commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-10-26 16:08:16

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3463 (New)


Package is "MozillaThunderbird"

Mon Oct 26 16:08:16 2020 rev:241 rq:843275 version:78.4.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-10-20 16:04:55.553853968 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3463/MozillaThunderbird.changes
  2020-10-26 16:08:17.546494198 +0100
@@ -1,0 +2,20 @@
+Tue Oct 20 11:54:05 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 78.4.0
+  * MailExtensions: browser.tabs.sendMessage API added
+  * MailExtensions: messageDisplayScripts API added
+  * Yahoo and AOL mail users using password authentication will be
+migrated to OAuth2
+  * MailExtensions: messageDisplay APIs extended to support multiple
+selected messages
+  * MailExtensions: compose.begin functions now support creating a
+message with attachments
+  * multiple bugfixes
+  MFSA 2020-47 (bsc#1177872)
+  * CVE-2020-15969 (bmo#1666570)
+Use-after-free in usersctp
+  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954, bmo#1662760,
+bmo#1663439, bmo#1666140)
+Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4
+
+---

Old:

  l10n-78.3.3.tar.xz
  thunderbird-78.3.3.source.tar.xz
  thunderbird-78.3.3.source.tar.xz.asc

New:

  l10n-78.4.0.tar.xz
  thunderbird-78.4.0.source.tar.xz
  thunderbird-78.4.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.z8KdY6/_old  2020-10-26 16:08:36.162511331 +0100
+++ /var/tmp/diff_new_pack.z8KdY6/_new  2020-10-26 16:08:36.166511334 +0100
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major  78
-%define mainver%major.3.3
-%define orig_version   78.3.3
+%define mainver%major.4.0
+%define orig_version   78.4.0
 %define orig_suffix%{nil}
 %define update_channel release
 %define source_prefix  thunderbird-%{orig_version}

++ l10n-78.3.3.tar.xz -> l10n-78.4.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.3.3.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3463/l10n-78.4.0.tar.xz 
differ: char 27, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.z8KdY6/_old  2020-10-26 16:08:36.366511518 +0100
+++ /var/tmp/diff_new_pack.z8KdY6/_new  2020-10-26 16:08:36.366511518 +0100
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr78"
-VERSION="78.3.3"
+VERSION="78.4.0"
 VERSION_SUFFIX=""
-PREV_VERSION="78.3.2"
+PREV_VERSION="78.3.3"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="a7e8cbc5a527a8881fe14e5f95ae2aff2cd4eb4f"
-RELEASE_TIMESTAMP="20201014192622"
+RELEASE_TAG="d5c3faff83924f56859ea4584eb0610c68a0cafa"
+RELEASE_TIMESTAMP="20201019003438"

++ thunderbird-78.3.3.source.tar.xz -> thunderbird-78.4.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.3.3.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3463/thunderbird-78.4.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-10-20 16:01:45

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3486 (New)


Package is "MozillaThunderbird"

Tue Oct 20 16:01:45 2020 rev:240 rq:842109 version:78.3.3

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-10-08 13:11:04.003111730 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3486/MozillaThunderbird.changes
  2020-10-20 16:04:55.553853968 +0200
@@ -1,0 +2,14 @@
+Thu Oct 15 14:31:39 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 78.3.3
+  * OpenPGP: Improved support for encrypting with subkeys
+  * OpenPGP message status icons were not visible in message header pane
+  * OpenPGP Key Manager was missing from Tools menu on macOS
+  * Creating a new calendar event did not require an event title
+- remove python2 dependencies for TW
+- support wayland mode/autodetection in startup wrapper
+- replace some Requires to use requires_ge macro where appropriate
+- improve langpack build (as already used for Firefox)
+- add ccache statistics output to build
+
+---

Old:

  l10n-78.3.2.tar.xz
  thunderbird-78.3.2.source.tar.xz
  thunderbird-78.3.2.source.tar.xz.asc

New:

  l10n-78.3.3.tar.xz
  thunderbird-78.3.3.source.tar.xz
  thunderbird-78.3.3.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.7vj2TO/_old  2020-10-20 16:06:32.289899773 +0200
+++ /var/tmp/diff_new_pack.7vj2TO/_new  2020-10-20 16:06:32.293899775 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major  78
-%define mainver%major.3.2
-%define orig_version   78.3.2
+%define mainver%major.3.3
+%define orig_version   78.3.3
 %define orig_suffix%{nil}
 %define update_channel release
 %define source_prefix  thunderbird-%{orig_version}
@@ -62,11 +62,13 @@
 %define localize 1
 %define crashreporter 0
 %if 0%{?sle_version} > 150100
-# pipewire is too old on Leap <=15.1
+# pipewire and wayland is too old on Leap <=15.1
 # Activate only on everything newer
 %define with_pipewire0_3 1
+%define wayland_supported 1
 %else
 %define with_pipewire0_3 0
+%define wayland_supported 0
 %endif
 
 Name:   %{pkgname}
@@ -90,13 +92,19 @@
 BuildRequires:  mozilla-nss-devel >= 3.53.1
 BuildRequires:  nasm >= 2.14
 BuildRequires:  nodejs10 >= 10.21.0
+# Leap 15 still requires python2 for BE (ICU creation)
+%if 0%{?suse_version} < 1550
 BuildRequires:  python-devel
+BuildRequires:  python2-xml
+%endif
 %if 0%{?sle_version} >= 12 && 0%{?sle_version} < 15
+# SLE12 exception
 BuildRequires:  python-libxml2
 BuildRequires:  python36
 %else
-BuildRequires:  python2-xml
+# TW is python2 free
 BuildRequires:  python3 >= 3.5
+BuildRequires:  python3-devel
 %endif
 BuildRequires:  rust >= 1.41
 BuildRequires:  rust-cbindgen >= 0.14.1
@@ -194,12 +202,13 @@
 Patch25:mozilla-bmo998749.patch
 Patch26:mozilla-bmo1626236.patch
 Patch27:mozilla-s390x-skia-gradient.patch
-%endif # only_print_mozconfig
+%endif
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 PreReq: coreutils fileutils textutils /bin/sh
 ### build options end
-Requires:   mozilla-nspr >= %(rpm -q --queryformat '%%{VERSION}' 
mozilla-nspr)
-Requires:   mozilla-nss >= %(rpm -q --queryformat '%%{VERSION}' 
mozilla-nss)
+%requires_gemozilla-nspr
+%requires_gemozilla-nss
+%requires_gelibfreetype6
 Recommends: libcanberra0
 Recommends: libpulse0
 Requires(post): desktop-file-utils
@@ -293,7 +302,7 @@
 %patch25 -p1
 %patch26 -p1
 %patch27 -p1
-%endif # only_print_mozconfig
+%endif
 
 %build
 %if !%{with only_print_mozconfig}
@@ -318,9 +327,9 @@
   exit 1
 fi
 %endif
-%endif # only_print_mozconfig
 
 source %{SOURCE4}
+%endif
 
 export CARGO_HOME=${RPM_BUILD_DIR}/%{srcname}-%{orig_version}/.cargo
 export MOZ_SOURCE_CHANGESET=$RELEASE_TAG
@@ -409,9 +418,6 @@
 ac_add_options --with-system-nspr
 ac_add_options --with-system-nss
 ac_add_options --with-ccache
-%if %{localize}
-ac_add_options --with-l10n-base=$RPM_BUILD_DIR/l10n
-%endif
 ac_add_options --with-system-zlib
 ac_add_options --disable-updater
 ac_add_options --disable-tests
@@ -473,14 +479,38 @@
 %if %localize
 mkdir -p %{buildroot}%{progdir}/extensions/
 truncate -s 0 %{_tmppath}/translations.{common,other}
+# langpack-build can not be done in parallel easily (see 
https://bugzilla.mozilla.org/show_bug.cgi?id=1660943)
+# Therefore, we have to have a separate obj-dir for each language
+# We do this, by creating a 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-10-08 13:09:58

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4249 (New)


Package is "MozillaThunderbird"

Thu Oct  8 13:09:58 2020 rev:239 rq:840001 version:78.3.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-10-03 18:56:08.097524319 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4249/MozillaThunderbird.changes
  2020-10-08 13:11:04.003111730 +0200
@@ -1,0 +2,12 @@
+Wed Oct  7 07:02:03 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 78.3.2
+  * OpenPGP: Improved support for encrypting with subkeys
+  * OpenPGP: Encrypted messages with international characters were
+sometimes displayed incorrectly
+  * Single-click deletion of recipient pills with middle mouse
+button restored
+  * Searching an address book list did not display results
+  * Dark mode, high contrast, and Windows theming fixes
+
+---

Old:

  l10n-78.3.1.tar.xz
  thunderbird-78.3.1.source.tar.xz
  thunderbird-78.3.1.source.tar.xz.asc

New:

  l10n-78.3.2.tar.xz
  thunderbird-78.3.2.source.tar.xz
  thunderbird-78.3.2.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.U7G4q7/_old  2020-10-08 13:11:14.879121577 +0200
+++ /var/tmp/diff_new_pack.U7G4q7/_new  2020-10-08 13:11:14.883121580 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major  78
-%define mainver%major.3.1
-%define orig_version   78.3.1
+%define mainver%major.3.2
+%define orig_version   78.3.2
 %define orig_suffix%{nil}
 %define update_channel release
 %define source_prefix  thunderbird-%{orig_version}

++ l10n-78.3.1.tar.xz -> l10n-78.3.2.tar.xz ++

++ tar_stamps ++
--- /var/tmp/diff_new_pack.U7G4q7/_old  2020-10-08 13:11:15.175121845 +0200
+++ /var/tmp/diff_new_pack.U7G4q7/_new  2020-10-08 13:11:15.175121845 +0200
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr78"
-VERSION="78.3.1"
+VERSION="78.3.2"
 VERSION_SUFFIX=""
-PREV_VERSION="78.3.0"
+PREV_VERSION="78.3.1"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="00912779d73faef4277c57fe99aa5259b11d244d"
-RELEASE_TIMESTAMP="20200925001233"
+RELEASE_TAG="6ee0e0ff64f4ccda9c478426d0b5d15cd583f8e6"
+RELEASE_TIMESTAMP="20201006011220"

++ thunderbird-78.3.1.source.tar.xz -> thunderbird-78.3.2.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.3.1.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4249/thunderbird-78.3.2.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-10-03 18:55:52

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4249 (New)


Package is "MozillaThunderbird"

Sat Oct  3 18:55:52 2020 rev:238 rq:838449 version:78.3.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-09-09 17:48:06.078483088 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4249/MozillaThunderbird.changes
  2020-10-03 18:56:08.097524319 +0200
@@ -1,0 +2,54 @@
+Fri Sep 25 06:25:54 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 78.3.1
+  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
+
+---
+Wed Sep 23 21:04:45 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 78.3.0
+  MFSA 2020-44 (bsc#1176756)
+  * CVE-2020-15677 (bmo#1641487)
+Download origin spoofing via redirect
+  * CVE-2020-15676 (bmo#1646140)
+XSS when pasting attacker-controlled data into a
+contenteditable element
+  * CVE-2020-15678 (bmo#1660211)
+When recursing through layers while scrolling, an iterator
+may have become invalid, resulting in a potential use-after-
+free scenario
+  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
+Memory safety bugs fixed in Thunderbird 78.3
+- requires NSPR >= 4.25.1
+- removed obsolete thunderbird-bmo1664607.patch
+
+---
+Sun Sep 13 20:10:39 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 78.2.2
+  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
+- added thunderbird-bmo1664607.patch required for builds w/o updater
+  (boo#1176384)
+
+---
+Mon Aug 31 12:08:25 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 78.2.1
+  * based on Mozilla's 78 ESR codebase
+  * many new and changed features
+https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
+  * built-in OpenPGP support (enigmail neither required nor supported)
+- added platform patches:
+  * mozilla-s390x-skia-gradient.patch
+  * mozilla-pipewire-0-3.patch
+  * mozilla-bmo1512162.patch
+  * mozilla-bmo1626236.patch
+  * mozilla-bmo998749.patch
+  * mozilla-sandbox-fips.patch
+- removed obsolete platform patches
+  * mozilla-s390-bigendian.patch
+  * mozilla-nestegg-big-endian.patch
+  * mozilla-openaes-decl.patch
+  * mozilla-cubeb-noreturn.patch
+
+---

Old:

  l10n-68.12.0.tar.xz
  mozilla-cubeb-noreturn.patch
  mozilla-nestegg-big-endian.patch
  mozilla-openaes-decl.patch
  mozilla-s390-bigendian.patch
  thunderbird-68.12.0.source.tar.xz
  thunderbird-68.12.0.source.tar.xz.asc

New:

  l10n-78.3.1.tar.xz
  mozilla-bmo1512162.patch
  mozilla-bmo1626236.patch
  mozilla-bmo998749.patch
  mozilla-pipewire-0-3.patch
  mozilla-s390x-skia-gradient.patch
  mozilla-sandbox-fips.patch
  spellcheck.js
  thunderbird-78.3.1.source.tar.xz
  thunderbird-78.3.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.epmMh5/_old  2020-10-03 18:56:39.101558658 +0200
+++ /var/tmp/diff_new_pack.epmMh5/_new  2020-10-03 18:56:39.109558668 +0200
@@ -25,14 +25,19 @@
 # orig_suffix b3
 # major 69
 # mainver %major.99
-%define major   68
-%define mainver %major.12.0
-%define orig_version68.12.0
+%define major  78
+%define mainver%major.3.1
+%define orig_version   78.3.1
 %define orig_suffix %{nil}
 %define update_channel  release
-%define source_prefix   thunderbird-%{mainver}
+%define source_prefix  thunderbird-%{orig_version}
 
-# always build with GCC as SUSE Security Team requires that
+%if 0%{?suse_version} > 1500
+# PGO builds do not work in TW currently (bmo#1642410)
+%define do_profiling   0
+%endif
+
+# upstream default is clang (to use gcc for large parts set to 0)
 %define clang_build 0
 
 # PIE, full relro
@@ -47,6 +52,7 @@
 # general build definitions
 %define progname thunderbird
 %define pkgname  MozillaThunderbird
+%define srcname  thunderbird
 %define appname  Thunderbird
 %define progdir %{_prefix}/%_lib/%{progname}
 %define gnome_dir %{_prefix}
@@ -55,8 +61,13 @@
 %define __requires_exclude 
^(libmoz.*|liblgpllibs.*|libxul.*|libldap.*|libldif.*|libprldap.*)$
 %define localize 1
 %define crashreporter 0
-
-%define has_system_cairo 0
+%if 0%{?sle_version} > 150100
+# pipewire is too old on Leap <=15.1
+# Activate only on everything newer
+%define with_pipewire0_3 1
+%else
+%define 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-09-09 17:47:19

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3399 (New)


Package is "MozillaThunderbird"

Wed Sep  9 17:47:19 2020 rev:237 rq:832601 version:68.12.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-08-23 09:20:13.914653620 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3399/MozillaThunderbird.changes
  2020-09-09 17:48:06.078483088 +0200
@@ -1,0 +2,19 @@
+Sun Aug 30 11:05:01 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.12.0
+  MFSA 2020-40 (bsc#1175686)
+  * CVE-2020-15663 (bmo#1643199)
+Downgrade attack on the Mozilla Maintenance Service could have
+resulted in escalation of privilege
+  * CVE-2020-15664 (bmo#1658214)
+Attacker-induced prompt for extension installation
+  * CVE-2020-15669 (bmo#1656957)
+Use-After-Free when aborting an operation
+
+---
+Fri Aug 28 09:04:11 UTC 2020 - Michel Normand 
+
+- Put back %limit_build macro usage to avoid build error PowerPC
+  (remove memoryperjob constraint)
+
+---

Old:

  l10n-68.11.0.tar.xz
  thunderbird-68.11.0.source.tar.xz
  thunderbird-68.11.0.source.tar.xz.asc

New:

  l10n-68.12.0.tar.xz
  thunderbird-68.12.0.source.tar.xz
  thunderbird-68.12.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.ifShLa/_old  2020-09-09 17:48:28.954501674 +0200
+++ /var/tmp/diff_new_pack.ifShLa/_new  2020-09-09 17:48:28.958501676 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.11.0
-%define orig_version68.11.0
+%define mainver %major.12.0
+%define orig_version68.12.0
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}
@@ -75,6 +75,7 @@
 BuildRequires:  libcurl-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
+BuildRequires:  memory-constraints
 BuildRequires:  mozilla-nspr-devel >= 4.21
 BuildRequires:  mozilla-nss-devel >= 3.44.4
 BuildRequires:  nasm >= 2.13
@@ -326,6 +327,7 @@
 echo ""
 cat << EOF
 %else
+%limit_build -m 2000
 export MOZ_DEBUG_FLAGS="-pipe"
 cat << EOF > $MOZCONFIG
 %endif

++ _constraints ++
--- /var/tmp/diff_new_pack.ifShLa/_old  2020-09-09 17:48:29.086501780 +0200
+++ /var/tmp/diff_new_pack.ifShLa/_new  2020-09-09 17:48:29.090501783 +0200
@@ -7,9 +7,6 @@
 
   9
 
-
-  2000
-
   
   
 

++ l10n-68.11.0.tar.xz -> l10n-68.12.0.tar.xz ++

++ tar_stamps ++
--- /var/tmp/diff_new_pack.ifShLa/_old  2020-09-09 17:48:29.342501989 +0200
+++ /var/tmp/diff_new_pack.ifShLa/_new  2020-09-09 17:48:29.342501989 +0200
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.11.0"
+VERSION="68.12.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.10.0"
+PREV_VERSION="68.11.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="a247645d951bcedb356a0d9f273e878a7d4d2180"
-RELEASE_TIMESTAMP="20200721201500"
+RELEASE_TAG="b41cdff70b185358d9c4c1d4a36cfad15a24f001"
+RELEASE_TIMESTAMP="20200820223055"

++ thunderbird-68.11.0.source.tar.xz -> thunderbird-68.12.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.11.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3399/thunderbird-68.12.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-08-23 09:20:12

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3399 (New)


Package is "MozillaThunderbird"

Sun Aug 23 09:20:12 2020 rev:236 rq:828128 version:68.11.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-08-05 20:26:26.127026387 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3399/MozillaThunderbird.changes
  2020-08-23 09:20:13.914653620 +0200
@@ -1,0 +2,5 @@
+Thu Aug 20 08:57:15 UTC 2020 - Martin Liška 
+
+- Use memoryperjob constraint instead of %limit_build macro.
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.SBbIYX/_old  2020-08-23 09:20:16.370654981 +0200
+++ /var/tmp/diff_new_pack.SBbIYX/_new  2020-08-23 09:20:16.374654984 +0200
@@ -75,7 +75,6 @@
 BuildRequires:  libcurl-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
-BuildRequires:  memory-constraints
 BuildRequires:  mozilla-nspr-devel >= 4.21
 BuildRequires:  mozilla-nss-devel >= 3.44.4
 BuildRequires:  nasm >= 2.13
@@ -327,7 +326,6 @@
 echo ""
 cat << EOF
 %else
-%limit_build -m 2000
 export MOZ_DEBUG_FLAGS="-pipe"
 cat << EOF > $MOZCONFIG
 %endif

++ _constraints ++
--- /var/tmp/diff_new_pack.SBbIYX/_old  2020-08-23 09:20:16.442655021 +0200
+++ /var/tmp/diff_new_pack.SBbIYX/_new  2020-08-23 09:20:16.442655021 +0200
@@ -7,6 +7,9 @@
 
   9
 
+
+  2000
+
   
   
 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-08-05 20:26:12

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3592 (New)


Package is "MozillaThunderbird"

Wed Aug  5 20:26:12 2020 rev:235 rq:823878 version:68.11.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-07-06 16:14:37.608458940 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3592/MozillaThunderbird.changes
  2020-08-05 20:26:26.127026387 +0200
@@ -1,0 +2,18 @@
+Sat Aug  1 09:54:53 UTC 2020 - Andreas Stieger 
+
+- Mozilla Thunderbird 68.11.0
+  * fixed: FileLink attachments included as a link and file when
+added from a network drive via drag & drop (bmo#793118)
+  MFSA 2020-35 (bsc#1174538)
+  * CVE-2020-15652 (bmo#1634872)
+Potential leak of redirect targets when loading scripts in a
+worker
+  * CVE-2020-6514 (bmo#1642792)
+WebRTC data channel leaks internal address to peer
+  * CVE-2020-6463 (bmo#1635293)
+Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
+  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
+bmo#1650811)
+Memory safety bugs fixed in Thunderbird 68.11
+
+---
@@ -8,0 +27,16 @@
+  MFSA 2020-26 (bsc#1173576)
+  * CVE-2020-12417 (bmo#1640737)
+Memory corruption due to missing sign-extension for ValueTags
+on ARM64
+  * CVE-2020-12418 (bmo#1641303)
+Information disclosure due to manipulated URL object
+  * CVE-2020-12419 (bmo#1643874)
+Use-after-free in nsGlobalWindowInner
+  * CVE-2020-12420 (bmo#1643437)
+Use-After-Free when trying to connect to a STUN server
+  * MFSA-2020-0001 (bmo#1606610)
+Automatic account setup leaks Microsoft Exchange login
+credentials
+  * CVE-2020-12421 (bmo#1308251)
+Add-On updates did not respect the same certificate trust
+rules as software updates

Old:

  l10n-68.10.0.tar.xz
  thunderbird-68.10.0.source.tar.xz
  thunderbird-68.10.0.source.tar.xz.asc

New:

  l10n-68.11.0.tar.xz
  thunderbird-68.11.0.source.tar.xz
  thunderbird-68.11.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.qmLtAR/_old  2020-08-05 20:26:43.955032026 +0200
+++ /var/tmp/diff_new_pack.qmLtAR/_new  2020-08-05 20:26:43.955032026 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.10.0
-%define orig_version68.10.0
+%define mainver %major.11.0
+%define orig_version68.11.0
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}

++ l10n-68.10.0.tar.xz -> l10n-68.11.0.tar.xz ++

++ tar_stamps ++
--- /var/tmp/diff_new_pack.qmLtAR/_old  2020-08-05 20:26:44.223032111 +0200
+++ /var/tmp/diff_new_pack.qmLtAR/_new  2020-08-05 20:26:44.223032111 +0200
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.10.0"
+VERSION="68.11.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.9.0"
+PREV_VERSION="68.10.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="6a7c26eb22bfe18295497c720a73e24b29b0604e"
-RELEASE_TIMESTAMP="20200629235513"
+RELEASE_TAG="a247645d951bcedb356a0d9f273e878a7d4d2180"
+RELEASE_TIMESTAMP="20200721201500"

++ thunderbird-68.10.0.source.tar.xz -> thunderbird-68.11.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.10.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3592/thunderbird-68.11.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-07-06 16:14:16

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3060 (New)


Package is "MozillaThunderbird"

Mon Jul  6 16:14:16 2020 rev:234 rq:818251 version:68.10.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-06-14 18:15:26.230869331 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3060/MozillaThunderbird.changes
  2020-07-06 16:14:37.608458940 +0200
@@ -1,0 +2,9 @@
+Wed Jul  1 21:00:23 UTC 2020 - Andreas Stieger 
+
+- Mozilla Thunderbird 68.10.0
+  * fixed: Chat: Topics displayed some characters improperly
+(bmo#1644024)
+  * fixed: Calendar: Filtering tasks did not work when
+"Incomplete Tasks" was selected (bmo#1593711)
+
+---

Old:

  l10n-68.9.0.tar.xz
  thunderbird-68.9.0.source.tar.xz
  thunderbird-68.9.0.source.tar.xz.asc

New:

  l10n-68.10.0.tar.xz
  thunderbird-68.10.0.source.tar.xz
  thunderbird-68.10.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.bY3HBV/_old  2020-07-06 16:15:04.424541162 +0200
+++ /var/tmp/diff_new_pack.bY3HBV/_new  2020-07-06 16:15:04.424541162 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.9.0
-%define orig_version68.9.0
+%define mainver %major.10.0
+%define orig_version68.10.0
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}

++ l10n-68.9.0.tar.xz -> l10n-68.10.0.tar.xz ++

++ tar_stamps ++
--- /var/tmp/diff_new_pack.bY3HBV/_old  2020-07-06 16:15:04.648541849 +0200
+++ /var/tmp/diff_new_pack.bY3HBV/_new  2020-07-06 16:15:04.652541861 +0200
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.9.0"
+VERSION="68.10.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.8.1"
+PREV_VERSION="68.9.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="787d887f43fcbfe254ff0c9650c5517710071b74"
-RELEASE_TIMESTAMP="20200602112704"
+RELEASE_TAG="6a7c26eb22bfe18295497c720a73e24b29b0604e"
+RELEASE_TIMESTAMP="20200629235513"

++ thunderbird-68.9.0.source.tar.xz -> thunderbird-68.10.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.9.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3060/thunderbird-68.10.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-06-14 18:15:05

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606 (New)


Package is "MozillaThunderbird"

Sun Jun 14 18:15:05 2020 rev:233 rq:813558 version:68.9.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-06-08 23:59:59.644318775 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606/MozillaThunderbird.changes
  2020-06-14 18:15:26.230869331 +0200
@@ -1,0 +2,6 @@
+Thu Jun 11 14:52:51 UTC 2020 - Wolfgang Rosenauer 
+
+- build with nodejs10 to be able to drop nodejs8 from TW
+- updated create-tar.sh
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.4PLicg/_old  2020-06-14 18:15:29.662880853 +0200
+++ /var/tmp/diff_new_pack.4PLicg/_new  2020-06-14 18:15:29.666880867 +0200
@@ -62,7 +62,7 @@
 BuildRequires:  Mesa-devel
 BuildRequires:  alsa-devel
 BuildRequires:  autoconf213
-BuildRequires:  dbus-1-glib-devel >= 0.60
+BuildRequires:  dbus-1-glib-devel
 BuildRequires:  fdupes
 %if 0%{?suse_version} <= 1320
 BuildRequires:  gcc7-c++
@@ -79,7 +79,7 @@
 BuildRequires:  mozilla-nspr-devel >= 4.21
 BuildRequires:  mozilla-nss-devel >= 3.44.4
 BuildRequires:  nasm >= 2.13
-BuildRequires:  nodejs8 >= 8.11
+BuildRequires:  nodejs10 >= 10.19.0
 BuildRequires:  python-devel
 BuildRequires:  python2-xml
 BuildRequires:  python3 >= 3.5
@@ -144,7 +144,7 @@
 Source6:suse-default-prefs.js
 Source7:l10n-%{version}.tar.xz
 Source9:thunderbird.appdata.xml
-Source14:   
https://github.com/openSUSE/firefox-scripts/raw/8a54002/create-tar.sh
+Source14:   
https://github.com/openSUSE/firefox-scripts/raw/5e54f4a/create-tar.sh
 Source20:   
https://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}%{orig_suffix}/source/%{progname}-%{orig_version}%{orig_suffix}.source.tar.xz.asc
 Source21:   
https://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}/KEY#/mozilla.keyring
 # Gecko/Toolkit

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.4PLicg/_old  2020-06-14 18:15:29.742881122 +0200
+++ /var/tmp/diff_new_pack.4PLicg/_new  2020-06-14 18:15:29.742881122 +0200
@@ -181,10 +181,7 @@
 BUILD_ID=$(get_build_number "$VERSION$VERSION_SUFFIX")
 
 if [ -z ${SKIP_LOCALES+x} ]; then
-  # TODO: Thunderbird has usually "default" as locale entry. 
-  # There we probably need to double-check Firefox-locals
-  # For now, just download every time for Thunderbird
-  if [ "$PRODUCT" = "firefox" ] && [ "$PREV_VERSION" != "" ] && 
locales_unchanged "$BUILD_ID"; then
+  if [ "$PREV_VERSION" != "" ] && locales_unchanged "$BUILD_ID"; then
 printf "%-40s: Did not change. Skipping.\n" "locales"
 LOCALES_CHANGED=0
   else

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-06-08 23:57:56

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606 (New)


Package is "MozillaThunderbird"

Mon Jun  8 23:57:56 2020 rev:232 rq:812112 version:68.9.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-05-28 09:09:49.328097325 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606/MozillaThunderbird.changes
  2020-06-08 23:59:59.644318775 +0200
@@ -1,0 +2,20 @@
+Sat Jun  6 21:05:07 UTC 2020 - Andreas Stieger 
+
+- Mozilla Thunderbird 68.9.0
+  * fixed: Custom headers added for searching or filtering could
+not be removed (bmo#1631577)
+  * fixed: Calendar: Today Pane updated prior to loading all data
+(bmo#1635613)
+  * fixed: Stability improvements (bmo#1625677)
+  MFSA 2020-22 (bsc#1172402)
+  * CVE-2020-12405 (bmo#1631618)
+Use-after-free in SharedWorkerService
+  * CVE-2020-12406 (bmo#1639590)
+JavaScript Type confusion with NativeTypes
+  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
+Memory safety bugs fixed in Thunderbird 68.9.0
+  * CVE-2020-12398 (bmo#1613623)
+Security downgrade with IMAP STARTTLS leads to information
+leakage
+
+---

Old:

  l10n-68.8.1.tar.xz
  thunderbird-68.8.1.source.tar.xz
  thunderbird-68.8.1.source.tar.xz.asc

New:

  l10n-68.9.0.tar.xz
  thunderbird-68.9.0.source.tar.xz
  thunderbird-68.9.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.ovHiea/_old  2020-06-09 00:00:16.668371290 +0200
+++ /var/tmp/diff_new_pack.ovHiea/_new  2020-06-09 00:00:16.672371302 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.8.1
-%define orig_version68.8.1
+%define mainver %major.9.0
+%define orig_version68.9.0
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}
@@ -62,7 +62,7 @@
 BuildRequires:  Mesa-devel
 BuildRequires:  alsa-devel
 BuildRequires:  autoconf213
-BuildRequires:  dbus-1-glib-devel
+BuildRequires:  dbus-1-glib-devel >= 0.60
 BuildRequires:  fdupes
 %if 0%{?suse_version} <= 1320
 BuildRequires:  gcc7-c++
@@ -77,7 +77,7 @@
 BuildRequires:  libnotify-devel
 BuildRequires:  memory-constraints
 BuildRequires:  mozilla-nspr-devel >= 4.21
-BuildRequires:  mozilla-nss-devel >= 3.44.3
+BuildRequires:  mozilla-nss-devel >= 3.44.4
 BuildRequires:  nasm >= 2.13
 BuildRequires:  nodejs8 >= 8.11
 BuildRequires:  python-devel

++ l10n-68.8.1.tar.xz -> l10n-68.9.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.8.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606/l10n-68.9.0.tar.xz 
differ: char 15, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.ovHiea/_old  2020-06-09 00:00:17.072372536 +0200
+++ /var/tmp/diff_new_pack.ovHiea/_new  2020-06-09 00:00:17.076372549 +0200
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.8.1"
+VERSION="68.9.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.8.0"
+PREV_VERSION="68.8.1"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="face673d2586b0063f823b13ee10a2b50bb964dd"
-RELEASE_TIMESTAMP="20200521175255"
+RELEASE_TAG="787d887f43fcbfe254ff0c9650c5517710071b74"
+RELEASE_TIMESTAMP="20200602112704"

++ thunderbird-68.8.1.source.tar.xz -> thunderbird-68.9.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.8.1.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606/thunderbird-68.9.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-05-28 09:09:41

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606 (New)


Package is "MozillaThunderbird"

Thu May 28 09:09:41 2020 rev:231 rq:808609 version:68.8.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-05-07 17:51:47.813434585 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606/MozillaThunderbird.changes
  2020-05-28 09:09:49.328097325 +0200
@@ -1,0 +2,10 @@
+Sun May 24 20:46:21 UTC 2020 - Andreas Stieger 
+
+- Mozilla Thunderbird 68.8.1
+  * fixed: IMAP stability improvements (bmo#1586494)
+  * fixed: HTML tags in IRC topic changes were rendered
+incorrectly (bmo#1607097)
+  * fixed: MailExtensions: Websockets could not be used
+(bmo#1627649)
+
+---

Old:

  l10n-68.8.0.tar.xz
  thunderbird-68.8.0.source.tar.xz
  thunderbird-68.8.0.source.tar.xz.asc

New:

  l10n-68.8.1.tar.xz
  thunderbird-68.8.1.source.tar.xz
  thunderbird-68.8.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.5y5KNg/_old  2020-05-28 09:10:15.404160347 +0200
+++ /var/tmp/diff_new_pack.5y5KNg/_new  2020-05-28 09:10:15.408160356 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.8.0
-%define orig_version68.8.0
+%define mainver %major.8.1
+%define orig_version68.8.1
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}

++ l10n-68.8.0.tar.xz -> l10n-68.8.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.8.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606/l10n-68.8.1.tar.xz 
differ: char 8, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.5y5KNg/_old  2020-05-28 09:10:15.588160792 +0200
+++ /var/tmp/diff_new_pack.5y5KNg/_new  2020-05-28 09:10:15.588160792 +0200
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.8.0"
+VERSION="68.8.1"
 VERSION_SUFFIX=""
-PREV_VERSION="68.7.0"
+PREV_VERSION="68.8.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="4c022a34cd5dd776671721c44db89f693f59132c"
-RELEASE_TIMESTAMP="20200504155042"
+RELEASE_TAG="face673d2586b0063f823b13ee10a2b50bb964dd"
+RELEASE_TIMESTAMP="20200521175255"

++ thunderbird-68.8.0.source.tar.xz -> thunderbird-68.8.1.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.8.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3606/thunderbird-68.8.1.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-05-07 17:51:25

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738 (New)


Package is "MozillaThunderbird"

Thu May  7 17:51:25 2020 rev:230 rq:800587 version:68.8.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-04-15 19:52:18.761539958 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/MozillaThunderbird.changes
  2020-05-07 17:51:47.813434585 +0200
@@ -1,0 +2,29 @@
+Tue May  5 07:49:33 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.8.0
+  * Account Manager fixes and improvements
+  * https://www.thunderbird.net/en-US/thunderbird/68.8.0/releasenotes
+  MFSA 2020-18 (bsc#1171186)
+  * CVE-2020-12397 (bmo#1617370)
+Sender Email Address Spoofing using encoded Unicode characters
+  * CVE-2020-12387 (bmo#1545345)
+Use-after-free during worker shutdown
+  * CVE-2020-6831 (bmo#1632241)
+Buffer overflow in SCTP chunk input validation
+  * CVE-2020-12392 (bmo#1614468)
+Arbitrary local file access with 'Copy as cURL'
+  * CVE-2020-12393 (bmo#1615471)
+Devtools' 'Copy as cURL' feature did not fully escape
+website-controlled data, potentially leading to command injection
+  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704, bmo#1624098,
+bmo#1625749, bmo#1626382, bmo#1628076, bmo#1631508)
+Memory safety bugs fixed in Thunderbird 68.8.0
+- removed obsolete patch mozilla-bmo1580963.patch
+
+---
+Tue May  5 07:00:36 UTC 2020 - Ismail Dönmez 
+
+- Add mozilla-bmo1580963.patch to fix build with rust 1.43
+  (bmo#1580963)
+
+---

Old:

  l10n-68.7.0.tar.xz
  thunderbird-68.7.0.source.tar.xz
  thunderbird-68.7.0.source.tar.xz.asc

New:

  l10n-68.8.0.tar.xz
  thunderbird-68.8.0.source.tar.xz
  thunderbird-68.8.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.T5o4gj/_old  2020-05-07 17:52:11.305484404 +0200
+++ /var/tmp/diff_new_pack.T5o4gj/_new  2020-05-07 17:52:11.305484404 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.7.0
-%define orig_version68.7.0
+%define mainver %major.8.0
+%define orig_version68.8.0
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}

++ l10n-68.7.0.tar.xz -> l10n-68.8.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.7.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/l10n-68.8.0.tar.xz 
differ: char 8, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.T5o4gj/_old  2020-05-07 17:52:11.529484878 +0200
+++ /var/tmp/diff_new_pack.T5o4gj/_new  2020-05-07 17:52:11.529484878 +0200
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.7.0"
+VERSION="68.8.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.6.0"
+PREV_VERSION="68.7.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="f7099fd16d6f5dff22154eab3161674142501739"
-RELEASE_TIMESTAMP="20200407160932"
+RELEASE_TAG="4c022a34cd5dd776671721c44db89f693f59132c"
+RELEASE_TIMESTAMP="20200504155042"

++ thunderbird-68.7.0.source.tar.xz -> thunderbird-68.8.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.7.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/thunderbird-68.8.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-04-15 19:52:17

