Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Leap:15.2 checked in at 2020-02-04 17:53:36
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2/MozillaThunderbird (Old)
 and      /work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.26092 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "MozillaThunderbird"

Tue Feb  4 17:53:36 2020 rev:47 rq:766039 version:68.4.1

Changes:
--------
--- /work/SRC/openSUSE:Leap:15.2/MozillaThunderbird/MozillaThunderbird.changes  
2020-01-15 14:45:32.905213329 +0100
+++ 
/work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.26092/MozillaThunderbird.changes
       2020-02-04 17:53:41.908723152 +0100
@@ -1,0 +2,62 @@
+Fri Jan 10 07:30:13 UTC 2020 - Martin Sirringhaus <[email protected]>
+
+- Mozilla Thunderbird 68.4.1 
+  * changed: Various improvements when setting up an account for
+    a Microsoft Exchange server: Now offers IMAP/SMTP if
+    available, better detection for Office 365 accounts; re-run
+    configuration after password change. (bmo#1592258)
+  * fixed: Attachments with one or more spaces in their names
+    couldn't be opened under some circumstances (bmo#1601905)
+  * fixed: After changing view layout, the message display pane
+    showed garbled content under some circumstances (bmo#265393)
+  * fixed: Tags were lost on messages in shared IMAP folders
+    under some circumstances (bmo#1596371)
+  * fixed: Various theme changes to achieve "pixel perfection":
+    Unread icon, "no results" icon, paragraph format and font
+    selector, background of folder summary tooltip (bmo#1605612)
+  * fixed: Calendar: Event attendee dialog was not displayed
+    correctly (bmo#1604797)
+  * fixed: Various security fixes
+  MFSA 2020-04 (bsc#1160305, bsc#1160498)
+  * CVE-2019-17026 (bmo#1607443)
+    IonMonkey type confusion with StoreElementHole and
+    FallibleStoreElement
+  * CVE-2019-17015 (bmo#1599005)
+    Memory corruption in parent process during new content
+    process initialization on Windows
+  * CVE-2019-17016 (bmo#1599181)
+    Bypass of @namespace CSS sanitization during pasting
+  * CVE-2019-17017 (bmo#1603055)
+    Type Confusion in XPCVariant.cpp
+  * CVE-2019-17021 (bmo#1599008)
+    Heap address disclosure in parent process during content
+    process initialization on Windows
+  * CVE-2019-17022 (bmo#1602843)
+    CSS sanitization does not escape HTML tags
+  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
+    bmo#1601826)
+    Memory safety bugs fixed in Thunderbird 68.4.1
+- Removed patch that is now upstream: mozilla-bmo1511604.patch
+- Added patch to fix broken URL-bar on s390x:
+  mozilla-bmo1602730.patch
+
+-------------------------------------------------------------------
+Tue Dec 17 11:41:06 UTC 2019 - Martin Sirringhaus <[email protected]>
+
+- Mozilla Thunderbird 68.3.1
+  * changed: In dark theme unread messages no longer shown in
+    blue to distinguish from tagged messages (bmo#1596702)
+  * changed: Account setup is now using client side DNS MX lookup
+    instead of relying on a server. (bmo#1349337)
+  * fixed: Searching LDAP address book crashed in some
+    circumstances (bmo#1601389)
+  * fixed: Message navigation with backward and forward buttons
+    did not work in some circumstances (bmo#533504)
+  * fixed: WebExtension toolbar icons were displayed too small
+    (bmo#1598955)
+  * fixed: Calendar: Tasks due today were not listed in bold
+    (bmo#1598885)
+  * fixed: Calendar: Last day of long-running events was not
+    shown (bmo#1572964)
+
+-------------------------------------------------------------------

Old:
----
  l10n-68.3.0.tar.xz
  mozilla-bmo1511604.patch
  thunderbird-68.3.0.source.tar.xz
  thunderbird-68.3.0.source.tar.xz.asc

New:
----
  l10n-68.4.1.tar.xz
  mozilla-bmo1602730.patch
  thunderbird-68.4.1.source.tar.xz
  thunderbird-68.4.1.source.tar.xz.asc

