Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2015-12-27 01:59:47
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird"
Changes:
--------
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-12-03 13:29:06.000000000 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes
2015-12-27 01:59:49.000000000 +0100
@@ -1,0 +2,21 @@
+Wed Dec 23 10:13:38 UTC 2015 - [email protected]
+
+- update to Thunderbird 38.5.0 (bnc#959277)
+ * MFSA 2015-134/CVE-2015-7201
+ Miscellaneous memory safety hazards
+ * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
+ Use-after-free in WebRTC when datachannel is used after being
+ destroyed
+ * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
+ Integer overflow allocating extremely large textures
+ * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
+ Underflow through code inspection
+ * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
+ Integer overflow in MP4 playback in 64-bit versions
+ * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
+ Integer underflow and buffer overflow processing MP4 metadata in
+ libstagefright
+ * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
+ Cross-site reading attack through data and view-source URIs
+
+-------------------------------------------------------------------
Old:
----
l10n-38.4.0.tar.xz
thunderbird-38.4.0-source.tar.xz
New:
----
l10n-38.5.0.tar.xz
thunderbird-38.5.0-source.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ MozillaThunderbird.spec ++++++
--- /var/tmp/diff_new_pack.AgrYhq/_old 2015-12-27 02:00:12.000000000 +0100
+++ /var/tmp/diff_new_pack.AgrYhq/_new 2015-12-27 02:00:12.000000000 +0100
@@ -17,7 +17,7 @@
#
-%define mainversion 38.4.0
+%define mainversion 38.5.0
%define update_channel release
%if %suse_version > 1210
@@ -69,7 +69,7 @@
%endif
Version: %{mainversion}
Release: 0
-%define releasedate 2015092700
+%define releasedate 2015122200
Provides: thunderbird = %{version}
Provides: appdata()
Provides: appdata(thunderbird.appdata.xml)
++++++ compare-locales.tar.xz ++++++
++++++ create-tar.sh ++++++
--- /var/tmp/diff_new_pack.AgrYhq/_old 2015-12-27 02:00:12.000000000 +0100
+++ /var/tmp/diff_new_pack.AgrYhq/_new 2015-12-27 02:00:12.000000000 +0100
@@ -2,8 +2,8 @@
CHANNEL="esr38"
BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_4_0_RELEASE"
-VERSION="38.4.0"
+RELEASE_TAG="THUNDERBIRD_38_5_0_RELEASE"
+VERSION="38.5.0"
echo "cloning $BRANCH..."
hg clone http://hg.mozilla.org/$BRANCH thunderbird
++++++ l10n-38.4.0.tar.xz -> l10n-38.5.0.tar.xz ++++++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.4.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.5.0.tar.xz differ:
char 26, line 1
++++++ thunderbird-38.4.0-source.tar.xz -> thunderbird-38.5.0-source.tar.xz
++++++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.4.0-source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.5.0-source.tar.xz
differ: char 26, line 1