Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2020-01-14 20:57:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird" Tue Jan 14 20:57:48 2020 rev:224 rq:763056 version:68.4.1 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2019-12-30 13:49:57.541389636 +0100 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/MozillaThunderbird.changes 2020-01-14 20:57:51.542501125 +0100 @@ -1,0 +2,38 @@ +Fri Jan 10 13:08:55 UTC 2020 - Wolfgang Rosenauer <[email protected]> + +- Mozilla Thunderbird 68.4.1 + * Various improvements when setting up an account for a Microsoft + Exchange server: Now offers IMAP/SMTP if available, better + detection for Office 365 accounts; re-run configuration after + password change + Fixes: + * After changing view layout, the message display pane showed + garbled content under some circumstances + * Various theme changes to achieve "pixel perfection": Unread icon, + "no results" icon, paragraph format and font selector, background + of folder summary tooltip + * Tags were lost on messages in shared IMAP folders under some + circumstances + * Calendar: Event attendee dialog was not displayed correctly + MFSA 2020-04 (bsc#1160498, bsc#1160305) + * CVE-2019-17026 (bmo#1607443) + IonMonkey type confusion with StoreElementHole and FallibleStoreElement + * CVE-2019-17015 (bmo#1599005) + Memory corruption in parent process during new content process + initialization on Windows + * CVE-2019-17016 (bmo#1599181) + Bypass of @namespace CSS sanitization during pasting + * CVE-2019-17017 (bmo#1603055) + Type Confusion in XPCVariant.cpp + * CVE-2019-17021 (bmo#1599008) + Heap address disclosure in parent process during content process + initialization on Windows + * CVE-2019-17022 (bmo#1602843) + CSS sanitization does not escape HTML tags + * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605, bmo#1601826) + Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 +- removed obsolete patch mozilla-bmo1511604.patch +- added mozilla-bmo1602730.patch to fix LE<->BE issues in the + platform (bmo#1602730) + +------------------------------------------------------------------- Old: ---- l10n-68.3.1.tar.xz mozilla-bmo1511604.patch mozilla-bmo1583471.patch thunderbird-68.3.1.source.tar.xz thunderbird-68.3.1.source.tar.xz.asc New: ---- l10n-68.4.1.tar.xz mozilla-bmo1602730.patch thunderbird-68.4.1.source.tar.xz thunderbird-68.4.1.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.CoyjGF/_old 2020-01-14 20:58:27.566517800 +0100 +++ /var/tmp/diff_new_pack.CoyjGF/_new 2020-01-14 20:58:27.570517802 +0100 @@ -1,7 +1,7 @@ # # spec file for package MozillaThunderbird # -# Copyright (c) 2019 SUSE LLC +# Copyright (c) 2020 SUSE LLC # 2006-2019 Wolfgang Rosenauer <[email protected]> # # All modifications and additions to the file contributed by third parties @@ -26,8 +26,8 @@ # major 69 # mainver %major.99 %define major 68 -%define mainver %major.3.1 -%define orig_version 68.3.1 +%define mainver %major.4.1 +%define orig_version 68.4.1 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{mainver} @@ -167,12 +167,11 @@ Patch17: mozilla-bmo1504834-part1.patch Patch18: mozilla-bmo1504834-part2.patch Patch19: mozilla-bmo1504834-part3.patch -Patch20: mozilla-bmo1511604.patch +Patch20: mozilla-bmo1602730.patch Patch21: mozilla-bmo1554971.patch Patch22: mozilla-nestegg-big-endian.patch Patch24: mozilla-fix-top-level-asm.patch Patch25: mozilla-bmo1504834-part4.patch -Patch26: mozilla-bmo1583471.patch %endif # only_print_mozconfig BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: coreutils fileutils textutils /bin/sh @@ -270,7 +269,6 @@ %patch22 -p1 %patch24 -p1 %patch25 -p1 -%patch26 -p1 %endif # only_print_mozconfig %build ++++++ l10n-68.3.1.tar.xz -> l10n-68.4.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.3.1.