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738 (New)


Package is "MozillaThunderbird"

Wed Apr 15 19:52:17 2020 rev:229 rq:793242 version:68.7.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-03-24 22:31:22.217059992 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/MozillaThunderbird.changes
  2020-04-15 19:52:18.761539958 +0200
@@ -1,0 +2,32 @@
+Thu Apr  9 17:27:50 UTC 2020 - Andreas Stieger 
+
+- Mozilla Thunderbird 68.7.0
+  * Updates to MailExtensions API
+  * Various improvements to account setup when connecting to an
+Exchange server
+  * Thread collapsed when opening news message in a new window
+  * Fix Addons not automatically updated to compatible version after
+upgrade from Thunderbird 60
+  * Updating addons did not prompt when requesting new permissions
+  * Extra recipients panel not keyboard-accessible
+  * Accessibility: Status bar was not detected by screenreaders
+  * Calendar: Invitations with embedded null bytes did not always decode 
correctly
+  * Calendar: Cancelled events didn't show with a line-through
+  * Various security fixes
+  MFSA 2020-14
+  In general, these flaws cannot be exploited through email in 
+  Thunderbird because scripting is disabled when reading mail, but
+  are potentially risks in browser or browser-like contexts.
+  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
+Use-after-free while running the nsDocShell destructor
+  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
+Use-after-free when handling a ReadableStream
+  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
+Uninitialized memory could be read when using the WebGL
+copyTexSubImage method
+  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
+Out of bounds write in GMPDecodeData when processing large images
+  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203,bsc#1168874)
+Memory safety bugs fixed in Thunderbird 68.7.0
+
+---

Old:

  l10n-68.6.0.tar.xz
  thunderbird-68.6.0.source.tar.xz
  thunderbird-68.6.0.source.tar.xz.asc

New:

  l10n-68.7.0.tar.xz
  thunderbird-68.7.0.source.tar.xz
  thunderbird-68.7.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.Xi7cZr/_old  2020-04-15 19:52:32.709546247 +0200
+++ /var/tmp/diff_new_pack.Xi7cZr/_new  2020-04-15 19:52:32.709546247 +0200
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.6.0
-%define orig_version68.6.0
+%define mainver %major.7.0
+%define orig_version68.7.0
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}

++ l10n-68.6.0.tar.xz -> l10n-68.7.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.6.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/l10n-68.7.0.tar.xz 
differ: char 8, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.Xi7cZr/_old  2020-04-15 19:52:32.937546349 +0200
+++ /var/tmp/diff_new_pack.Xi7cZr/_new  2020-04-15 19:52:32.937546349 +0200
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.6.0"
+VERSION="68.7.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.5.0"
+PREV_VERSION="68.6.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="5b1af38dba8628ef5ff2c395dc62fb10d52aa012"
-RELEASE_TIMESTAMP="20200310192757"
+RELEASE_TAG="f7099fd16d6f5dff22154eab3161674142501739"
+RELEASE_TIMESTAMP="20200407160932"

++ thunderbird-68.6.0.source.tar.xz -> thunderbird-68.7.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.6.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/thunderbird-68.7.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-03-24 22:31:06

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3160 (New)


Package is "MozillaThunderbird"

Tue Mar 24 22:31:06 2020 rev:228 rq:787142 version:68.6.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-02-14 16:24:07.671150050 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3160/MozillaThunderbird.changes
  2020-03-24 22:31:22.217059992 +0100
@@ -1,0 +2,25 @@
+Sat Mar 14 13:16:23 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.6.0
+  MFSA 2020-10 (bsc#1166238)
+  * CVE-2020-6805 (bmo#1610880)
+Use-after-free when removing data about origins
+  * CVE-2020-6806 (bmo#1612308)
+BodyStream::OnInputStreamReady was missing protections against
+state confusion
+  * CVE-2020-6807 (bmo#1614971)
+Use-after-free in cubeb during stream destruction
+  * CVE-2020-6811 (bmo#1607742)
+Devtools' 'Copy as cURL' feature did not fully escape
+website-controlled data, potentially leading to command injection
+  * CVE-2019-20503 (bmo#1613765)
+Out of bounds reads in sctp_load_addresses_from_init
+  * CVE-2020-6812 (bmo#1616661)
+The names of AirPods with personally identifiable information
+were exposed to websites with camera or microphone permission
+  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256, bmo#1612636,
+bmo#1614339)
+Memory safety bugs fixed in Thunderbird 68.6
+- requires NSS >= 3.44.3
+
+---

Old:

  l10n-68.5.0.tar.xz
  thunderbird-68.5.0.source.tar.xz
  thunderbird-68.5.0.source.tar.xz.asc

New:

  l10n-68.6.0.tar.xz
  thunderbird-68.6.0.source.tar.xz
  thunderbird-68.6.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.CG0CUh/_old  2020-03-24 22:31:39.613068732 +0100
+++ /var/tmp/diff_new_pack.CG0CUh/_new  2020-03-24 22:31:39.617068734 +0100
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.5.0
-%define orig_version68.5.0
+%define mainver %major.6.0
+%define orig_version68.6.0
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}
@@ -77,7 +77,7 @@
 BuildRequires:  libnotify-devel
 BuildRequires:  memory-constraints
 BuildRequires:  mozilla-nspr-devel >= 4.21
-BuildRequires:  mozilla-nss-devel >= 3.44.1
+BuildRequires:  mozilla-nss-devel >= 3.44.3
 BuildRequires:  nasm >= 2.13
 BuildRequires:  nodejs8 >= 8.11
 BuildRequires:  python-devel

++ l10n-68.5.0.tar.xz -> l10n-68.6.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.5.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3160/l10n-68.6.0.tar.xz 
differ: char 26, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.CG0CUh/_old  2020-03-24 22:31:39.889068870 +0100
+++ /var/tmp/diff_new_pack.CG0CUh/_new  2020-03-24 22:31:39.905068878 +0100
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.5.0"
+VERSION="68.6.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.4.2"
+PREV_VERSION="68.5.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="c25a4ce1e7569bddaafbdbc8ff09de82d852303a"
-RELEASE_TIMESTAMP="20200210021033"
+RELEASE_TAG="5b1af38dba8628ef5ff2c395dc62fb10d52aa012"
+RELEASE_TIMESTAMP="20200310192757"

++ thunderbird-68.5.0.source.tar.xz -> thunderbird-68.6.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.5.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.3160/thunderbird-68.6.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-02-14 16:23:55

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092 (New)


Package is "MozillaThunderbird"

Fri Feb 14 16:23:55 2020 rev:227 rq:773527 version:68.5.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-02-06 13:06:10.572269254 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092/MozillaThunderbird.changes
 2020-02-14 16:24:07.671150050 +0100
@@ -1,0 +2,31 @@
+Mon Feb 10 21:55:19 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.5.0
+  New
+  * Support for Client Identity IMAP/SMTP Service Extension
+  * Support for OAuth 2.0 authentication for POP3 accounts
+  Fixes
+  * Status area goes blank during account setup
+  * Calendar: Could not remove color for default categories
+  * Calendar: Prevent calendar component loading multiple times
+  * Calendar: Today pane did not retain width between sessions
+  MFSA 2020-07 (bsc#1163368)
+  * CVE-2020-6793 (bmo#1608539)
+Out-of-bounds read when processing certain email messages
+  * CVE-2020-6794 (bmo#1606619)
+Setting a master password post-Thunderbird 52 does not delete
+unencrypted previously stored passwords
+  * CVE-2020-6795 (bmo#1611105)
+Crash processing S/MIME messages with multiple signatures
+  * CVE-2020-6797 (bmo#1596668) (Mac OSX only)
+Extensions granted downloads.open permission could open arbitrary
+applications on Mac OSX
+  * CVE-2020-6798 (bmo#1602944)
+Incorrect parsing of template tag could result in JavaScript injection
+  * CVE-2020-6792 (bmo#1609607)
+Message ID calculcation was based on uninitialized data
+  * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851,
+bmo#1608580,bmo#1608785,bmo#1605777)
+Memory safety bugs fixed in Thunderbird 68.5
+
+---

Old:

  l10n-68.4.2.tar.xz
  thunderbird-68.4.2.source.tar.xz
  thunderbird-68.4.2.source.tar.xz.asc

New:

  l10n-68.5.0.tar.xz
  thunderbird-68.5.0.source.tar.xz
  thunderbird-68.5.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.JyyKeo/_old  2020-02-14 16:24:25.631159799 +0100
+++ /var/tmp/diff_new_pack.JyyKeo/_new  2020-02-14 16:24:25.635159801 +0100
@@ -2,7 +2,7 @@
 # spec file for package MozillaThunderbird
 #
 # Copyright (c) 2020 SUSE LLC
-#   2006-2019 Wolfgang Rosenauer 
+#   2006-2020 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.4.2
-%define orig_version68.4.2
+%define mainver %major.5.0
+%define orig_version68.5.0
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}

++ l10n-68.4.2.tar.xz -> l10n-68.5.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.4.2.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092/l10n-68.5.0.tar.xz 
differ: char 27, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.JyyKeo/_old  2020-02-14 16:24:25.787159884 +0100
+++ /var/tmp/diff_new_pack.JyyKeo/_new  2020-02-14 16:24:25.791159886 +0100
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.4.2"
+VERSION="68.5.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.4.1"
+PREV_VERSION="68.4.2"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="c53f9f02d2a8a29c85eee8e1ef555f4a0c91a1e9"
-RELEASE_TIMESTAMP="20200123140255"
+RELEASE_TAG="c25a4ce1e7569bddaafbdbc8ff09de82d852303a"
+RELEASE_TIMESTAMP="20200210021033"

++ thunderbird-68.4.2.source.tar.xz -> thunderbird-68.5.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.4.2.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092/thunderbird-68.5.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-02-06 13:06:03

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092 (New)


Package is "MozillaThunderbird"

Thu Feb  6 13:06:03 2020 rev:226 rq:769383 version:68.4.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-01-30 09:37:38.357369325 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092/MozillaThunderbird.changes
 2020-02-06 13:06:10.572269254 +0100
@@ -1,0 +2,5 @@
+Tue Jan 28 08:26:02 UTC 2020 - Stasiek Michalski 
+
+- Use a symbolic icon from branding internals
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.UwpoEI/_old  2020-02-06 13:06:17.360272948 +0100
+++ /var/tmp/diff_new_pack.UwpoEI/_new  2020-02-06 13:06:17.364272950 +0100
@@ -513,6 +513,10 @@
 pref("general.useragent.locale", "chrome://global/locale/intl.properties");
 EOF
 #
+# Install symbolic icon for GNOME
+mkdir -p %{buildroot}%{gnome_dir}/share/icons/hicolor/symbolic/apps/
+cp 
%{_builddir}/%{source_prefix}/comm/mail/branding/thunderbird/TB-symbolic.svg \
+   
%{buildroot}%{gnome_dir}/share/icons/hicolor/symbolic/apps/%{progname}-symbolic.svg
 for size in 16 22 24 32 48 64 128; do
   mkdir -p %{buildroot}%{_datadir}/icons/hicolor/${size}x${size}/apps/
   cp %{buildroot}%{progdir}/chrome/icons/default/default$size.png \
@@ -594,6 +598,7 @@
 %{_datadir}/appdata/
 %{_datadir}/applications/%{desktop_file_name}.desktop
 %{_datadir}/icons/hicolor/*/apps/%{progname}.png
+%{_datadir}/icons/hicolor/symbolic/apps/%{progname}-symbolic.svg
 %{_bindir}/%{progname}
 
 %if %localize

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-01-30 09:37:03

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092 (New)


Package is "MozillaThunderbird"

Thu Jan 30 09:37:03 2020 rev:225 rq:767881 version:68.4.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-01-14 20:57:51.542501125 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092/MozillaThunderbird.changes
 2020-01-30 09:37:38.357369325 +0100
@@ -1,0 +2,13 @@
+Fri Jan 24 19:47:53 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.4.2
+  * Calendar: Task and Event tree colours adjusted for the dark theme
+  * Retrieval of S/MIME certificates from LDAP failed
+  * Address-parsing crash on some IMAP servers when
+mail.imap.use_envelope_cmd is set
+  * Incorrect forwarding of HTML messages caused SMTP servers to
+respond with a timeout
+  * Calendar: Various parts of the calendar UI stopped working when
+a second Thunderbird window opened
+
+---

Old:

  l10n-68.4.1.tar.xz
  thunderbird-68.4.1.source.tar.xz
  thunderbird-68.4.1.source.tar.xz.asc

New:

  l10n-68.4.2.tar.xz
  thunderbird-68.4.2.source.tar.xz
  thunderbird-68.4.2.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.r1808v/_old  2020-01-30 09:37:59.661380726 +0100
+++ /var/tmp/diff_new_pack.r1808v/_new  2020-01-30 09:37:59.661380726 +0100
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.4.1
-%define orig_version68.4.1
+%define mainver %major.4.2
+%define orig_version68.4.2
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}

++ l10n-68.4.1.tar.xz -> l10n-68.4.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.4.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092/l10n-68.4.2.tar.xz 
differ: char 26, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.r1808v/_old  2020-01-30 09:37:59.789380795 +0100
+++ /var/tmp/diff_new_pack.r1808v/_new  2020-01-30 09:37:59.789380795 +0100
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.4.1"
+VERSION="68.4.2"
 VERSION_SUFFIX=""
-PREV_VERSION="68.3.1"
+PREV_VERSION="68.4.1"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="afc61dccd44560fac1f8647821e55b110e3fe370"
-RELEASE_TIMESTAMP="20200108224327"
+RELEASE_TAG="c53f9f02d2a8a29c85eee8e1ef555f4a0c91a1e9"
+RELEASE_TIMESTAMP="20200123140255"

++ thunderbird-68.4.1.source.tar.xz -> thunderbird-68.4.2.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.4.1.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26092/thunderbird-68.4.2.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2020-01-14 20:57:48

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675 (New)


Package is "MozillaThunderbird"

Tue Jan 14 20:57:48 2020 rev:224 rq:763056 version:68.4.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-12-30 13:49:57.541389636 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/MozillaThunderbird.changes
  2020-01-14 20:57:51.542501125 +0100
@@ -1,0 +2,38 @@
+Fri Jan 10 13:08:55 UTC 2020 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.4.1
+  * Various improvements when setting up an account for a Microsoft
+Exchange server: Now offers IMAP/SMTP if available, better
+detection for Office 365 accounts; re-run configuration after
+password change
+  Fixes:
+  * After changing view layout, the message display pane showed
+garbled content under some circumstances
+  * Various theme changes to achieve "pixel perfection": Unread icon,
+"no results" icon, paragraph format and font selector, background
+of folder summary tooltip
+  * Tags were lost on messages in shared IMAP folders under some
+circumstances
+  * Calendar: Event attendee dialog was not displayed correctly
+  MFSA 2020-04 (bsc#1160498, bsc#1160305)
+  * CVE-2019-17026 (bmo#1607443)
+IonMonkey type confusion with StoreElementHole and FallibleStoreElement
+  * CVE-2019-17015 (bmo#1599005)
+Memory corruption in parent process during new content process
+initialization on Windows
+  * CVE-2019-17016 (bmo#1599181)
+Bypass of @namespace CSS sanitization during pasting
+  * CVE-2019-17017 (bmo#1603055)
+Type Confusion in XPCVariant.cpp
+  * CVE-2019-17021 (bmo#1599008)
+Heap address disclosure in parent process during content process
+initialization on Windows
+  * CVE-2019-17022 (bmo#1602843)
+CSS sanitization does not escape HTML tags
+  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605, bmo#1601826)
+Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
+- removed obsolete patch mozilla-bmo1511604.patch
+- added mozilla-bmo1602730.patch to fix LE<->BE issues in the
+  platform (bmo#1602730)
+
+---

Old:

  l10n-68.3.1.tar.xz
  mozilla-bmo1511604.patch
  mozilla-bmo1583471.patch
  thunderbird-68.3.1.source.tar.xz
  thunderbird-68.3.1.source.tar.xz.asc

New:

  l10n-68.4.1.tar.xz
  mozilla-bmo1602730.patch
  thunderbird-68.4.1.source.tar.xz
  thunderbird-68.4.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.CoyjGF/_old  2020-01-14 20:58:27.566517800 +0100
+++ /var/tmp/diff_new_pack.CoyjGF/_new  2020-01-14 20:58:27.570517802 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2019 SUSE LLC
+# Copyright (c) 2020 SUSE LLC
 #   2006-2019 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.3.1
-%define orig_version68.3.1
+%define mainver %major.4.1
+%define orig_version68.4.1
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}
@@ -167,12 +167,11 @@
 Patch17:mozilla-bmo1504834-part1.patch
 Patch18:mozilla-bmo1504834-part2.patch
 Patch19:mozilla-bmo1504834-part3.patch
-Patch20:mozilla-bmo1511604.patch
+Patch20:mozilla-bmo1602730.patch
 Patch21:mozilla-bmo1554971.patch
 Patch22:mozilla-nestegg-big-endian.patch
 Patch24:mozilla-fix-top-level-asm.patch
 Patch25:mozilla-bmo1504834-part4.patch
-Patch26:mozilla-bmo1583471.patch
 %endif # only_print_mozconfig
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 PreReq: coreutils fileutils textutils /bin/sh
@@ -270,7 +269,6 @@
 %patch22 -p1
 %patch24 -p1
 %patch25 -p1
-%patch26 -p1
 %endif # only_print_mozconfig
 
 %build

++ l10n-68.3.1.tar.xz -> l10n-68.4.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.3.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/l10n-68.4.1.tar.xz 
differ: char 26, line 1

++ mozilla-bmo1511604.patch -> mozilla-bmo1602730.patch ++
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/mozilla-bmo1511604.patch  
2019-10-10 11:49:37.583929369 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/mozilla-bmo1602730.patch
2020-01-14 20:58:13.110511108 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-12-30 13:48:52

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675 (New)


Package is "MozillaThunderbird"

Mon Dec 30 13:48:52 2019 rev:223 rq:759724 version:68.3.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-12-11 12:03:55.756770535 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/MozillaThunderbird.changes
  2019-12-30 13:49:57.541389636 +0100
@@ -1,0 +2,21 @@
+Fri Dec 27 17:23:35 UTC 2019 - Wolfgang Rosenauer 
+
+- add mozilla-bmo1583471.patch to allow building with rust 1.39
+
+---
+Fri Dec 20 16:02:55 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.3.1
+  * In dark theme unread messages no longer shown in blue to
+distinguish from tagged messages
+  * Account setup is now using client side DNS MX lookup instead of
+relying on a server
+  Bugfixes
+  * Searching LDAP address book crashed in some circumstances
+  * Message navigation with backward and forward buttons did not work
+in some circumstances
+  * WebExtension toolbar icons were displayed too small
+  * Calendar: Tasks due today were not listed in bold
+  * Calendar: Last day of long-running events was not shown
+
+---

Old:

  l10n-68.3.0.tar.xz
  thunderbird-68.3.0.source.tar.xz
  thunderbird-68.3.0.source.tar.xz.asc

New:

  l10n-68.3.1.tar.xz
  mozilla-bmo1583471.patch
  thunderbird-68.3.1.source.tar.xz
  thunderbird-68.3.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.EwoZBo/_old  2019-12-30 13:50:07.893393388 +0100
+++ /var/tmp/diff_new_pack.EwoZBo/_new  2019-12-30 13:50:07.893393388 +0100
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.3.0
-%define orig_version68.3.0
+%define mainver %major.3.1
+%define orig_version68.3.1
 %define orig_suffix %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}
@@ -144,7 +144,7 @@
 Source6:suse-default-prefs.js
 Source7:l10n-%{version}.tar.xz
 Source9:thunderbird.appdata.xml
-Source14:   
https://github.com/openSUSE/firefox-scripts/raw/35ade35/create-tar.sh
+Source14:   
https://github.com/openSUSE/firefox-scripts/raw/8a54002/create-tar.sh
 Source20:   
https://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}%{orig_suffix}/source/%{progname}-%{orig_version}%{orig_suffix}.source.tar.xz.asc
 Source21:   
https://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}/KEY#/mozilla.keyring
 # Gecko/Toolkit
@@ -172,6 +172,7 @@
 Patch22:mozilla-nestegg-big-endian.patch
 Patch24:mozilla-fix-top-level-asm.patch
 Patch25:mozilla-bmo1504834-part4.patch
+Patch26:mozilla-bmo1583471.patch
 %endif # only_print_mozconfig
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 PreReq: coreutils fileutils textutils /bin/sh
@@ -269,6 +270,7 @@
 %patch22 -p1
 %patch24 -p1
 %patch25 -p1
+%patch26 -p1
 %endif # only_print_mozconfig
 
 %build

++ l10n-68.3.0.tar.xz -> l10n-68.3.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.3.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/l10n-68.3.1.tar.xz 
differ: char 26, line 1

++ mozilla-bmo1583471.patch ++
 1360 lines (skipped)

++ tar_stamps ++
--- /var/tmp/diff_new_pack.EwoZBo/_old  2019-12-30 13:50:08.125393472 +0100
+++ /var/tmp/diff_new_pack.EwoZBo/_new  2019-12-30 13:50:08.129393473 +0100
@@ -1,11 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.3.0"
+VERSION="68.3.1"
 VERSION_SUFFIX=""
-PREV_VERSION="68.2.1"
+PREV_VERSION="68.3.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
-
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68;
-RELEASE_TAG="228eab07a730c48763e1cd0ccff9491f66e4580e"
-RELEASE_TIMESTAMP="20191129091924"
+RELEASE_TAG="dfeab0e6d5a43c6bcb1575bbdc5c0d018b42df9b"
+RELEASE_TIMESTAMP="20191215232630"

++ thunderbird-68.3.0.source.tar.xz -> thunderbird-68.3.1.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.3.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.6675/thunderbird-68.3.1.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-12-11 12:03:07

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4691 (New)


Package is "MozillaThunderbird"

Wed Dec 11 12:03:07 2019 rev:222 rq:754691 version:68.3.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-11-21 12:56:29.650568054 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4691/MozillaThunderbird.changes
  2019-12-11 12:03:55.756770535 +0100
@@ -1,0 +2,29 @@
+Thu Dec  5 10:29:18 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.3.0:
+  * Message display toolbar action WebExtension API
+  * Navigation buttons are now available in content tabs, for example
+those opened via an add-on search
+  * other bugfixes
+  MFSA 2019-38
+  * CVE-2019-17008 (bmo#1546331)
+Use-after-free in worker destruction
+  * CVE-2019-13722 (bmo#1580156)
+Stack corruption due to incorrect number of arguments in WebRTC code
+  * CVE-2019-17010 (bmo#1581084)
+Use-after-free when performing device orientation checks
+  * CVE-2019-17005 (bmo#1584170)
+Buffer overflow in plain text serializer
+  * CVE-2019-17011 (bmo#1591334)
+Use-after-free when retrieving a document in antitracking
+  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667, bmo#1567209,
+bmo#1580288, bmo#1585760, bmo#1592502)
+Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
+  * Various updates to improve performance and stability
+- updated create-tar.sh to cover buildid and origin repo information
+- changed locale building procedure
+  * removed obsolete compare-locales.tar.xz and
+thunderbird-broken-locales-build.patch
+- add mozilla-bmo849632.patch to fix color issues on big endian
+
+---

Old:

  compare-locales.tar.xz
  l10n-68.2.2.tar.xz
  thunderbird-68.2.2.source.tar.xz
  thunderbird-68.2.2.source.tar.xz.asc
  thunderbird-broken-locales-build.patch

New:

  l10n-68.3.0.tar.xz
  mozilla-bmo849632.patch
  thunderbird-68.3.0.source.tar.xz
  thunderbird-68.3.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.8I5Rt1/_old  2019-12-11 12:04:21.256759809 +0100
+++ /var/tmp/diff_new_pack.8I5Rt1/_new  2019-12-11 12:04:21.260759807 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LLC
 #   2006-2019 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
@@ -26,11 +26,10 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.2.2
-%define orig_version68.2.2
+%define mainver %major.3.0
+%define orig_version68.3.0
 %define orig_suffix %{nil}
 %define update_channel  release
-%define releasedate 20191105113228
 %define source_prefix   thunderbird-%{mainver}
 
 # always build with GCC as SUSE Security Team requires that
@@ -135,7 +134,7 @@
 Summary:An integrated email, news feeds, chat, and newsgroups client
 License:MPL-2.0
 Group:  Productivity/Networking/Email/Clients
-Url:https://www.thunderbird.net/
+URL:https://www.thunderbird.net/
 %if !%{with only_print_mozconfig}
 Source: 
http://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}%{orig_suffix}/source/%{progname}-%{orig_version}%{orig_suffix}.source.tar.xz
 Source1:thunderbird.desktop
@@ -145,8 +144,7 @@
 Source6:suse-default-prefs.js
 Source7:l10n-%{version}.tar.xz
 Source9:thunderbird.appdata.xml
-Source10:   compare-locales.tar.xz
-Source14:   
https://github.com/openSUSE/firefox-scripts/raw/master/create-tar.sh
+Source14:   
https://github.com/openSUSE/firefox-scripts/raw/35ade35/create-tar.sh
 Source20:   
https://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}%{orig_suffix}/source/%{progname}-%{orig_version}%{orig_suffix}.source.tar.xz.asc
 Source21:   
https://ftp.mozilla.org/pub/%{progname}/releases/%{orig_version}/KEY#/mozilla.keyring
 # Gecko/Toolkit
@@ -165,6 +163,7 @@
 Patch13:mozilla-ppc-altivec_static_inline.patch
 Patch14:mozilla-bmo1005535.patch
 Patch15:mozilla-bmo1568145.patch
+Patch16:mozilla-bmo849632.patch
 Patch17:mozilla-bmo1504834-part1.patch
 Patch18:mozilla-bmo1504834-part2.patch
 Patch19:mozilla-bmo1504834-part3.patch
@@ -173,7 +172,6 @@
 Patch22:mozilla-nestegg-big-endian.patch
 Patch24:   

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-11-21 12:56:26

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26869 (New)


Package is "MozillaThunderbird"

Thu Nov 21 12:56:26 2019 rev:221 rq:747029 version:68.2.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-11-06 15:15:43.485150893 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26869/MozillaThunderbird.changes
 2019-11-21 12:56:29.650568054 +0100
@@ -1,0 +2,7 @@
+Sat Nov  9 20:13:17 UTC 2019 - Andreas Stieger 
+
+- Mozilla Thunderbird 68.2.2:
+  * fix age calculation in address book (bmo#1592536)
+  * fix column menu behavior in address book (bmo#1592393)
+
+---

Old:

  l10n-68.2.1.tar.xz
  thunderbird-68.2.1.source.tar.xz
  thunderbird-68.2.1.source.tar.xz.asc

New:

  l10n-68.2.2.tar.xz
  thunderbird-68.2.2.source.tar.xz
  thunderbird-68.2.2.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.vXZ8c6/_old  2019-11-21 12:56:43.306563846 +0100
+++ /var/tmp/diff_new_pack.vXZ8c6/_new  2019-11-21 12:56:43.334563837 +0100
@@ -26,11 +26,11 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.2.1
-%define orig_version68.2.1
+%define mainver %major.2.2
+%define orig_version68.2.2
 %define orig_suffix %{nil}
 %define update_channel  release
-%define releasedate 20191030212137
+%define releasedate 20191105113228
 %define source_prefix   thunderbird-%{mainver}
 
 # always build with GCC as SUSE Security Team requires that

++ compare-locales.tar.xz ++

++ l10n-68.2.1.tar.xz -> l10n-68.2.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.2.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26869/l10n-68.2.2.tar.xz 
differ: char 26, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.vXZ8c6/_old  2019-11-21 12:56:43.594563757 +0100
+++ /var/tmp/diff_new_pack.vXZ8c6/_new  2019-11-21 12:56:43.594563757 +0100
@@ -1,9 +1,9 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.2.1"
+VERSION="68.2.2"
 VERSION_SUFFIX=""
-RELEASE_TAG="afe823a25c03b91217ff767b360f14e289f3671d"
-PREV_VERSION="68.2.0"
+RELEASE_TAG="4297fc81fadcf15a10dc8f3835af3996ae991aa0"
+PREV_VERSION="68.2.1"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 

++ thunderbird-68.2.1.source.tar.xz -> thunderbird-68.2.2.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.2.1.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26869/thunderbird-68.2.2.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-11-06 15:15:38

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2990 (New)


Package is "MozillaThunderbird"

Wed Nov  6 15:15:38 2019 rev:220 rq:744761 version:68.2.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-10-28 16:45:18.540620176 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2990/MozillaThunderbird.changes
  2019-11-06 15:15:43.485150893 +0100
@@ -1,0 +2,18 @@
+Fri Nov  1 11:16:39 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.2.1
+  * A language for the user interface can now be chosen in the
+advanced settings (multilingual UI)
+  * Fixed problem with Google authentication (OAuth2)
+  * Selected or unread messages were not shown in the correct color
+in the thread pane (message list) under some circumstances
+  * When using a language pack, names of standard folders weren't
+localized (boo#1149126)
+  * Address book default startup directory in preferences panel was
+not persisted
+  * Chat: Extended context menu on Instant messaging status dialog
+(Show Accounts)
+- added mozilla-bmo1504834-part4.patch to fix some visual issues on
+  big endian platforms
+
+---

Old:

  l10n-68.2.0.tar.xz
  thunderbird-68.2.0.source.tar.xz
  thunderbird-68.2.0.source.tar.xz.asc

New:

  l10n-68.2.1.tar.xz
  mozilla-bmo1504834-part4.patch
  thunderbird-68.2.1.source.tar.xz
  thunderbird-68.2.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.EG7rsB/_old  2019-11-06 15:16:05.109172178 +0100
+++ /var/tmp/diff_new_pack.EG7rsB/_new  2019-11-06 15:16:05.121172190 +0100
@@ -26,11 +26,11 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.2.0
-%define orig_version68.2.0
+%define mainver %major.2.1
+%define orig_version68.2.1
 %define orig_suffix %{nil}
 %define update_channel  release
-%define releasedate 20191021120853
+%define releasedate 20191030212137
 %define source_prefix   thunderbird-%{mainver}
 
 # always build with GCC as SUSE Security Team requires that
@@ -172,6 +172,7 @@
 Patch21:mozilla-bmo1554971.patch
 Patch22:mozilla-nestegg-big-endian.patch
 Patch24:mozilla-fix-top-level-asm.patch
+Patch25:mozilla-bmo1504834-part4.patch
 Patch100:   thunderbird-broken-locales-build.patch
 %endif # only_print_mozconfig
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -267,6 +268,7 @@
 %patch21 -p1
 %patch22 -p1
 %patch24 -p1
+%patch25 -p1
 # Thunderbird
 %patch100 -p1
 %endif # only_print_mozconfig

++ compare-locales.tar.xz ++

++ l10n-68.2.0.tar.xz -> l10n-68.2.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.2.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2990/l10n-68.2.1.tar.xz 
differ: char 27, line 1

++ mozilla-bmo1504834-part4.patch ++
# HG changeset patch
# Parent  46ea866ca3acb8bb5e1709ceb799b9c94f591dec
Problem description: Tab-titles that are too long to fit into a tab get faded 
out.
 On big endian this is broken and instead of fading out, 
the 
 tab gets white and the font transparent, leading to an 
unreadable
 tab-title
Solution: This is not a real solution, but a hack. The real solution would have 
been
  to byte-swap the correct buffer, but I could not find it.
  So the next best thing is to deactivate the fading-effect. Now all 
tab-titles
  are readable, albeit not as pretty to look at as they could be. 
Side-effects: I have not yet found an unwanted side-effect.

diff -r 46ea866ca3ac -r 6ef20eee3f8f gfx/2d/DrawTargetSkia.cpp
--- a/gfx/2d/DrawTargetSkia.cpp Tue Oct 22 12:27:22 2019 +0200
+++ b/gfx/2d/DrawTargetSkia.cpp Thu Oct 31 09:11:56 2019 +0100
@@ -1861,6 +1861,14 @@
   SkCanvas::kPreserveLCDText_SaveLayerFlag |
   (aCopyBackground ? SkCanvas::kInitWithPrevious_SaveLayerFlag : 0));
 
+#if MOZ_BIG_ENDIAN
+  // Pushing a layer where an aMask is defined produces wrong output.
+  // We _should_ endian swap the data, but I couldn't find a workable way to 
do so
+  // Therefore I deactivate those layers in the meantime.
+  // The result is: Tab-titles that are longer than the available space should 
be faded out.
+  //The fading doesn't work, so we deactivate the 
fading-effect here.
+  if (!aMask)
+#endif
   mCanvas->saveLayer(saveRec);
 
   

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-10-28 16:45:05

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2990 (New)


Package is "MozillaThunderbird"

Mon Oct 28 16:45:05 2019 rev:219 rq:742150 version:68.2.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-10-17 13:05:26.124368128 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2990/MozillaThunderbird.changes
  2019-10-28 16:45:18.540620176 +0100
@@ -1,0 +2,35 @@
+Tue Oct 22 06:43:32 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.2.0
+  * Message Display WebExtension API
+  * Message Search WebExtension API
+  * Better visual feedback for unread messages when using the dark theme
+  * Fixed various issues when editing mailing list
+  * Fixed application windows not maintaining their size after restart
+  MFSA 2019-33 (bsc#1154738)
+  * CVE-2019-15903 (bmo#1584907)
+Heap overflow in expat library in XML_GetCurrentLineNumber
+  * CVE-2019-11757 (bmo#1577107)
+Use-after-free when creating index updates in IndexedDB
+  * CVE-2019-11758 (bmo#1536227)
+Potentially exploitable crash due to 360 Total Security
+  * CVE-2019-11759 (bmo#1577953)
+Stack buffer overflow in HKDF output
+  * CVE-2019-11760 (bmo#1577719)
+Stack buffer overflow in WebRTC networking
+  * CVE-2019-11761 (bmo#1561502)
+Unintended access to a privileged JSONView object
+  * CVE-2019-11762 (bmo#1582857)
+document.domain-based origin isolation has same-origin-property violation
+  * CVE-2019-11763 (bmo#1584216)
+Incorrect HTML parsing results in XSS bypass technique
+  * CVE-2019-11764 (bmo#1558522, bmo#1577061, bmo#1548044, bmo#1571223,
+bmo#1573048, bmo#1578933, bmo#1575217, bmo#1583684, bmo#1586845,
+bmo#1581950, bmo#1583463, bmo#1586599)
+Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
+- removed obsolete patches
+mozilla-bmo1573381.patch
+mozilla-bmo1512162.patch
+mozilla-bmo1585099.patch
+
+---

Old:

  l10n-68.1.2.tar.xz
  mozilla-bmo1512162.patch
  mozilla-bmo1573381.patch
  mozilla-bmo1585099.patch
  thunderbird-68.1.2.source.tar.xz
  thunderbird-68.1.2.source.tar.xz.asc

New:

  l10n-68.2.0.tar.xz
  thunderbird-68.2.0.source.tar.xz
  thunderbird-68.2.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.gQjKh1/_old  2019-10-28 16:45:46.464655696 +0100
+++ /var/tmp/diff_new_pack.gQjKh1/_new  2019-10-28 16:45:46.512655757 +0100
@@ -26,11 +26,11 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.1.2
-%define orig_version68.1.2
+%define mainver %major.2.0
+%define orig_version68.2.0
 %define orig_suffix %{nil}
 %define update_channel  release
-%define releasedate 20191008153335
+%define releasedate 20191021120853
 %define source_prefix   thunderbird-%{mainver}
 
 # always build with GCC as SUSE Security Team requires that
@@ -165,16 +165,13 @@
 Patch13:mozilla-ppc-altivec_static_inline.patch
 Patch14:mozilla-bmo1005535.patch
 Patch15:mozilla-bmo1568145.patch
-Patch16:mozilla-bmo1573381.patch
 Patch17:mozilla-bmo1504834-part1.patch
 Patch18:mozilla-bmo1504834-part2.patch
 Patch19:mozilla-bmo1504834-part3.patch
 Patch20:mozilla-bmo1511604.patch
 Patch21:mozilla-bmo1554971.patch
 Patch22:mozilla-nestegg-big-endian.patch
-Patch23:mozilla-bmo1512162.patch
 Patch24:mozilla-fix-top-level-asm.patch
-Patch25:mozilla-bmo1585099.patch
 Patch100:   thunderbird-broken-locales-build.patch
 %endif # only_print_mozconfig
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -263,16 +260,13 @@
 %patch13 -p1
 %patch14 -p1
 %patch15 -p1
-%patch16 -p1
 %patch17 -p1
 %patch18 -p1
 %patch19 -p1
 %patch20 -p1
 %patch21 -p1
 %patch22 -p1
-%patch23 -p1
 %patch24 -p1
-%patch25 -p1
 # Thunderbird
 %patch100 -p1
 %endif # only_print_mozconfig