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ MozillaThunderbird.spec ++++++
--- /var/tmp/diff_new_pack.LszAOH/_old  2020-02-04 17:53:58.824733364 +0100
+++ /var/tmp/diff_new_pack.LszAOH/_new  2020-02-04 17:53:58.828733366 +0100
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major           68
-%define mainver         %major.3.0
-%define orig_version    68.3.0
+%define mainver         %major.4.1
+%define orig_version    68.4.1
 %define orig_suffix     %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}
@@ -58,6 +58,9 @@
 
 %define has_system_cairo 0
 
+# rust/cargo have not been updated for i586. We are currently not shipping 
these, so disable them for now
+ExcludeArch: i586
+
 Name:           %{pkgname}
 BuildRequires:  Mesa-devel
 BuildRequires:  alsa-devel
@@ -134,7 +137,7 @@
 Summary:        An integrated email, news feeds, chat, and newsgroups client
 License:        MPL-2.0
 Group:          Productivity/Networking/Email/Clients
-Url:            https://www.thunderbird.net/
+URL:            https://www.thunderbird.net/
 %if !%{with only_print_mozconfig}
 Source:         
http://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}%{orig_suffix}/source/%{progname}-%{orig_version}%{orig_suffix}.source.tar.xz
 Source1:        thunderbird.desktop
@@ -144,7 +147,7 @@
 Source6:        suse-default-prefs.js
 Source7:        l10n-%{version}.tar.xz
 Source9:        thunderbird.appdata.xml
-Source14:       
https://github.com/openSUSE/firefox-scripts/raw/35ade35/create-tar.sh
+Source14:       
https://github.com/openSUSE/firefox-scripts/raw/8a54002/create-tar.sh
 Source20:       
https://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}%{orig_suffix}/source/%{progname}-%{orig_version}%{orig_suffix}.source.tar.xz.asc
 Source21:       
https://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}/KEY#/mozilla.keyring
 # Gecko/Toolkit
@@ -167,7 +170,7 @@
 Patch17:        mozilla-bmo1504834-part1.patch
 Patch18:        mozilla-bmo1504834-part2.patch
 Patch19:        mozilla-bmo1504834-part3.patch
-Patch20:        mozilla-bmo1511604.patch
+Patch20:        mozilla-bmo1602730.patch
 Patch21:        mozilla-bmo1554971.patch
 Patch22:        mozilla-nestegg-big-endian.patch
 Patch24:        mozilla-fix-top-level-asm.patch

++++++ l10n-68.3.0.tar.xz -> l10n-68.4.1.tar.xz ++++++
/work/SRC/openSUSE:Leap:15.2/MozillaThunderbird/l10n-68.3.0.tar.xz 
/work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.26092/l10n-68.4.1.tar.xz 
differ: char 15, line 1

++++++ mozilla-bmo1511604.patch -> mozilla-bmo1602730.patch ++++++
--- /work/SRC/openSUSE:Leap:15.2/MozillaThunderbird/mozilla-bmo1511604.patch    
2020-01-15 14:45:34.229214317 +0100
+++ 
/work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.26092/mozilla-bmo1602730.patch
 2020-02-04 17:53:42.976723796 +0100
@@ -1,53 +1,28 @@
-# HG changeset patch
-# User A. Wilcox <[email protected]>
-# Date 1543674229 0
-#      Sat Dec 01 14:23:49 2018 +0000
-# Node ID 0309ff19e46b126c527e633518d7de8570442114
-# Parent  5b5a6a164acbd4da6131808bd12e42e7b0a33c2a
-Bug 1511604 - Swizzle YCbCr->RGB data on big-endian machines
-Taken from https://bugzilla.mozilla.org/show_bug.cgi?id=1511604
-
-This is very closely related to mozilla-bmo1504834
-
-Again, input for skia is swizzled to LE, as skia only understands LE.
-
-diff -r 5b5a6a164acb gfx/ycbcr/YCbCrUtils.cpp
---- a/gfx/ycbcr/YCbCrUtils.cpp Mon Sep 09 17:59:29 2019 +0200
-+++ b/gfx/ycbcr/YCbCrUtils.cpp Tue Sep 10 08:22:10 2019 +0200
-@@ -3,7 +3,9 @@
-  * License, v. 2.0. If a copy of the MPL was not distributed with this
-  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+diff -r 6ef20eee3f8f gfx/layers/basic/BasicCompositor.cpp
+--- a/gfx/layers/basic/BasicCompositor.cpp     Thu Oct 31 09:11:56 2019 +0100
++++ b/gfx/layers/basic/BasicCompositor.cpp     Wed Dec 11 16:16:09 2019 +0100
+@@ -693,9 +693,13 @@
  
