Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2015-12-03 13:29:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "MozillaThunderbird" Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2015-10-12 10:00:51.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new/MozillaThunderbird.changes 2015-12-03 13:29:06.000000000 +0100 @@ -1,0 +2,29 @@ +Tue Nov 17 07:58:43 UTC 2015 - wr@rosenauer.org + +- update to Thunderbird 38.4.0 (bnc#952810) + * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514 + Miscellaneous memory safety hazards + * MFSA 2015-122/CVE-2015-7188 (bmo#1199430) + Trailing whitespace in IP address hostnames can bypass same-origin policy + * MFSA 2015-123/CVE-2015-7189 (bmo#1205900) + Buffer overflow during image interactions in canvas + * MFSA 2015-127/CVE-2015-7193 (bmo#1210302) + CORS preflight is bypassed when non-standard Content-Type headers + are received + * MFSA 2015-128/CVE-2015-7194 (bmo#1211262) + Memory corruption in libjar through zip files + * MFSA 2015-130/CVE-2015-7196 (bmo#1140616) + JavaScript garbage collection crash with Java applet + * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200 + (bmo#1188010, bmo#1204061, bmo#1204155) + Vulnerabilities found through code inspection + * MFSA 2015-132/CVE-2015-7197 (bmo#1204269) + Mixed content WebSocket policy bypass through workers + * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183 + (bmo#1202868, bmo#1205157) + NSS and NSPR memory corruption issues + (fixed in mozilla-nspr and mozilla-nss packages) +- requires NSPR 4.10.10 and NSS 3.19.2.1 +- added explicit appdata provides (bnc#952325) + +------------------------------------------------------------------- @@ -116 +145 @@ -------------------------------------------------------------------- +-------------------------------------------------------------------- Old: ---- l10n-38.3.0.tar.xz thunderbird-38.3.0-source.tar.xz New: ---- l10n-38.4.0.tar.xz thunderbird-38.4.0-source.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.5pUTmM/_old 2015-12-03 13:29:21.000000000 +0100 +++ /var/tmp/diff_new_pack.5pUTmM/_new 2015-12-03 13:29:21.000000000 +0100 @@ -17,7 +17,7 @@ # -%define mainversion 38.3.0 +%define mainversion 38.4.0 %define update_channel release %if %suse_version > 1210 @@ -42,8 +42,8 @@ BuildRequires: libgnomeui-devel BuildRequires: libidl-devel BuildRequires: libnotify-devel -BuildRequires: mozilla-nspr-devel >= 4.10.8 -BuildRequires: mozilla-nss-devel >= 3.19.2 +BuildRequires: mozilla-nspr-devel >= 4.10.10 +BuildRequires: mozilla-nss-devel >= 3.19.2.1 BuildRequires: python BuildRequires: startup-notification-devel BuildRequires: unzip @@ -71,6 +71,8 @@ Release: 0 %define releasedate 2015092700 Provides: thunderbird = %{version} +Provides: appdata() +Provides: appdata(thunderbird.appdata.xml) %if %{with_kde} # this is needed to match this package with the kde4 helper package without the main package # having a hard requirement on the kde4 package @@ -100,7 +102,7 @@ Patch4: mozilla-arm-disable-edsp.patch Patch5: mozilla-develdirs.patch Patch6: mozilla-icu-strncat.patch -Patch17: mozilla-arm64-libjpeg-turbo.patch +Patch7: mozilla-arm64-libjpeg-turbo.patch # Thunderbird/mail Patch20: tb-ssldap.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -197,7 +199,7 @@ %patch4 -p1 %patch5 -p1 %patch6 -p1 -%patch17 -p1 +%patch7 -p1 popd # comm-central patches %patch20 -p1 @@ -317,6 +319,16 @@ make -C mail/locales langpack-$locale || continue cp -rL dist/xpi-stage/locale-$locale \ $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@thunderbird.mozilla.org + # Lightning + _shipcalendar=0 + #for callocale in in $(awk '{ print $1; }' ../thunderbird/calendar/locales/shipped-locales); do + # if [ "$locale" = "$callocale" ]; then + # make -C mail/locales calendar-langpack-$locale || continue + # cp -rL dist/xpi-stage/lightning-$locale \ + # $RPM_BUILD_ROOT%{progdir}/extensions/lightning-langpack-$locale@thunderbird.mozilla.org + # _shipcalendar=1 + # fi + #done # remove prefs and profile defaults from langpack rm -rf $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@thunderbird.mozilla.org/defaults # check against the fixed common list and sort into the right filelist @@ -327,6 +339,10 @@ [ $_matched -eq 1 ] && _l10ntarget=common || _l10ntarget=other echo %{progdir}/extensions/langpack-$locale@thunderbird.mozilla.org \ >> %{_tmppath}/translations.$_l10ntarget + if [ $_shipcalendar -eq 1 ]; then + echo %{progdir}/extensions/lightning-langpack-$locale@thunderbird.mozilla.org \ + >> %{_tmppath}/translations.$_l10ntarget + fi esac done %endif ++++++ compare-locales.tar.xz ++++++ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.5pUTmM/_old 2015-12-03 13:29:22.000000000 +0100 +++ /var/tmp/diff_new_pack.5pUTmM/_new 2015-12-03 13:29:22.000000000 +0100 @@ -2,8 +2,8 @@ CHANNEL="esr38" BRANCH="releases/comm-$CHANNEL" -RELEASE_TAG="THUNDERBIRD_38_3_0_RELEASE" -VERSION="38.3.0" +RELEASE_TAG="THUNDERBIRD_38_4_0_RELEASE" +VERSION="38.4.0" echo "cloning $BRANCH..." hg clone http://hg.mozilla.org/$BRANCH thunderbird @@ -40,7 +40,7 @@ done echo "creating l10n archive..." tar cJf l10n-$VERSION.tar.xz \ - --exclude=.hgtags --exclude=.hgignore --exclude=.hg --exclude=browser --exclude=calendar \ + --exclude=.hgtags --exclude=.hgignore --exclude=.hg --exclude=browser \ --exclude=suite \ l10n ++++++ l10n-38.3.0.tar.xz -> l10n-38.4.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-38.3.0.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new/l10n-38.4.0.tar.xz differ: char 26, line 1 ++++++ thunderbird-38.3.0-source.tar.xz -> thunderbird-38.4.0-source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-38.3.0-source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new/thunderbird-38.4.0-source.tar.xz differ: char 27, line 1