++ compare-locales.tar.xz ++

++ l10n-68.1.2.tar.xz -> l10n-68.2.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.1.2.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2990/l10n-68.2.0.tar.xz 
differ: char 26, line 1

++ tar_stamps ++
--- /var/tmp/diff_new_pack.gQjKh1/_old  2019-10-28 16:45:47.264656714 +0100
+++ /var/tmp/diff_new_pack.gQjKh1/_new  2019-10-28 16:45:47.264656714 +0100
@@ -1,8 +1,8 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.1.2"
+VERSION="68.2.0"
 VERSION_SUFFIX=""

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-10-17 13:05:14

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2352 (New)


Package is "MozillaThunderbird"

Thu Oct 17 13:05:14 2019 rev:218 rq:737931 version:68.1.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-10-10 11:49:23.275967344 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2352/MozillaThunderbird.changes
  2019-10-17 13:05:26.124368128 +0200
@@ -1,0 +2,16 @@
+Thu Oct 10 14:30:09 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.1.2
+  Bugfixes
+  * Some attachments couldn't be opened in messages originating from
+MS Outlook 2016
+  * Address book import from CSV
+  * Performance problem in message body search
+  * Ctrl+Enter to send a message would open an attachment if the
+attachment pane had focus
+  * Calendar: Issues with "Today Pane" start-up
+  * Calendar: Glitches with custom repeat and reminder number input
+  * Calendar: Problems with WCAP provider
+- add mozilla-bmo1585099.patch to fix build with rust >= 1.38
+
+---

Old:

  l10n-68.1.1.tar.xz
  thunderbird-68.1.1.source.tar.xz
  thunderbird-68.1.1.source.tar.xz.asc

New:

  l10n-68.1.2.tar.xz
  mozilla-bmo1585099.patch
  thunderbird-68.1.2.source.tar.xz
  thunderbird-68.1.2.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.pQ4Zeq/_old  2019-10-17 13:05:45.700317715 +0200
+++ /var/tmp/diff_new_pack.pQ4Zeq/_new  2019-10-17 13:05:45.704317705 +0200
@@ -26,11 +26,11 @@
 # major 69
 # mainver %major.99
 %define major   68
-%define mainver %major.1.1
-%define orig_version68.1.1
+%define mainver %major.1.2
+%define orig_version68.1.2
 %define orig_suffix %{nil}
 %define update_channel  release
-%define releasedate 20190924105435
+%define releasedate 20191008153335
 %define source_prefix   thunderbird-%{mainver}
 
 # always build with GCC as SUSE Security Team requires that
@@ -55,11 +55,7 @@
 %define __provides_exclude ^lib.*\\.so.*$
 %define __requires_exclude 
^(libmoz.*|liblgpllibs.*|libxul.*|libldap.*|libldif.*|libprldap.*)$
 %define localize 1
-%ifarch %ix86 x86_64
-%define crashreporter 1
-%else
 %define crashreporter 0
-%endif
 
 %define has_system_cairo 0
 
@@ -178,6 +174,7 @@
 Patch22:mozilla-nestegg-big-endian.patch
 Patch23:mozilla-bmo1512162.patch
 Patch24:mozilla-fix-top-level-asm.patch
+Patch25:mozilla-bmo1585099.patch
 Patch100:   thunderbird-broken-locales-build.patch
 %endif # only_print_mozconfig
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -185,15 +182,8 @@
 Recommends: libcanberra0
 Recommends: libpulse0
 ### build options
-%ifarch aarch64 ppc ppc64 ppc64le s390 s390x ia64 %arm
-%define crashreporter 0
-%else
-%define crashreporter 1
-%endif
 %define has_system_cairo 0
 ### build options end
-%define __provides_exclude ^lib.*\\.so.*$
-%define __requires_exclude 
^(libmoz.*|liblgpllibs.*|libxul.*|libldap.*|libldif.*|libprldap.*)$
 Requires:   mozilla-nspr >= %(rpm -q --queryformat '%%{VERSION}' 
mozilla-nspr)
 Requires:   mozilla-nss >= %(rpm -q --queryformat '%%{VERSION}' 
mozilla-nss)
 Requires(post): desktop-file-utils
@@ -266,7 +256,7 @@
 %patch8 -p1
 %patch9 -p1
 %patch10 -p1
-%ifarch s390x
+%ifarch s390x ppc64
 %patch11 -p1
 %endif
 %patch12 -p1
@@ -282,6 +272,7 @@
 %patch22 -p1
 %patch23 -p1
 %patch24 -p1
+%patch25 -p1
 # Thunderbird
 %patch100 -p1
 %endif # only_print_mozconfig
@@ -308,6 +299,7 @@
 export MOZ_BUILD_DATE=%{releasedate}
 export MOZILLA_OFFICIAL=1
 export BUILD_OFFICIAL=1
+export MOZ_TELEMETRY_REPORTING=1
 %if 0%{?suse_version} <= 1320
 export CC=gcc-7
 %else
@@ -329,9 +321,6 @@
 %endif
 %endif
 export CXXFLAGS="$CFLAGS"
-%ifarch %{arm} aarch64
-export RUSTFLAGS="-Cdebuginfo=0"
-%endif
 export MOZCONFIG=$RPM_BUILD_DIR/mozconfig
 %if %{with only_print_mozconfig}
 echo "export CC=$CC"
@@ -345,6 +334,7 @@
 %limit_build -m 2000
 export MOZ_DEBUG_FLAGS="-pipe"
 cat << EOF > $MOZCONFIG
+%endif
 mk_add_options MOZILLA_OFFICIAL=1
 mk_add_options BUILD_OFFICIAL=1
 mk_add_options MOZ_MILESTONE_RELEASE=1
@@ -356,11 +346,11 @@
 %endif
 %endif
 mk_add_options MOZ_OBJDIR=$RPM_BUILD_DIR/obj
-ac_add_options --enable-application=comm/mail
-ac_add_options --enable-calendar
 ac_add_options --prefix=%{_prefix}
 ac_add_options --libdir=%{progdir}
 ac_add_options --includedir=%{_includedir}
+ac_add_options --enable-application=comm/mail
+ac_add_options --enable-calendar
 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-10-10 11:49:19

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2352 (New)


Package is "MozillaThunderbird"

Thu Oct 10 11:49:19 2019 rev:217 rq:733855 version:68.1.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-09-18 13:06:22.128753903 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2352/MozillaThunderbird.changes
  2019-10-10 11:49:23.275967344 +0200
@@ -1,0 +2,72 @@
+Wed Sep 25 11:46:51 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.1.1
+  Bugfixes
+  * Issues with attachments in IMAP messages
+  * Gmail accounts ignored a non-standard trash folder selection
+  * Entering/pasting lists of recipients into the addressing widget or
+mailing list not working reliably, especially when lists contained
+multiple commas or semicolons
+  * Edit mailing list not working
+  * Various theme fixes, especially dark theme improvements for Calendar
+  * Contrast between tag label and background not optimal
+  * Account Central pane always loaded at start-up
+  * "Config Editor" button not removed if blocked by policy
+  * Calendar: Free/busy information in attendees dialog not scrolled
+correctly. Note: Scroll arrows still not behaving correctly
+  MFSA 2019-32
+  * CVE-2019-11755 (bmo#1240290, boo#1152375)
+Spoofing a message author via a crafted S/MIME message
+- require nodejs8 instead of generic nodejs for better cross-distribution
+  support
+- call desktop database update on install
+- updated translations-other locale list
+- build correct ICU for Big Endian
+- remove kde.js since disabling instantApply breaks extensions and
+  is obsolete with the move to HTML views for preferences (boo#1151186)
+- update create-tar.sh to latest revision and adjust tar_stamps
+- added platform patches from Firefox 68esr
+   mozilla-bmo1005535.patch
+   mozilla-bmo1463035.patch
+   mozilla-bmo1504834-part1.patch
+   mozilla-bmo1504834-part2.patch
+   mozilla-bmo1504834-part3.patch
+   mozilla-bmo1511604.patch
+   mozilla-bmo1554971.patch
+   mozilla-bmo1573381.patch
+   mozilla-cubeb-noreturn.patch
+   mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
+   mozilla-fix-aarch64-libopus.patch
+   mozilla-fix-top-level-asm.patch
+   mozilla-nestegg-big-endian.patch
+   mozilla-ntlm-full-path.patch
+   mozilla-openaes-decl.patch
+   mozilla-ppc-altivec_static_inline.patch
+   mozilla-reduce-rust-debuginfo.patch
+   mozilla-s390-bigendian.patch
+   mozilla-s390-context.patch
+   mozilla-bmo1512162.patch
+   thunderbird-broken-locales-build.patch
+- removed renamed patches
+   fix-missing-return-warning.patch
+   fix-top-level-asm-issue.patch
+   thunderbird-locale-build.patch
+
+---
+Fri Sep 20 15:59:25 UTC 2019 - mun...@googlemail.com
+
+- repack the lightning xpi with all available locales (boo#939153) (lp#545778)
+
+---
+Fri Sep 20 09:49:41 UTC 2019 - Martin Liška 
+
+- Add fix-top-level-asm-issue.patch in order to fix LTO build.
+- Enable LTO on TW on x86_64.
+- Use GCC.
+
+---
+Fri Sep 20 08:24:23 UTC 2019 - Bernhard Wiedemann 
+
+- added mozilla-bmo1568145.patch to make builds reproducible (boo#1047218)
+
+---
@@ -10 +82 @@
-  * CVE-2019-11739 (bmo#1571481)
+  * CVE-2019-11739 (bmo#1571481, boo#1150939)
@@ -13 +85 @@
-  * CVE-2019-11746 (bmo#1564449)
+  * CVE-2019-11746 (bmo#1564449, boo#1149297)
@@ -15 +87 @@
-  * CVE-2019-11744 (bmo#1562033)
+  * CVE-2019-11744 (bmo#1562033, boo#1149304)
@@ -17 +89 @@
-  * CVE-2019-11742 (bmo#1559715)
+  * CVE-2019-11742 (bmo#1559715, boo#1149303)
@@ -20 +92 @@
-  * CVE-2019-11752 (bmo#1501152)
+  * CVE-2019-11752 (bmo#1501152, boo#1149296)
@@ -22 +94 @@
-  * CVE-2019-11743 (bmo#1560495)
+  * CVE-2019-11743 (bmo#1560495, boo#1149298)
@@ -24 +96 @@
-  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
+  * CVE-2019-11740 (bmo#1563133,bmo#1573160, boo#1149299)

Old:

  MozillaThunderbird.keyring
  fix-missing-return-warning.patch
  kde.js
  l10n-68.1.0.tar.xz
  thunderbird-68.1.0.source.tar.xz
  thunderbird-68.1.0.source.tar.xz.asc
  thunderbird-locale-build.patch

New:

  l10n-68.1.1.tar.xz
  mozilla-bmo1005535.patch
  mozilla-bmo1463035.patch
  mozilla-bmo1504834-part1.patch
  mozilla-bmo1504834-part2.patch
  mozilla-bmo1504834-part3.patch
  mozilla-bmo1511604.patch
  mozilla-bmo1512162.patch
  mozilla-bmo1554971.patch
  mozilla-bmo1568145.patch
  mozilla-bmo1573381.patch
  

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-09-18 13:06:13

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.7948 (New)


Package is "MozillaThunderbird"

Wed Sep 18 13:06:13 2019 rev:216 rq:730872 version:68.1.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-08-15 12:22:56.174643074 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.7948/MozillaThunderbird.changes
  2019-09-18 13:06:22.128753903 +0200
@@ -1,0 +2,67 @@
+Tue Sep 10 07:33:52 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.1.0
+  * Offer to configure Exchange accounts for Office365. A third-party
+add-on is required for this account type. IMAP still exists as
+alternative.
+  * several bugfixes
+  MFSA 2019-30
+  * CVE-2019-11739 (bmo#1571481)
+Covert Content Attack on S/MIME encryption using a crafted
+multipart/alternative message
+  * CVE-2019-11746 (bmo#1564449)
+Use-after-free while manipulating video
+  * CVE-2019-11744 (bmo#1562033)
+XSS by breaking out of title and textarea elements using innerHTML
+  * CVE-2019-11742 (bmo#1559715)
+Same-origin policy violation with SVG filters and canvas to steal
+cross-origin images
+  * CVE-2019-11752 (bmo#1501152)
+Use-after-free while extracting a key value in IndexedDB
+  * CVE-2019-11743 (bmo#1560495)
+Cross-origin access to unload event attributes
+  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
+Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox
+ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
+- removed upstreamed fix-build-after-y2038-changes-in-glibc.patch
+- added thunderbird-locale-build.patch to fix locale build
+
+---
+Fri Aug 30 07:25:15 UTC 2019 - Manfred Hollstein 
+
+- Add -L flag to the stat call for checking file size of %{SOURCE4}.
+- Add fix-missing-return-warning.patch to silence a compiler warning.
+
+---
+Wed Aug 28 12:27:34 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 68.0
+  * based on Firefox ESR 68
+  * File link attachments can now be linked to again instead of
+uploading them again
+  * Mark all folders of an account as read
+  * Run filters periodically. Improved filter logging
+  * OAuth2 authentication for Yandex
+  * Language packs can now be selected in the Advanced Options.
+Preference intl.multilingual.enabled needs to be set (and possily
+also extensions.langpacks.signatures.required needs to be set to false)
+  * Added a policy engine that allows customized Thunderbird deployments
+in enterprise environments, using Windows Group Policy or a
+cross-platform JSON file
+  * TCP keepalive for IMAP protocol
+  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
+  * Calendar: Time zone data can now include past and future changes.
+All known time zone changes from 2018 to 2022 are included.
+  * Chat: In each conversation an individual spellcheck language can
+be selected now
+- removed obsolete patches
+  * mozilla-bmo1463035.patch
+  * mozilla-i586-domPrefs.patch
+  * mozilla-bmo1464766.patch
+  * mozilla-bmo1519629.patch
+  * mozilla-i586-DecoderDoctorLogger.patch
+  * mozilla-bmo1375074.patch
+- added fix-build-after-y2038-changes-in-glibc.patch to fix build
+  in Tumbleweed (patch already upstream for next release)
+
+---

Old:

  l10n-60.8.0.tar.xz
  mozilla-bmo1375074.patch
  mozilla-bmo1463035.patch
  mozilla-bmo1464766.patch
  mozilla-bmo1519629.patch
  mozilla-i586-DecoderDoctorLogger.patch
  mozilla-i586-domPrefs.patch
  thunderbird-60.8.0.source.tar.xz
  thunderbird-60.8.0.source.tar.xz.asc

New:

  fix-missing-return-warning.patch
  l10n-68.1.0.tar.xz
  tar_stamps
  thunderbird-68.1.0.source.tar.xz
  thunderbird-68.1.0.source.tar.xz.asc
  thunderbird-locale-build.patch



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.MGvcSA/_old  2019-09-18 13:06:58.976746151 +0200
+++ /var/tmp/diff_new_pack.MGvcSA/_new  2019-09-18 13:06:58.976746151 +0200
@@ -17,15 +17,44 @@
 #
 
 
-%define mainversion 60.8.0
+# changed with every update
+%define major 68
+%define mainver %major.1.0
+%define version_postfix %{nil}
 %define update_channel release
-%define releasedate 20190703133823
+%define releasedate 20190909201201
+%define source_prefix thunderbird-%{mainver}
+
+# always build with GCC as SUSE Security Team requires that
+# TODO: Deactivate this as 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-08-15 12:22:48

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.9556 (New)


Package is "MozillaThunderbird"

Thu Aug 15 12:22:48 2019 rev:215 rq:720733 version:60.8.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-07-16 08:38:47.467071952 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.9556/MozillaThunderbird.changes
  2019-08-15 12:22:56.174643074 +0200
@@ -1,0 +2,8 @@
+Thu Aug  1 11:12:05 UTC 2019 - Tristan Miller 
+
+- Update package summary, description, and AppData using more informative
+  and up-to-date text from the official Thunderbird FAQ, replacing obsolete
+  references to the Mozilla Application Suite and Thunderbird's relation to
+  the Mozilla organization
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.5sJOzT/_old  2019-08-15 12:23:03.446641260 +0200
+++ /var/tmp/diff_new_pack.5sJOzT/_new  2019-08-15 12:23:03.446641260 +0200
@@ -97,10 +97,10 @@
 %define kde_helper_version 6
 Provides:   mozilla-kde4-version = %{kde_helper_version}
 %endif
-Summary:The Stand-Alone Mozilla Mail Component
+Summary:An integrated email, news feeds, chat, and newsgroups client
 License:MPL-2.0
 Group:  Productivity/Networking/Email/Clients
-Url:http://www.mozilla.org/products/thunderbird/
+Url:https://www.thunderbird.net/
 Source: 
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/source/thunderbird-%{version}.source.tar.xz
 Source1:thunderbird.desktop
 Source3:mozilla.sh.in
@@ -150,10 +150,10 @@
 %define desktop_file_name thunderbird
 
 %description
-Mozilla Thunderbird is a redesign of the Mozilla Mail component. It is
-written using the XUL user interface language and designed to be
-cross-platform. It is a stand-alone application instead of part of the
-Mozilla application suite.
+Thunderbird is a free, open-source, cross-platform application for
+managing email, news feeds, chat, and news groups. It is a local
+(rather than browser- or web-based) email application that is powerful
+yet easy to use.
 
 %if %localize
 


++ thunderbird.appdata.xml ++
--- /var/tmp/diff_new_pack.5sJOzT/_old  2019-08-15 12:23:03.574641228 +0200
+++ /var/tmp/diff_new_pack.5sJOzT/_new  2019-08-15 12:23:03.574641228 +0200
@@ -9,22 +9,13 @@
   CC0-1.0
   
 
-  Thunderbird is an email client that allows you to read, write and 
organise all
-  of your email messages. It is compatible with most email accounts, 
including the
-  most popular webmail services.
+  Thunderbird is a free, open-source, cross-platform application for
+  managing email, news feeds, chat, and news groups. It is a local
+  (rather than browser- or web-based) email application that is powerful
+  yet easy to use.
 
-
-  Thunderbird is designed by Mozilla, a global community working together 
to make
-  the Internet better. Mozilla believe that the Internet should be open, 
public,
-  and accessible to everyone without any restrictions.
-
-
-  Easier than ever to set up a new e-mail account
-  Awesome search allows you to find your messages fast
-  Thousands of add-ons give you the freedom to make Thunderbird your 
own
-
   
-  http://www.mozilla.org/thunderbird/
+  https://www.thunderbird.net/
   
 https://addons.cdn.mozilla.net/user-media/previews/full/60/60940.png
   

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-07-16 08:38:45

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1887 (New)


Package is "MozillaThunderbird"

Tue Jul 16 08:38:45 2019 rev:214 rq:714774 version:60.8.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-06-25 22:16:58.252675919 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1887/MozillaThunderbird.changes
  2019-07-16 08:38:47.467071952 +0200
@@ -1,0 +2,38 @@
+Wed Jul 10 13:47:41 UTC 2019 - Bernhard Wiedemann 
+
+- Generate langpacks sequentially to avoid file corruption
+  from racy file writes (boo#1137970)
+
+---
+Mon Jul  8 10:25:24 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.8.0
+  * Calendar: Problems when editing event times, some related to
+AM/PM setting in non-English locales
+  MFSA 2019-23   (boo#1140868)
+  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
+Sandbox escape via installation of malicious languagepack
+  * CVE-2019-11711 (bmo#1552541)
+Script injection within domain through inner window reuse
+  * CVE-2019-11712 (bmo#1543804)
+Cross-origin POST requests can be made with NPAPI plugins by
+following 308 redirects
+  * CVE-2019-11713 (bmo#1528481)
+Use-after-free with HTTP/2 cached stream
+  * CVE-2019-11729 (bmo#1515342)
+Empty or malformed p256-ECDH public keys may trigger a segmentation fault
+  * CVE-2019-11715 (bmo#123)
+HTML parsing error can contribute to content XSS
+  * CVE-2019-11717 (bmo#1548306)
+Caret character improperly escaped in origins
+  * CVE-2019-11719 (bmo#1540541)
+Out-of-bounds read when importing curve25519 private key
+  * CVE-2019-11730 (bmo#1558299)
+Same-origin policy treats all files in a directory as having the
+same-origin
+  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
+bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
+Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 and
+Thunderbird 60.8
+
+---

Old:

  l10n-60.7.2.tar.xz
  thunderbird-60.7.2.source.tar.xz
  thunderbird-60.7.2.source.tar.xz.asc

New:

  l10n-60.8.0.tar.xz
  thunderbird-60.8.0.source.tar.xz
  thunderbird-60.8.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.OSDuKH/_old  2019-07-16 08:38:58.243066526 +0200
+++ /var/tmp/diff_new_pack.OSDuKH/_new  2019-07-16 08:38:58.247066524 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.7.2
+%define mainversion 60.8.0
 %define update_channel release
-%define releasedate 20190620083217
+%define releasedate 20190703133823
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -44,7 +44,7 @@
 BuildRequires:  libnotify-devel
 BuildRequires:  memory-constraints
 BuildRequires:  mozilla-nspr-devel >= 4.19
-BuildRequires:  mozilla-nss-devel >= 3.36.7
+BuildRequires:  mozilla-nss-devel >= 3.36.8
 BuildRequires:  python
 BuildRequires:  python2-xml
 BuildRequires:  rust >= 1.24
@@ -343,7 +343,7 @@
 %if %localize
 truncate -s 0 %{_tmppath}/translations.{common,other}
 sed -r '/^(ja-JP-mac|en-US|$)/d;s/ .*$//' 
$RPM_BUILD_DIR/thunderbird-%{version}/comm/mail/locales/shipped-locales \
-| xargs -P 8 -n 1 -I {} /bin/sh -c '
+| xargs -n 1 -I {} /bin/sh -c '
locale=$1
pushd $RPM_BUILD_DIR/compare-locales
PYTHONPATH=lib \

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.OSDuKH/_old  2019-07-16 08:38:58.383066455 +0200
+++ /var/tmp/diff_new_pack.OSDuKH/_new  2019-07-16 08:38:58.383066455 +0200
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="e8ba58f175184985890f5c5aa0b8ff6bd4275b82"
-MOZ_RELEASE_TAG="2fbdde45ed69194ed3908fc665e1d759c3d8f7c9"
-VERSION="60.7.2"
+RELEASE_TAG="ef6b0f0be269d5b7314fe9b359604c9f4f541055"
+MOZ_RELEASE_TAG="eb76765892cfd646d3014e5f3b8df8c6753da2d2"
+VERSION="60.8.0"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.7.2.tar.xz -> l10n-60.8.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.7.2.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1887/l10n-60.8.0.tar.xz 
differ: char 26, line 1

++ thunderbird-60.7.2.source.tar.xz -> thunderbird-60.8.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.7.2.source.tar.xz 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-06-25 22:16:55

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4615 (New)


Package is "MozillaThunderbird"

Tue Jun 25 22:16:55 2019 rev:213 rq:711281 version:60.7.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-06-17 21:34:10.151013090 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4615/MozillaThunderbird.changes
  2019-06-25 22:16:58.252675919 +0200
@@ -1,0 +2,10 @@
+Thu Jun 20 22:15:46 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.7.2
+  MFSA 2019-20 (boo#1138872)
+  * CVE-2019-11707 (bmo#1544386)
+Type confusion in Array.pop
+  * CVE-2019-11708 (bmo#1559858)
+sandbox escape using Prompt:Open
+
+---

Old:

  l10n-60.7.1.tar.xz
  thunderbird-60.7.1.source.tar.xz
  thunderbird-60.7.1.source.tar.xz.asc

New:

  l10n-60.7.2.tar.xz
  thunderbird-60.7.2.source.tar.xz
  thunderbird-60.7.2.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.snu4ct/_old  2019-06-25 22:17:14.692701236 +0200
+++ /var/tmp/diff_new_pack.snu4ct/_new  2019-06-25 22:17:14.692701236 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.7.1
+%define mainversion 60.7.2
 %define update_channel release
-%define releasedate 20190611205646
+%define releasedate 20190620083217
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.snu4ct/_old  2019-06-25 22:17:14.812701420 +0200
+++ /var/tmp/diff_new_pack.snu4ct/_new  2019-06-25 22:17:14.812701420 +0200
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="a9f99cffa752340d368ddf90ba813c44c82eafce"
-MOZ_RELEASE_TAG="2ae9b50be57173c299c10df512590e2feb164977"
-VERSION="60.7.1"
+RELEASE_TAG="e8ba58f175184985890f5c5aa0b8ff6bd4275b82"
+MOZ_RELEASE_TAG="2fbdde45ed69194ed3908fc665e1d759c3d8f7c9"
+VERSION="60.7.2"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.7.1.tar.xz -> l10n-60.7.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.7.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4615/l10n-60.7.2.tar.xz 
differ: char 26, line 1

++ thunderbird-60.7.1.source.tar.xz -> thunderbird-60.7.2.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.7.1.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4615/thunderbird-60.7.2.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-06-17 21:34:05

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4811 (New)


Package is "MozillaThunderbird"

Mon Jun 17 21:34:05 2019 rev:212 rq:709837 version:60.7.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-05-28 09:40:56.233892393 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4811/MozillaThunderbird.changes
  2019-06-17 21:34:10.151013090 +0200
@@ -1,0 +2,20 @@
+Wed Jun 12 06:23:28 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.7.1
+  * fixed: No prompt for smartcard PIN when S/MIME signing is used
+  MFSA 2019-17 (boo#1137595)
+  * CVE-2019-11703 (bmo#1553820)
+Heap buffer overflow in icalparser.c
+  * CVE-2019-11704 (bmo#1553814)
+Heap buffer overflow in icalvalue.c
+  * CVE-2019-11705 (bmo#1553808)
+Stack buffer overflow in icalrecur.c
+  * CVE-2019-11706 (bmo#1555646)
+Type confusion in icalproperty.c
+
+---
+Sat Jun  8 16:35:04 UTC 2019 - Aaron Puchert 
+
+- Increase disk space requirements in _constraints.
+
+---

Old:

  l10n-60.7.0.tar.xz
  thunderbird-60.7.0.source.tar.xz
  thunderbird-60.7.0.source.tar.xz.asc

New:

  l10n-60.7.1.tar.xz
  thunderbird-60.7.1.source.tar.xz
  thunderbird-60.7.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.x2sYoU/_old  2019-06-17 21:35:00.395001719 +0200
+++ /var/tmp/diff_new_pack.x2sYoU/_new  2019-06-17 21:35:00.395001719 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.7.0
+%define mainversion 60.7.1
 %define update_channel release
-%define releasedate 20190517095026
+%define releasedate 20190611205646
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ MozillaThunderbird.keyring ++
--- /var/tmp/diff_new_pack.x2sYoU/_old  2019-06-17 21:35:00.443001708 +0200
+++ /var/tmp/diff_new_pack.x2sYoU/_new  2019-06-17 21:35:00.443001708 +0200
@@ -12,258 +12,322 @@
 uid   [  full  ] Mozilla Software Releases 
 sub   rsa4096 2015-07-17 [S] [expires: 2017-07-16]
 sub   rsa4096 2017-06-22 [S] [expires: 2019-06-22]
+sub   rsa4096 2019-05-30 [S] [expires: 2021-05-29]
 
 -BEGIN PGP PUBLIC KEY BLOCK-
-Version: SKS 1.1.5
-Comment: Hostname: keyserver.mozilla.org
 
-mQINBFWpQAQBEAC+9wVlwGLy8ILCybLesuB3KkHHK+Yt1F1PJaI30X448ttGzxCzPQpH6BoA
-73uzcTReVjfCFGvM4ij6qVV2SNaTxmNBrL1uVeEUsCuGduDUQMQYRGxRtWq5rCH48LnltKPa
-mPiEBzrgFL3i5bYEUHO7M0lATEknG7Iaz697K/ssHREZfuucB4GNxXMgswZ7GTZO3VBDVEw5
-GwU3sUvww93TwMC29lIPCux445AxZPKr5sOVEsEndUB2oDMsSAoS/dZcl8F4otqfR1pXg618
-cU06omvq5yguWLDRV327BLmezYK0prD3P+7qwEp8MTVmxlbkrClS5j5pR47FrJGdyupNKqLz
-K+7hok5kBxhsdMsdTZLd4tVRjXf04isVO3iFFf/GKuwscOi1+ZYeB3l3sAqgFUWnjbpbHxfs
-lTmo7BgvmjZvAH5ZasaewF3wA06biCDJdcSkC9GmFPmN5DS5/Dkjwfj8+dZAttuSKfmQQnyp
-UPaJ2sBublnJ6INpvYgsEZjV6CFG1EiDJDPu2Zxap8ep0iRMbBBZnpfZTn7SKAcurDJptxin
-CRclTcdOdi1iSZ35LZW0R2FKNnGL33u1IhxU9HRLw3XuljXCOZ84RLn6M+PBc1eZsuv1TA+M
-n111yD3uDv/u/edZ/xeJccF6bYcMvUgRRZh0sgZ0ZT4b0Q6YcQARAQABtC9Nb3ppbGxhIFNv
-ZnR3YXJlIFJlbGVhc2VzIDxyZWxlYXNlQG1vemlsbGEuY29tPohGBBARAgAGBQJVrP9LAAoJ
-EHYlQD1/DRWxU2QAoOOFRbkbIU1zKP2i3jy/6VKHkYEgAJ9N6f9Gmjm1/vtSrvjjlxWzzQQr
-kIhGBBARAgAGBQJVrTrjAAoJEMNOV0fiPdZ3BbkAoJUNHEqNv9dioaGMEIpiFtDjEm44AJ9U
-inMTfAYsL9yb15SdJWe/56VCcoheBBARCAAGBQJWBldjAAoJEAJasBBrF+oerNYA/13MQehk
-3AfkljGi252/cU6i1VOFpCuOeT7lK2c5unGcAP0WZjIDJgaHijtrF4MKCZbUnz37Vxm0OcU8
-qcGkYUwHi4heBBARCgAGBQJVrSz+AAoJEPCp59zTnkUulAYA/31nYhIpb7sVigone8OvFO19
-xtkR9/vy5+iKeYCVlvZtAP9rZ85ymuNYNqX06t+ruDqG2RfdUhJ6aD5IND+KD5ve7IkBHAQQ
-AQIABgUCVaz9fgAKCRCzxalYUIpD8muMB/sH58bMSzzF9zTXRropldw7Vbj9VrRD7NyoX4Ol
-DArtvdLqgPm0JUoP2gXINeSuVPpOfC676yVnBEMjIfqEjq09vcbwayS+Ncx4vQh2BmzDUNLE
-3SlnRn2bEWr9SQL/pOYUDUgmY5a0UIf/WKtBapsPE+Zan51ezYSEfxDNfUpA4T2/9iWwJ2ZO
-y0yIfLdHyvumuyiekJrfrMaF4L9Q0OnJwp1PwkvN4IVwhZeYDtIJN4nRcJK5LrwU7B97uef2
-hqBBll7/qCHl5y4Khb0csFanIg+pQLPUJdIiYtzoFtlgykB61pxqtU9rqGKW02JzEUT8DdPU
-XxmMBy6A8oGeBRH/iQEcBBABAgAGBQJVrRdcAAoJEGVzgtv/JREKQJgH/3nD/3/SumL7nG2g
-7Y1HQqWphUbn40XWvjZcHq3uBUn1QYXeZ5X56SANLM2t+uirGnNaZXW3cxEl5IyZVLbmcLWE
-BlVAcp2Bf3FXFbdJK59f+M+y2+jZT9feTyrw+EtLoiGTxgkLdJyMyI0xGmQhMx5V1ex1CxhZ
-K2JPjzCVYriBI0wIbmKi90YNMQoSsdMhYmX9bHl6XWS9TCDWsqj25FLYJL+WeVXpjO0NjRwE
-E6pc/qldeJYG5Vbf0snGxIerXe+l5D8Yd4PEAnpj58+5pXeoGYZn3WjX8eTFMAEU+QhLKWQ+
-j/Y8Kijge7fUxnSNBZ2KEnuDN/4Hv/DrCFLv14CJARwEEAECAAYFAlWtZVoACgkQ5DJ8bD4C
-mcBzsAf/RMqDdVHggQHc0/YLt1f/vY9Y7QQ6HwnDrtcNxxErSVcMguD8K6Oxir0TMSh+/YuZ

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-05-28 09:40:54

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5148 (New)


Package is "MozillaThunderbird"

Tue May 28 09:40:54 2019 rev:211 rq:705454 version:60.7.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-04-25 17:52:11.765013389 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5148/MozillaThunderbird.changes
  2019-05-28 09:40:56.233892393 +0200
@@ -1,0 +2,44 @@
+Fri May 24 08:53:57 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.7.0
+  * Attachment pane of Write window no longer focussed when attaching
+files using a keyboard shortcut
+  MFSA 2019-15 (boo#1135824)
+  * CVE-2019-9815 (bmo#1546544)
+Disable hyperthreading on content JavaScript threads on macOS
+  * CVE-2019-9816 (bmo#1536768)
+Type confusion with object groups and UnboxedObjects
+  * CVE-2019-9817 (bmo#1540221)
+Stealing of cross-domain images using canvas
+  * CVE-2019-9818 (bmo#1542581) (Windows only)
+Use-after-free in crash generation server
+  * CVE-2019-9819 (bmo#1532553)
+Compartment mismatch with fetch API
+  * CVE-2019-9820 (bmo#1536405)
+Use-after-free of ChromeEventHandler by DocShell
+  * CVE-2019-11691 (bmo#1542465)
+Use-after-free in XMLHttpRequest
+  * CVE-2019-11692 (bmo#1544670)
+Use-after-free removing listeners in the event listener manager
+  * CVE-2019-11693 (bmo#1532525)
+Buffer overflow in WebGL bufferdata on Linux
+  * CVE-2019-7317 (bmo#1542829)
+Use-after-free in png_image_free of libpng library
+  * CVE-2019-9797 (bmo#1528909)
+Cross-origin theft of images with createImageBitmap
+  * CVE-2018-18511 (bmo#1526218)
+Cross-origin theft of images with ImageBitmapRenderingContext
+  * CVE-2019-11694 (bmo#1534196) (Windows only)
+Uninitialized memory memory leakage in Windows sandbox
+  * CVE-2019-11698 (bmo#1543191)
+Theft of user history data through drag and drop of hyperlinks
+to and from bookmarks
+  * CVE-2019-5798 (bmo#1535518)
+Out-of-bounds read in Skia
+  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
+bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
+bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
+bmo#1532465, bmo#1533554, bmo#1541580)
+Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
+
+---

Old:

  l10n-60.6.1.tar.xz
  thunderbird-60.6.1.source.tar.xz
  thunderbird-60.6.1.source.tar.xz.asc

New:

  l10n-60.7.0.tar.xz
  thunderbird-60.7.0.source.tar.xz
  thunderbird-60.7.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.k83Pf0/_old  2019-05-28 09:41:05.969889185 +0200
+++ /var/tmp/diff_new_pack.k83Pf0/_new  2019-05-28 09:41:05.969889185 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.6.1
+%define mainversion 60.7.0
 %define update_channel release
-%define releasedate 20190314112142
+%define releasedate 20190517095026
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.k83Pf0/_old  2019-05-28 09:41:06.245889094 +0200
+++ /var/tmp/diff_new_pack.k83Pf0/_new  2019-05-28 09:41:06.245889094 +0200
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="ed1296af783ca23d9b07aac774cd104b14d246c3"
-MOZ_RELEASE_TAG="ac46edc9c4223fb6613501d3287705f49d1dfc57"
-VERSION="60.6.1"
+RELEASE_TAG="5822a83963e333699a33099c37c65bcd6527b988"
+MOZ_RELEASE_TAG="2ae9b50be57173c299c10df512590e2feb164977"
+VERSION="60.7.0"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.6.1.tar.xz -> l10n-60.7.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.6.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5148/l10n-60.7.0.tar.xz 
differ: char 26, line 1

