From ea8836e41bd40fb86a2424ee43ab7060f9439ea66848a1705bc28c0f8755f819 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 8 Mar 2017 14:16:14 +0000 Subject: [PATCH 1/3] - update to Thunderbird 45.8.0 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=354 --- MozillaThunderbird.changes | 5 +++++ MozillaThunderbird.spec | 4 ++-- compare-locales.tar.xz | 4 ++-- create-tar.sh | 4 ++-- l10n-45.7.1.tar.xz | 3 --- l10n-45.8.0.tar.xz | 3 +++ thunderbird-45.7.1-source.tar.xz | 3 --- thunderbird-45.8.0-source.tar.xz | 3 +++ 8 files changed, 17 insertions(+), 12 deletions(-) delete mode 100644 l10n-45.7.1.tar.xz create mode 100644 l10n-45.8.0.tar.xz delete mode 100644 thunderbird-45.7.1-source.tar.xz create mode 100644 thunderbird-45.8.0-source.tar.xz diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index abcec4a..d654d97 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Tue Mar 7 15:08:23 UTC 2017 - wr@rosenauer.org + +- update to Thunderbird 45.8.0 + ------------------------------------------------------------------- Thu Feb 9 07:49:54 UTC 2017 - wr@rosenauer.org diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index a4634de..21382f9 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -17,9 +17,9 @@ # -%define mainversion 45.7.1 +%define mainversion 45.8.0 %define update_channel release -%define releasedate 2017020600 +%define releasedate 2017003030 %if %suse_version > 1310 %define gstreamer_ver 1.0 diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index c285645..85fc135 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:d8fb6c2228abf427e0baa83807a508b3083f88d7d35e68d15bbf47278d563cce -size 28392 +oid sha256:6469fc90ac155189cc9fa2b1fb209d2997de2c45d8a05e7e1d6c09ae015d3171 +size 28372 diff --git a/create-tar.sh b/create-tar.sh index a63bf5e..ee2ec32 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="esr45" BRANCH="releases/comm-$CHANNEL" -RELEASE_TAG="THUNDERBIRD_45_7_1_RELEASE" -VERSION="45.7.1" +RELEASE_TAG="THUNDERBIRD_45_8_0_RELEASE" +VERSION="45.8.0" echo "cloning $BRANCH..." hg clone http://hg.mozilla.org/$BRANCH thunderbird diff --git a/l10n-45.7.1.tar.xz b/l10n-45.7.1.tar.xz deleted file mode 100644 index 03f0a3e..0000000 --- a/l10n-45.7.1.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ec9b6b1fedf2c02969b06702e4b41222d541032cddaf9e8bb35992a83b7679a7 -size 24525548 diff --git a/l10n-45.8.0.tar.xz b/l10n-45.8.0.tar.xz new file mode 100644 index 0000000..4ce8db0 --- /dev/null +++ b/l10n-45.8.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:76a50bb992378a93c0e39072edc1d9f5f5899d398d8fe8df668c7c98b18af72e +size 24497668 diff --git a/thunderbird-45.7.1-source.tar.xz b/thunderbird-45.7.1-source.tar.xz deleted file mode 100644 index 07dc543..0000000 --- a/thunderbird-45.7.1-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:bbb133fa9fddaefbb8127d88d598e4f380c7b413283edd78b320b21b17deca28 -size 212089380 diff --git a/thunderbird-45.8.0-source.tar.xz b/thunderbird-45.8.0-source.tar.xz new file mode 100644 index 0000000..c1e3ed5 --- /dev/null +++ b/thunderbird-45.8.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:4c1817924bed48514d040191526a5c6f1f779b30cbed4829fe3a40209851e028 +size 211944208 From e3be4ae3e0271dec97248a0365434b3219b4d30a6bc00cc21f680ff76d5a7713 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Thu, 9 Mar 2017 16:34:03 +0000 Subject: [PATCH 2/3] - update to Thunderbird 45.8.0 (boo#1028391) * MFSA 2017-07 CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933) CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861) CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876) CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138) CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622) CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687) CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711) CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699) CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.8 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=355 --- MozillaThunderbird.changes | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index d654d97..aba51d1 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,7 +1,26 @@ ------------------------------------------------------------------- Tue Mar 7 15:08:23 UTC 2017 - wr@rosenauer.org -- update to Thunderbird 45.8.0 +- update to Thunderbird 45.8.0 (boo#1028391) + * MFSA 2017-07 + CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP + (bmo#1334933) + CVE-2017-5401: Memory Corruption when handling ErrorResult + (bmo#1328861) + CVE-2017-5402: Use-after-free working with events in FontFace + objects (bmo#1334876) + CVE-2017-5404: Use-after-free working with ranges in selections + (bmo#1340138) + CVE-2017-5407: Pixel and history stealing via floating-point + timing side channel with SVG filters (bmo#1336622) + CVE-2017-5410: Memory corruption during JavaScript garbage + collection incremental sweeping (bmo#1330687) + CVE-2017-5408: Cross-origin reading of video captions in violation + of CORS (bmo#1313711) + CVE-2017-5405: FTP response codes can cause use of + uninitialized values for ports (bmo#1336699) + CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and + Firefox ESR 45.8 ------------------------------------------------------------------- Thu Feb 9 07:49:54 UTC 2017 - wr@rosenauer.org From 693127b057b3544ab4e864439ef38e3b6c29568c663a258d4fd8790809be8944 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Fri, 10 Mar 2017 13:14:35 +0000 Subject: [PATCH 3/3] OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=356 --- MozillaThunderbird.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 21382f9..b69663d 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -19,7 +19,7 @@ %define mainversion 45.8.0 %define update_channel release -%define releasedate 2017003030 +%define releasedate 2017030300 %if %suse_version > 1310 %define gstreamer_ver 1.0