Accepting request 350596 from mozilla:Factory

- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs

OBS-URL: https://build.opensuse.org/request/show/350596
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=152

MozillaThunderbird.changes

@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Wed Dec 23 10:13:38 UTC 2015 - wr@rosenauer.org
+
+- update to Thunderbird 38.5.0 (bnc#959277)
+  * MFSA 2015-134/CVE-2015-7201
+    Miscellaneous memory safety hazards
+  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
+    Use-after-free in WebRTC when datachannel is used after being
+    destroyed
+  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
+    Integer overflow allocating extremely large textures
+  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
+    Underflow through code inspection
+  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
+    Integer overflow in MP4 playback in 64-bit versions
+  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
+    Integer underflow and buffer overflow processing MP4 metadata in
+    libstagefright
+  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
+    Cross-site reading attack through data and view-source URIs
+
 -------------------------------------------------------------------
 Tue Nov 17 07:58:43 UTC 2015 - wr@rosenauer.org
 

MozillaThunderbird.spec

@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.4.0
+%define mainversion 38.5.0
 %define update_channel release
 
 %if %suse_version > 1210
@@ -69,7 +69,7 @@ Recommends:     gstreamer-0_10-plugins-ffmpeg
 %endif
 Version:        %{mainversion}
 Release:        0
-%define releasedate 2015092700
+%define releasedate 2015122200
 Provides:       thunderbird = %{version}
 Provides:       appdata()
 Provides:       appdata(thunderbird.appdata.xml)

compare-locales.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:8c2a8cab284b765444c8a3e37b1b6ddbd9319c47f340aca208a6d504f64434b2
-size 28448
+oid sha256:79e24be3f9334840e630a2348fe98d65b84758e8dbae246a7be233ea6529d100
+size 28440

create-tar.sh

@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_4_0_RELEASE"
-VERSION="38.4.0"
+RELEASE_TAG="THUNDERBIRD_38_5_0_RELEASE"
+VERSION="38.5.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

l10n-38.4.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:30c3669a5635f3b2461ccbbf12f4cb8631a6f5c9df04018c1467a25f932bc10b
-size 22523632

l10n-38.5.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:77c785069daa823c83b9d5fb41958026f5c05a178f24679d48923c418cab892d
+size 22522908

thunderbird-38.4.0-source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:20dc5390c629d01295e9a5657344d6f5ebf3c221eef00f87907df9dce5a30f11
-size 174468864

thunderbird-38.5.0-source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:36cb72b9ef1016155a198984ad931a9ff1cbf3af8c322e2b425f2fd1ee2781c9
+size 174464952