-+#include "mozilla/EndianUtils.h"
- #include "gfx2DGlue.h"
-+#include "mozilla/gfx/Swizzle.h"
- 
- #include "YCbCrUtils.h"
- #include "yuv_convert.h"
-@@ -236,6 +238,13 @@
-                           yuvtype,
-                           srcData.mYUVColorSpace);
+   RefPtr<SourceSurface> sourceMask;
+   Matrix maskTransform;
++  // Setting an alpha-mask here breaks the URL-bar on big endian (s390x)
++  // if the typed URL is too long for the textbox (automatic scrolling needed)
++#if MOZ_LITTLE_ENDIAN
+   if (aTransform.Is2D()) {
+     SetupMask(aEffectChain, dest, offset, sourceMask, maskTransform);
    }
-+#if MOZ_BIG_ENDIAN
-+  // libyuv makes endian-correct result, which needs to be swapped to BGRX
-+  if (aDestFormat != SurfaceFormat::R5G6B5_UINT16)
-+    gfx::SwizzleData(aDestBuffer, aStride, gfx::SurfaceFormat::X8R8G8B8,
-+                     aDestBuffer, aStride, gfx::SurfaceFormat::B8G8R8X8,
-+                     srcData.mPicSize);
 +#endif
- }
  
- void
-@@ -257,6 +266,12 @@
-                         aSrcStrideYA,
-                         aSrcStrideUV,
-                         aDstStrideARGB);
-+#if MOZ_BIG_ENDIAN
-+  // libyuv makes endian-correct result, which needs to be swapped to BGRA
-+  gfx::SwizzleData(aDstARGB, aDstStrideARGB, gfx::SurfaceFormat::A8R8G8B8,
-+                   aDstARGB, aDstStrideARGB, gfx::SurfaceFormat::B8G8R8A8,
-+                   IntSize(aWidth, aHeight));
-+#endif
- }
+   CompositionOp blendMode = CompositionOp::OP_OVER;
+   if (Effect* effect =
+diff -r 6ef20eee3f8f gfx/layers/composite/CompositableHost.cpp
+--- a/gfx/layers/composite/CompositableHost.cpp        Thu Oct 31 09:11:56 
2019 +0100
++++ b/gfx/layers/composite/CompositableHost.cpp        Wed Dec 11 16:16:09 
2019 +0100
+@@ -91,6 +91,7 @@
+   }
+   MOZ_ASSERT(source);
  
- } // namespace gfx
++  // Alternatively: Comment out these lines where the alpha-mask is set
+   RefPtr<EffectMask> effect =
+       new EffectMask(source, source->GetSize(), aTransform);
+   aEffects.mSecondaryEffects[EffectTypes::MASK] = effect;

++++++ tar_stamps ++++++
--- /var/tmp/diff_new_pack.LszAOH/_old  2020-02-04 17:53:58.996733468 +0100
+++ /var/tmp/diff_new_pack.LszAOH/_new  2020-02-04 17:53:58.996733468 +0100
@@ -1,11 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.3.0"
+VERSION="68.4.1"
 VERSION_SUFFIX=""
-PREV_VERSION="68.2.1"
+PREV_VERSION="68.3.1"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
-
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68";
-RELEASE_TAG="228eab07a730c48763e1cd0ccff9491f66e4580e"
-RELEASE_TIMESTAMP="20191129091924"
+RELEASE_TAG="afc61dccd44560fac1f8647821e55b110e3fe370"
+RELEASE_TIMESTAMP="20200108224327"

++++++ thunderbird-68.3.0.source.tar.xz -> thunderbird-68.4.1.source.tar.xz 
++++++
/work/SRC/openSUSE:Leap:15.2/MozillaThunderbird/thunderbird-68.3.0.source.tar.xz
 
/work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.26092/thunderbird-68.4.1.source.tar.xz
 differ: char 15, line 1


Reply via email to