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/l10n-68.4.1.tar.xz differ: char 26, line 1 ++++++ mozilla-bmo1511604.patch -> mozilla-bmo1602730.patch ++++++ --- /work/SRC/openSUSE:Factory/MozillaThunderbird/mozilla-bmo1511604.patch 2019-10-10 11:49:37.583929369 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/mozilla-bmo1602730.patch 2020-01-14 20:58:13.110511108 +0100 @@ -1,53 +1,28 @@ -# HG changeset patch -# User A. Wilcox <[email protected]> -# Date 1543674229 0 -# Sat Dec 01 14:23:49 2018 +0000 -# Node ID 0309ff19e46b126c527e633518d7de8570442114 -# Parent 5b5a6a164acbd4da6131808bd12e42e7b0a33c2a -Bug 1511604 - Swizzle YCbCr->RGB data on big-endian machines -Taken from https://bugzilla.mozilla.org/show_bug.cgi?id=1511604 - -This is very closely related to mozilla-bmo1504834 - -Again, input for skia is swizzled to LE, as skia only understands LE. - -diff -r 5b5a6a164acb gfx/ycbcr/YCbCrUtils.cpp ---- a/gfx/ycbcr/YCbCrUtils.cpp Mon Sep 09 17:59:29 2019 +0200 -+++ b/gfx/ycbcr/YCbCrUtils.cpp Tue Sep 10 08:22:10 2019 +0200 -@@ -3,7 +3,9 @@ - * License, v. 2.0. If a copy of the MPL was not distributed with this - * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ +diff -r 6ef20eee3f8f gfx/layers/basic/BasicCompositor.cpp +--- a/gfx/layers/basic/BasicCompositor.cpp Thu Oct 31 09:11:56 2019 +0100 ++++ b/gfx/layers/basic/BasicCompositor.cpp Wed Dec 11 16:16:09 2019 +0100 +@@ -693,9 +693,13 @@ -+#include "mozilla/EndianUtils.h" - #include "gfx2DGlue.h" -+#include "mozilla/gfx/Swizzle.h" - - #include "YCbCrUtils.h" - #include "yuv_convert.h" -@@ -236,6 +238,13 @@ - yuvtype, - srcData.mYUVColorSpace); + RefPtr<SourceSurface> sourceMask; + Matrix maskTransform; ++ // Setting an alpha-mask here breaks the URL-bar on big endian (s390x) ++ // if the typed URL is too long for the textbox (automatic scrolling needed) ++#if MOZ_LITTLE_ENDIAN + if (aTransform.Is2D()) { + SetupMask(aEffectChain, dest, offset, sourceMask, maskTransform); } -+#if MOZ_BIG_ENDIAN -+ // libyuv makes endian-correct result, which needs to be swapped to BGRX -+ if (aDestFormat != SurfaceFormat::R5G6B5_UINT16) -+ gfx::SwizzleData(aDestBuffer, aStride, gfx::SurfaceFormat::X8R8G8B8, -+ aDestBuffer, aStride, gfx::SurfaceFormat::B8G8R8X8, -+ srcData.mPicSize); +#endif - } - void -@@ -257,6 +266,12 @@ - aSrcStrideYA, - aSrcStrideUV, - aDstStrideARGB); -+#if MOZ_BIG_ENDIAN -+ // libyuv makes endian-correct result, which needs to be swapped to BGRA -+ gfx::SwizzleData(aDstARGB, aDstStrideARGB, gfx::SurfaceFormat::A8R8G8B8, -+ aDstARGB, aDstStrideARGB, gfx::SurfaceFormat::B8G8R8A8, -+ IntSize(aWidth, aHeight)); -+#endif - } + CompositionOp blendMode = CompositionOp::OP_OVER; + if (Effect* effect = +diff -r 6ef20eee3f8f gfx/layers/composite/CompositableHost.cpp +--- a/gfx/layers/composite/CompositableHost.cpp Thu Oct 31 09:11:56 2019 +0100 ++++ b/gfx/layers/composite/CompositableHost.cpp Wed Dec 11 16:16:09 2019 +0100 +@@ -91,6 +91,7 @@ + } + MOZ_ASSERT(source); - } // namespace gfx ++ // Alternatively: Comment out these lines where the alpha-mask is set + RefPtr<EffectMask> effect = + new EffectMask(source, source->GetSize(), aTransform); + aEffects.mSecondaryEffects[EffectTypes::MASK] = effect; ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.CoyjGF/_old 2020-01-14 20:58:27.858517935 +0100 +++ /var/tmp/diff_new_pack.CoyjGF/_new 2020-01-14 20:58:27.858517935 +0100 @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr68" -VERSION="68.3.1" +VERSION="68.4.1" VERSION_SUFFIX="" -PREV_VERSION="68.3.0" +PREV_VERSION="68.3.1" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68"; -RELEASE_TAG="dfeab0e6d5a43c6bcb1575bbdc5c0d018b42df9b" -RELEASE_TIMESTAMP="20191215232630" +RELEASE_TAG="afc61dccd44560fac1f8647821e55b110e3fe370" +RELEASE_TIMESTAMP="20200108224327" ++++++ thunderbird-68.3.1.source.tar.xz -> thunderbird-68.4.1.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.3.1.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/thunderbird-68.4.1.source.tar.xz differ: char 15, line 1