++ mozilla-bmo1519629.patch ++
--- /var/tmp/diff_new_pack.k83Pf0/_old  2019-05-28 09:41:06.281889082 +0200
+++ /var/tmp/diff_new_pack.k83Pf0/_new  2019-05-28 09:41:06.281889082 +0200
@@ -1,32 +1,47 @@
-diff -rup thunderbird-60.6.1.orig/servo/components/style/lib.rs 
thunderbird-60.6.1/servo/components/style/lib.rs
 thunderbird-60.6.1.orig/servo/components/style/lib.rs  2019-03-25 
02:38:41.0 +0100
-+++ thunderbird-60.6.1/servo/components/style/lib.rs   2019-03-30 
14:46:10.491001809 +0100
-@@ -23,7 +23,7 @@
+# HG changeset patch
+# Parent  

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-04-25 17:52:07

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5536 (New)


Package is "MozillaThunderbird"

Thu Apr 25 17:52:07 2019 rev:210 rq:697648 version:60.6.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-04-02 09:20:02.560584397 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5536/MozillaThunderbird.changes
  2019-04-25 17:52:11.765013389 +0200
@@ -1,0 +2,5 @@
+Wed Apr 24 17:26:44 UTC 2019 - Martin Liška 
+
+- Disable LTO (boo#1133267).
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.U5J9BT/_old  2019-04-25 17:52:16.949010652 +0200
+++ /var/tmp/diff_new_pack.U5J9BT/_new  2019-04-25 17:52:16.953010650 +0200
@@ -209,6 +209,7 @@
 %patch12 -p1
 
 %build
+%define _lto_cflags %{nil}
 # no need to add build time to binaries
 modified="$(sed -n '/^/n;s/ - .*$//;p;q' "%{_sourcedir}/%{name}.changes")"
 DATE="\"$(date -d "${modified}" "+%%b %%e %%Y")\""

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-04-02 09:19:54

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356 (New)


Package is "MozillaThunderbird"

Tue Apr  2 09:19:54 2019 rev:209 rq:690073 version:60.6.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-03-28 22:46:15.983078789 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356/MozillaThunderbird.changes
 2019-04-02 09:20:02.560584397 +0200
@@ -1,0 +2,6 @@
+Sat Mar 30 11:36:41 UTC 2019 - Manfred Hollstein 
+
+- Add patch to fix build using rust-1.33: (boo#1130694)
+  * mozilla-bmo1519629.patch (bmo#1519629)
+
+---

New:

  mozilla-bmo1519629.patch



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.bMWFhM/_old  2019-04-02 09:20:07.104588654 +0200
+++ /var/tmp/diff_new_pack.bMWFhM/_new  2019-04-02 09:20:07.108588658 +0200
@@ -122,6 +122,7 @@
 Patch9: mozilla-i586-DecoderDoctorLogger.patch
 Patch10:mozilla-i586-domPrefs.patch
 Patch11:mozilla-bmo1463035.patch
+Patch12:mozilla-bmo1519629.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 PreReq: coreutils fileutils textutils /bin/sh
 Recommends: libcanberra0
@@ -205,6 +206,7 @@
 %patch10 -p1
 %endif
 %patch11 -p1
+%patch12 -p1
 
 %build
 # no need to add build time to binaries

++ mozilla-bmo1519629.patch ++
diff -rup thunderbird-60.6.1.orig/servo/components/style/lib.rs 
thunderbird-60.6.1/servo/components/style/lib.rs
--- thunderbird-60.6.1.orig/servo/components/style/lib.rs   2019-03-25 
02:38:41.0 +0100
+++ thunderbird-60.6.1/servo/components/style/lib.rs2019-03-30 
14:46:10.491001809 +0100
@@ -23,7 +23,7 @@
 //! [cssparser]: ../cssparser/index.html
 //! [selectors]: ../selectors/index.html
 
-#![deny(missing_docs)]
+/// #![deny(missing_docs)]
 
 extern crate app_units;
 extern crate arrayvec;
diff -rup thunderbird-60.6.1.orig/servo/components/style_traits/values.rs 
thunderbird-60.6.1/servo/components/style_traits/values.rs
--- thunderbird-60.6.1.orig/servo/components/style_traits/values.rs 
2019-03-25 02:38:43.0 +0100
+++ thunderbird-60.6.1/servo/components/style_traits/values.rs  2019-03-30 
12:31:55.070634646 +0100
@@ -135,6 +135,7 @@ where
 }
 }
 
+/// Documentation needed here, but the macro appears to be unused anyway...
 #[macro_export]
 macro_rules! serialize_function {
 ($dest: expr, $name: ident($( $arg: expr, )+)) => {
@@ -404,6 +405,8 @@ impl_to_css_for_predefined_type!(::csspa
 impl_to_css_for_predefined_type!(::cssparser::Color);
 impl_to_css_for_predefined_type!(::cssparser::UnicodeRange);
 
+
+/// Define an enum type with unit variants that each correspond to a CSS 
keyword.
 #[macro_export]
 macro_rules! define_css_keyword_enum {
 (pub enum $name:ident { $($variant:ident = $css:expr,)+ }) => {

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-03-28 22:46:08

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356 (New)


Package is "MozillaThunderbird"

Thu Mar 28 22:46:08 2019 rev:208 rq:689134 version:60.6.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-03-26 15:35:58.596408464 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356/MozillaThunderbird.changes
 2019-03-28 22:46:15.983078789 +0100
@@ -1,0 +2,10 @@
+Mon Mar 25 12:08:23 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.6.1
+  MFSA 2019-12 (bsc#1130262)
+  * CVE-2019-9810 (bmo#1537924)
+IonMonkey MArraySlice has incorrect alias information
+  * CVE-2019-9813 (bmo#1538006)
+Ionmonkey type confusion with __proto__ mutations
+
+---

Old:

  l10n-60.6.0.tar.xz
  thunderbird-60.6.0.source.tar.xz
  thunderbird-60.6.0.source.tar.xz.asc

New:

  l10n-60.6.1.tar.xz
  thunderbird-60.6.1.source.tar.xz
  thunderbird-60.6.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.yVi0Z8/_old  2019-03-28 22:46:32.151076331 +0100
+++ /var/tmp/diff_new_pack.yVi0Z8/_new  2019-03-28 22:46:32.179076326 +0100
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 60.6.0
+%define mainversion 60.6.1
 %define update_channel release
 %define releasedate 20190314112142
 

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.yVi0Z8/_old  2019-03-28 22:46:33.895076066 +0100
+++ /var/tmp/diff_new_pack.yVi0Z8/_new  2019-03-28 22:46:33.911076063 +0100
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="ec1b1f6de68c18251ec3699b88dd4575ffdda628"
-MOZ_RELEASE_TAG="e018f02de5fc888d9b03c93c0fb806ff52a84e7b"
-VERSION="60.6.0"
+RELEASE_TAG="ed1296af783ca23d9b07aac774cd104b14d246c3"
+MOZ_RELEASE_TAG="ac46edc9c4223fb6613501d3287705f49d1dfc57"
+VERSION="60.6.1"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.6.0.tar.xz -> l10n-60.6.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.6.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356/l10n-60.6.1.tar.xz 
differ: char 26, line 1

++ thunderbird-60.6.0.source.tar.xz -> thunderbird-60.6.1.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.6.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356/thunderbird-60.6.1.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-03-26 15:35:56

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356 (New)


Package is "MozillaThunderbird"

Tue Mar 26 15:35:56 2019 rev:207 rq:687466 version:60.6.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-03-04 09:13:23.372676404 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356/MozillaThunderbird.changes
 2019-03-26 15:35:58.596408464 +0100
@@ -1,0 +2,16 @@
+Wed Mar 20 15:33:14 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.6.0
+  * Calendar: Can't create repeating event with end date when using
+certain time zones, for example Europe/Minsk
+  * some minor bugfixes
+  * using 60.6.0esr Mozilla platform (bsc#1129821)
+
+---
+Thu Mar  7 08:28:56 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.5.3
+  * fixed a regression on the Windows platform:
+Problem when using "Send to > Mail recipient" on Windows
+
+---

Old:

  l10n-60.5.2.tar.xz
  thunderbird-60.5.2.source.tar.xz
  thunderbird-60.5.2.source.tar.xz.asc

New:

  l10n-60.6.0.tar.xz
  thunderbird-60.6.0.source.tar.xz
  thunderbird-60.6.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.fSjiNc/_old  2019-03-26 15:36:13.960402017 +0100
+++ /var/tmp/diff_new_pack.fSjiNc/_new  2019-03-26 15:36:13.964402015 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.5.2
+%define mainversion 60.6.0
 %define update_channel release
-%define releasedate 20190221150524
+%define releasedate 20190314112142
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.fSjiNc/_old  2019-03-26 15:36:14.096401960 +0100
+++ /var/tmp/diff_new_pack.fSjiNc/_new  2019-03-26 15:36:14.100401958 +0100
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="40667e32e3601db72cdbc137ba03a3e8f2a293bf"
-MOZ_RELEASE_TAG="6a830d12f15493a70b1192022c9985eba2139910"
-VERSION="60.5.2"
+RELEASE_TAG="ec1b1f6de68c18251ec3699b88dd4575ffdda628"
+MOZ_RELEASE_TAG="e018f02de5fc888d9b03c93c0fb806ff52a84e7b"
+VERSION="60.6.0"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.5.2.tar.xz -> l10n-60.6.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.5.2.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25356/l10n-60.6.0.tar.xz 
differ: char 26, line 1

++ mozilla-bmo1375074.patch ++
--- /var/tmp/diff_new_pack.fSjiNc/_old  2019-03-26 15:36:14.144401939 +0100
+++ /var/tmp/diff_new_pack.fSjiNc/_new  2019-03-26 15:36:14.144401939 +0100
@@ -3,7 +3,7 @@
 # User Lars T Hansen 
 # Date 1519822672 -3600
 # Node ID 800abe66894d6b07b24bccecbf6a65e2261076f6
-# Parent  13ecd3214b18e4cab73c54e12e16071d58bed11e
+# Parent  6fbe9ec020d822b1deef5b0afe76b905b82308a1
 Bug 1375074 - Save and restore non-volatile x28 on ARM64 for generated unboxed 
object constructor.  r=sstangl
 
 diff --git a/js/src/jit-test/tests/bug1375074.js 
b/js/src/jit-test/tests/bug1375074.js

++ mozilla-bmo1463035.patch ++
--- /var/tmp/diff_new_pack.fSjiNc/_old  2019-03-26 15:36:14.156401935 +0100
+++ /var/tmp/diff_new_pack.fSjiNc/_new  2019-03-26 15:36:14.160401933 +0100
@@ -3,7 +3,7 @@
 # User Mike Hommey 
 # Date 1526871862 -32400
 # Node ID 94f21505ff13cd089f7129cd24927cf8b31a0f43
-# Parent  4a2e8085417fe782738bfd736b69806d9ed19d6a
+# Parent  3075b562ca9b07ae037c427db6fdbc0ed1ad29a4
 Bug 1463035 - Remove MOZ_SIGNAL_TRAMPOLINE. r?darchons
 
 For some reason, GNU as is not happy with the assembly generated after

++ mozilla-bmo1464766.patch ++
--- /var/tmp/diff_new_pack.fSjiNc/_old  2019-03-26 15:36:14.168401929 +0100
+++ /var/tmp/diff_new_pack.fSjiNc/_new  2019-03-26 15:36:14.168401929 +0100
@@ -3,13 +3,13 @@
 # User Mike Hommey 
 # Date 1527491713 -32400
 # Node ID c28becad0c10b906454d7e424f9a9402799ea8dd
-# Parent  a830c8302c71a45e019fe14e16945b32346b2253
+# Parent  906f5be6219677928f03318adb1d5e4eed96333c
 Bug 1464766 - Allow to relax the addon signature requirements. r?rhelmer
 
 diff --git a/modules/libpref/init/all.js b/modules/libpref/init/all.js
 --- a/modules/libpref/init/all.js
 +++ b/modules/libpref/init/all.js
-@@ -1256,16 +1256,19 @@ pref("print.print_via_parent", true);
+@@ -1254,16 +1254,19 @@ pref("print.print_via_parent", true);
  pref("print.print_via_parent", 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-03-04 09:13:20

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833 (New)


Package is "MozillaThunderbird"

Mon Mar  4 09:13:20 2019 rev:206 rq:680129 version:60.5.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-02-24 18:01:48.851805269 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/MozillaThunderbird.changes
 2019-03-04 09:13:23.372676404 +0100
@@ -1,0 +2,8 @@
+Sun Feb 24 19:15:06 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.5.2
+  * UTF-8 support for MAPISendMail
+  * Problem with S/MIME certificate verification when receiving email
+from Outlook (issue introduced in version 60.5.1)
+
+---

Old:

  l10n-60.5.1.tar.xz
  thunderbird-60.5.1.source.tar.xz
  thunderbird-60.5.1.source.tar.xz.asc

New:

  l10n-60.5.2.tar.xz
  thunderbird-60.5.2.source.tar.xz
  thunderbird-60.5.2.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.UuoGzu/_old  2019-03-04 09:13:48.352671909 +0100
+++ /var/tmp/diff_new_pack.UuoGzu/_new  2019-03-04 09:13:48.376671905 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.5.1
+%define mainversion 60.5.2
 %define update_channel release
-%define releasedate 20190213094837
+%define releasedate 20190221150524
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.UuoGzu/_old  2019-03-04 09:13:49.028671788 +0100
+++ /var/tmp/diff_new_pack.UuoGzu/_new  2019-03-04 09:13:49.028671788 +0100
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="be29b0c0d1d850af78a09aef2fa2190f8dd4acfd"
+RELEASE_TAG="40667e32e3601db72cdbc137ba03a3e8f2a293bf"
 MOZ_RELEASE_TAG="6a830d12f15493a70b1192022c9985eba2139910"
-VERSION="60.5.1"
+VERSION="60.5.2"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.5.1.tar.xz -> l10n-60.5.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.5.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/l10n-60.5.2.tar.xz 
differ: char 26, line 1

++ thunderbird-60.5.1.source.tar.xz -> thunderbird-60.5.2.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.5.1.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/thunderbird-60.5.2.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-02-24 18:01:39

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833 (New)


Package is "MozillaThunderbird"

Sun Feb 24 18:01:39 2019 rev:205 rq:676696 version:60.5.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-02-08 12:05:49.893639749 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/MozillaThunderbird.changes
 2019-02-24 18:01:48.851805269 +0100
@@ -1,0 +2,15 @@
+Thu Feb 14 21:46:45 UTC 2019 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.5.1
+  * CalDav access to some servers not working
+  MFSA 2019-06 (bsc#1125330)
+  * CVE-2018-18356 bmo#1525817
+Use-after-free in Skia
+  * CVE-2019-5785 bmo#1525433
+Integer overflow in Skia
+  * CVE-2018-18335 bmo#1525815
+Buffer overflow in Skia with accelerated Canvas 2D
+  * CVE-2018-18509 bmo#1507218
+S/MIME signature spoofing
+
+---

Old:

  l10n-60.5.0.tar.xz
  thunderbird-60.5.0.source.tar.xz
  thunderbird-60.5.0.source.tar.xz.asc

New:

  l10n-60.5.1.tar.xz
  thunderbird-60.5.1.source.tar.xz
  thunderbird-60.5.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.yeZUOg/_old  2019-02-24 18:02:23.879795088 +0100
+++ /var/tmp/diff_new_pack.yeZUOg/_new  2019-02-24 18:02:23.879795088 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.5.0
+%define mainversion 60.5.1
 %define update_channel release
-%define releasedate 20190122170039
+%define releasedate 20190213094837
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.yeZUOg/_old  2019-02-24 18:02:23.991795049 +0100
+++ /var/tmp/diff_new_pack.yeZUOg/_new  2019-02-24 18:02:23.991795049 +0100
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="0afc082591ad"
-MOZ_RELEASE_TAG="44372339ec2c9e5c899656c2919c90f56f08"
-VERSION="60.5.0"
+RELEASE_TAG="be29b0c0d1d850af78a09aef2fa2190f8dd4acfd"
+MOZ_RELEASE_TAG="6a830d12f15493a70b1192022c9985eba2139910"
+VERSION="60.5.1"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.5.0.tar.xz -> l10n-60.5.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.5.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/l10n-60.5.1.tar.xz 
differ: char 26, line 1

++ thunderbird-60.5.0.source.tar.xz -> thunderbird-60.5.1.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.5.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/thunderbird-60.5.1.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-02-08 12:05:39

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833 (New)


Package is "MozillaThunderbird"

Fri Feb  8 12:05:39 2019 rev:204 rq:66 version:60.5.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2019-01-15 09:11:56.494482175 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/MozillaThunderbird.changes
 2019-02-08 12:05:49.893639749 +0100
@@ -1,0 +2,31 @@
+Fri Jan 25 14:40:21 UTC 2019 - Wolfgang Rosenauer 
+
+- MozillaThunderbird 60.5.0:
+  * FileLink provider WeTransfer to upload large attachments
+  * Thunderbird now allows the addition of OpenSearch search engines
+from a local XML file using a minimal user inferface: [+] button
+to select a file an add, [-] to remove.
+  * More search engines: Google and DuckDuckGo available by default
+in some locales
+  * During account creation, Thunderbird will now detect servers
+using the Microsoft Exchange protocol. It will offer the
+installation of a 3rd party add-on (Owl) which supports that
+protocol.
+  * Thunderbird now compatible with other WebExtension-based
+FileLink add-ons like the Dropbox add-on
+  MFSA 2019-03 (bsc#1122983)
+  * CVE-2018-18500 bmo#1510114
+Use-after-free parsing HTML5 stream
+  * CVE-2018-18505 bmo#1497749
+Privilege escalation through IPC channel messages
+  * CVE-2016-5824 bmo#1275400
+DoS (use-after-free) via a crafted ics file
+  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
+bmo#1502871 bmo#1516738 bmo#1516514
+Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
+- requires NSS 3.36.7
+- removed obsolete patch
+  mozilla-no-stdcxx-check.patch
+- rebased patches
+
+---
@@ -10,0 +42,16 @@
+  MFSA 2018-31
+  * CVE-2018-17466 bmo#1488295
+Buffer overflow and out-of-bounds read in ANGLE library with
+TextureStorage11
+  * CVE-2018-18492 bmo#1499861
+Use-after-free with select element
+  * CVE-2018-18493 bmo#1504452
+Buffer overflow in accelerated 2D canvas with Skia
+  * CVE-2018-18494 bmo#1487964
+Same-origin policy violation using location attribute and
+performance.getEntries to steal cross-origin URLs
+  * CVE-2018-18498 bmo#1500011
+Integer overflow when calculating buffer sizes for images
+  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
+bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
+Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
@@ -11,0 +59 @@
+

Old:

  l10n-60.4.0.tar.xz
  mozilla-no-stdcxx-check.patch
  thunderbird-60.4.0.source.tar.xz
  thunderbird-60.4.0.source.tar.xz.asc

New:

  l10n-60.5.0.tar.xz
  thunderbird-60.5.0.source.tar.xz
  thunderbird-60.5.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.3wJ1M3/_old  2019-02-08 12:06:17.005629559 +0100
+++ /var/tmp/diff_new_pack.3wJ1M3/_new  2019-02-08 12:06:17.009629557 +0100
@@ -1,8 +1,8 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
-#   2006-2018 Wolfgang Rosenauer 
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+#   2006-2019 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.4.0
+%define mainversion 60.5.0
 %define update_channel release
-%define releasedate 20181217101353
+%define releasedate 20190122170039
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -44,7 +44,7 @@
 BuildRequires:  libnotify-devel
 BuildRequires:  memory-constraints
 BuildRequires:  mozilla-nspr-devel >= 4.19
-BuildRequires:  mozilla-nss-devel >= 3.36.6
+BuildRequires:  mozilla-nss-devel >= 3.36.7
 BuildRequires:  python
 BuildRequires:  python2-xml
 BuildRequires:  rust >= 1.24
@@ -116,7 +116,6 @@
 # Gecko/Toolkit
 Patch2: mozilla-nongnome-proxies.patch
 Patch3: mozilla-kde.patch
-Patch5: mozilla-no-stdcxx-check.patch
 Patch6: mozilla-aarch64-startup-crash.patch
 Patch7: mozilla-bmo1375074.patch
 Patch8: mozilla-bmo1464766.patch
@@ -198,7 +197,6 @@
 %if %{with mozilla_tb_kde4}
 %patch3 -p1
 %endif
-%patch5 -p1
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
@@ -481,6 +479,7 @@
 %{progdir}/defaults/
 %dir %{progdir}/extensions/
 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2019-01-15 09:11:54

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833 (New)


Package is "MozillaThunderbird"

Tue Jan 15 09:11:54 2019 rev:203 rq:664269 version:60.4.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-12-11 15:45:25.834365032 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/MozillaThunderbird.changes
 2019-01-15 09:11:56.494482175 +0100
@@ -1,0 +2,12 @@
+Fri Dec 21 19:50:56 UTC 2018 - astie...@suse.com
+
+- Mozilla Thunderbird 60.4.0:
+  * New WebExtensions FileLink API to facilitate add-ons
+  * Fix decoding problems for messages with less common charsets
+(cp932, cp936)
+  * New messages in the drafts folder (and other special or virtual
+folders) will no longer be included in the new messages
+notification
+- requires NSS 3.36.6
+
+---

Old:

  l10n-60.3.3.tar.xz
  thunderbird-60.3.3.source.tar.xz
  thunderbird-60.3.3.source.tar.xz.asc

New:

  l10n-60.4.0.tar.xz
  thunderbird-60.4.0.source.tar.xz
  thunderbird-60.4.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.PMlE8w/_old  2019-01-15 09:13:01.958421640 +0100
+++ /var/tmp/diff_new_pack.PMlE8w/_new  2019-01-15 09:13:01.958421640 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.3.3
+%define mainversion 60.4.0
 %define update_channel release
-%define releasedate 20181204174145
+%define releasedate 20181217101353
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -44,7 +44,7 @@
 BuildRequires:  libnotify-devel
 BuildRequires:  memory-constraints
 BuildRequires:  mozilla-nspr-devel >= 4.19
-BuildRequires:  mozilla-nss-devel >= 3.36.4
+BuildRequires:  mozilla-nss-devel >= 3.36.6
 BuildRequires:  python
 BuildRequires:  python2-xml
 BuildRequires:  rust >= 1.24

++ _constraints ++
--- /var/tmp/diff_new_pack.PMlE8w/_old  2019-01-15 09:13:02.014421588 +0100
+++ /var/tmp/diff_new_pack.PMlE8w/_new  2019-01-15 09:13:02.018421584 +0100
@@ -5,7 +5,7 @@
   20
 
 
-  12
+  8
 
   
   

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.PMlE8w/_old  2019-01-15 09:13:02.070421537 +0100
+++ /var/tmp/diff_new_pack.PMlE8w/_new  2019-01-15 09:13:02.070421537 +0100
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="e4d520b5dc17"
-MOZ_RELEASE_TAG="f0bcd8dbddfb8aa6c8992cf505501834a128e50a"
-VERSION="60.3.3"
+RELEASE_TAG="945fb5fce3d3"
+MOZ_RELEASE_TAG="c23331af8ac635f86d748c0eb1e5bbb8fcfd86d9"
+VERSION="60.4.0"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.3.3.tar.xz -> l10n-60.4.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.3.3.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/l10n-60.4.0.tar.xz 
differ: char 8, line 1

++ thunderbird-60.3.3.source.tar.xz -> thunderbird-60.4.0.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.3.3.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28833/thunderbird-60.4.0.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-12-11 15:45:20

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453 (New)


Package is "MozillaThunderbird"

Tue Dec 11 15:45:20 2018 rev:202 rq:655853 version:60.3.3

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-12-05 09:38:49.953004591 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/MozillaThunderbird.changes
 2018-12-11 15:45:25.834365032 +0100
@@ -1,0 +2,19 @@
+Tue Dec  4 21:04:50 UTC 2018 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.3.3
+  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
+to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
+fault that potentially deleted saved passwords and private certificate
+keys for users using a master password. Version 60.3.3 will prevent
+the loss of data; affected users who have already upgraded to version
+60.3.2 or earlier can restore the deleted key3.db file from backup
+to complete the migration.
+  * Address book search and auto-complete slowness introduced in
+Thunderbird 60.3.2
+  * Plain text markup with * for bold, / for italics, _ for underline
+and | for code did not work when the enclosed text contained
+non-ASCII characters
+  * While composing a message, a link not removed when link location
+was removed in the link properties panel
+
+---

Old:

  l10n-60.3.2.tar.xz
  thunderbird-60.3.2.source.tar.xz
  thunderbird-60.3.2.source.tar.xz.asc

New:

  l10n-60.3.3.tar.xz
  thunderbird-60.3.3.source.tar.xz
  thunderbird-60.3.3.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.tLYZTv/_old  2018-12-11 15:46:12.722313471 +0100
+++ /var/tmp/diff_new_pack.tLYZTv/_new  2018-12-11 15:46:12.726313466 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.3.2
+%define mainversion 60.3.3
 %define update_channel release
-%define releasedate 20181128113928
+%define releasedate 20181204174145
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.tLYZTv/_old  2018-12-11 15:46:12.850313330 +0100
+++ /var/tmp/diff_new_pack.tLYZTv/_new  2018-12-11 15:46:12.858313321 +0100
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="0ba73c30a3d9f213323766057d2176cd253efdd3"
-MOZ_RELEASE_TAG="9f4280a52132bd8335d4833304e4bb7ee4d7c07d"
-VERSION="60.3.2"
+RELEASE_TAG="e4d520b5dc17"
+MOZ_RELEASE_TAG="f0bcd8dbddfb8aa6c8992cf505501834a128e50a"
+VERSION="60.3.3"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.3.2.tar.xz -> l10n-60.3.3.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.3.2.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/l10n-60.3.3.tar.xz 
differ: char 26, line 1

++ thunderbird-60.3.2.source.tar.xz -> thunderbird-60.3.3.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.3.2.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/thunderbird-60.3.3.source.tar.xz
 differ: char 16, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-12-05 09:38:46

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453 (New)


Package is "MozillaThunderbird"

Wed Dec  5 09:38:46 2018 rev:201 rq:653563 version:60.3.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-11-20 22:22:38.202940250 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/MozillaThunderbird.changes
 2018-12-05 09:38:49.953004591 +0100
@@ -1,0 +2,22 @@
+Mon Dec  3 12:57:01 UTC 2018 - astie...@suse.com
+
+- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement
+
+---
+Thu Nov 29 08:47:10 UTC 2018 - Wolfgang Rosenauer 
+
+- Mozilla Thunderbird 60.3.2
+  * Encoding problems when exporting address books or messages using
+the system charset. Messages are now always exported using the
+UTF-8 encoding
+  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
+was displayed. Now using date from "Received" header instead.
+  * Body search/filtering didn't reliably ignore content of tags
+  * Inappropriate warning "Thunderbird prevented the site
+(addons.thunderbird.net) from asking you to install software on
+your computer" when installing add-ons
+  * Incorrect display of correspondents column since own email
+address was not always detected
+  * Spurious  (encoded newline) inserted into drafts and sent email
+
+---

Old:

  l10n-60.3.1.tar.xz
  thunderbird-60.3.1.source.tar.xz
  thunderbird-60.3.1.source.tar.xz.asc

New:

  l10n-60.3.2.tar.xz
  thunderbird-60.3.2.source.tar.xz
  thunderbird-60.3.2.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.Xr92LV/_old  2018-12-05 09:39:09.560983129 +0100
+++ /var/tmp/diff_new_pack.Xr92LV/_new  2018-12-05 09:39:09.568983120 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.3.1
+%define mainversion 60.3.2
 %define update_channel release
-%define releasedate 20181113231517
+%define releasedate 20181128113928
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -48,7 +48,9 @@
 BuildRequires:  python
 BuildRequires:  python2-xml
 BuildRequires:  rust >= 1.24
+%if 0%{?suse_version} <= 1500
 BuildRequires:  rust-std
+%endif
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip
 BuildRequires:  update-desktop-files

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.Xr92LV/_old  2018-12-05 09:39:09.660983020 +0100
+++ /var/tmp/diff_new_pack.Xr92LV/_new  2018-12-05 09:39:09.660983020 +0100
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="c19a3e3679974a7251cd7a0626a3ff38b98b27db"
-MOZ_RELEASE_TAG="c2e7cb0fa26db19e618c71c33e66b463ef8bf739"
-VERSION="60.3.1"
+RELEASE_TAG="0ba73c30a3d9f213323766057d2176cd253efdd3"
+MOZ_RELEASE_TAG="9f4280a52132bd8335d4833304e4bb7ee4d7c07d"
+VERSION="60.3.2"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.3.1.tar.xz -> l10n-60.3.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.3.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/l10n-60.3.2.tar.xz 
differ: char 8, line 1

++ thunderbird-60.3.1.source.tar.xz -> thunderbird-60.3.2.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.3.1.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/thunderbird-60.3.2.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-11-20 22:22:19

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453 (New)


Package is "MozillaThunderbird"

Tue Nov 20 22:22:19 2018 rev:200 rq:649480 version:60.3.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-11-06 15:36:04.351549496 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/MozillaThunderbird.changes
 2018-11-20 22:22:38.202940250 +0100
@@ -1,0 +2,20 @@
+Thu Nov 15 16:33:49 UTC 2018 - astie...@suse.com
+
+- Mozilla Thunderbird 60.3.1:
+  * Double-clicking on a word in the Write window sometimes
+launched the Advanced Property Editor or Link Properties dialog
+  * Fixe Cookie removal
+  * "Download rest of message" was not working if global inbox was
+ used
+  * Fix Encoding problems for users (especially in Poland) when a
+file was sent via a folder using "Sent to > Mail recipient"
+due to a problem in the Thunderbird MAPI interface
+  * According to RFC 4616 and RFC 5721, passwords containing
+non-ASCII characters are encoded using UTF-8 which can lead to
+problems with non-compliant providers, for example
+office365.com. The SMTP LOGIN and POP3 USER/PASS
+authentication methods are now using a Latin-1 encoding again
+to work around this issue
+  * Fix shutdown crash/hang after entering an empty IMAP password
+
+---

Old:

  l10n-60.3.0.tar.xz
  thunderbird-60.3.0.source.tar.xz
  thunderbird-60.3.0.source.tar.xz.asc

New:

  l10n-60.3.1.tar.xz
  thunderbird-60.3.1.source.tar.xz
  thunderbird-60.3.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.21ZYU5/_old  2018-11-20 22:22:59.870928280 +0100
+++ /var/tmp/diff_new_pack.21ZYU5/_new  2018-11-20 22:22:59.874928277 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.3.0
+%define mainversion 60.3.1
 %define update_channel release
-%define releasedate 20181025202514
+%define releasedate 20181113231517
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -109,7 +109,7 @@
 Source10:   create-tar.sh
 Source11:   compare-locales.tar.xz
 Source12:   kde.js
-Source13:   thunderbird-%{version}.source.tar.xz.asc
+Source13:   
https://ftp.mozilla.org/pub/thunderbird/releases/%{version}/source/thunderbird-%{version}.source.tar.xz.asc
 Source14:   
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/KEY#/%{name}.keyring
 # Gecko/Toolkit
 Patch2: mozilla-nongnome-proxies.patch

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.21ZYU5/_old  2018-11-20 22:23:00.086928160 +0100
+++ /var/tmp/diff_new_pack.21ZYU5/_new  2018-11-20 22:23:00.090928158 +0100
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="dd958ef605d132d08a063f29606737ffb3453e68"
-MOZ_RELEASE_TAG="ab014151d4c338562949c28aa140786b548856ca"
-VERSION="60.3.0"
+RELEASE_TAG="c19a3e3679974a7251cd7a0626a3ff38b98b27db"
+MOZ_RELEASE_TAG="c2e7cb0fa26db19e618c71c33e66b463ef8bf739"
+VERSION="60.3.1"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

++ l10n-60.3.0.tar.xz -> l10n-60.3.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-60.3.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/l10n-60.3.1.tar.xz 
differ: char 8, line 1

++ thunderbird-60.3.0.source.tar.xz -> thunderbird-60.3.1.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-60.3.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19453/thunderbird-60.3.1.source.tar.xz
 differ: char 15, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-11-06 15:35:53

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Tue Nov  6 15:35:53 2018 rev:199 rq:645920 version:60.3.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-10-22 11:05:42.544153852 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-11-06 15:36:04.351549496 +0100
@@ -1,0 +2,45 @@
+Tue Oct 30 08:18:23 UTC 2018 - w...@rosenauer.org
+
+- update to Thunderbird 60.3.0
+  * various theme fixes
+  * Shift+PageUp/PageDown in Write window
+  * Gloda attachment filtering
+  * Mailing list address auto-complete enter/return handling
+  * Thunderbird hung if HTML signature references non-existent image
+  * Filters not working for headers that appear more than once
+- Security fixes for the Mozilla platform picked up from 60.3
+  (Firefox ESR release). In general, these flaws cannot be exploited
+  through email in Thunderbird because scripting is disabled when
+  reading mail, but are potentially risks in browser or browser-like
+  contexts (MFSA 2018-28) (bsc#1112852)
+  * CVE-2018-12391 (bmo#1478843) (Android only)
+HTTP Live Stream audio data is accessible cross-origin
+  * CVE-2018-12392 (bmo#1492823)
+Crash with nested event loops
+  * CVE-2018-12393 (bmo#1495011)
+Integer overflow during Unicode conversion while loading JavaScript
+  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
+Memory safety bugs fixed in Firefox ESR 60.3
+  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
+bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
+bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
+bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
+Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
+
+---
+Thu Oct 25 14:40:14 UTC 2018 - guillaume.gar...@opensuse.org
+
+- Update _constraints for armv6/7
+
+---
+Thu Oct 25 08:26:12 UTC 2018 - guillaume.gar...@opensuse.org
+
+- Add patch to fix build on armv7:
+  * mozilla-bmo1463035.patch
+
+---
+Thu Oct 25 08:25:52 UTC 2018 - guillaume.gar...@opensuse.org
+
+- Add memory-constraints to avoid OOM errors
+
+---

Old:

  l10n-60.2.1.tar.xz
  thunderbird-60.2.1.source.tar.xz
  thunderbird-60.2.1.source.tar.xz.asc

New:

  l10n-60.3.0.tar.xz
  mozilla-bmo1463035.patch
  thunderbird-60.3.0.source.tar.xz
  thunderbird-60.3.0.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.Uf7UWP/_old  2018-11-06 15:36:46.275486023 +0100
+++ /var/tmp/diff_new_pack.Uf7UWP/_new  2018-11-06 15:36:46.279486016 +0100
@@ -13,13 +13,13 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
-%define mainversion 60.2.1
+%define mainversion 60.3.0
 %define update_channel release
-%define releasedate 20180930223627
+%define releasedate 20181025202514
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -42,6 +42,7 @@
 BuildRequires:  libcurl-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
+BuildRequires:  memory-constraints
 BuildRequires:  mozilla-nspr-devel >= 4.19
 BuildRequires:  mozilla-nss-devel >= 3.36.4
 BuildRequires:  python
@@ -119,6 +120,7 @@
 Patch8: mozilla-bmo1464766.patch
 Patch9: mozilla-i586-DecoderDoctorLogger.patch
 Patch10:mozilla-i586-domPrefs.patch
+Patch11:mozilla-bmo1463035.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 PreReq: coreutils fileutils textutils /bin/sh
 Recommends: libcanberra0
@@ -202,6 +204,7 @@
 %patch9 -p1
 %patch10 -p1
 %endif
+%patch11 -p1
 
 %build
 # no need to add build time to binaries
@@ -251,6 +254,8 @@
 # is not forced into CFLAGS
 export MOZ_DEBUG_FLAGS="-pipe"
 #
+# Limit RAM usage to avoid OOM
+%limit_build -m 1500
 cat << EOF > $MOZCONFIG
 mk_add_options MOZILLA_OFFICIAL=1
 mk_add_options BUILD_OFFICIAL=1

++ _constraints ++
--- /var/tmp/diff_new_pack.Uf7UWP/_old  2018-11-06 15:36:46.363485889 +0100
+++ /var/tmp/diff_new_pack.Uf7UWP/_new  2018-11-06 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-10-22 11:04:38

