Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2015-01-21 21:50:44
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird"
Changes:
--------
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2014-12-06 13:47:27.000000000 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes
2015-01-21 21:51:05.000000000 +0100
@@ -1,0 +2,12 @@
+Sat Jan 10 18:33:52 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 31.4.0 (bnc#910669)
+ * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
+ Miscellaneous memory safety hazards
+ * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
+ sendBeacon requests lack an Origin header
+ * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
+ Cookie injection through Proxy Authenticate responses
+- added mozilla-icu-strncat.patch to fix post build checks
+
+-------------------------------------------------------------------
Old:
----
l10n-31.3.0.tar.xz
thunderbird-31.3.0-source.tar.xz
New:
----
l10n-31.4.0.tar.xz
mozilla-icu-strncat.patch
thunderbird-31.4.0-source.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ MozillaThunderbird.spec ++++++
--- /var/tmp/diff_new_pack.Lym3Xl/_old 2015-01-21 21:51:16.000000000 +0100
+++ /var/tmp/diff_new_pack.Lym3Xl/_new 2015-01-21 21:51:16.000000000 +0100
@@ -1,8 +1,8 @@
#
# spec file for package MozillaThunderbird
#
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
-# 2006-2014 Wolfgang Rosenauer <w...@rosenauer.org>
+# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# 2006-2015 Wolfgang Rosenauer <w...@rosenauer.org>
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
#
-%define mainversion 31.3.0
+%define mainversion 31.4.0
%define update_channel release
%if %suse_version > 1210
@@ -70,7 +70,7 @@
%endif
Version: %{mainversion}
Release: 0
-%define releasedate 2014112600
+%define releasedate 2015010900
Provides: thunderbird = %{version}
%if %{with_kde}
# this is needed to match this package with the kde4 helper package without
the main package
@@ -102,6 +102,7 @@
Patch5: mozilla-arm-disable-edsp.patch
Patch6: mozilla-ppc.patch
Patch7: mozilla-nullptr-gcc45.patch
+Patch8: mozilla-icu-strncat.patch
# Thunderbird/mail
Patch20: tb-ssldap.patch
Patch21: tb-develdirs.patch
@@ -201,6 +202,7 @@
%patch5 -p1
%patch6 -p1
%patch7 -p1
+%patch8 -p1
popd
# comm-central patches
%patch20 -p1
++++++ compare-locales.tar.xz ++++++
++++++ create-tar.sh ++++++
--- /var/tmp/diff_new_pack.Lym3Xl/_old 2015-01-21 21:51:16.000000000 +0100
+++ /var/tmp/diff_new_pack.Lym3Xl/_new 2015-01-21 21:51:16.000000000 +0100
@@ -2,8 +2,8 @@
CHANNEL="esr31"
BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_31_3_0_RELEASE"
-VERSION="31.3.0"
+RELEASE_TAG="THUNDERBIRD_31_4_0_RELEASE"
+VERSION="31.4.0"
echo "cloning $BRANCH..."
hg clone http://hg.mozilla.org/$BRANCH thunderbird
++++++ l10n-31.3.0.tar.xz -> l10n-31.4.0.tar.xz ++++++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-31.3.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-31.4.0.tar.xz differ:
char 26, line 1
++++++ mozilla-icu-strncat.patch ++++++
# HG changeset patch
# Parent 29be2a4daa0f512d22bde85b97b5460839026571
# User Wolfgang Rosenauer <w...@rosenauer.org>
From: Jan Engelhardt <jeng...@inai.de>
Reference: http://bugs.icu-project.org/trac/ticket/7808
diff --git a/intl/icu/source/tools/pkgdata/pkgdata.cpp
b/intl/icu/source/tools/pkgdata/pkgdata.cpp
--- a/intl/icu/source/tools/pkgdata/pkgdata.cpp
+++ b/intl/icu/source/tools/pkgdata/pkgdata.cpp
@@ -1975,22 +1975,22 @@ static void loadLists(UPKGOptions *o, UE
FILE *p = NULL;
size_t n;
static char buf[512] = "";
char cmdBuf[1024];
UErrorCode status = U_ZERO_ERROR;
const char cmd[] = "icu-config --incpkgdatafile";
/* #1 try the same path where pkgdata was called from. */
- findDirname(progname, cmdBuf, 1024, &status);
+ findDirname(progname, cmdBuf, sizeof(cmdBuf), &status);
if(U_SUCCESS(status)) {
if (cmdBuf[0] != 0) {
- uprv_strncat(cmdBuf, U_FILE_SEP_STRING, 1024);
+ uprv_strncat(cmdBuf, U_FILE_SEP_STRING,
sizeof(cmdBuf)-1-strlen(cmdBuf));
}
- uprv_strncat(cmdBuf, cmd, 1024);
+ uprv_strncat(cmdBuf, cmd, sizeof(cmdBuf)-1-strlen(cmdBuf));
if(verbose) {
fprintf(stdout, "# Calling icu-config: %s\n", cmdBuf);
}
p = popen(cmdBuf, "r");
}
if(p == NULL || (n = fread(buf, 1, 511, p)) <= 0) {
++++++ thunderbird-31.3.0-source.tar.xz -> thunderbird-31.4.0-source.tar.xz
++++++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-31.3.0-source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-31.4.0-source.tar.xz
differ: char 26, line 1
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
