Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:11.4 checked in at Wed Nov 9 17:43:15 CET 2011. -------- --- old-versions/11.4/UPDATES/all/MozillaThunderbird/MozillaThunderbird.changes 2011-09-28 07:11:28.000000000 +0200 +++ 11.4/MozillaThunderbird/MozillaThunderbird.changes 2011-11-09 07:53:14.000000000 +0100 @@ -1,0 +2,11 @@ +Tue Nov 1 21:05:06 UTC 2011 - wr@rosenauer.org + +- security update to 3.1.16 (bnc#728520) + * MFSA 2011-46/CVE-2011-3647 (bmo#680880) + loadSubScript unwraps XPCNativeWrapper scope parameter + * MFSA 2011-47/CVE-2011-3648 (bmo#690225) + Potential XSS against sites using Shift-JIS + * MFSA 2011-49/CVE-2011-3650 (bmo#674776) + Memory corruption while profiling using Firebug + +------------------------------------------------------------------- @@ -4,0 +16,8 @@ + * MFSA 2011-36/CVE-2011-2995/CVE-2011-2996 + Miscellaneous memory safety hazards + * MFSA 2011-38/CVE-2011-2999 (bmo#665548) + XSS via plugins and shadowed window.location object + * MFSA 2011-39/CVE-2011-3000 (bmo#655389) + Defense against multiple Location headers due to CRLF Injection + * MFSA 2011-40/CVE-2011-2372/CVE-2011-3001 + Code installation through holding down Enter calling whatdependson for 11.4-i586 Old: ---- l10n-3.1.15.tar.bz2 thunderbird-3.1.15-source.tar.bz2 New: ---- l10n-3.1.16.tar.bz2 thunderbird-3.1.16-source.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.LDYQL9/_old 2011-11-09 17:42:15.000000000 +0100 +++ /var/tmp/diff_new_pack.LDYQL9/_new 2011-11-09 17:42:15.000000000 +0100 @@ -26,10 +26,10 @@ BuildRequires: nss-shared-helper-devel %endif License: MPLv1.1 or GPLv2+ or LGPLv2+ -%define mainversion 3.1.15 +%define mainversion 3.1.16 Version: %{mainversion} Release: 0.<RELEASE2> -%define releasedate 2011092000 +%define releasedate 2011110100 Provides: thunderbird = %{version} Summary: The Stand-Alone Mozilla Mail Component Url: http://www.mozilla.org/products/thunderbird/ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.LDYQL9/_old 2011-11-09 17:42:15.000000000 +0100 +++ /var/tmp/diff_new_pack.LDYQL9/_new 2011-11-09 17:42:15.000000000 +0100 @@ -2,8 +2,8 @@ BRANCH="releases/comm-1.9.2" # comm-central -RELEASE_TAG="THUNDERBIRD_3_1_15_RELEASE" -VERSION="3.1.15" +RELEASE_TAG="THUNDERBIRD_3_1_16_RELEASE" +VERSION="3.1.16" echo "cloning $BRANCH..." hg clone http://hg.mozilla.org/$BRANCH thunderbird ++++++ l10n-3.1.15.tar.bz2 -> l10n-3.1.16.tar.bz2 ++++++ old-versions/11.4/UPDATES/all/MozillaThunderbird/l10n-3.1.15.tar.bz2 11.4/MozillaThunderbird/l10n-3.1.16.tar.bz2 differ: char 11, line 1 ++++++ thunderbird-3.1.15-source.tar.bz2 -> thunderbird-3.1.16-source.tar.bz2 ++++++ old-versions/11.4/UPDATES/all/MozillaThunderbird/thunderbird-3.1.15-source.tar.bz2 11.4/MozillaThunderbird/thunderbird-3.1.16-source.tar.bz2 differ: char 11, line 1 continue with "q"... Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org