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Mon Oct 22 11:04:38 2018 rev:198 rq:641723 version:60.2.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-10-11 11:44:06.350889592 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-10-22 11:05:42.544153852 +0200
@@ -1,0 +2,6 @@
+Fri Oct 12 14:26:17 UTC 2018 - meiss...@suse.com
+
+- provide / obsolete MozillaThunderbird-devel as this is no longer
+  shipped to allow migration scenarios
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.idOMG1/_old  2018-10-22 11:05:49.360148104 +0200
+++ /var/tmp/diff_new_pack.idOMG1/_new  2018-10-22 11:05:49.364148100 +0200
@@ -83,6 +83,8 @@
 Recommends: libavcodec-full >= 0.10.16
 Version:%{mainversion}
 Release:0
+Provides:   MozillaThunderbird-devel = %version
+Obsoletes:  MozillaThunderbird-devel < %version
 Provides:   thunderbird = %{version}
 Provides:   appdata()
 Provides:   appdata(thunderbird.appdata.xml)

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-10-11 11:43:29

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Thu Oct 11 11:43:29 2018 rev:197 rq:640048 version:60.2.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-09-26 16:01:23.648496703 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-10-11 11:44:06.350889592 +0200
@@ -1,0 +2,49 @@
+Tue Oct  2 10:08:00 UTC 2018 - w...@rosenauer.org
+
+- update to Thunderbird 60.2.1:
+  * Calendar: Default values for the first day of the week and
+working days are now derived from the selected datetime
+formatting locale
+  * Calendar: Switch to a Photon-style icon set for all platforms
+  * Fix multiple requests for master password when Google Mail or
+Calendar OAuth2 is enabled
+  * Fix scrollbar of the address entry auto-complete popup
+  * Fix security info dialog in compose window not showing 
+certificate status
+  * Fix links in the Add-on Manager's search results and theme
+browsing tabs that opened in external browser
+  * Fix localization not showing the localized name for the
+"Drafts" and "Sent" folders for certain IMAP providers
+  * Fix replying to a message with an empty subject which
+inserted Re: twice
+  * Fix spellcheck marks disappeaing erroneously for words with
+an apostrophe
+  * Calendar: First day of the week can now be set
+  * Calendar: Several fixes related to cutting/deleting of events
+and email schedulin
+  * Fix date display issues (bsc#1109379)
+  * Fix start-up crash due to folder name with special characters
+(bsc#1107772)
+- Security fixes for the Mozilla platform picked up from 60.1 and
+  60.2 (Firefox ESR releases). In general, these flaws
+  cannot be exploited through email in Thunderbird because
+  scripting is disabled when reading mail, but are potentially
+  risks in browser or browser-like contexts (MFSA 2018-25):
+  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
+Use-after-free in refresh driver timers
+  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
+Use-after-free in IndexedDB
+  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
+Proxy bypass using automount and autofs
+  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
+bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
+bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
+bmo#80521,bsc#1107343)
+Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
+  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
+Crash in TransportSecurityInfo due to cached data
+  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
+Setting a master password did not delete unencrypted
+previously stored passwords
+
+---

Old:

  l10n-60.0.tar.xz
  thunderbird-60.0.source.tar.xz

New:

  MozillaThunderbird.keyring
  l10n-60.2.1.tar.xz
  thunderbird-60.2.1.source.tar.xz
  thunderbird-60.2.1.source.tar.xz.asc



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.joKNPf/_old  2018-10-11 11:44:33.654854840 +0200
+++ /var/tmp/diff_new_pack.joKNPf/_new  2018-10-11 11:44:33.658854835 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.0
+%define mainversion 60.2.1
 %define update_channel release
-%define releasedate 20180731173940
+%define releasedate 20180930223627
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -96,8 +96,7 @@
 License:MPL-2.0
 Group:  Productivity/Networking/Email/Clients
 Url:http://www.mozilla.org/products/thunderbird/
-# Source: 
http://ftp.mozilla.org/pub/thunderbird/releases/%%{version}/source/thunderbird-%%{version}.source.tar.xz
-Source: thunderbird-%{version}.source.tar.xz
+Source: 
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/source/thunderbird-%{version}.source.tar.xz
 Source1:thunderbird.desktop
 Source3:mozilla.sh.in
 Source4:l10n-%{version}.tar.xz
@@ -107,8 +106,8 @@
 Source10:   create-tar.sh
 Source11:   compare-locales.tar.xz
 Source12:   kde.js
-#Source13:   thunderbird-%{version}.source.tar.xz.asc
-#Source14:   
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/KEY#/%{name}.keyring
+Source13:   thunderbird-%{version}.source.tar.xz.asc
+Source14:   
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/KEY#/%{name}.keyring
 # Gecko/Toolkit
 Patch2: mozilla-nongnome-proxies.patch
 Patch3:  

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-09-26 16:01:15

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Wed Sep 26 16:01:15 2018 rev:196 rq:636364 version:60.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-09-10 12:29:20.342881201 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-09-26 16:01:23.648496703 +0200
@@ -1,0 +2,6 @@
+Tue Sep 11 09:59:08 UTC 2018 - Guillaume GARDET 
+
+- Update file list since minidump-analyzer is only available when 
+  crashreporter is enabled
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.fcgZOV/_old  2018-09-26 16:01:32.992480490 +0200
+++ /var/tmp/diff_new_pack.fcgZOV/_new  2018-09-26 16:01:32.996480483 +0200
@@ -453,7 +453,9 @@
 %{progdir}/gtk2/libmozgtk.so
 %{progdir}/*.so
 %{progdir}/omni.ja
+%if %crashreporter
 %{progdir}/minidump-analyzer
+%endif
 %{progdir}/pingsender
 %{progdir}/platform.ini
 %{progdir}/plugin-container

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-09-10 12:29:19

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Mon Sep 10 12:29:19 2018 rev:195 rq:632921 version:60.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-07-17 09:36:33.198537874 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-09-10 12:29:20.342881201 +0200
@@ -1,0 +2,76 @@
+Sat Aug 25 18:59:41 UTC 2018 - astie...@suse.com
+
+- remove non-free untar licenced code from distributed tarball
+
+---
+Wed Aug 15 09:09:03 UTC 2018 - bjorn@gmail.com
+
+- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
+  conditional --disable-gconf to configure: no longer pull in
+  obsolete gconf2 for Tumbleweed.
+
+---
+Fri Aug  3 06:02:53 UTC 2018 - w...@rosenauer.org
+
+- update to Thunderbird 60.0:
+  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
+  * Improved message handling and composing
+  * Improved handling of message templates
+  * Support for OAuth2 and FIDO U2F
+  * Various Calendar improvements
+  * Various fixes and changes to e-mail workflow 
+  * Various IMAP fixes
+  * Native desktop notifications
+- Security fixes which can not, in general, be exploited through
+  email, but are potential risks in browser or browser-like contexts:
+  MFSA 2018-19 (bsc#1098998)
+  * CVE-2018-12359 (bmo#1459162)
+Buffer overflow using computed size of canvas element
+  * CVE-2018-12360 (bmo#1459693)
+Use-after-free when using focus()
+  * CVE-2018-12361 (bmo#1463244)
+Integer overflow in SwizzleData
+  * CVE-2018-12362 (bmo#1452375)
+Integer overflow in SSSE3 scaler
+  * CVE-2018-5156 (bmo#1453127)
+Media recorder segmentation fault when track type is changed
+during capture
+  * CVE-2018-12363 (bmo#1464784)
+Use-after-free when appending DOM nodes
+  * CVE-2018-12364 (bmo#1436241)
+CSRF attacks through 307 redirects and NPAPI plugins
+  * CVE-2018-12365 (bmo#1459206)
+Compromised IPC child process can list local filenames
+  * CVE-2018-12371 (bmo#1465686)
+Integer overflow in Skia library during edge builder allocation
+  * CVE-2018-12366 (bmo#1464039)
+Invalid data handling during QCMS transformations
+  * CVE-2018-12367 (bmo#1462891)
+Timing attack mitigation of PerformanceNavigationTiming
+  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
+bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
+bmo#1463884)
+Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and 
+Thunderbird 60
+  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
+bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
+bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
+bmo#1464079,bmo#1463494,bmo#1458048)
+Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
+ESR 52.9, and Thunderbird 60
+- requires NSPR 4.19 and NSS 3.36.4
+- source archives are now signed directly
+  (removed checksum signature check)
+- imported patches from Firefox 60
+  * mozilla-bmo1375074.patch
+  * mozilla-bmo1464766.patch
+  * mozilla-i586-DecoderDoctorLogger.patch
+  * mozilla-i586-domPrefs.patch
+- removed obsolete patches
+  * mozilla-language.patch
+  * tb-ssldap.patch
+  * mozilla-develdirs.patch
+- removed -devel subpackage as old-style extensions are mainly gone
+- storing of remote content settings fixed (boo#1084603)
+
+---

Old:

  MozillaThunderbird.keyring
  SHA512SUMS
  SHA512SUMS.asc
  l10n-52.9.1.tar.xz
  mozilla-develdirs.patch
  mozilla-language.patch
  tb-ssldap.patch
  thunderbird-52.9.1.source.tar.xz

New:

  l10n-60.0.tar.xz
  mozilla-bmo1375074.patch
  mozilla-bmo1464766.patch
  mozilla-i586-DecoderDoctorLogger.patch
  mozilla-i586-domPrefs.patch
  thunderbird-60.0.source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.uIyYu8/_old  2018-09-10 12:29:31.762863702 +0200
+++ /var/tmp/diff_new_pack.uIyYu8/_new  2018-09-10 12:29:31.762863702 +0200
@@ -17,34 +17,37 @@
 #
 
 
-%define mainversion 52.9.1
+%define mainversion 60.0
 %define update_channel release
-%define releasedate 20180709124824
+%define releasedate 20180731173940
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
 %bcond_without mozilla_tb_optimize_for_size
 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-07-17 09:36:30

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Tue Jul 17 09:36:30 2018 rev:194 rq:622019 version:52.9.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-07-07 21:54:47.527592363 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-07-17 09:36:33.198537874 +0200
@@ -1,0 +2,7 @@
+Tue Jul 10 06:29:59 UTC 2018 - w...@rosenauer.org
+
+- update to Thunderbird 52.9.1
+  * Deleting or detaching attachments corrupted messages under certain
+circumstances (bmo#1473893, bsc#1100780)
+
+---

Old:

  l10n-52.9.0.tar.xz
  thunderbird-52.9.0.source.tar.xz

New:

  l10n-52.9.1.tar.xz
  thunderbird-52.9.1.source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.EcCk3I/_old  2018-07-17 09:36:50.054479105 +0200
+++ /var/tmp/diff_new_pack.EcCk3I/_new  2018-07-17 09:36:50.058479091 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.9.0
+%define mainversion 52.9.1
 %define update_channel release
-%define releasedate 20180629153814
+%define releasedate 20180709124824
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ SHA512SUMS ++
 2839 lines (skipped)
 between /work/SRC/openSUSE:Factory/MozillaThunderbird/SHA512SUMS
 and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new/SHA512SUMS

++ SHA512SUMS.asc ++
--- /var/tmp/diff_new_pack.EcCk3I/_old  2018-07-17 09:36:50.166478714 +0200
+++ /var/tmp/diff_new_pack.EcCk3I/_new  2018-07-17 09:36:50.166478714 +0200
@@ -1,17 +1,17 @@
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2.0.14 (GNU/Linux)
 
-iQIcBAABCAAGBQJbNwBAAAoJELu+vbskxvNV/VIQALm38qMA24JjfEhX6GMRRV3G
-x6VPMSuNwcSI4MMxInsOkZ4onFEqjbHsZd6o3Ty1PLQtQpXfYz+JZRBYEC6+ryLE
-buy2G4y1F0GZp+6hSgjfzFcDDJ/jBvRra0v4QMTZ+0Thgg+gA69WhlxzysWT4zEF
-tgpUx2uIMMhNNkldixuFwqysQhlkzQmj8oRqOZ0o7Q2OkptB/S3YVspAEYkSp881
-MU3vSDGwfNmE6l19lr1CPnuvWyv20tcRFqmo52maG/rCLKarQbNZHyyPrsu3cebK
-IGkz0/aNQFA1n5CdTsJUOq1qsdUHs4+ntrGDY03cvBtj8o8Aexn+0av735Gz/CAI
-MkKUJZ7xSSI+rN83q2TPaRZPYzfeD11zNWvrgrc62Hx7exqSNGjNnNa7aEgZOxZq
-iJbebNnqZDMSIBmWOLHeLRoyaEER3EqqBWzp7OrVl6UP67c5NtPyp+lTAvrZz+YF
-qs21RvMchYxAvToG8akuha4P8qQg5i3c37zeQDSba5MSxR4gKJGu3qSy0tJxHbe0
-gylCvwLW/TDHv/W1o5Cj0RY+dUKpLaJc4ZvrRpx9150psrzO3b90R24UvWfve+tf
-2PQXUQG+LZR6/tbszZ4PObJ7nY2yxNnpZQtGl84Uh4cQ8DyQDEESt0NMaJCin4GD
-0l+nr75NKIw5Ub8iXlz8
-=q2NC
+iQIcBAABCAAGBQJbRArPAAoJELu+vbskxvNV2k4P/jZhS9db0CUXGPB5mxi/UElE
+nPYfbI9yeI5mugr+nnSaa21itHHNOYI54eqW9NVZ1m9fUqRqk8CBIdWR2ZBMhgfe
+dw4dVBPNqPS4N6ReAkrMiakog/7ADh1bTBxDrJBMtmYAIY87sKwS+rQkWyyIOdAt
+gAQ+YGaAUVJvcrbqVs5DlkWcDdvkOnkc7vi6WKMZ04rlpJqR+mBI/2S2nOFXGEBo
+XDPhq63lxsfY29LFCzGVAQx+OAEkh3yf/fGQ6Sn3AIKMx5uPCPUBqzu0tn97iJQx
+L6hOuaPIne/wwRTgckwrydfeSUPBxcaeY0Z6+ryFVdeGg6ToDeUAwSWoonSIKJ4u
+KDF2qKKfLPMe4MovDI6I9bpvQUG8T32iLPaHd9pjufuiSPE5KcohrlV0yEFz1ldz
+6yJVCvXWk93JcI5Sn/huaWLCZFDZs4GsZxwvGayol1p76k/n30W+ULWArnr9/zik
+aagYNncBXUmK4A2krpLTDxpcQ91WlaVlP4UK8sN42FcOHtVMWIgi/aLxNktJScPM
+bfwsjkW4i1n4kJvJcAOGNh8Is0iw3g6cbP9mNfnJCVU2FIKSEAGEiD9VC68BgbFn
+Q+5sssIaBlYYUaSE+9MRHeqvm6Ce+fxCZgfKbID4FreionHsOTr31M4TWjtazvlw
+dCtcJsY1B7wB6B6Etwis
+=HFv4
 -END PGP SIGNATURE-

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.EcCk3I/_old  2018-07-17 09:36:50.190478631 +0200
+++ /var/tmp/diff_new_pack.EcCk3I/_new  2018-07-17 09:36:50.190478631 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_9_0_RELEASE"
-VERSION="52.9.0"
+RELEASE_TAG="THUNDERBIRD_52_9_1_RELEASE"
+VERSION="52.9.1"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/mail/locales/shipped-locales"
 

++ l10n-52.9.0.tar.xz -> l10n-52.9.1.tar.xz ++

++ thunderbird-52.9.0.source.tar.xz -> thunderbird-52.9.1.source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.9.0.source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-52.9.1.source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-07-07 21:54:42

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Sat Jul  7 21:54:42 2018 rev:193 rq:620717 version:52.9.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-05-20 17:19:36.388290356 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-07-07 21:54:47.527592363 +0200
@@ -1,0 +2,48 @@
+Mon Jul  2 12:36:32 UTC 2018 - w...@rosenauer.org
+
+- update to Thunderbird 52.9.0:
+  MFSA 2018-16 (bsc#1098998)
+  * CVE-2018-12359 (bmo#1459162)
+Buffer overflow using computed size of canvas element
+  * CVE-2018-12360 (bmo#1459693)
+Use-after-free when using focus()
+  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
+S/MIME and PGP decryption oracles can be built with HTML emails
+  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
+S/MIME plaintext can be leaked through HTML reply/forward
+  * CVE-2018-12362 (bmo#1452375)
+Integer overflow in SSSE3 scaler
+  * CVE-2018-12363 (bmo#1464784)
+Use-after-free when appending DOM nodes
+  * CVE-2018-12364 (bmo#1436241)
+CSRF attacks through 307 redirects and NPAPI plugins
+  * CVE-2018-12365 (bmo#1459206)
+Compromised IPC child process can list local filenames
+  * CVE-2018-12366 (bmo#1464039)
+Invalid data handling during QCMS transformations
+  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
+Using form to exfiltrate encrypted mail part by pressing enter in form 
field
+  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
+bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
+bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
+bmo#1464079,bmo#1463494,bmo#1458048)
+Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 
52.9
+  * Thunderbird will now prompt to compact IMAP folders even if the
+account is online
+  * Option for not decrypting subordinate message parts that
+otherwise might reveal decryted content to the attacker. 
+Preference mailnews.p7m_subparts_external needs to be set to
+true for added security.
+  * Fix various problems when forwarding messages inline when using
+"simple" HTML view
+- correct requires and provides handling (boo#1076907)
+- reduce memory footprint with %ix86 at linking time via additional
+  compiler flags (boo#1091376)
+
+---
+Sun Jul  1 12:23:45 UTC 2018 - astie...@suse.com
+
+- Build from upstream source archive and verify source signature
+  (boo#1085780)
+
+---

Old:

  find-external-requires.sh
  l10n-52.8.tar.xz
  thunderbird-52.8-source.tar.xz

New:

  MozillaThunderbird.keyring
  SHA512SUMS
  SHA512SUMS.asc
  l10n-52.9.0.tar.xz
  thunderbird-52.9.0.source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.RVtVvK/_old  2018-07-07 21:56:55.451429866 +0200
+++ /var/tmp/diff_new_pack.RVtVvK/_new  2018-07-07 21:56:55.463429850 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.8
+%define mainversion 52.9.0
 %define update_channel release
-%define releasedate 20180517
+%define releasedate 20180629153814
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -90,18 +90,20 @@
 License:MPL-2.0
 Group:  Productivity/Networking/Email/Clients
 Url:http://www.mozilla.org/products/thunderbird/
-Source: thunderbird-%{version}-source.tar.xz
+Source: 
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/source/thunderbird-%{version}.source.tar.xz
 Source1:thunderbird.desktop
 Source3:mozilla.sh.in
 Source4:l10n-%{version}.tar.xz
 #Source5:shipped-locales
 Source6:suse-default-prefs.js
-Source7:find-external-requires.sh
 Source8:thunderbird-rpmlintrc
 Source9:thunderbird.appdata.xml
 Source10:   create-tar.sh
 Source11:   compare-locales.tar.xz
 Source12:   kde.js
+Source13:   
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/SHA512SUMS
+Source14:   
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/SHA512SUMS.asc
+Source15:   
http://ftp.mozilla.org/pub/thunderbird/releases/%{version}/KEY#/%{name}.keyring
 # Gecko/Toolkit
 Patch1: mozilla-language.patch
 Patch2: mozilla-nongnome-proxies.patch
@@ -127,10 +129,8 @@
 %define has_system_cairo 0
 %define localize 1
 ### 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-05-20 17:19:25

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Sun May 20 17:19:25 2018 rev:192 rq:610619 version:52.8

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-04-02 22:48:02.620426809 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-05-20 17:19:36.388290356 +0200
@@ -1,0 +2,37 @@
+Sat May 19 06:16:58 UTC 2018 - w...@rosenauer.org
+
+- update to Thunderbird 52.8 (bsc#1092548)
+  MFSA 2018-13
+  * CVE-2018-5183 (bmo#1454692)
+Backport critical security fixes in Skia
+  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
+Full plaintext recovery in S/MIME via chosen-ciphertext attack
+  * CVE-2018-5154 (bmo#1443092)
+Use-after-free with SVG animations and clip paths
+  * CVE-2018-5155 (bmo#1448774)
+Use-after-free with SVG animations and text paths
+  * CVE-2018-5159 (bmo#1441941)
+Integer overflow and out-of-bounds write in Skia
+  * CVE-2018-5161 (bmo#1411720)
+Hang via malformed headers
+  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
+Encrypted mail leaks plaintext through src attribute
+  * CVE-2018-5170 (bmo#1411732)
+Filename spoofing for external attachments
+  * CVE-2018-5168 (bmo#1449548)
+Lightweight themes can be installed without user interaction
+  * CVE-2018-5174 (bmo#1447080) (Windows only)
+Windows Defender SmartScreen UI runs with less secure behavior
+for downloaded files in Windows 10 April 2018 Update
+  * CVE-2018-5178 (bmo#1443891)
+Buffer overflow during UTF-8 to Unicode string conversion
+through legacy extension
+  * CVE-2018-5185 (bmo#1450345)
+Leaking plaintext through HTML forms
+  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
+bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
+bmo#1426129)
+Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
+Thunderbird 52.8
+
+---

Old:

  l10n-52.7.tar.xz
  thunderbird-52.7-source.tar.xz

New:

  l10n-52.8.tar.xz
  thunderbird-52.8-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.1WFaSi/_old  2018-05-20 17:20:23.546560822 +0200
+++ /var/tmp/diff_new_pack.1WFaSi/_new  2018-05-20 17:20:23.550560676 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.7
+%define mainversion 52.8
 %define update_channel release
-%define releasedate 20180323
+%define releasedate 20180517
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.1WFaSi/_old  2018-05-20 17:20:23.678555981 +0200
+++ /var/tmp/diff_new_pack.1WFaSi/_new  2018-05-20 17:20:23.678555981 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_7_0_RELEASE"
-VERSION="52.7"
+RELEASE_TAG="THUNDERBIRD_52_8_0_RELEASE"
+VERSION="52.8"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.7.tar.xz -> l10n-52.8.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-52.7.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-52.8.tar.xz differ: 
char 26, line 1

++ thunderbird-52.7-source.tar.xz -> thunderbird-52.8-source.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.7-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-52.8-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-04-02 22:47:49

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Mon Apr  2 22:47:49 2018 rev:191 rq:592321 version:52.7

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-03-29 11:48:51.896966565 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-04-02 22:48:02.620426809 +0200
@@ -1,0 +2,7 @@
+Wed Mar 28 01:31:17 CEST 2018 - r...@suse.de
+
+- Exclude bigendian archs for now, have not built
+  since version 45.8.0
+  ExcludeArch: ppc ppc64 s390 s390x
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.djLiUi/_old  2018-04-02 22:48:05.680315557 +0200
+++ /var/tmp/diff_new_pack.djLiUi/_new  2018-04-02 22:48:05.684315412 +0200
@@ -115,6 +115,9 @@
 PreReq: coreutils fileutils textutils /bin/sh
 Recommends: libcanberra0
 Recommends: libpulse0
+# Exclude bigendian archs for now, have not built
+# since version 45.8.0
+ExcludeArch:ppc ppc64 s390 s390x
 ### build options
 %ifarch aarch64 ppc ppc64 ppc64le s390 s390x ia64 %arm
 %define crashreporter 0

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-03-29 11:48:50

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Thu Mar 29 11:48:50 2018 rev:190 rq:591025 version:52.7

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-02-18 11:39:07.320584222 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-03-29 11:48:51.896966565 +0200
@@ -1,0 +2,30 @@
+Fri Mar 23 09:39:40 UTC 2018 - w...@rosenauer.org
+
+- update to Thunderbird 52.7
+  * Searching message bodies of messages in local folders, including
+filter and quick filter operations, did not find content in
+message attachments
+  * Better error handling for Yahoo accounts
+- The following security fixes are included as part of the mozilla
+  platform. In general, these flaws cannot be exploited through
+  email in the Thunderbird product because scripting is disabled
+  when reading mail, but are potentially risks in browser or
+  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
+  * CVE-2018-5127 (bmo#1430557)
+Buffer overflow manipulating SVG animatedPathSegList
+  * CVE-2018-5129 (bmo#1428947)
+Out-of-bounds write with malformed IPC messages
+  * CVE-2018-5144 (bmo#1440926)
+Integer overflow during Unicode conversion
+  * CVE-2018-5146 (bmo#1446062)
+Out of bounds memory write in libvorbis
+  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
+bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
+bmo#1443865,bmo#1425520)
+Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
+Thunderbird 52.7
+  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
+Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
+52.7
+
+---

Old:

  l10n-52.6.tar.xz
  thunderbird-52.6-source.tar.xz

New:

  l10n-52.7.tar.xz
  thunderbird-52.7-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.HmLS3i/_old  2018-03-29 11:49:29.403615427 +0200
+++ /var/tmp/diff_new_pack.HmLS3i/_new  2018-03-29 11:49:29.407615283 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.6
+%define mainversion 52.7
 %define update_channel release
-%define releasedate 20180124
+%define releasedate 20180323
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.HmLS3i/_old  2018-03-29 11:49:29.539610529 +0200
+++ /var/tmp/diff_new_pack.HmLS3i/_new  2018-03-29 11:49:29.543610385 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_6_0_RELEASE"
-VERSION="52.6"
+RELEASE_TAG="THUNDERBIRD_52_7_0_RELEASE"
+VERSION="52.7"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.6.tar.xz -> l10n-52.7.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-52.6.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-52.7.tar.xz differ: 
char 27, line 1

++ thunderbird-52.6-source.tar.xz -> thunderbird-52.7-source.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.6-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-52.7-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-02-18 11:39:01

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Sun Feb 18 11:39:01 2018 rev:189 rq:577192 version:52.6

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-01-30 15:36:40.696245347 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-02-18 11:39:07.320584222 +0100
@@ -46 +46 @@
-  * CVE-2017-7846 (bmo#1411716)
+  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
@@ -48 +48 @@
-  * CVE-2017-7847 (bmo#1411708)
+  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
@@ -50 +50 @@
-  * CVE-2017-7848 (bmo#1411699)
+  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
@@ -52 +52 @@
-  * CVE-2017-7829 (bmo#1423432)
+  * CVE-2017-7829 (bmo#1423432, bsc#1074046)



Other differences:
--
++ _constraints ++
--- /var/tmp/diff_new_pack.S0U3hx/_old  2018-02-18 11:39:16.456256282 +0100
+++ /var/tmp/diff_new_pack.S0U3hx/_new  2018-02-18 11:39:16.456256282 +0100
@@ -2,10 +2,10 @@
 
   
 
-  13
+  16
 
 
-  6000
+  9000
 
   
 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-01-30 15:36:27

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Tue Jan 30 15:36:27 2018 rev:188 rq:569795 version:52.6

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2018-01-01 22:04:16.880020104 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-01-30 15:36:40.696245347 +0100
@@ -1,0 +2,35 @@
+Wed Jan 24 11:40:38 UTC 2018 - w...@rosenauer.org
+
+- update to Thunderbird 52.6 (bsc#1077291)
+  * Searching message bodies of messages in local folders, including
+filter and quick filter operations, not working reliably: Content
+not found in base64-encode message parts, non-ASCII text not found
+and false positives found.
+  * Defective messages (without at least one expected header) not shown
+in IMAP folders but shown on mobile devices
+  * Calendar: Unintended task deletion if numlock is enabled
+  * Mozilla platform security fixes
+  MFSA 2018-04
+  * CVE-2018-5095 (bmo#1418447)
+Integer overflow in Skia library during edge builder allocation
+  * CVE-2018-5096 (bmo#1418922)
+Use-after-free while editing form elements
+  * CVE-2018-5097 (bmo#1387427)
+Use-after-free when source document is manipulated during XSLT
+  * CVE-2018-5098 (bmo#1399400)
+Use-after-free while manipulating form input elements
+  * CVE-2018-5099 (bmo#1416878)
+Use-after-free with widget listener
+  * CVE-2018-5102 (bmo#1419363)
+Use-after-free in HTML media elements
+  * CVE-2018-5103 (bmo#1423159)
+Use-after-free during mouse event handling
+  * CVE-2018-5104 (bmo#1425000)
+Use-after-free during font face manipulation
+  * CVE-2018-5117 (bmo#1395508)
+URL spoofing with right-to-left text aligned left-to-right
+  * CVE-2018-5089
+Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
+- dropped obsolete mozilla-ucontext.patch
+
+---
@@ -6,2 +41,6 @@
-vulnerabilities detected by the "Cure53" audit (MFSA 2017-30)
-  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
+vulnerabilities detected by the "Cure53" audit
+  MFSA 2017-30
+  * CVE-2017-7845 (bmo#1402372)
+Buffer overflow when drawing and validating elements with ANGLE
+library using Direct 3D 9
+  * CVE-2017-7846 (bmo#1411716)
@@ -9 +48 @@
-  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
+  * CVE-2017-7847 (bmo#1411708)
@@ -11 +50 @@
-  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
+  * CVE-2017-7848 (bmo#1411699)
@@ -13 +52 @@
-  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
+  * CVE-2017-7829 (bmo#1423432)

Old:

  l10n-52.5.2.tar.xz
  mozilla-ucontext.patch
  thunderbird-52.5.2-source.tar.xz

New:

  l10n-52.6.tar.xz
  thunderbird-52.6-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.lmgEhm/_old  2018-01-30 15:37:20.646380119 +0100
+++ /var/tmp/diff_new_pack.lmgEhm/_new  2018-01-30 15:37:20.646380119 +0100
@@ -1,8 +1,8 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
-#   2006-2017 Wolfgang Rosenauer 
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+#   2006-2018 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.5.2
+%define mainversion 52.6
 %define update_channel release
-%define releasedate 20171222
+%define releasedate 20180124
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -109,7 +109,6 @@
 Patch4: mozilla-develdirs.patch
 Patch5: mozilla-no-stdcxx-check.patch
 Patch6: mozilla-aarch64-startup-crash.patch
-Patch7: mozilla-ucontext.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -203,7 +202,6 @@
 %patch4 -p1
 %patch5 -p1
 %patch6 -p1
-%patch7 -p1
 popd
 # comm-central patches
 %patch20 -p1

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.lmgEhm/_old  2018-01-30 15:37:20.746375450 +0100
+++ /var/tmp/diff_new_pack.lmgEhm/_new  2018-01-30 15:37:20.750375263 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_5_2_RELEASE"
-VERSION="52.5.2"
+RELEASE_TAG="THUNDERBIRD_52_6_0_RELEASE"
+VERSION="52.6"
 
 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2018-01-01 22:04:06

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Mon Jan  1 22:04:06 2018 rev:187 rq:559658 version:52.5.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-12-12 21:20:47.560732854 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2018-01-01 22:04:16.880020104 +0100
@@ -1,0 +2,16 @@
+Sat Dec 23 18:36:42 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.5.2
+  * This releases fixes the "Mailsploit" vulnerability and other
+vulnerabilities detected by the "Cure53" audit (MFSA 2017-30)
+  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
+JavaScript Execution via RSS in mailbox:// origin
+  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
+Local path string can be leaked from RSS feed
+  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
+RSS Feed vulnerable to new line Injection
+  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
+Mailsploit part 1: From address with encoded null character is
+cut off in message header display
+
+---

Old:

  l10n-52.5.0.tar.xz
  thunderbird-52.5.0-source.tar.xz

New:

  l10n-52.5.2.tar.xz
  thunderbird-52.5.2-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.erMCJZ/_old  2018-01-01 22:04:34.838018904 +0100
+++ /var/tmp/diff_new_pack.erMCJZ/_new  2018-01-01 22:04:34.842017567 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.5.0
+%define mainversion 52.5.2
 %define update_channel release
-%define releasedate 20171121
+%define releasedate 20171222
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.erMCJZ/_old  2018-01-01 22:04:35.005962781 +0100
+++ /var/tmp/diff_new_pack.erMCJZ/_new  2018-01-01 22:04:35.005962781 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_5_0_RELEASE"
-VERSION="52.5.0"
+RELEASE_TAG="THUNDERBIRD_52_5_2_RELEASE"
+VERSION="52.5.2"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.5.0.tar.xz -> l10n-52.5.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-52.5.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-52.5.2.tar.xz differ: 
char 26, line 1

++ thunderbird-52.5.0-source.tar.xz -> thunderbird-52.5.2-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.5.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-52.5.2-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-12-12 21:20:43

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Tue Dec 12 21:20:43 2017 rev:186 rq:555851 version:52.5.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-11-30 12:42:00.173310226 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-12-12 21:20:47.560732854 +0100
@@ -1,0 +2,12 @@
+Fri Dec  8 15:53:30 UTC 2017 - dims...@opensuse.org
+
+- Explicitly buildrequires python2-xml: The build system relies on
+  it. We wrongly relied on other packages pulling it in for us.
+
+---
+Thu Dec  7 11:13:41 UTC 2017 - dims...@opensuse.org
+
+- Escape the usage of %{VERSION} when calling out to rpm.
+  RPM 4.14 has %{VERSION} defined as 'the main packages version'.
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.NOAE8m/_old  2017-12-12 21:20:54.956375835 +0100
+++ /var/tmp/diff_new_pack.NOAE8m/_new  2017-12-12 21:20:54.960375641 +0100
@@ -44,6 +44,7 @@
 BuildRequires:  mozilla-nspr-devel >= 4.13.1
 BuildRequires:  mozilla-nss-devel >= 3.28.6
 BuildRequires:  python
+BuildRequires:  python2-xml
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip
 BuildRequires:  update-desktop-files
@@ -128,8 +129,8 @@
 %define __find_requires sh %{SOURCE7}
 %global provfind sh -c "grep -v '.so' | %__find_provides"
 %global __find_provides %provfind
-Requires:   mozilla-nspr >= %(rpm -q --queryformat '%{VERSION}' 
mozilla-nspr)
-Requires:   mozilla-nss >= %(rpm -q --queryformat '%{VERSION}' mozilla-nss)
+Requires:   mozilla-nspr >= %(rpm -q --queryformat '%%{VERSION}' 
mozilla-nspr)
+Requires:   mozilla-nss >= %(rpm -q --queryformat '%%{VERSION}' 
mozilla-nss)
 Conflicts:  thunderbird-esr
 %define progname thunderbird
 %define progdir %{_prefix}/%_lib/thunderbird
@@ -171,8 +172,8 @@
 %package devel
 Summary:Mozilla Thunderbird SDK
 Group:  Development/Libraries/Other
-Requires:   mozilla-nspr-devel >= %(rpm -q --queryformat '%{VERSION}' 
mozilla-nspr-devel)
-PreReq: mozilla-nss-devel >= %(rpm -q --queryformat '%{VERSION}' 
mozilla-nss-devel)
+Requires:   mozilla-nspr-devel >= %(rpm -q --queryformat '%%{VERSION}' 
mozilla-nspr-devel)
+PreReq: mozilla-nss-devel >= %(rpm -q --queryformat '%%{VERSION}' 
mozilla-nss-devel)
 PreReq: %{name} = %{mainversion}
 
 %description devel

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-11-30 12:41:58

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Thu Nov 30 12:41:58 2017 rev:185 rq:545445 version:52.5.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-10-09 19:36:53.109478766 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-11-30 12:42:00.173310226 +0100
@@ -1,0 +2,32 @@
+Wed Nov 22 10:02:35 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.5.0 (bsc#1068101)
+  * Better support for Charter/Spectrum IMAP: Thunderbird will now
+detect Charter's IMAP service and send an additional IMAP select
+command to the server. Check the various preferences ending in
+"force_select" to see whether auto-detection has discovered this case.
+  * In search folders spanning multiple base folders clicking on a
+message sometimes marked another message as read
+  * IMAP alerts have been corrected and now show the correct server
+name in case of connection problems
+  * POP alerts have been corrected and now indicate connection problems
+in case the configured POP server cannot be found
+  MFSA 2017-26
+  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
+Use-after-free of PressShell while restyling layout
+  * CVE-2017-7830 (bmo#1408990)
+Cross-origin URL information leak through Resource Timing API
+  * CVE-2017-7826
+Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5
+
+---
+Fri Nov 10 22:12:18 UTC 2017 - zai...@opensuse.org
+
+- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
+- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
+  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
+  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
+  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
+  libgnomeui-devel, and is what configure really checks for.
+
+---

