constraints BuildRequires: mozilla-nspr-devel >= 4.19 -BuildRequires: mozilla-nss-devel >= 3.36.7 +BuildRequires: mozilla-nss-devel >= 3.36.8 BuildRequires: python BuildRequires: python2-xml BuildRequires: rust >= 1.24 @@ -343,7 +343,7 @@ %if %localize truncate -s 0 %{_tmppath}/translations.{common,other} sed -r '/^(ja-JP-mac|en-US|$)/d;s/ .*$//' $RPM_BUILD_DIR/thunderbird-%{version}/comm/mail/locales/shipped-locales \ - | xargs -P 8 -n 1 -I {} /bin/sh -c ' + | xargs -n 1 -I {} /bin/sh -c ' locale=$1 pushd $RPM_BUILD_DIR/compare-locales PYTHONPATH=lib \ ++++++ compare-locales.tar.xz ++++++ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.OSDuKH/_old 2019-07-16 08:38:58.383066455 +0200 +++ /var/tmp/diff_new_pack.OSDuKH/_new 2019-07-16 08:38:58.383066455 +0200 @@ -2,9 +2,9 @@ CHANNEL="esr60" BRANCH="releases/comm-$CHANNEL" -RELEASE_TAG="e8ba58f175184985890f5c5aa0b8ff6bd4275b82" -MOZ_RELEASE_TAG="2fbdde45ed69194ed3908fc665e1d759c3d8f7c9" -VERSION="60.7.2" +RELEASE_TAG="ef6b0f0be269d5b7314fe9b359604c9f4f541055" +MOZ_RELEASE_TAG="eb76765892cfd646d3014e5f3b8df8c6753da2d2" +VERSION="60.8.0" VERSION_SUFFIX="" LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json" ++++++ l10n-60.7.2.tar.xz -> l10n-60.8.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.7.2.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1887/l10n-60.8.0.tar.xz differ: char 26, line 1 ++++++ thunderbird-60.7.2.source.tar.xz -> thunderbird-60.8.0.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.7.2.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1887/thunderbird-60.8.0.source.tar.xz differ: char 15, line 1