Old:

  l10n-52.4.0.tar.xz
  thunderbird-52.4.0-source.tar.xz

New:

  l10n-52.5.0.tar.xz
  thunderbird-52.5.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.lmltTB/_old  2017-11-30 12:42:16.140729690 +0100
+++ /var/tmp/diff_new_pack.lmltTB/_new  2017-11-30 12:42:16.144729545 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.4.0
+%define mainversion 52.5.0
 %define update_channel release
-%define releasedate 20171004
+%define releasedate 20171121
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -39,7 +39,6 @@
 BuildRequires:  hunspell-devel
 BuildRequires:  libXcomposite-devel
 BuildRequires:  libcurl-devel
-BuildRequires:  libgnomeui-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  mozilla-nspr-devel >= 4.13.1
@@ -52,6 +51,13 @@
 BuildRequires:  xz
 BuildRequires:  yasm
 BuildRequires:  zip
+BuildRequires:  pkgconfig(gconf-2.0) >= 1.2.1
+BuildRequires:  pkgconfig(gdk-x11-2.0)
+BuildRequires:  pkgconfig(glib-2.0) >= 2.22
+BuildRequires:  pkgconfig(gobject-2.0)
+BuildRequires:  pkgconfig(gobject-2.0)
+BuildRequires:  pkgconfig(gtk+-2.0) >= 2.18.0
+BuildRequires:  pkgconfig(gtk+-unix-print-2.0)
 BuildRequires:  pkgconfig(libffi)
 BuildRequires:  pkgconfig(libpulse)
 %if %{with mozilla_tb_valgrind}

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.lmltTB/_old  2017-11-30 12:42:16.292724164 +0100
+++ /var/tmp/diff_new_pack.lmltTB/_new  2017-11-30 12:42:16.292724164 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_4_0_RELEASE"
-VERSION="52.4.0"
+RELEASE_TAG="THUNDERBIRD_52_5_0_RELEASE"
+VERSION="52.5.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.4.0.tar.xz -> l10n-52.5.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-52.4.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-52.5.0.tar.xz differ: 
char 26, line 1

++ thunderbird-52.4.0-source.tar.xz -> thunderbird-52.5.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.4.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-52.5.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-10-09 19:36:36

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Mon Oct  9 19:36:36 2017 rev:184 rq:532694 version:52.4.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-08-24 17:40:26.321486556 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-10-09 19:36:53.109478766 +0200
@@ -1,0 +2,42 @@
+Wed Oct  4 09:18:39 UTC 2017 - astie...@suse.com
+
+- Mozilla Thunderbird 52.4.0 (bsc#1060445)
+  * new behavior was introduced for replies to mailing list posts:
+"When replying to a mailing list, reply will be sent to address
+in From header ignoring Reply-to header". A new preference
+mail.override_list_reply_to allows to restore the previous behavior.
+  * Under certain circumstances (image attachment and non-image
+attachment), attached images were shown truncated in messages
+stored in IMAP folders not synchronised for offline use.
+  * IMAP UIDs > 0x7FFF now handled properly
+  Security fixes from Gecko 52.4esr
+  * CVE-2017-7793 (bmo#1371889)
+Use-after-free with Fetch API
+  * CVE-2017-7818 (bmo#1363723)
+Use-after-free during ARIA array manipulation
+  * CVE-2017-7819 (bmo#1380292)
+Use-after-free while resizing images in design mode
+  * CVE-2017-7824 (bmo#1398381)
+Buffer overflow when drawing and validating elements with ANGLE
+  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
+Use-after-free in TLS 1.2 generating handshake hashes
+  * CVE-2017-7814 (bmo#1376036)
+Blob and data URLs bypass phishing and malware protection warnings
+  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
+OS X fonts render some Tibetan and Arabic unicode characters as spaces
+  * CVE-2017-7823 (bmo#1396320)
+CSP sandbox directive did not create a unique origin
+  * CVE-2017-7810
+Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
+
+---
+Thu Sep 28 07:56:22 UTC 2017 - dims...@opensuse.org
+
+- Add alsa-devel BuildRequires: we care for ALSA support to be
+  built and thus need to ensure we get the dependencies in place.
+  In the past, alsa-devel was pulled in by accident: we
+  buildrequire libgnome-devel. This required esound-devel and that
+  in turn pulled in alsa-devel for us. libgnome is being fixed to
+  no longer require esound-devel.
+
+---

Old:

  l10n-52.3.0.tar.xz
  thunderbird-52.3.0-source.tar.xz

New:

  l10n-52.4.0.tar.xz
  thunderbird-52.4.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.bJNehs/_old  2017-10-09 19:37:07.612841236 +0200
+++ /var/tmp/diff_new_pack.bJNehs/_new  2017-10-09 19:37:07.612841236 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.3.0
+%define mainversion 52.4.0
 %define update_channel release
-%define releasedate 20170815
+%define releasedate 20171004
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -31,6 +31,7 @@
 
 Name:   MozillaThunderbird
 BuildRequires:  Mesa-devel
+BuildRequires:  alsa-devel
 BuildRequires:  autoconf213
 BuildRequires:  dbus-1-glib-devel
 BuildRequires:  fdupes
@@ -42,7 +43,7 @@
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  mozilla-nspr-devel >= 4.13.1
-BuildRequires:  mozilla-nss-devel >= 3.28.5
+BuildRequires:  mozilla-nss-devel >= 3.28.6
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.bJNehs/_old  2017-10-09 19:37:07.724836314 +0200
+++ /var/tmp/diff_new_pack.bJNehs/_new  2017-10-09 19:37:07.724836314 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_3_0_RELEASE"
-VERSION="52.3.0"
+RELEASE_TAG="THUNDERBIRD_52_4_0_RELEASE"
+VERSION="52.4.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.3.0.tar.xz -> l10n-52.4.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-52.3.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-52.4.0.tar.xz differ: 
char 26, line 1

++ thunderbird-52.3.0-source.tar.xz -> thunderbird-52.4.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.3.0-source.tar.xz 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-08-24 17:40:24

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Thu Aug 24 17:40:24 2017 rev:183 rq:517268 version:52.3.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-06-30 18:42:34.936272923 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-08-24 17:40:26.321486556 +0200
@@ -1,0 +2,55 @@
+Tue Aug 15 12:48:43 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.3 (boo#1052829)
+  Fixed issues:
+  * Unwanted inline images shown in rogue SPAM messages
+  * Deleting message from the POP3 server not working when maildir
+storage was used
+  * Message disposition flag (replied / forwarded) lost when reply or
+forwarded message was stored as draft and draft was sent later
+  * Inline images not scaled to fit when printing
+  * Selected text from another message sometimes included in a reply
+  * No authorisation prompt displayed when inserting image into email
+body although image URL requires authentication
+  * Large attachments taking a long time to open under some circumstances
+  security
+  Security fixes from Gecko 52.3esr
+  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
+XUL injection in the style editor in devtools
+  * CVE-2017-7800 (bmo#1374047)
+Use-after-free in WebSockets during disconnection
+  * CVE-2017-7801 (bmo#1371259)
+Use-after-free with marquee during window resizing
+  * CVE-2017-7784 (bmo#1376087)
+Use-after-free with image observers
+  * CVE-2017-7802 (bmo#1378147)
+Use-after-free resizing image elements
+  * CVE-2017-7785 (bmo#1356985)
+Buffer overflow manipulating ARIA attributes in DOM
+  * CVE-2017-7786 (bmo#1365189)
+Buffer overflow while painting non-displayable SVG
+  * CVE-2017-7753 (bmo#1353312)
+Out-of-bounds read with cached style data and pseudo-elements#
+  * CVE-2017-7787 (bmo#1322896)
+Same-origin policy bypass with iframes through page reloads
+  * CVE-2017-7807 (bmo#1376459)
+Domain hijacking through AppCache fallback
+  * CVE-2017-7792 (bmo#1368652)
+Buffer overflow viewing certificates with an extremely long OID
+  * CVE-2017-7804 (bmo#1372849)
+Memory protection bypass through WindowsDllDetourPatcher
+  * CVE-2017-7791 (bmo#1365875)
+Spoofing following page navigation with data: protocol and modal alerts
+  * CVE-2017-7782 (bmo#1344034)
+WindowsDllDetourPatcher allocates memory without DEP protections
+  * CVE-2017-7803 (bmo#1377426)
+CSP containing 'sandbox' improperly applied
+  * CVE-2017-7779
+Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3
+
+---
+Wed Aug  9 09:47:39 UTC 2017 - sch...@suse.de
+
+- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext
+
+---

Old:

  l10n-52.2.1.tar.xz
  thunderbird-52.2.1-source.tar.xz

New:

  l10n-52.3.0.tar.xz
  mozilla-ucontext.patch
  thunderbird-52.3.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.zdAaE4/_old  2017-08-24 17:40:45.474790016 +0200
+++ /var/tmp/diff_new_pack.zdAaE4/_new  2017-08-24 17:40:45.482788890 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.2.1
+%define mainversion 52.3.0
 %define update_channel release
-%define releasedate 20170625
+%define releasedate 20170815
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -101,6 +101,7 @@
 Patch4: mozilla-develdirs.patch
 Patch5: mozilla-no-stdcxx-check.patch
 Patch6: mozilla-aarch64-startup-crash.patch
+Patch7: mozilla-ucontext.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -194,6 +195,7 @@
 %patch4 -p1
 %patch5 -p1
 %patch6 -p1
+%patch7 -p1
 popd
 # comm-central patches
 %patch20 -p1

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.zdAaE4/_old  2017-08-24 17:40:45.870734272 +0200
+++ /var/tmp/diff_new_pack.zdAaE4/_new  2017-08-24 17:40:45.890731457 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_2_1_RELEASE"
-VERSION="52.2.1"
+RELEASE_TAG="THUNDERBIRD_52_3_0_RELEASE"
+VERSION="52.3.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.2.1.tar.xz -> l10n-52.3.0.tar.xz ++

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-06-30 18:41:32

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Fri Jun 30 18:41:32 2017 rev:182 rq:507003 version:52.2.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-06-20 10:59:28.683307502 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-06-30 18:42:34.936272923 +0200
@@ -1,0 +2,13 @@
+Wed Jun 28 13:57:13 UTC 2017 - guilla...@opensuse.org
+
+- mozilla-disable-neon-option.patch has been dropped silently, so 
+  remove the --disable-neon option as it is not available anymore.
+
+---
+Sun Jun 25 06:55:13 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.2.1
+  * Problems with Gmail fixed (folders not showing, repeated email
+download, etc.) introduced in version 52.2.0. (boo#1045895)
+
+---

Old:

  l10n-52.2.tar.xz
  thunderbird-52.2-source.tar.xz

New:

  l10n-52.2.1.tar.xz
  thunderbird-52.2.1-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.P0uw29/_old  2017-06-30 18:43:21.373741223 +0200
+++ /var/tmp/diff_new_pack.P0uw29/_new  2017-06-30 18:43:21.373741223 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.2
+%define mainversion 52.2.1
 %define update_channel release
-%define releasedate 20170612
+%define releasedate 20170625
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -289,10 +289,6 @@
 %if ! %crashreporter
 ac_add_options --disable-crashreporter
 %endif
-# Disable neon for arm as it does not build correctly
-%ifarch %arm
-ac_add_options --disable-neon
-%endif
 %if %{with mozilla_tb_valgrind}
 ac_add_options --disable-jemalloc
 ac_add_options --enable-valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.P0uw29/_old  2017-06-30 18:43:21.513721534 +0200
+++ /var/tmp/diff_new_pack.P0uw29/_new  2017-06-30 18:43:21.513721534 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_2_0_RELEASE"
-VERSION="52.2"
+RELEASE_TAG="THUNDERBIRD_52_2_1_RELEASE"
+VERSION="52.2.1"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.2.tar.xz -> l10n-52.2.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-52.2.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-52.2.1.tar.xz differ: 
char 27, line 1

++ thunderbird-52.2-source.tar.xz -> thunderbird-52.2.1-source.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.2-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-52.2.1-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-06-20 10:59:18

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Tue Jun 20 10:59:18 2017 rev:181 rq:503951 version:52.2

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-06-08 16:36:52.499966232 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-06-20 10:59:28.683307502 +0200
@@ -1,0 +2,50 @@
+Wed Jun 14 11:34:58 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.2 (boo#1043960)
+  * Embedded images not shown in email received from Hotmail/Outlook
+webmailer
+  * Detection of non-ASCII font names in font selector
+  * Attachment not forwarded correctly under certain circumstances
+  * Multiple requests for master password when GMail OAuth2 is enabled
+  * Large number of blank pages being printed under certain
+circumstances when invalid preferences were present
+  * Messages sent via the Simple MAPI interface are forced to HTML
+  * Calendar: Invitations can't be printed
+  * Mailing list (group) not accessible from macOS or Outlook address book
+  * Clicking on links with references/anchors where target doesn't
+exist in the message not opening in external browser
+  MFSA 2017-17
+  * CVE-2017-5472 (bmo#1365602)
+Use-after-free using destroyed node when regenerating trees
+  * CVE-2017-7749 (bmo#1355039)
+Use-after-free during docshell reloading
+  * CVE-2017-7750 (bmo#1356558)
+Use-after-free with track elements
+  * CVE-2017-7751 (bmo#1363396)
+Use-after-free with content viewer listeners
+  * CVE-2017-7752 (bmo#1359547)
+Use-after-free with IME input
+  * CVE-2017-7754 (bmo#1357090)
+Out-of-bounds read in WebGL with ImageInfo object
+  * CVE-2017-7756 (bmo#1366595)
+Use-after-free and use-after-scope logging XHR header errors
+  * CVE-2017-7757 (bmo#1356824)
+Use-after-free in IndexedDB
+  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
+CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
+CVE-2017-
+Vulnerabilities in the Graphite 2 library
+  * CVE-2017-7758 (bmo#1368490)
+Out-of-bounds read in Opus encoder
+  * CVE-2017-7763 (bmo#1360309)
+Mac fonts render some unicode characters as spaces (MacOS only)
+  * CVE-2017-7764 (bmo#1364283)
+Domain spoofing with combination of Canadian Syllabics and other
+unicode blocks
+  * CVE-2017-7765 (bmo#1273265)
+Mark of the Web bypass when saving executable files (Windows only)
+  * CVE-2017-5470
+Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
+- requires NSS 3.28.5
+
+---

Old:

  l10n-52.1.1.tar.xz
  thunderbird-52.1.1-source.tar.xz

New:

  l10n-52.2.tar.xz
  thunderbird-52.2-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.CthQPM/_old  2017-06-20 11:00:45.000550111 +0200
+++ /var/tmp/diff_new_pack.CthQPM/_new  2017-06-20 11:00:45.012548420 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.1.1
+%define mainversion 52.2
 %define update_channel release
-%define releasedate 20170510
+%define releasedate 20170612
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind
@@ -42,7 +42,7 @@
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  mozilla-nspr-devel >= 4.13.1
-BuildRequires:  mozilla-nss-devel >= 3.28.4
+BuildRequires:  mozilla-nss-devel >= 3.28.5
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.CthQPM/_old  2017-06-20 11:00:45.260513467 +0200
+++ /var/tmp/diff_new_pack.CthQPM/_new  2017-06-20 11:00:45.260513467 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_1_1_RELEASE"
-VERSION="52.1.1"
+RELEASE_TAG="THUNDERBIRD_52_2_0_RELEASE"
+VERSION="52.2"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.1.1.tar.xz -> l10n-52.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-52.1.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-52.2.tar.xz differ: 
char 27, line 1

++ thunderbird-52.1.1-source.tar.xz -> thunderbird-52.2-source.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.1.1-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-52.2-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-06-08 16:36:51

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Thu Jun  8 16:36:51 2017 rev:180 rq:500919 version:52.1.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-06-04 01:48:43.026394961 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-06-08 16:36:52.499966232 +0200
@@ -1,0 +2,5 @@
+Sun Jun  4 07:31:01 UTC 2017 - w...@rosenauer.org
+
+- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.USvpnF/_old  2017-06-08 16:37:00.370854799 +0200
+++ /var/tmp/diff_new_pack.USvpnF/_new  2017-06-08 16:37:00.370854799 +0200
@@ -223,9 +223,6 @@
 %if 0%{?suse_version} > 1320
 export CFLAGS="$CFLAGS -fno-delete-null-pointer-checks"
 %endif
-%if %{with mozilla_tb_optimize_for_size}
-export CFLAGS="$CFLAGS -Os"
-%endif
 %ifarch ppc64 ppc64le
 export CFLAGS="$CFLAGS -mminimal-toc"
 %endif

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-06-04 01:48:40

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Sun Jun  4 01:48:40 2017 rev:179 rq:500304 version:52.1.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-05-20 10:10:12.109228062 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-06-04 01:48:43.026394961 +0200
@@ -1,0 +2,6 @@
+Thu Jun  1 06:09:23 UTC 2017 - w...@rosenauer.org
+
+- explicitely optimize with -O2 for openSUSE > 13.2/Leap 42 to work
+  with gcc7 (boo#1040105, boo#1042090)
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.pM6rha/_old  2017-06-04 01:48:48.845572762 +0200
+++ /var/tmp/diff_new_pack.pM6rha/_new  2017-06-04 01:48:48.845572762 +0200
@@ -260,7 +260,15 @@
 ac_add_options --disable-tests
 ac_add_options --disable-debug
 ac_add_options --enable-alsa
-ac_add_options --enable-optimize
+# gcc7 (boo#104105)
+%if 0%{?suse_version} > 1320
+ac_add_options --enable-optimize="-g -O2"
+%endif
+%ifarch %ix86 %arm
+%if 0%{?suse_version} > 1230
+ac_add_options --disable-optimize
+%endif
+%endif
 %if 0%{?mozilla_use_gtk3}
 ac_add_options --enable-default-toolkit=cairo-gtk3
 %else

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-05-20 10:10:10

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Sat May 20 10:10:10 2017 rev:178 rq:495327 version:52.1.1

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-05-03 15:53:32.739096445 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-05-20 10:10:12.109228062 +0200
@@ -1,0 +2,13 @@
+Thu May 11 21:16:41 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.1.1
+  * fixed crash when compacting IMAP folder (boo#1038753)
+  * Some attachments could not be opened or saved if the message
+body is empty
+  * Unable to load full message via POP if message was downloaded
+partially (or only headers) before
+  * Large attachments may not be shown or saved correctly if the
+message is stored in an IMAP folder which is not synchronized
+for offline use
+
+---

Old:

  l10n-52.1.0.tar.xz
  thunderbird-52.1.0-source.tar.xz

New:

  l10n-52.1.1.tar.xz
  thunderbird-52.1.1-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.T297CP/_old  2017-05-20 10:10:32.102403111 +0200
+++ /var/tmp/diff_new_pack.T297CP/_new  2017-05-20 10:10:32.102403111 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 52.1.0
+%define mainversion 52.1.1
 %define update_channel release
-%define releasedate 20170429
+%define releasedate 20170510
 
 %bcond_without mozilla_tb_kde4
 %bcond_withmozilla_tb_valgrind

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.T297CP/_old  2017-05-20 10:10:32.242383332 +0200
+++ /var/tmp/diff_new_pack.T297CP/_new  2017-05-20 10:10:32.242383332 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr52"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_52_1_0_RELEASE"
-VERSION="52.1.0"
+RELEASE_TAG="THUNDERBIRD_52_1_1_RELEASE"
+VERSION="52.1.1"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-52.1.0.tar.xz -> l10n-52.1.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-52.1.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-52.1.1.tar.xz differ: 
char 26, line 1

++ thunderbird-52.1.0-source.tar.xz -> thunderbird-52.1.1-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-52.1.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-52.1.1-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-05-03 15:53:31

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Wed May  3 15:53:31 2017 rev:177 rq:492468 version:52.1.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-03-13 15:30:46.409256223 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-05-03 15:53:32.739096445 +0200
@@ -1,0 +2,134 @@
+Mon May  1 08:52:52 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.1.0
+  * Background images not working and other issues related to
+embedded images when composing email have been fixed
+  * Google Oauth setup can sometimes not progress to the next step
+  * requires NSS >= 3.28.4
+- security fixes (boo#1035082), MFSA 2017-13
+  * CVE-2017-5443 (bmo#1342661)
+Out-of-bounds write during BinHex decoding
+  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
+ bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
+Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
+Firefox ESR 52.1
+  * CVE-2017-5464 (bmo#1347075)
+Memory corruption with accessibility and DOM manipulation
+  * CVE-2017-5465 (bmo#1347617)
+Out-of-bounds read in ConvolvePixel
+  * CVE-2017-5466 (bmo#1353975)
+Origin confusion when reloading isolated data:text/html URL
+  * CVE-2017-5467 (bmo#1347262)
+Memory corruption when drawing Skia content
+  * CVE-2017-5460 (bmo#1343642)
+Use-after-free in frame selection
+  * CVE-2017-5461 (bmo#1344380)
+Out-of-bounds write in Base64 encoding in NSS
+  * CVE-2017-5449 (bmo#1340127)
+Crash during bidirectional unicode manipulation with animation
+  * CVE-2017-5446 (bmo#1343505)
+Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
+  * CVE-2017-5447 (bmo#1343552)
+Out-of-bounds read during glyph processing
+  * CVE-2017-5444 (bmo#1344461)
+Buffer overflow while parsing application/http-index-format content
+  * CVE-2017-5445 (bmo#1344467)
+Uninitialized values used while parsing application/http-index-format
+content
+  * CVE-2017-5442 (bmo#1347979)
+Use-after-free during style changes
+  * CVE-2017-5469 (bmo#1292534)
+Potential Buffer overflow in flex-generated code
+  * CVE-2017-5440 (bmo#1336832)
+Use-after-free in txExecutionState destructor during XSLT processing
+  * CVE-2017-5441 (bmo#1343795)
+Use-after-free with selection during scroll events
+  * CVE-2017-5439 (bmo#1336830)
+Use-after-free in nsTArray Length() during XSLT processing
+  * CVE-2017-5438 (bmo#1336828)
+Use-after-free in nsAutoPtr during XSLT processing
+  * CVE-2017-5437 (bmo#1343453)
+Vulnerabilities in Libevent library
+  * CVE-2017-5436 (bmo#1345461)
+Out-of-bounds write with malicious font in Graphite 2
+  * CVE-2017-5435 (bmo#1350683)
+Use-after-free during transaction processing in the editor
+  * CVE-2017-5434 (bmo#1349946)
+Use-after-free during focus handling
+  * CVE-2017-5433 (bmo#1347168)
+Use-after-free in SMIL animation functions
+  * CVE-2017-5432 (bmo#1346654)
+Use-after-free in text input selection
+  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
+ bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
+ bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
+Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
+  * CVE-2017-5459 (bmo#1333858)
+Buffer overflow in WebGL
+  * CVE-2017-5462 (bmo#1345089)
+DRBG flaw in NSS
+  * CVE-2017-5454 (bmo#1349276)
+Sandbox escape allowing file system read access through file
+picker
+  * CVE-2017-5451 (bmo#1273537)
+Addressbar spoofing with onblur event
+
+---
+Mon Apr 17 12:43:48 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.0.1
+  * Clicking on a link in an email may not open this link in the
+external browser
+  * addon blocklist updates
+- enable ALSA for systems w/o PA
+- require libffi explicitely to fix PPC64LE build where a system
+  library is required
+
+---
+Sat Mar 18 21:06:01 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 52.0
+  * Optionally remove corresponding data files when removing an account
+  * Possibility to copy message filter
+  * Calendar: Event can now be created and edited in a tab
+  * Calendar: Processing of received invitation counter proposals
+  * Chat: Support Twitter Direct Messages
+  * Chat: Liking and favoriting in Twitter
+  * Chat: Removed Yahoo! 

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-03-13 15:30:45

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Mon Mar 13 15:30:45 2017 rev:176 rq:478505 version:45.8.0

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-02-15 10:02:37.832101332 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-03-13 15:30:46.409256223 +0100
@@ -1,0 +2,24 @@
+Tue Mar  7 15:08:23 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 45.8.0 (boo#1028391)
+  * MFSA 2017-07
+CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
+   (bmo#1334933)
+CVE-2017-5401: Memory Corruption when handling ErrorResult
+   (bmo#1328861)
+CVE-2017-5402: Use-after-free working with events in FontFace
+   objects (bmo#1334876)
+CVE-2017-5404: Use-after-free working with ranges in selections
+   (bmo#1340138)
+CVE-2017-5407: Pixel and history stealing via floating-point
+   timing side channel with SVG filters (bmo#1336622)
+CVE-2017-5410: Memory corruption during JavaScript garbage
+   collection incremental sweeping (bmo#1330687)
+CVE-2017-5408: Cross-origin reading of video captions in violation
+   of CORS (bmo#1313711)
+CVE-2017-5405: FTP response codes can cause use of
+   uninitialized values for ports (bmo#1336699)
+CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
+   Firefox ESR 45.8
+
+---

Old:

  l10n-45.7.1.tar.xz
  thunderbird-45.7.1-source.tar.xz

New:

  l10n-45.8.0.tar.xz
  thunderbird-45.8.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.5Cy2Wm/_old  2017-03-13 15:31:02.418993559 +0100
+++ /var/tmp/diff_new_pack.5Cy2Wm/_new  2017-03-13 15:31:02.426992429 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.7.1
+%define mainversion 45.8.0
 %define update_channel release
-%define releasedate 2017020600
+%define releasedate 2017030300
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.5Cy2Wm/_old  2017-03-13 15:31:02.566972646 +0100
+++ /var/tmp/diff_new_pack.5Cy2Wm/_new  2017-03-13 15:31:02.570972080 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_7_1_RELEASE"
-VERSION="45.7.1"
+RELEASE_TAG="THUNDERBIRD_45_8_0_RELEASE"
+VERSION="45.8.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.7.1.tar.xz -> l10n-45.8.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.7.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.8.0.tar.xz differ: 
char 26, line 1

++ thunderbird-45.7.1-source.tar.xz -> thunderbird-45.8.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.7.1-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.8.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-02-15 10:02:36

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-02-03 17:30:36.756898194 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-02-15 10:02:37.832101332 +0100
@@ -1,0 +2,6 @@
+Thu Feb  9 07:49:54 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 45.7.1
+  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)
+
+---

Old:

  l10n-45.7.0.tar.xz
  thunderbird-45.7.0-source.tar.xz

New:

  l10n-45.7.1.tar.xz
  thunderbird-45.7.1-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.wQgSul/_old  2017-02-15 10:02:51.666152756 +0100
+++ /var/tmp/diff_new_pack.wQgSul/_new  2017-02-15 10:02:51.670152192 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.7.0
+%define mainversion 45.7.1
 %define update_channel release
-%define releasedate 2017012400
+%define releasedate 2017020600
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.wQgSul/_old  2017-02-15 10:02:51.826130222 +0100
+++ /var/tmp/diff_new_pack.wQgSul/_new  2017-02-15 10:02:51.826130222 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_7_0_RELEASE"
-VERSION="45.7.0"
+RELEASE_TAG="THUNDERBIRD_45_7_1_RELEASE"
+VERSION="45.7.1"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.7.0.tar.xz -> l10n-45.7.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.7.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.7.1.tar.xz differ: 
char 26, line 1

++ thunderbird-45.7.0-source.tar.xz -> thunderbird-45.7.1-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.7.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.7.1-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2017-01-29 10:30:14

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2017-01-04 19:29:15.557311410 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2017-02-03 17:30:36.756898194 +0100
@@ -1,0 +2,29 @@
+Tue Jan 24 20:43:57 UTC 2017 - w...@rosenauer.org
+
+- update to Thunderbird 45.7.0
+  * Message preview pane non-functional after IMAP folder was renamed
+or moved
+  * "Move To" button on "Search Messages" panel not working
+  * Message sent to "undisclosed recipients" shows no recipient
+(non-functional since Thunderbird version 38)
+  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
+In general, these flaws cannot be exploited through email in
+Thunderbird because scripting is disabled when reading mail,
+but are potentially risks in browser or browser-like contexts:
+CVE-2017-5375: Excessive JIT code allocation allows bypass of
+   ASLR and DEP (bmo#1325200, boo#1021814)
+CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
+CVE-2017-5378: Pointer and frame data leakage of Javascript objects
+   (bmo#1312001, bmo#1330769, boo#1021818)
+CVE-2017-5380: Potential use-after-free during DOM manipulations
+   (bmo#1322107, boo#1021819)
+CVE-2017-5390: Insecure communication methods in Developer Tools
+   JSON viewer (bmo#1297361, boo#1021820)
+CVE-2017-5396: Use-after-free with Media Decoder
+   (bmo#1329403, boo#1021821)
+CVE-2017-5383: Location bar spoofing with unicode characters
+   (bmo#1323338, bmo#1324716, boo#1021822)
+CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
+   (boo#1021824)
+
+---

Old:

  l10n-45.6.0.tar.xz
  thunderbird-45.6.0-source.tar.xz

New:

  l10n-45.7.0.tar.xz
  thunderbird-45.7.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.EUVpPh/_old  2017-02-03 17:30:48.319261721 +0100
+++ /var/tmp/diff_new_pack.EUVpPh/_new  2017-02-03 17:30:48.319261721 +0100
@@ -1,8 +1,8 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
-#   2006-2016 Wolfgang Rosenauer 
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+#   2006-2017 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.6.0
+%define mainversion 45.7.0
 %define update_channel release
-%define releasedate 2016122200
+%define releasedate 2017012400
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0

++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.EUVpPh/_old  2017-02-03 17:30:48.471240211 +0100
+++ /var/tmp/diff_new_pack.EUVpPh/_new  2017-02-03 17:30:48.471240211 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_6_0_RELEASE"
-VERSION="45.6.0"
+RELEASE_TAG="THUNDERBIRD_45_7_0_RELEASE"
+VERSION="45.7.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.6.0.tar.xz -> l10n-45.7.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.6.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.7.0.tar.xz differ: 
char 27, line 1

++ thunderbird-45.6.0-source.tar.xz -> thunderbird-45.7.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.6.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.7.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-12-04 15:05:52

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-11-22 18:57:21.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-12-04 15:05:53.0 +0100
@@ -1,0 +2,7 @@
+Thu Dec  1 09:58:57 UTC 2016 - astie...@suse.com
+
+- Mozilla Thunderbird 45.5.1:
+  * CVE-2016-9079: SVG Animation Remote Code Execution
+   (MFSA 2016-92, bsc#1012964, bmo#1321066)
+
+---
@@ -4,0 +12,13 @@
+  * Fixes for security flaws that cannot be exploited through email
+because scripting is disabled when reading mail, but are
+potentially risks in browser or browser-like contexts:
+CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
+   (bsc#1010411)
+CVE-2016-5297: Incorrect argument length checking in Javascript
+   (bsc#1010401)
+CVE-2016-9066: Integer overflow leading to a buffer overflow in
+   nsScriptLoadHandler (bsc#1010404)
+CVE-2016-5291: Same-origin policy violation using local HTML file
+   and saved shortcut file (bsc#1010410)
+CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5  
+   (bsc#1010427)

Old:

  l10n-45.5.0.tar.xz
  thunderbird-45.5.0-source.tar.xz

New:

  l10n-45.5.1.tar.xz
  thunderbird-45.5.1-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.95n08a/_old  2016-12-04 15:06:07.0 +0100
+++ /var/tmp/diff_new_pack.95n08a/_new  2016-12-04 15:06:07.0 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.5.0
+%define mainversion 45.5.1
 %define update_channel release
-%define releasedate 2016111800
+%define releasedate 2016113000
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.95n08a/_old  2016-12-04 15:06:07.0 +0100
+++ /var/tmp/diff_new_pack.95n08a/_new  2016-12-04 15:06:07.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_5_0_RELEASE"
-VERSION="45.5.0"
+RELEASE_TAG="THUNDERBIRD_45_5_1_RELEASE"
+VERSION="45.5.1"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.5.0.tar.xz -> l10n-45.5.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.5.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.5.1.tar.xz differ: 
char 26, line 1

++ thunderbird-45.5.0-source.tar.xz -> thunderbird-45.5.1-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.5.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.5.1-source.tar.xz
 differ: char 27, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-11-22 18:57:20

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-10-06 12:28:09.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-11-22 18:57:21.0 +0100
@@ -1,0 +2,20 @@
+Sat Nov 19 14:20:05 UTC 2016 - astie...@suse.com
+
+- Mozilla Thunderbird 45.5.0 (boo#1009026)
+- Changed behavior:
+  * Changed recipient address entry: Arrow-keys now copy the pop-up
+value to the input field. Mouse-hovered pop-up value can no
+longer be confirmed with tab or enter key. This restores the
+behavior of Thunderbird 24.
+  * Support changes to character limit in Twitter
+- Bugs fixed:
+  * Reply with selected text containing quote resulted in wrong
+quoting level indication
+  * Email invitation might not be displayed when description
+contains non-ASCII characters
+  * Attempting to sort messages on the Date field whilst a quick
+filter is applied got stuck on sort descending
+  * Mail address display at header pane displayed incorrectly if
+the address contains UTF-8 according to RFC 6532
+
+---

Old:

  l10n-45.4.0.tar.xz
  thunderbird-45.4.0-source.tar.xz

New:

  l10n-45.5.0.tar.xz
  thunderbird-45.5.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.eWIEWo/_old  2016-11-22 18:57:35.0 +0100
+++ /var/tmp/diff_new_pack.eWIEWo/_new  2016-11-22 18:57:35.0 +0100
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.4.0
+%define mainversion 45.5.0
 %define update_channel release
-%define releasedate 2016093000
+%define releasedate 2016111800
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0
@@ -45,7 +45,7 @@
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  mozilla-nspr-devel >= 4.12
-BuildRequires:  mozilla-nss-devel >= 3.21.1
+BuildRequires:  mozilla-nss-devel >= 3.21.3
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.eWIEWo/_old  2016-11-22 18:57:35.0 +0100
+++ /var/tmp/diff_new_pack.eWIEWo/_new  2016-11-22 18:57:35.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_4_0_RELEASE"
-VERSION="45.4.0"
+RELEASE_TAG="THUNDERBIRD_45_5_0_RELEASE"
+VERSION="45.5.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.4.0.tar.xz -> l10n-45.5.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.4.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.5.0.tar.xz differ: 
char 25, line 1

++ thunderbird-45.4.0-source.tar.xz -> thunderbird-45.5.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.4.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.5.0-source.tar.xz
 differ: char 25, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-10-06 12:28:08

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-09-01 14:01:49.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-10-06 12:28:09.0 +0200
@@ -1,0 +2,13 @@
+Sat Oct  1 07:12:08 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 45.4.0 (boo#999701)
+  * Display name was truncated if no separating space before email
+address.
+  * Recipient addresses were shown in wrong color in some circumstances.
+  * Additional spaces were inserted when drafts were edited.
+  * Mail saved as template copied In-Reply-To and References from
+original email.
+  * Threading broken when editing message draft, due to loss of Message-ID
+  * "Apply columns to..." did not honor special folders
+
+---

Old:

  l10n-45.3.0.tar.xz
  thunderbird-45.3.0-source.tar.xz

New:

  l10n-45.4.0.tar.xz
  thunderbird-45.4.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.R8iQZq/_old  2016-10-06 12:28:26.0 +0200
+++ /var/tmp/diff_new_pack.R8iQZq/_new  2016-10-06 12:28:26.0 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.3.0
+%define mainversion 45.4.0
 %define update_channel release
-%define releasedate 2016082900
+%define releasedate 2016093000
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.R8iQZq/_old  2016-10-06 12:28:27.0 +0200
+++ /var/tmp/diff_new_pack.R8iQZq/_new  2016-10-06 12:28:27.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_3_0_RELEASE"
-VERSION="45.3.0"
+RELEASE_TAG="THUNDERBIRD_45_4_0_RELEASE"
+VERSION="45.4.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.3.0.tar.xz -> l10n-45.4.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.3.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.4.0.tar.xz differ: 
char 26, line 1

++ thunderbird-45.3.0-source.tar.xz -> thunderbird-45.4.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.3.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.4.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-09-01 14:01:48

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-08-12 15:34:54.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-09-01 14:01:49.0 +0200
@@ -1,0 +2,38 @@
+Tue Aug 30 06:55:14 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 45.3.0 (boo#991809)
+  * Disposition-Notification-To could not be used in
+mail.compose.other.header
+  * "edit as new message" on a received message pre-filled the sender
+as the composing identity.
+  * Certain messages caused corruption of the drafts summary database.
+  security fixes:
+  * MFSA 2016-62/CVE-2016-2836
+Miscellaneous memory safety hazards
+  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
+Favicon network connection can persist when page is closed
+  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
+Buffer overflow rendering SVG with bidirectional content
+  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
+Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
+  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
+Stack underflow during 2D graphics rendering
+  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
+Use-after-free when using alt key and toplevel menus
+  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
+Use-after-free in DTLS during WebRTC session shutdown
+  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
+Use-after-free in service workers with nested sync events
+  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
+Scripts on marquee tag can execute in sandboxed iframes
+  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
+Buffer overflow in ClearKey Content Decryption Module (CDM)
+during video playback
+  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
+Type confusion in display transformation
+  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
+Use-after-free when applying SVG effects
+  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
+Same-origin policy violation using local HTML file and saved shortcut file
+
+---

Old:

  l10n-45.2.tar.xz
  thunderbird-45.2-source.tar.xz

New:

  l10n-45.3.0.tar.xz
  thunderbird-45.3.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.alVDo2/_old  2016-09-01 14:02:02.0 +0200
+++ /var/tmp/diff_new_pack.alVDo2/_new  2016-09-01 14:02:02.0 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2016 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #   2006-2016 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.2
+%define mainversion 45.3.0
 %define update_channel release
-%define releasedate 2016063000
+%define releasedate 2016082900
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.alVDo2/_old  2016-09-01 14:02:03.0 +0200
+++ /var/tmp/diff_new_pack.alVDo2/_new  2016-09-01 14:02:03.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_2_RELEASE"
-VERSION="45.2"
+RELEASE_TAG="THUNDERBIRD_45_3_0_RELEASE"
+VERSION="45.3.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.2.tar.xz -> l10n-45.3.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.2.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.3.0.tar.xz differ: 
char 26, line 1

++ thunderbird-45.2-source.tar.xz -> thunderbird-45.3.0-source.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.2-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.3.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-08-12 15:34:53

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-08-03 11:37:23.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-08-12 15:34:54.0 +0200
@@ -1,0 +2,7 @@
+Fri Aug  5 13:47:12 UTC 2016 - pce...@suse.com
+
+- Fix for possible buffer overrun (bsc#990856)
+  CVE-2016-6354 (bmo#1292534)
+  [mozilla-flex_buffer_overrun.patch]
+
+---

New:

  mozilla-flex_buffer_overrun.patch



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.KE2QXi/_old  2016-08-12 15:34:59.0 +0200
+++ /var/tmp/diff_new_pack.KE2QXi/_new  2016-08-12 15:34:59.0 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #   2006-2016 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
@@ -108,6 +108,8 @@
 Patch9: mozilla-binutils-visibility.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
+# hotfix
+Patch150:   mozilla-flex_buffer_overrun.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 PreReq: coreutils fileutils textutils /bin/sh
 Recommends: libcanberra0
@@ -204,6 +206,7 @@
 %patch6 -p1
 %patch8 -p1
 %patch9 -p1
+%patch150 -p1
 popd
 # comm-central patches
 %patch20 -p1


++ mozilla-flex_buffer_overrun.patch ++
# HG changeset patch
# Parent  c8e8364b303892fdb5a574b96411d2d8f699a15e
Patch lexical parser files generated by flex which may be potentially
exploitable in a buffer overrun. These seem to come from an upstream projects
(CMU Sphinx and ANGLE) so it should be fixed there in the first place.

CVE-2016-6354

https://bugzilla.suse.com/show_bug.cgi?id=990856

diff --git a/gfx/angle/src/compiler/preprocessor/Tokenizer.cpp 
b/gfx/angle/src/compiler/preprocessor/Tokenizer.cpp
--- a/gfx/angle/src/compiler/preprocessor/Tokenizer.cpp
+++ b/gfx/angle/src/compiler/preprocessor/Tokenizer.cpp
@@ -1375,17 +1375,17 @@ static int yy_get_next_buffer (yyscan_t 
if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == 
YY_BUFFER_EOF_PENDING )
/* don't do the read, it's not guaranteed to return an EOF,
 * just force an EOF
 */
YY_CURRENT_BUFFER_LVALUE->yy_n_chars = yyg->yy_n_chars = 0;
 
else
{
-   yy_size_t num_to_read =
+   int num_to_read =
YY_CURRENT_BUFFER_LVALUE->yy_buf_size - number_to_move 
- 1;
 
while ( num_to_read <= 0 )
{ /* Not enough room in the buffer - grow it. */
 
/* just a shorter name for the current buffer */
YY_BUFFER_STATE b = YY_CURRENT_BUFFER_LVALUE;
 
diff --git a/gfx/angle/src/compiler/translator/glslang_lex.cpp 
b/gfx/angle/src/compiler/translator/glslang_lex.cpp
--- a/gfx/angle/src/compiler/translator/glslang_lex.cpp
+++ b/gfx/angle/src/compiler/translator/glslang_lex.cpp
@@ -2269,17 +2269,17 @@ static int yy_get_next_buffer (yyscan_t 
if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == 
YY_BUFFER_EOF_PENDING )
/* don't do the read, it's not guaranteed to return an EOF,
 * just force an EOF
 */
YY_CURRENT_BUFFER_LVALUE->yy_n_chars = yyg->yy_n_chars = 0;
 
else
{
-   yy_size_t num_to_read =
+   int num_to_read =
YY_CURRENT_BUFFER_LVALUE->yy_buf_size - number_to_move 
- 1;
 
while ( num_to_read <= 0 )
{ /* Not enough room in the buffer - grow it. */
 
/* just a shorter name for the current buffer */
YY_BUFFER_STATE b = YY_CURRENT_BUFFER_LVALUE;
 
diff --git a/media/sphinxbase/src/libsphinxbase/lm/jsgf_scanner.c 
b/media/sphinxbase/src/libsphinxbase/lm/jsgf_scanner.c
--- a/media/sphinxbase/src/libsphinxbase/lm/jsgf_scanner.c
+++ b/media/sphinxbase/src/libsphinxbase/lm/jsgf_scanner.c
@@ -1242,17 +1242,17 @@ static int yy_get_next_buffer (yyscan_t 
if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-08-03 11:37:21

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-07-18 21:18:05.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-08-03 11:37:23.0 +0200
@@ -1,0 +2,5 @@
+Thu Jul 21 11:50:27 UTC 2016 - mailaen...@opensuse.org
+
+- add a screenshot to appdata.xml
+
+---



Other differences:
--

++ thunderbird.appdata.xml ++
--- /var/tmp/diff_new_pack.PCqsQa/_old  2016-08-03 11:37:28.0 +0200
+++ /var/tmp/diff_new_pack.PCqsQa/_new  2016-08-03 11:37:28.0 +0200
@@ -1,9 +1,7 @@
 
-
-
-
 
 
@@ -27,12 +25,7 @@
 
   
   http://www.mozilla.org/thunderbird/
-  
-  
 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-07-18 21:18:03

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-07-01 09:53:54.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-07-18 21:18:05.0 +0200
@@ -1,0 +2,8 @@
+Thu Jun 30 09:18:14 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 45.2 (boo#983549)
+  Security fixes:
+  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
+- drop mozilla-flexible-array-member-in-union.patch, upstream
+
+---

Old:

  l10n-45.1.1.tar.xz
  mozilla-flexible-array-member-in-union.patch
  thunderbird-45.1.1-source.tar.xz

New:

  l10n-45.2.tar.xz
  thunderbird-45.2-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.pRBCjB/_old  2016-07-18 21:18:21.0 +0200
+++ /var/tmp/diff_new_pack.pRBCjB/_new  2016-07-18 21:18:21.0 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.1.1
+%define mainversion 45.2
 %define update_channel release
-%define releasedate 2016052700
+%define releasedate 2016063000
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0
@@ -104,7 +104,6 @@
 Patch4: mozilla-develdirs.patch
 Patch5: mozilla-no-stdcxx-check.patch
 Patch6: mozilla-gcc6.patch
-Patch7: mozilla-flexible-array-member-in-union.patch
 Patch8: mozilla-aarch64-48bit-va.patch
 Patch9: mozilla-binutils-visibility.patch
 # Thunderbird/mail
@@ -203,7 +202,6 @@
 %patch4 -p1
 %patch5 -p1
 %patch6 -p1
-%patch7 -p1
 %patch8 -p1
 %patch9 -p1
 popd


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.pRBCjB/_old  2016-07-18 21:18:21.0 +0200
+++ /var/tmp/diff_new_pack.pRBCjB/_new  2016-07-18 21:18:21.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_1_1_RELEASE"
-VERSION="45.1.1"
+RELEASE_TAG="THUNDERBIRD_45_2_RELEASE"
+VERSION="45.2"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.1.1.tar.xz -> l10n-45.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.1.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.2.tar.xz differ: 
char 26, line 1

++ thunderbird-45.1.1-source.tar.xz -> thunderbird-45.2-source.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.1.1-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.2-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-07-01 09:53:53

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-06-23 23:22:37.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-07-01 09:53:54.0 +0200
@@ -1,0 +2,6 @@
+Fri Jun 24 14:10:58 UTC 2016 - w...@rosenauer.org
+
+- mozilla-binutils-visibility.patch to fix build issues with
+  gcc/binutils combination used in Leap 42.2 (boo#984637)
+
+---

New:

  mozilla-binutils-visibility.patch



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.NsUEmT/_old  2016-07-01 09:53:59.0 +0200
+++ /var/tmp/diff_new_pack.NsUEmT/_new  2016-07-01 09:53:59.0 +0200
@@ -106,6 +106,7 @@
 Patch6: mozilla-gcc6.patch
 Patch7: mozilla-flexible-array-member-in-union.patch
 Patch8: mozilla-aarch64-48bit-va.patch
+Patch9: mozilla-binutils-visibility.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -204,6 +205,7 @@
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
+%patch9 -p1
 popd
 # comm-central patches
 %patch20 -p1


++ mozilla-binutils-visibility.patch ++
# HG changeset patch
# User Wolfgang Rosenauer 
# Parent  83bc32d997c714b607db1ffa71f02b30e1484a75
From: NetBSD
Subject: Workaround for gcc/binutils combination in Leap 42.2
References:
https://bugzilla.opensuse.org/show_bug.cgi?id=984637

diff --git a/xpcom/components/Module.h b/xpcom/components/Module.h
--- a/xpcom/components/Module.h
+++ b/xpcom/components/Module.h
@@ -120,17 +120,17 @@ struct Module
 #if defined(MOZILLA_INTERNAL_API)
 #  define NSMODULE_NAME(_name) _name##_NSModule
 #  if defined(_MSC_VER)
 #pragma section(".kPStaticModules$M", read)
 #pragma comment(linker, "/merge:.kPStaticModules=.rdata")
 #define NSMODULE_SECTION __declspec(allocate(".kPStaticModules$M"), 
dllexport)
 #  elif defined(__GNUC__)
 #if defined(__ELF__)
-#  define NSMODULE_SECTION __attribute__((section(".kPStaticModules"), 
visibility("protected")))
+#  define NSMODULE_SECTION __attribute__((section(".kPStaticModules"), 
visibility("default")))
 #elif defined(__MACH__)
 #  define NSMODULE_SECTION __attribute__((section("__DATA, 
.kPStaticModules"), visibility("default")))
 #elif defined (_WIN32)
 #  define NSMODULE_SECTION __attribute__((section(".kPStaticModules"), 
dllexport))
 #endif
 #  endif
 #  if !defined(NSMODULE_SECTION)
 #error Do not know how to define sections.

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-06-23 23:22:36

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-06-05 14:19:04.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-06-23 23:22:37.0 +0200
@@ -1,0 +2,13 @@
+Thu Jun 23 10:15:51 UTC 2016 - w...@rosenauer.org
+
+- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
+  as long as underlying issues have been addressed upstream
+  (boo#986162)
+
+---
+Mon Jun 13 20:28:01 UTC 2016 - ag...@suse.com
+
+- Fix running on 48bit va aarch64 (bsc#984126)
+  - Add patch mozilla-aarch64-48bit-va.patch
+
+---

New:

  mozilla-aarch64-48bit-va.patch



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.AcIbRI/_old  2016-06-23 23:22:43.0 +0200
+++ /var/tmp/diff_new_pack.AcIbRI/_new  2016-06-23 23:22:43.0 +0200
@@ -105,6 +105,7 @@
 Patch5: mozilla-no-stdcxx-check.patch
 Patch6: mozilla-gcc6.patch
 Patch7: mozilla-flexible-array-member-in-union.patch
+Patch8: mozilla-aarch64-48bit-va.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -202,6 +203,7 @@
 %patch5 -p1
 %patch6 -p1
 %patch7 -p1
+%patch8 -p1
 popd
 # comm-central patches
 %patch20 -p1
@@ -228,6 +230,9 @@
 export MOZ_ESR=1
 %endif
 export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing"
+%if 0%{?suse_version} > 1320
+export CFLAGS="$CFLAGS -fno-delete-null-pointer-checks"
+%endif
 %if %{with mozilla_tb_optimize_for_size}
 export CFLAGS="$CFLAGS -Os"
 %endif


++ mozilla-aarch64-48bit-va.patch ++

# HG changeset patch
# User Zheng Xu 
# Date 1464657720 -7200
# Node ID dfaafbaaa2919a033c4c0abdd5830f4ea413bed6
# Parent  499f16ca85ec48d1896a1633730715f32bd62140
Bug 1143022 - Manually mmap on arm64 to ensure high 17 bits are clear. 
r=ehoogeveen

There might be 48-bit VA on arm64 depending on kernel configuration.
Manually mmap heap memory to align with the assumption made by JS engine.

diff --git a/js/src/gc/Memory.cpp b/js/src/gc/Memory.cpp
--- a/js/src/gc/Memory.cpp
+++ b/js/src/gc/Memory.cpp
@@ -430,17 +430,17 @@ InitMemorySubsystem()
 if (pageSize == 0)
 pageSize = allocGranularity = size_t(sysconf(_SC_PAGESIZE));
 }
 
 static inline void*
 MapMemoryAt(void* desired, size_t length, int prot = PROT_READ | PROT_WRITE,
 int flags = MAP_PRIVATE | MAP_ANON, int fd = -1, off_t offset = 0)
 {
-#if defined(__ia64__) || (defined(__sparc64__) && defined(__NetBSD__))
+#if defined(__ia64__) || (defined(__sparc64__) && defined(__NetBSD__)) || 
defined(__aarch64__)
 MOZ_ASSERT(0x8000ULL & (uintptr_t(desired) + length - 1) == 0);
 #endif
 void* region = mmap(desired, length, prot, flags, fd, offset);
 if (region == MAP_FAILED)
 return nullptr;
 /*
  * mmap treats the given address as a hint unless the MAP_FIXED flag is
  * used (which isn't usually what you want, as this overrides existing
@@ -480,16 +480,51 @@ MapMemory(size_t length, int prot = PROT
  * as out of memory.
  */
 if ((uintptr_t(region) + (length - 1)) & 0x8000) {
 if (munmap(region, length))
 MOZ_ASSERT(errno == ENOMEM);
 return nullptr;
 }
 return region;
+#elif defined(__aarch64__)
+   /*
+* There might be similar virtual address issue on arm64 which depends on
+* hardware and kernel configurations. But the work around is slightly
+* different due to the different mmap behavior.
+*
+* TODO: Merge with the above code block if this implementation works for
+* ia64 and sparc64.
+*/
+const uintptr_t start = UINT64_C(0x0700);
+const uintptr_t end   = UINT64_C(0x8000);
+const uintptr_t step  = ChunkSize;
+   /*
+* Optimization options if there are too many retries in practice:
+* 1. Examine /proc/self/maps to find an available address. This file is
+*not always available, however. In addition, even if we examine
+*/proc/self/maps, we may still need to retry several times due to
+*racing with other threads.
+* 2. Use a global/static variable with lock to track the addresses we have
+*allocated or tried.
+*/
+uintptr_t hint;
+   

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-06-05 14:19:03

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-05-31 12:11:22.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-06-05 14:19:04.0 +0200
@@ -1,0 +2,13 @@
+Fri May 27 12:51:23 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 45.1.1
+  * When entering members into a mailing list, the enter key
+dismissed the panel instead of just moving onto the next line
+  * Email without HTML elements was sent as HTML, despite
+"Delivery Format: Auto-detect" option
+  * Options applied to a template were lost when the template was used
+  * Contacts could not be deleted when they were found through a search
+  * Views from global searches did not respect
+"mail.threadpane.use_correspondents"
+
+---

Old:

  l10n-45.1.0.tar.xz
  thunderbird-45.1.0-source.tar.xz

New:

  l10n-45.1.1.tar.xz
  thunderbird-45.1.1-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.QqpyrD/_old  2016-06-05 14:19:17.0 +0200
+++ /var/tmp/diff_new_pack.QqpyrD/_new  2016-06-05 14:19:17.0 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 45.1.0
+%define mainversion 45.1.1
 %define update_channel release
-%define releasedate 2016050700
+%define releasedate 2016052700
 
 %if %suse_version > 1310
 %define gstreamer_ver 1.0


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.QqpyrD/_old  2016-06-05 14:19:17.0 +0200
+++ /var/tmp/diff_new_pack.QqpyrD/_new  2016-06-05 14:19:17.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr45"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_45_1_0_RELEASE"
-VERSION="45.1.0"
+RELEASE_TAG="THUNDERBIRD_45_1_1_RELEASE"
+VERSION="45.1.1"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-45.1.0.tar.xz -> l10n-45.1.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-45.1.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-45.1.1.tar.xz differ: 
char 26, line 1

++ thunderbird-45.1.0-source.tar.xz -> thunderbird-45.1.1-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-45.1.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-45.1.1-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-05-31 12:11:21

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-05-20 11:55:06.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-05-31 12:11:22.0 +0200
@@ -1,0 +2,16 @@
+Wed May 25 18:20:24 UTC 2016 - badshah...@gmail.com
+
+- The conditional testing for gcc was failing for different
+  openSUSE versions, drop it and apply patches unconditionally.
+
+---
+Tue May 24 18:28:31 UTC 2016 - badshah...@gmail.com
+
+- Add patches to fix building with gcc >= 6:
+  + mozilla-gcc6.patch: patch taken from fedora's git and is
+essentially identical to upstream firefox patch:
+https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
+  + mozilla-flexible-array-member-in-union.patch: patch taken
+from upstream bmo#1272649.
+
+---

New:

  mozilla-flexible-array-member-in-union.patch
  mozilla-gcc6.patch



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.I2IJkv/_old  2016-05-31 12:11:27.0 +0200
+++ /var/tmp/diff_new_pack.I2IJkv/_new  2016-05-31 12:11:27.0 +0200
@@ -103,6 +103,8 @@
 Patch3: mozilla-kde.patch
 Patch4: mozilla-develdirs.patch
 Patch5: mozilla-no-stdcxx-check.patch
+Patch6: mozilla-gcc6.patch
+Patch7: mozilla-flexible-array-member-in-union.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -198,6 +200,8 @@
 %endif
 %patch4 -p1
 %patch5 -p1
+%patch6 -p1
+%patch7 -p1
 popd
 # comm-central patches
 %patch20 -p1


++ mozilla-flexible-array-member-in-union.patch ++
--- firefox-45.0.1-orig/gfx/harfbuzz/src/hb-font-private.hh 2016-03-15 
23:37:28.0 +0100
+++ firefox-45.0.1/gfx/harfbuzz/src/hb-font-private.hh  2016-05-13 
17:20:25.836258108 +0200
@@ -80,7 +80,7 @@ struct hb_font_funcs_t {
   HB_FONT_FUNCS_IMPLEMENT_CALLBACKS
 #undef HB_FONT_FUNC_IMPLEMENT
 } f;
-void (*array[]) (void);
+void (*array[VAR]) (void);
   } get;
 };
 
--- firefox-45.0.1-orig/gfx/harfbuzz/src/hb-private.hh  2016-03-15 
23:37:28.0 +0100
+++ firefox-45.0.1/gfx/harfbuzz/src/hb-private.hh   2016-05-13 
17:20:55.909655179 +0200
@@ -1010,5 +1010,7 @@ hb_options (void)
   return _hb_options.opts;
 }
 
+/* Size signifying variable-sized array */
+#define VAR 1
 
 #endif /* HB_PRIVATE_HH */

++ mozilla-gcc6.patch ++
diff -up firefox-44.0/nsprpub/config/make-system-wrappers.pl.back 
firefox-44.0/nsprpub/config/make-system-wrappers.pl
--- firefox-44.0/nsprpub/config/make-system-wrappers.pl.back2016-01-24 
00:23:49.0 +0100
+++ firefox-44.0/nsprpub/config/make-system-wrappers.pl 2016-02-02 
14:58:45.064112655 +0100
@@ -19,7 +19,9 @@ while () {
 open OUT, ">$output_dir/$_";
 print OUT "#pragma GCC system_header\n";  # suppress include_next warning
 print OUT "#pragma GCC visibility push(default)\n";
+print OUT "#define _GLIBCXX_INCLUDE_NEXT_C_HEADERS\n";
 print OUT "#include_next \<$_\>\n";
+print OUT "#undef _GLIBCXX_INCLUDE_NEXT_C_HEADERS\n";
 print OUT "#pragma GCC visibility pop\n";
 close OUT;
 }
diff -up firefox-44.0/mozglue/build/arm.cpp.old 
firefox-44.0/mozglue/build/arm.cpp
--- firefox-44.0/mozglue/build/arm.cpp.old  2016-02-03 10:07:29.879526500 
+0100
+++ firefox-44.0/mozglue/build/arm.cpp  2016-02-03 10:08:11.062697517 +0100
@@ -104,7 +104,9 @@ check_neon(void)
 
 #  elif defined(__linux__) || defined(ANDROID)
 #include 
+#define _GLIBCXX_INCLUDE_NEXT_C_HEADERS
 #include 
+#undef _GLIBCXX_INCLUDE_NEXT_C_HEADERS
 #include 
 
 enum{

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-05-20 11:55:04

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-04-11 09:13:40.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-05-20 11:55:06.0 +0200
@@ -1,0 +2,81 @@
+Thu May 12 15:21:45 UTC 2016 - dims...@opensuse.org
+
+- Copy the icons to /usr/share/icons instead of symlinking them:
+  in preparation for containerized apps (e.g. xdg-app) as well as
+  AppStream metadata extraction, there are a couple locations that
+  need to be real files for system integration (.desktop files,
+  icons, mime-type info).
+
+---
+Sat May  7 22:19:09 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 45.1.0 (boo#977333)
+  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
+Miscellaneous memory safety hazards
+
+---
+Wed Apr 27 04:26:56 UTC 2016 - badshah...@gmail.com
+
+- For openSUSE > 13.2, the build fails for i586 as it goes out of
+  memory. Prevent this from happening by disabing parallel build
+  in this particular case (i.e. do not pass
+  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).
+
+---
+Sat Apr 16 08:11:14 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 45.0 (boo#969894)
+  * Add a Correspondents column combining Sender and Recipient
+  * Much better support for XMPP chatrooms and commands
+  * Remote content exceptions: Improved options to add exceptions
+  * Implement option to always use HTML formatting to prevent
+unexpected format loss when converting messages to plain text
+  * Use OpenStreetmap for maps (even allow the user to choose from
+list of map services)
+  * Allow spell checking and dictionary selection in the subject line
+  * Allow editing of From when composing a message
+  * Add dropdown in compose to allow specific setting of font size
+  * Return/Enter in composer will now insert a new paragraph by
+default (shift-Enter will insert a line break)
+  * Allow copying of name and email address from the message header
+of an email
+  * Mail.ru supports OAuth authentication
+  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
+Miscellaneous memory safety hazards
+  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
+Local file overwriting and potential privilege escalation through
+CSP reports
+  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
+CSP reports fail to strip location information for embedded iframe pages
+  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
+Linux video memory DOS with Intel drivers
+  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
+Memory leak in libstagefright when deleting an array during MP4
+processing
+  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
+Use-after-free in HTML5 string parser
+  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
+Use-after-free in SetBody
+  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
+Use-after-free during XML transformations
+  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
+Out-of-bounds read in HTML parser following a failed allocation
+  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
+Buffer overflow during ASN.1 decoding in NSS
+(fixed by requiring 3.21.1)
+  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
+Use-after-free during processing of DER encoded keys in NSS
+(fixed by requiring 3.21.1)
+  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
+CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
+CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
+CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
+Font vulnerabilities in the Graphite 2 library
+- remove obsolete patches:
+  * mozilla-arm-disable-edsp.patch
+  * mozilla-icu-strncat.patch
+  * mozilla-arm64-libjpeg-turbo.patch
+- added required mozilla platform patches:
+  * mozilla-no-stdcxx-check.patch
+
+---

Old:

  l10n-38.7.2.tar.xz
  mozilla-arm-disable-edsp.patch
  mozilla-arm64-libjpeg-turbo.patch
  mozilla-icu-strncat.patch
  thunderbird-38.7.2-source.tar.xz

New:

  l10n-45.1.0.tar.xz
  mozilla-no-stdcxx-check.patch
  thunderbird-45.1.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.xhroeO/_old  2016-05-20 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-04-11 09:13:39

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-04-07 13:35:12.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-04-11 09:13:40.0 +0200
@@ -1,0 +2,7 @@
+Wed Apr  6 21:54:09 UTC 2016 - astie...@suse.com
+
+- update to Thunderbird 38.7.2
+  * disable Graphite font shaping library (same upstream changelog
+as 38.7.1)
+
+---

Old:

  l10n-38.7.1.tar.xz
  thunderbird-38.7.1-source.tar.xz

New:

  l10n-38.7.2.tar.xz
  thunderbird-38.7.2-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.K4HWrh/_old  2016-04-11 09:14:24.0 +0200
+++ /var/tmp/diff_new_pack.K4HWrh/_new  2016-04-11 09:14:24.0 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 38.7.1
+%define mainversion 38.7.2
 %define update_channel release
-%define releasedate 2016032400
+%define releasedate 2016040400
 
 %if %suse_version > 1210
 %if %suse_version > 1310


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.K4HWrh/_old  2016-04-11 09:14:24.0 +0200
+++ /var/tmp/diff_new_pack.K4HWrh/_new  2016-04-11 09:14:24.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_7_1_RELEASE"
-VERSION="38.7.1"
+RELEASE_TAG="THUNDERBIRD_38_7_2_RELEASE"
+VERSION="38.7.2"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-38.7.1.tar.xz -> l10n-38.7.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.7.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.7.2.tar.xz differ: 
char 26, line 1

++ thunderbird-38.7.1-source.tar.xz -> thunderbird-38.7.2-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.7.1-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.7.2-source.tar.xz
 differ: char 25, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-04-07 13:35:11

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-03-20 11:48:35.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-04-07 13:35:12.0 +0200
@@ -1,0 +2,6 @@
+Fri Mar 25 09:40:09 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 38.7.1
+  * disabled Graphite font shaping library
+
+---

Old:

  l10n-38.7.0.tar.xz
  thunderbird-38.7.0-source.tar.xz

New:

  l10n-38.7.1.tar.xz
  thunderbird-38.7.1-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.YK9ajn/_old  2016-04-07 13:35:29.0 +0200
+++ /var/tmp/diff_new_pack.YK9ajn/_new  2016-04-07 13:35:29.0 +0200
@@ -17,8 +17,9 @@
 #
 
 
-%define mainversion 38.7.0
+%define mainversion 38.7.1
 %define update_channel release
+%define releasedate 2016032400
 
 %if %suse_version > 1210
 %if %suse_version > 1310
@@ -75,7 +76,6 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2016031000
 Provides:   thunderbird = %{version}
 Provides:   appdata()
 Provides:   appdata(thunderbird.appdata.xml)


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.YK9ajn/_old  2016-04-07 13:35:29.0 +0200
+++ /var/tmp/diff_new_pack.YK9ajn/_new  2016-04-07 13:35:29.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_7_0_RELEASE"
-VERSION="38.7.0"
+RELEASE_TAG="THUNDERBIRD_38_7_1_RELEASE"
+VERSION="38.7.1"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-38.7.0.tar.xz -> l10n-38.7.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.7.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.7.1.tar.xz differ: 
char 27, line 1

++ thunderbird-38.7.0-source.tar.xz -> thunderbird-38.7.1-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.7.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.7.1-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-03-20 11:48:33

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-03-02 14:20:54.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-03-20 11:48:35.0 +0100
@@ -1,0 +2,40 @@
+Fri Mar 11 12:57:25 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 38.7.0 (boo#969894)
+  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
+Use-after-free in MediaStream playback
+  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
+Same-origin policy violation using performance.getEntries and
+history navigation
+  * MFSA 2016-16/CVE-2016-1952
+Miscellaneous memory safety hazards
+  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
+Local file overwriting and potential privilege escalation through
+CSP reports
+  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
+Memory leak in libstagefright when deleting an array during MP4
+processing
+  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
+Displayed page address can be overridden
+  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
+Use-after-free in HTML5 string parser
+  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
+Use-after-free in SetBody
+  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
+Use-after-free when using multiple WebRTC data channels
+  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
+Use-after-free during XML transformations
+  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
+Addressbar spoofing though history navigation and Location protocol
+property
+  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
+Memory corruption with malicious NPAPI plugin
+  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
+Out-of-bounds read in HTML parser following a failed allocation
+  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
+CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
+CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
+CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
+Font vulnerabilities in the Graphite 2 library
+
+---

Old:

  l10n-38.6.0.tar.xz
  thunderbird-38.6.0-source.tar.xz

New:

  l10n-38.7.0.tar.xz
  thunderbird-38.7.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.b4pABH/_old  2016-03-20 11:48:46.0 +0100
+++ /var/tmp/diff_new_pack.b4pABH/_new  2016-03-20 11:48:46.0 +0100
@@ -2,7 +2,7 @@
 # spec file for package MozillaThunderbird
 #
 # Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
-#   2006-2015 Wolfgang Rosenauer 
+#   2006-2016 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.6.0
+%define mainversion 38.7.0
 %define update_channel release
 
 %if %suse_version > 1210
@@ -75,7 +75,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2016021200
+%define releasedate 2016031000
 Provides:   thunderbird = %{version}
 Provides:   appdata()
 Provides:   appdata(thunderbird.appdata.xml)


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.b4pABH/_old  2016-03-20 11:48:46.0 +0100
+++ /var/tmp/diff_new_pack.b4pABH/_new  2016-03-20 11:48:46.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_6_0_RELEASE"
-VERSION="38.6.0"
+RELEASE_TAG="THUNDERBIRD_38_7_0_RELEASE"
+VERSION="38.7.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-38.6.0.tar.xz -> l10n-38.7.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.6.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.7.0.tar.xz differ: 
char 26, line 1

++ thunderbird-38.6.0-source.tar.xz -> thunderbird-38.7.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.6.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.7.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-03-02 14:20:52

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-02-25 22:03:48.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-03-02 14:20:54.0 +0100
@@ -1,0 +2,5 @@
+Fri Feb 26 15:45:19 UTC 2016 - astie...@suse.com
+
+- adjust _constraints to current peak build memory and disk usage
+
+---



Other differences:
--
++ _constraints ++
--- /var/tmp/diff_new_pack.xX15p4/_old  2016-03-02 14:21:06.0 +0100
+++ /var/tmp/diff_new_pack.xX15p4/_new  2016-03-02 14:21:06.0 +0100
@@ -2,10 +2,10 @@
 
   
 
-  9
+  11
 
 
-  3800
+  6000
 
   
 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-02-25 21:57:16

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-02-12 11:20:53.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-02-25 22:03:48.0 +0100
@@ -1,0 +2,10 @@
+Sat Feb 13 08:32:09 UTC 2016 - w...@rosenauer.org
+
+- update to Thunderbird 38.6.0 (boo#963520)
+  * Filters ran on a different folder than selected
+  * MFSA 2016-01/CVE-2016-1930
+Miscellaneous memory safety hazards
+  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
+Buffer overflow in WebGL after out of memory allocation
+
+---

Old:

  l10n-38.5.1.tar.xz
  thunderbird-38.5.1-source.tar.xz

New:

  l10n-38.6.0.tar.xz
  thunderbird-38.6.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.4SJ4ln/_old  2016-02-25 22:35:20.0 +0100
+++ /var/tmp/diff_new_pack.4SJ4ln/_new  2016-02-25 22:35:20.0 +0100
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.5.1
+%define mainversion 38.6.0
 %define update_channel release
 
 %if %suse_version > 1210
@@ -75,7 +75,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2015122200
+%define releasedate 2016021200
 Provides:   thunderbird = %{version}
 Provides:   appdata()
 Provides:   appdata(thunderbird.appdata.xml)


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.4SJ4ln/_old  2016-02-25 22:35:20.0 +0100
+++ /var/tmp/diff_new_pack.4SJ4ln/_new  2016-02-25 22:35:20.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_5_1_RELEASE"
-VERSION="38.5.1"
+RELEASE_TAG="THUNDERBIRD_38_6_0_RELEASE"
+VERSION="38.6.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-38.5.1.tar.xz -> l10n-38.6.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.5.1.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.6.0.tar.xz differ: 
char 26, line 1

++ thunderbird-38.5.1-source.tar.xz -> thunderbird-38.6.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.5.1-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.6.0-source.tar.xz
 differ: char 27, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-02-12 11:20:50

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-01-23 01:14:16.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-02-12 11:20:53.0 +0100
@@ -1,0 +2,6 @@
+Mon Jan 25 10:39:23 UTC 2016 - o...@aepfle.de
+
+- Using -g for CFLAGS is controlled via project settings, it should
+  not be enforced by the mozilla buildsystem.
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.k7vMHU/_old  2016-02-12 11:20:57.0 +0100
+++ /var/tmp/diff_new_pack.k7vMHU/_new  2016-02-12 11:20:57.0 +0100
@@ -244,6 +244,10 @@
 %endif
 export CXXFLAGS="$CFLAGS"
 export MOZCONFIG=$RPM_BUILD_DIR/mozconfig
+# -g might be part of RPM_OPT_FLAGS, depending on the debuginfo setting in prj 
config
+# gcc lacks a an explicit -noop, so use something similar to make sure -g
+# is not forced into CFLAGS
+export MOZ_DEBUG_FLAGS="-pipe"
 #
 cat << EOF > $MOZCONFIG
 mk_add_options MOZILLA_OFFICIAL=1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-01-23 01:14:14

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2016-01-05 09:41:31.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-01-23 01:14:16.0 +0100
@@ -1,0 +2,6 @@
+Mon Jan 18 07:32:51 UTC 2016 - o...@aepfle.de
+
+- Add build conditionals for valgrind and -Os
+- Convert existing conditions for kde to bcond
+
+---



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.exIG3W/_old  2016-01-23 01:14:23.0 +0100
+++ /var/tmp/diff_new_pack.exIG3W/_new  2016-01-23 01:14:23.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #   2006-2015 Wolfgang Rosenauer 
 #
 # All modifications and additions to the file contributed by third parties
@@ -29,7 +29,9 @@
 %endif
 %endif
 
-%define with_kde 1
+%bcond_without mozilla_tb_kde4
+%bcond_withmozilla_tb_valgrind
+%bcond_without mozilla_tb_optimize_for_size
 
 Name:   MozillaThunderbird
 BuildRequires:  Mesa-devel
@@ -54,6 +56,9 @@
 BuildRequires:  yasm
 BuildRequires:  zip
 BuildRequires:  pkgconfig(libpulse)
+%if %{with mozilla_tb_valgrind}
+BuildRequires:  pkgconfig(valgrind)
+%endif
 %if %suse_version > 1210
 BuildRequires:  pkgconfig(gstreamer-%gstreamer_ver)
 BuildRequires:  pkgconfig(gstreamer-app-%gstreamer_ver)
@@ -74,7 +79,7 @@
 Provides:   thunderbird = %{version}
 Provides:   appdata()
 Provides:   appdata(thunderbird.appdata.xml)
-%if %{with_kde}
+%if %{with mozilla_tb_kde4}
 # this is needed to match this package with the kde4 helper package without 
the main package
 # having a hard requirement on the kde4 package
 %define kde_helper_version 6
@@ -194,7 +199,7 @@
 pushd mozilla
 %patch1 -p1
 %patch2 -p1
-%if %{with_kde}
+%if %{with mozilla_tb_kde4}
 %patch3 -p1
 %endif
 %patch4 -p1
@@ -212,7 +217,7 @@
 TIME="\"$(date -d "${modified}" "+%%R")\""
 find . -regex ".*\.c\|.*\.cpp\|.*\.h" -exec sed -i 
"s/__DATE__/${DATE}/g;s/__TIME__/${TIME}/g" {} +
 #
-%if %{with_kde}
+%if %{with mozilla_tb_kde4}
 kdehelperversion=$(cat mozilla/toolkit/xre/nsKDEUtils.cpp | grep '#define 
KMOZILLAHELPER_VERSION' | cut -d ' ' -f 3)
 if test "$kdehelperversion" != %{kde_helper_version}; then
   echo fix kde helper version in the .spec file
@@ -226,7 +231,10 @@
 %if %{update_channel} == "esr"
 export MOZ_ESR=1
 %endif
-export CFLAGS="$RPM_OPT_FLAGS -Os -fno-strict-aliasing"
+export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing"
+%if %{with mozilla_tb_optimize_for_size}
+export CFLAGS="$CFLAGS -Os"
+%endif
 %ifarch ppc64 ppc64le
 export CFLAGS="$CFLAGS -mminimal-toc"
 %endif
@@ -281,6 +289,10 @@
 %ifarch %arm
 ac_add_options --disable-neon
 %endif
+%if %{with mozilla_tb_valgrind}
+ac_add_options --disable-jemalloc
+ac_add_options --enable-valgrind
+%endif
 EOF
 make -f client.mk build
 
@@ -291,7 +303,7 @@
 mkdir -p $RPM_BUILD_ROOT%{progdir}
 cp -rf $RPM_BUILD_DIR/obj/dist/thunderbird/* \
$RPM_BUILD_ROOT%{progdir}
-%if %{with_kde}
+%if %{with mozilla_tb_kde4}
 # install kde.js
 install -m 644 %{SOURCE12} $RPM_BUILD_ROOT%{progdir}/defaults/pref/kde.js
 # make sure that instantApply is true by default

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2016-01-05 09:41:03

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-12-27 01:59:49.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2016-01-05 09:41:31.0 +0100
@@ -1,0 +2,10 @@
+Tue Dec 29 20:30:59 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 38.5.1
+  * requires NSS 3.20.2 to fix
+MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
+MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
+server signature
+- explicitely require libXcomposite-devel
+
+---

Old:

  l10n-38.5.0.tar.xz
  thunderbird-38.5.0-source.tar.xz

New:

  l10n-38.5.1.tar.xz
  thunderbird-38.5.1-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.FkokNH/_old  2016-01-05 09:41:42.0 +0100
+++ /var/tmp/diff_new_pack.FkokNH/_new  2016-01-05 09:41:42.0 +0100
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.5.0
+%define mainversion 38.5.1
 %define update_channel release
 
 %if %suse_version > 1210
@@ -38,12 +38,13 @@
 BuildRequires:  fdupes
 BuildRequires:  gcc-c++
 BuildRequires:  hunspell-devel
+BuildRequires:  libXcomposite-devel
 BuildRequires:  libcurl-devel
 BuildRequires:  libgnomeui-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  mozilla-nspr-devel >= 4.10.10
-BuildRequires:  mozilla-nss-devel >= 3.19.2.1
+BuildRequires:  mozilla-nss-devel >= 3.20.2
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.FkokNH/_old  2016-01-05 09:41:42.0 +0100
+++ /var/tmp/diff_new_pack.FkokNH/_new  2016-01-05 09:41:42.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_5_0_RELEASE"
-VERSION="38.5.0"
+RELEASE_TAG="THUNDERBIRD_38_5_1_RELEASE"
+VERSION="38.5.1"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-38.5.0.tar.xz -> l10n-38.5.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.5.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.5.1.tar.xz differ: 
char 26, line 1

++ thunderbird-38.5.0-source.tar.xz -> thunderbird-38.5.1-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.5.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.5.1-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-12-27 01:59:47

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-12-03 13:29:06.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-12-27 01:59:49.0 +0100
@@ -1,0 +2,21 @@
+Wed Dec 23 10:13:38 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 38.5.0 (bnc#959277)
+  * MFSA 2015-134/CVE-2015-7201
+Miscellaneous memory safety hazards
+  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
+Use-after-free in WebRTC when datachannel is used after being
+destroyed
+  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
+Integer overflow allocating extremely large textures
+  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
+Underflow through code inspection
+  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
+Integer overflow in MP4 playback in 64-bit versions
+  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
+Integer underflow and buffer overflow processing MP4 metadata in
+libstagefright
+  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
+Cross-site reading attack through data and view-source URIs
+
+---

Old:

  l10n-38.4.0.tar.xz
  thunderbird-38.4.0-source.tar.xz

New:

  l10n-38.5.0.tar.xz
  thunderbird-38.5.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.AgrYhq/_old  2015-12-27 02:00:12.0 +0100
+++ /var/tmp/diff_new_pack.AgrYhq/_new  2015-12-27 02:00:12.0 +0100
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.4.0
+%define mainversion 38.5.0
 %define update_channel release
 
 %if %suse_version > 1210
@@ -69,7 +69,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2015092700
+%define releasedate 2015122200
 Provides:   thunderbird = %{version}
 Provides:   appdata()
 Provides:   appdata(thunderbird.appdata.xml)


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.AgrYhq/_old  2015-12-27 02:00:12.0 +0100
+++ /var/tmp/diff_new_pack.AgrYhq/_new  2015-12-27 02:00:12.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_4_0_RELEASE"
-VERSION="38.4.0"
+RELEASE_TAG="THUNDERBIRD_38_5_0_RELEASE"
+VERSION="38.5.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-38.4.0.tar.xz -> l10n-38.5.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.4.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.5.0.tar.xz differ: 
char 26, line 1

++ thunderbird-38.4.0-source.tar.xz -> thunderbird-38.5.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.4.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.5.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-12-03 13:29:04

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-10-12 10:00:51.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-12-03 13:29:06.0 +0100
@@ -1,0 +2,29 @@
+Tue Nov 17 07:58:43 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 38.4.0 (bnc#952810)
+  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
+Miscellaneous memory safety hazards
+  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
+Trailing whitespace in IP address hostnames can bypass same-origin policy
+  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
+Buffer overflow during image interactions in canvas
+  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
+CORS preflight is bypassed when non-standard Content-Type headers
+are received
+  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
+Memory corruption in libjar through zip files
+  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
+JavaScript garbage collection crash with Java applet
+  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
+(bmo#1188010, bmo#1204061, bmo#1204155)
+Vulnerabilities found through code inspection
+  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
+Mixed content WebSocket policy bypass through workers
+  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
+(bmo#1202868, bmo#1205157)
+NSS and NSPR memory corruption issues
+(fixed in mozilla-nspr and mozilla-nss packages)
+- requires NSPR 4.10.10 and NSS 3.19.2.1
+- added explicit appdata provides (bnc#952325)
+
+---
@@ -116 +145 @@

+

Old:

  l10n-38.3.0.tar.xz
  thunderbird-38.3.0-source.tar.xz

New:

  l10n-38.4.0.tar.xz
  thunderbird-38.4.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.5pUTmM/_old  2015-12-03 13:29:21.0 +0100
+++ /var/tmp/diff_new_pack.5pUTmM/_new  2015-12-03 13:29:21.0 +0100
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.3.0
+%define mainversion 38.4.0
 %define update_channel release
 
 %if %suse_version > 1210
@@ -42,8 +42,8 @@
 BuildRequires:  libgnomeui-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
-BuildRequires:  mozilla-nspr-devel >= 4.10.8
-BuildRequires:  mozilla-nss-devel >= 3.19.2
+BuildRequires:  mozilla-nspr-devel >= 4.10.10
+BuildRequires:  mozilla-nss-devel >= 3.19.2.1
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip
@@ -71,6 +71,8 @@
 Release:0
 %define releasedate 2015092700
 Provides:   thunderbird = %{version}
+Provides:   appdata()
+Provides:   appdata(thunderbird.appdata.xml)
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package
 # having a hard requirement on the kde4 package
@@ -100,7 +102,7 @@
 Patch4: mozilla-arm-disable-edsp.patch
 Patch5: mozilla-develdirs.patch
 Patch6: mozilla-icu-strncat.patch
-Patch17:mozilla-arm64-libjpeg-turbo.patch
+Patch7: mozilla-arm64-libjpeg-turbo.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -197,7 +199,7 @@
 %patch4 -p1
 %patch5 -p1
 %patch6 -p1
-%patch17 -p1
+%patch7 -p1
 popd
 # comm-central patches
 %patch20 -p1
@@ -317,6 +319,16 @@
 make -C mail/locales langpack-$locale || continue
 cp -rL dist/xpi-stage/locale-$locale \

$RPM_BUILD_ROOT%{progdir}/extensions/langpack-$loc...@thunderbird.mozilla.org
+   # Lightning
+   _shipcalendar=0
+   #for callocale in in $(awk '{ print $1; }' 
../thunderbird/calendar/locales/shipped-locales); do
+   #  if [ "$locale" = "$callocale" ]; then
+   #make -C mail/locales calendar-langpack-$locale || continue
+   #cp -rL dist/xpi-stage/lightning-$locale \
+   #  
$RPM_BUILD_ROOT%{progdir}/extensions/lightning-langpack-$loc...@thunderbird.mozilla.org
+   #_shipcalendar=1
+   #  fi
+   #done
# remove prefs and profile defaults from langpack
rm -rf 
$RPM_BUILD_ROOT%{progdir}/extensions/langpack-$loc...@thunderbird.mozilla.org/defaults
 # check against the fixed common list and sort into the right 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-10-12 10:00:41

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is "MozillaThunderbird"

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-08-21 07:40:05.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-10-12 10:00:51.0 +0200
@@ -1,0 +2,33 @@
+Mon Oct  5 12:44:39 UTC 2015 - dmuel...@suse.com
+
+- fix build on aarch64 by reusing the crashreporter conditional
+  from MozillaFirefox
+
+---
+Mon Sep 28 18:00:50 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 38.3.0 (bnc#947003)
+  * MFSA 2015-96/CVE-2015-4500
+Miscellaneous memory safety hazards
+  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
+Arbitrary file manipulation by local user through Mozilla updater
+  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
+Buffer overflow in libvpx while parsing vp9 format video
+  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
+Buffer overflow while decoding WebM video
+  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
+Use-after-free while manipulating HTML media content
+  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
+Dragging and dropping images exposes final URL after redirects
+  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
+Errors in the handling of CORS preflight request headers
+  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
+CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
+CVE-2015-7180
+Vulnerabilities found through code inspection
+  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
+bmo#1190526) (Windows only)
+Memory safety errors in libGLES in the ANGLE graphics library
+- rebased patches
+
+---
@@ -81,0 +115,5 @@
+
+---
+Thu Jun 18 10:30:18 UTC 2015 - sch...@suse.de
+
+- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration

Old:

  l10n-38.2.0.tar.xz
  thunderbird-38.2.0-source.tar.xz

New:

  l10n-38.3.0.tar.xz
  mozilla-arm64-libjpeg-turbo.patch
  thunderbird-38.3.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.8m7oEL/_old  2015-10-12 10:01:06.0 +0200
+++ /var/tmp/diff_new_pack.8m7oEL/_new  2015-10-12 10:01:06.0 +0200
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.2.0
+%define mainversion 38.3.0
 %define update_channel release
 
 %if %suse_version > 1210
@@ -69,7 +69,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2015081400
+%define releasedate 2015092700
 Provides:   thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package
@@ -100,16 +100,17 @@
 Patch4: mozilla-arm-disable-edsp.patch
 Patch5: mozilla-develdirs.patch
 Patch6: mozilla-icu-strncat.patch
+Patch17:mozilla-arm64-libjpeg-turbo.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 PreReq: coreutils fileutils textutils /bin/sh
 Recommends: libcanberra0
 ### build options
-%ifnarch ppc ppc64 ppc64le %arm
-%define crashreporter 1
-%else
+%ifarch aarch64 ppc ppc64 ppc64le s390 s390x ia64 %arm
 %define crashreporter 0
+%else
+%define crashreporter 1
 %endif
 %define has_system_cairo 0
 %define localize 1
@@ -196,6 +197,7 @@
 %patch4 -p1
 %patch5 -p1
 %patch6 -p1
+%patch17 -p1
 popd
 # comm-central patches
 %patch20 -p1


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.8m7oEL/_old  2015-10-12 10:01:06.0 +0200
+++ /var/tmp/diff_new_pack.8m7oEL/_new  2015-10-12 10:01:06.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_2_0_RELEASE"
-VERSION="38.2.0"
+RELEASE_TAG="THUNDERBIRD_38_3_0_RELEASE"
+VERSION="38.3.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-38.2.0.tar.xz -> l10n-38.3.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.2.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.3.0.tar.xz differ: 
char 26, line 1

++ mozilla-arm64-libjpeg-turbo.patch ++
Index: mozilla/configure.in
===
--- mozilla.orig/configure.in
+++ 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-08-21 07:39:41

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-07-16 17:16:35.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-08-21 07:40:05.0 +0200
@@ -1,0 +2,30 @@
+Sat Aug 15 11:41:30 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 38.2.0 (bnc#940806)
+  * MFSA 2015-79/CVE-2015-4473
+Miscellaneous memory safety hazards
+  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
+Out-of-bounds read with malformed MP3 file
+  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
+Redefinition of non-configurable JavaScript object properties
+  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
+Overflow issues in libstagefright
+  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
+Arbitrary file overwriting through Mozilla Maintenance Service
+with hard links (only affected Windows)
+  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
+Out-of-bounds write with Updater and malicious MAR file
+(does not affect openSUSE RPM packages which do not ship the
+ updater)
+  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
+Crash when using shared memory in JavaScript
+  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
+Heap overflow in gdk-pixbuf when scaling bitmap images
+  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
+Buffer overflows on Libvpx when decoding WebM video
+  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
+Vulnerabilities found through code inspection
+  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
+Use-after-free in XMLHttpRequest with shared workers
+
+---

Old:

  l10n-38.1.0.tar.xz
  thunderbird-38.1.0-source.tar.xz

New:

  l10n-38.2.0.tar.xz
  thunderbird-38.2.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.VNm4N1/_old  2015-08-21 07:40:28.0 +0200
+++ /var/tmp/diff_new_pack.VNm4N1/_new  2015-08-21 07:40:28.0 +0200
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.1.0
+%define mainversion 38.2.0
 %define update_channel release
 
 %if %suse_version  1210
@@ -69,7 +69,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2015070700
+%define releasedate 2015081400
 Provides:   thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.VNm4N1/_old  2015-08-21 07:40:28.0 +0200
+++ /var/tmp/diff_new_pack.VNm4N1/_new  2015-08-21 07:40:28.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL=esr38
 BRANCH=releases/comm-$CHANNEL
-RELEASE_TAG=THUNDERBIRD_38_1_0_RELEASE
-VERSION=38.1.0
+RELEASE_TAG=THUNDERBIRD_38_2_0_RELEASE
+VERSION=38.2.0
 
 echo cloning $BRANCH...
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-38.1.0.tar.xz - l10n-38.2.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.1.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.2.0.tar.xz differ: 
char 26, line 1

++ thunderbird-38.1.0-source.tar.xz - thunderbird-38.2.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.1.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.2.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-07-16 17:16:33

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-06-12 20:25:58.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-07-16 17:16:35.0 +0200
@@ -1,0 +2,52 @@
+Wed Jul  8 07:10:59 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 38.1.0 (bnc#935979)
+  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
+Miscellaneous memory safety hazards
+  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
+Local files or privileged URLs in pages can be opened into new tabs
+  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
+Type confusion in Indexed Database Manager
+  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
+Out-of-bound read while computing an oscillator rendering range in Web 
Audio
+  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
+Use-after-free in Content Policy due to microtask execution error
+  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
+ECDSA signature validation fails to handle some signatures correctly
+(this fix is shipped by NSS 3.19.1 externally)
+  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
+Use-after-free in workers while using XMLHttpRequest
+  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
+CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
+Vulnerabilities found through code inspection
+  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
+Key pinning is ignored when overridable errors are encountered
+  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
+Privilege escalation in PDF.js
+  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
+NSS accepts export-length DHE keys with regular DHE cipher suites
+(this fix is shipped by NSS 3.19.1 externally)
+  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
+NSS incorrectly permits skipping of ServerKeyExchange
+(this fix is shipped by NSS 3.19.1 externally)
+- requires NSS 3.19.2
+
+---
+Fri Jun 19 17:00:11 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 38.0.1
+  * includes Lightning as default extension
+- rebased patches
+- removed obsolete patches:
+  * mozilla-ppc.patch
+  * mozilla-nullptr-gcc45.patch
+  * mozilla-bug1024492.patch
+- dropped openSUSE specific patches
+  * thunderbird-shared-nss-db.patch
+  * mozilla-shared-nss-db.patch
+the provided feature seems not to be used and its maintenance
+is not worth the ongoing efforts
+- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
+  platform configuration now
+
+---

Old:

  l10n-31.7.0.tar.xz
  mozilla-bug1024492.patch
  mozilla-nullptr-gcc45.patch
  mozilla-ppc.patch
  mozilla-shared-nss-db.patch
  tb-develdirs.patch
  thunderbird-31.7.0-source.tar.xz
  thunderbird-shared-nss-db.patch

New:

  l10n-38.1.0.tar.xz
  mozilla-develdirs.patch
  thunderbird-38.1.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.sYNtGD/_old  2015-07-16 17:16:46.0 +0200
+++ /var/tmp/diff_new_pack.sYNtGD/_new  2015-07-16 17:16:46.0 +0200
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 31.7.0
+%define mainversion 38.1.0
 %define update_channel release
 
 %if %suse_version  1210
@@ -42,9 +42,8 @@
 BuildRequires:  libgnomeui-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
-BuildRequires:  mozilla-nspr-devel = 4.10.6
-BuildRequires:  mozilla-nss-devel = 3.16.5
-BuildRequires:  nss-shared-helper-devel
+BuildRequires:  mozilla-nspr-devel = 4.10.8
+BuildRequires:  mozilla-nss-devel = 3.19.2
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip
@@ -70,7 +69,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2015050800
+%define releasedate 2015070700
 Provides:   thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package
@@ -95,19 +94,14 @@
 Source11:   compare-locales.tar.xz
 Source12:   kde.js
 # Gecko/Toolkit
-Patch1: mozilla-shared-nss-db.patch
-Patch2: mozilla-language.patch
-Patch3: mozilla-nongnome-proxies.patch
-Patch4: mozilla-kde.patch
-Patch5: mozilla-arm-disable-edsp.patch
-Patch6: mozilla-ppc.patch
-Patch7: mozilla-nullptr-gcc45.patch
-Patch8: 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-06-12 20:25:57

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-05-20 23:49:34.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-06-12 20:25:58.0 +0200
@@ -1,0 +2,6 @@
+Thu May 28 10:28:13 UTC 2015 - dmuel...@suse.com
+
+- add mozilla-bug1024492.patch:
+  * Fixes build against GCC 5.x
+
+---

New:

  mozilla-bug1024492.patch



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.zKu2Y8/_old  2015-06-12 20:26:03.0 +0200
+++ /var/tmp/diff_new_pack.zKu2Y8/_new  2015-06-12 20:26:03.0 +0200
@@ -103,6 +103,7 @@
 Patch6: mozilla-ppc.patch
 Patch7: mozilla-nullptr-gcc45.patch
 Patch8: mozilla-icu-strncat.patch
+Patch9: mozilla-bug1024492.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 Patch21:tb-develdirs.patch
@@ -203,6 +204,7 @@
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
+%patch9 -p3
 popd
 # comm-central patches
 %patch20 -p1


++ mozilla-bug1024492.patch ++
Fixes build with GCC 5.x

https://bug1024492.bugzilla.mozilla.org/attachment.cgi?id=8439834action=diffcontext=patchformat=rawheaders=1

diff -ur a/thunderbird/mozilla/js/src/builtin/TypedObject.cpp 
b/thunderbird/mozilla/js/src/builtin/TypedObject.cpp
--- a/thunderbird/mozilla/js/src/builtin/TypedObject.cpp2015-05-09 
08:50:17.567803110 +0200
+++ b/thunderbird/mozilla/js/src/builtin/TypedObject.cpp2015-05-28 
11:25:07.771027783 +0200
@@ -710,12 +710,12 @@
 contents.append());
 RootedAtom stringRepr(cx, contents.finishAtom());
 if (!stringRepr)
-return nullptr;
+return false;
 
 // Extract ArrayType.prototype
 RootedObject arrayTypePrototype(cx, GetPrototype(cx, arrayTypeGlobal));
 if (!arrayTypePrototype)
-return nullptr;
+return false;
 
 // Create the instance of ArrayType
 RootedUnsizedArrayTypeDescr* obj(cx);
@@ -728,7 +728,7 @@
 if (!JSObject::defineProperty(cx, obj, cx-names().length,
   UndefinedHandleValue, nullptr, nullptr,
   JSPROP_READONLY | JSPROP_PERMANENT))
-return nullptr;
+return false;
 
 args.rval().setObject(*obj);
 return true;
@@ -762,7 +762,7 @@
 if (!size.isValid()) {
 JS_ReportErrorNumber(cx, js_GetErrorMessage, nullptr,
  JSMSG_TYPEDOBJECT_TOO_BIG);
-return nullptr;
+return false;
 }
 
 // Construct a canonical string `new 
ArrayType(elementType).dimension(N)`:
@@ -775,7 +775,7 @@
 contents.append());
 RootedAtom stringRepr(cx, contents.finishAtom());
 if (!stringRepr)
-return nullptr;
+return false;
 
 // Create the sized type object.
 RootedSizedArrayTypeDescr* obj(cx);
@@ -793,7 +793,7 @@
 if (!JSObject::defineProperty(cx, obj, cx-names().length,
   lengthVal, nullptr, nullptr,
   JSPROP_READONLY | JSPROP_PERMANENT))
-return nullptr;
+return false;
 
 // Add `unsized` property, which is a link from the sized
 // array to the unsized array.
@@ -801,7 +801,7 @@
 if (!JSObject::defineProperty(cx, obj, cx-names().unsized,
   unsizedTypeDescrValue, nullptr, nullptr,
   JSPROP_READONLY | JSPROP_PERMANENT))
-return nullptr;
+return false;
 
 args.rval().setObject(*obj);
 return true;
@@ -1253,7 +1253,7 @@
 RootedTypedProto* proto(cx);
 proto = NewObjectWithProtoTypedProto(cx, objProto, nullptr, 
TenuredObject);
 if (!proto)
-return nullptr;
+return false;
 proto-initTypeDescrSlot(*descr);
 descr-initReservedSlot(JS_DESCR_SLOT_TYPROTO, ObjectValue(*proto));
 
@@ -1358,14 +1358,14 @@
 #define BINARYDATA_SCALAR_DEFINE(constant_, type_, name_)  
 \
 if (!DefineSimpleTypeDescrScalarTypeDescr(cx, global, module, constant_, 
 \
 cx-names().name_))
 \
-return nullptr;
+return false;
 JS_FOR_EACH_SCALAR_TYPE_REPR(BINARYDATA_SCALAR_DEFINE)
 #undef BINARYDATA_SCALAR_DEFINE
 
 #define BINARYDATA_REFERENCE_DEFINE(constant_, type_, name_)   
 \
 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-05-20 23:49:33

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-04-07 09:28:03.0 +0200
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-05-20 23:49:34.0 +0200
@@ -1,0 +2,17 @@
+Sat May  9 07:22:49 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 31.7.0 (bnc#930622)
+  * MFSA 2015-46/CVE-2015-2708
+Miscellaneous memory safety hazards
+  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
+Buffer overflow parsing H.264 video with Linux Gstreamer
+  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
+Buffer overflow with SVG content and CSS
+  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
+Use-after-free during text processing with vertical text enabled
+  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
+Buffer overflow when parsing compressed XML
+  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
+Privilege escalation through IPC channel messages
+
+---

Old:

  l10n-31.6.0.tar.xz
  thunderbird-31.6.0-source.tar.xz

New:

  l10n-31.7.0.tar.xz
  thunderbird-31.7.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.IUlNOI/_old  2015-05-20 23:49:47.0 +0200
+++ /var/tmp/diff_new_pack.IUlNOI/_new  2015-05-20 23:49:47.0 +0200
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 31.6.0
+%define mainversion 31.7.0
 %define update_channel release
 
 %if %suse_version  1210
@@ -70,7 +70,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2015032900
+%define releasedate 2015050800
 Provides:   thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.IUlNOI/_old  2015-05-20 23:49:48.0 +0200
+++ /var/tmp/diff_new_pack.IUlNOI/_new  2015-05-20 23:49:48.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL=esr31
 BRANCH=releases/comm-$CHANNEL
-RELEASE_TAG=THUNDERBIRD_31_6_0_RELEASE
-VERSION=31.6.0
+RELEASE_TAG=THUNDERBIRD_31_7_0_RELEASE
+VERSION=31.7.0
 
 echo cloning $BRANCH...
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-31.6.0.tar.xz - l10n-31.7.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-31.6.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-31.7.0.tar.xz differ: 
char 26, line 1

++ thunderbird-31.6.0-source.tar.xz - thunderbird-31.7.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-31.6.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-31.7.0-source.tar.xz
 differ: char 26, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-04-07 09:27:57

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-02-27 11:07:16.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-04-07 09:28:03.0 +0200
@@ -1,0 +2,15 @@
+Tue Mar 31 05:02:16 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 31.6.0 (bnc#925368)
+  * MFSA 2015-30/CVE-2015-0815
+Miscellaneous memory safety hazards
+  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
+Use-after-free when using the Fluendo MP3 GStreamer plugin
+  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
+resource:// documents can load privileged pages
+  * MFSA-2015-37/CVE-2015-0807 (bmo#834)
+CORS requests should not follow 30x redirections after preflight
+  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
+Same-origin bypass through anchor navigation
+
+---

Old:

  l10n-31.5.0.tar.xz
  thunderbird-31.5.0-source.tar.xz

New:

  l10n-31.6.0.tar.xz
  thunderbird-31.6.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.bBmMI2/_old  2015-04-07 09:28:12.0 +0200
+++ /var/tmp/diff_new_pack.bBmMI2/_new  2015-04-07 09:28:12.0 +0200
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 31.5.0
+%define mainversion 31.6.0
 %define update_channel release
 
 %if %suse_version  1210
@@ -70,7 +70,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2015022200
+%define releasedate 2015032900
 Provides:   thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.bBmMI2/_old  2015-04-07 09:28:12.0 +0200
+++ /var/tmp/diff_new_pack.bBmMI2/_new  2015-04-07 09:28:12.0 +0200
@@ -2,8 +2,8 @@
 
 CHANNEL=esr31
 BRANCH=releases/comm-$CHANNEL
-RELEASE_TAG=THUNDERBIRD_31_5_0_RELEASE
-VERSION=31.5.0
+RELEASE_TAG=THUNDERBIRD_31_6_0_RELEASE
+VERSION=31.6.0
 
 echo cloning $BRANCH...
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-31.5.0.tar.xz - l10n-31.6.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-31.5.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-31.6.0.tar.xz differ: 
char 26, line 1

++ thunderbird-31.5.0-source.tar.xz - thunderbird-31.6.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-31.5.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-31.6.0-source.tar.xz
 differ: char 27, line 1

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-02-27 11:07:10

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2015-01-21 21:51:05.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-02-27 11:07:16.0 +0100
@@ -1,0 +2,16 @@
+Mon Feb 23 12:42:57 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 31.5.0 (bnc#917597)
+  * MFSA 2015-11/CVE-2015-0836
+Miscellaneous memory safety hazards
+  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
+Invoking Mozilla updater will load locally stored DLL files
+(Windows only)
+  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
+Use-after-free in IndexedDB
+  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
+Out-of-bounds read and write while rendering SVG content
+  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
+Reading of local files through manipulation of form autocomplete
+
+---

Old:

  l10n-31.4.0.tar.xz
  thunderbird-31.4.0-source.tar.xz

New:

  l10n-31.5.0.tar.xz
  thunderbird-31.5.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.Vi6RHY/_old  2015-02-27 11:07:27.0 +0100
+++ /var/tmp/diff_new_pack.Vi6RHY/_new  2015-02-27 11:07:27.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #   2006-2015 Wolfgang Rosenauer w...@rosenauer.org
 #
 # All modifications and additions to the file contributed by third parties
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 31.4.0
+%define mainversion 31.5.0
 %define update_channel release
 
 %if %suse_version  1210
@@ -70,7 +70,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2015010900
+%define releasedate 2015022200
 Provides:   thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.Vi6RHY/_old  2015-02-27 11:07:28.0 +0100
+++ /var/tmp/diff_new_pack.Vi6RHY/_new  2015-02-27 11:07:28.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL=esr31
 BRANCH=releases/comm-$CHANNEL
-RELEASE_TAG=THUNDERBIRD_31_4_0_RELEASE
-VERSION=31.4.0
+RELEASE_TAG=THUNDERBIRD_31_5_0_RELEASE
+VERSION=31.5.0
 
 echo cloning $BRANCH...
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-31.4.0.tar.xz - l10n-31.5.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-31.4.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-31.5.0.tar.xz differ: 
char 26, line 1

++ thunderbird-31.4.0-source.tar.xz - thunderbird-31.5.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-31.4.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-31.5.0-source.tar.xz
 differ: char 26, line 1


-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2015-01-21 21:50:44

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2014-12-06 13:47:27.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2015-01-21 21:51:05.0 +0100
@@ -1,0 +2,12 @@
+Sat Jan 10 18:33:52 UTC 2015 - w...@rosenauer.org
+
+- update to Thunderbird 31.4.0 (bnc#910669)
+  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
+Miscellaneous memory safety hazards
+  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
+sendBeacon requests lack an Origin header
+  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
+Cookie injection through Proxy Authenticate responses
+- added mozilla-icu-strncat.patch to fix post build checks
+
+---

Old:

  l10n-31.3.0.tar.xz
  thunderbird-31.3.0-source.tar.xz

New:

  l10n-31.4.0.tar.xz
  mozilla-icu-strncat.patch
  thunderbird-31.4.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.Lym3Xl/_old  2015-01-21 21:51:16.0 +0100
+++ /var/tmp/diff_new_pack.Lym3Xl/_new  2015-01-21 21:51:16.0 +0100
@@ -1,8 +1,8 @@
 #
 # spec file for package MozillaThunderbird
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
-#   2006-2014 Wolfgang Rosenauer w...@rosenauer.org
+# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+#   2006-2015 Wolfgang Rosenauer w...@rosenauer.org
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 31.3.0
+%define mainversion 31.4.0
 %define update_channel release
 
 %if %suse_version  1210
@@ -70,7 +70,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2014112600
+%define releasedate 2015010900
 Provides:   thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package
@@ -102,6 +102,7 @@
 Patch5: mozilla-arm-disable-edsp.patch
 Patch6: mozilla-ppc.patch
 Patch7: mozilla-nullptr-gcc45.patch
+Patch8: mozilla-icu-strncat.patch
 # Thunderbird/mail
 Patch20:tb-ssldap.patch
 Patch21:tb-develdirs.patch
@@ -201,6 +202,7 @@
 %patch5 -p1
 %patch6 -p1
 %patch7 -p1
+%patch8 -p1
 popd
 # comm-central patches
 %patch20 -p1


++ compare-locales.tar.xz ++

++ create-tar.sh ++
--- /var/tmp/diff_new_pack.Lym3Xl/_old  2015-01-21 21:51:16.0 +0100
+++ /var/tmp/diff_new_pack.Lym3Xl/_new  2015-01-21 21:51:16.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL=esr31
 BRANCH=releases/comm-$CHANNEL
-RELEASE_TAG=THUNDERBIRD_31_3_0_RELEASE
-VERSION=31.3.0
+RELEASE_TAG=THUNDERBIRD_31_4_0_RELEASE
+VERSION=31.4.0
 
 echo cloning $BRANCH...
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-31.3.0.tar.xz - l10n-31.4.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-31.3.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-31.4.0.tar.xz differ: 
char 26, line 1

++ mozilla-icu-strncat.patch ++
# HG changeset patch
# Parent 29be2a4daa0f512d22bde85b97b5460839026571
# User Wolfgang Rosenauer w...@rosenauer.org
From: Jan Engelhardt jeng...@inai.de
Reference: http://bugs.icu-project.org/trac/ticket/7808

diff --git a/intl/icu/source/tools/pkgdata/pkgdata.cpp 
b/intl/icu/source/tools/pkgdata/pkgdata.cpp
--- a/intl/icu/source/tools/pkgdata/pkgdata.cpp
+++ b/intl/icu/source/tools/pkgdata/pkgdata.cpp
@@ -1975,22 +1975,22 @@ static void loadLists(UPKGOptions *o, UE
 FILE *p = NULL;
 size_t n;
 static char buf[512] = ;
 char cmdBuf[1024];
 UErrorCode status = U_ZERO_ERROR;
 const char cmd[] = icu-config --incpkgdatafile;
 
 /* #1 try the same path where pkgdata was called from. */
-findDirname(progname, cmdBuf, 1024, status);
+findDirname(progname, cmdBuf, sizeof(cmdBuf), status);
 if(U_SUCCESS(status)) {
   if (cmdBuf[0] != 0) {
-  uprv_strncat(cmdBuf, U_FILE_SEP_STRING, 1024);
+  uprv_strncat(cmdBuf, U_FILE_SEP_STRING, 
sizeof(cmdBuf)-1-strlen(cmdBuf));
   }
-  uprv_strncat(cmdBuf, cmd, 1024);
+  uprv_strncat(cmdBuf, cmd, sizeof(cmdBuf)-1-strlen(cmdBuf));
   
   if(verbose) {
 fprintf(stdout, # Calling icu-config: %s\n, cmdBuf);
   }
 

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2014-12-06 13:47:25

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2014-11-24 11:18:34.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2014-12-06 13:47:27.0 +0100
@@ -1,0 +2,15 @@
+Sun Nov 30 08:37:33 UTC 2014 - w...@rosenauer.org
+
+- update to Thunderbird 31.3.0 (bnc#908009)
+  * MFSA 2014-83/CVE-2014-1587
+Miscellaneous memory safety hazards
+  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
+XMLHttpRequest crashes with some input streams
+  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
+Use-after-free during HTML5 parsing
+  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
+Buffer overflow while parsing media content
+  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
+Bad casting from the BasicThebesLayer to BasicContainerLayer
+
+---

Old:

  l10n-31.2.0.tar.xz
  thunderbird-31.2.0-source.tar.xz

New:

  l10n-31.3.0.tar.xz
  thunderbird-31.3.0-source.tar.xz



Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.sWZIAn/_old  2014-12-06 13:47:41.0 +0100
+++ /var/tmp/diff_new_pack.sWZIAn/_new  2014-12-06 13:47:41.0 +0100
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 31.2.0
+%define mainversion 31.3.0
 %define update_channel release
 
 %if %suse_version  1210
@@ -70,7 +70,7 @@
 %endif
 Version:%{mainversion}
 Release:0
-%define releasedate 2014101200
+%define releasedate 2014112600
 Provides:   thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without 
the main package


++ create-tar.sh ++
--- /var/tmp/diff_new_pack.sWZIAn/_old  2014-12-06 13:47:42.0 +0100
+++ /var/tmp/diff_new_pack.sWZIAn/_new  2014-12-06 13:47:42.0 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL=esr31
 BRANCH=releases/comm-$CHANNEL
-RELEASE_TAG=THUNDERBIRD_31_2_0_RELEASE
-VERSION=31.2.0
+RELEASE_TAG=THUNDERBIRD_31_3_0_RELEASE
+VERSION=31.3.0
 
 echo cloning $BRANCH...
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++ l10n-31.2.0.tar.xz - l10n-31.3.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-31.2.0.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-31.3.0.tar.xz differ: 
char 26, line 1

++ thunderbird-31.2.0-source.tar.xz - thunderbird-31.3.0-source.tar.xz 
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-31.2.0-source.tar.xz 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-31.3.0-source.tar.xz
 differ: char 25, line 1


-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit MozillaThunderbird for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package MozillaThunderbird for 
openSUSE:Factory checked in at 2014-11-24 11:18:02

Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
 and  /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New)


Package is MozillaThunderbird

Changes:

--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2014-11-07 09:05:49.0 +0100
+++ 
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes   
2014-11-24 11:18:34.0 +0100
@@ -1,0 +2,5 @@
+Sun Nov 16 21:22:00 UTC 2014 - Led led...@gmail.com
+
+- fix bashism in mozilla.sh script
+
+---



Other differences:
--

++ mozilla.sh.in ++
--- /var/tmp/diff_new_pack.Mfqpa0/_old  2014-11-24 11:18:37.0 +0100
+++ /var/tmp/diff_new_pack.Mfqpa0/_new  2014-11-24 11:18:37.0 +0100
@@ -131,7 +131,8 @@
 if [ $moz_debug -eq 1 ]; then
   tmpfile=`mktemp /tmp/mozargs.XX` || { echo Cannot create temporary 
file 2; exit 1; }
   trap  [ -f \$tmpfile\ ]  /bin/rm -f -- \$tmpfile\ 0 1 2 3 13 15
-  echo -e set args ${1+$@}\nrun  $tmpfile
+  echo set args ${1+$@}  $tmpfile
+  echo run  $tmpfile
   echo $moz_debugger $MOZ_PROGRAM -x $tmpfile
   exec $moz_debugger $MOZ_PROGRAM -x $tmpfile
 else


-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org