pool/MozillaThunderbird
SHA256
4
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

- Mozilla Thunderbird 68.4.1

Browse Source 
* Various improvements when setting up an account for a Microsoft
    Exchange server: Now offers IMAP/SMTP if available, better
    detection for Office 365 accounts; re-run configuration after
    password change
  Fixes:
  * After changing view layout, the message display pane showed
    garbled content under some circumstances
  * Various theme changes to achieve "pixel perfection": Unread icon,
    "no results" icon, paragraph format and font selector, background
    of folder summary tooltip
  * Tags were lost on messages in shared IMAP folders under some
    circumstances
  * Calendar: Event attendee dialog was not displayed correctly
  MFSA 2020-04  (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content process
    initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content process
    initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605, bmo#1601826)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=512
This commit is contained in:
Wolfgang Rosenauer 2020-01-10 15:53:07 +00:00 committed by Git OBS Bridge
parent 1c4a233447
commit 5d0ef2ba91
12 changed files with 93 additions and 1445 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
MozillaThunderbird.changes
View File

@ -1,3 +1,38 @@
-------------------------------------------------------------------
Fri Jan 10 13:08:55 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
- Mozilla Thunderbird 68.4.1
* Various improvements when setting up an account for a Microsoft
Exchange server: Now offers IMAP/SMTP if available, better
detection for Office 365 accounts; re-run configuration after
password change
Fixes:
* After changing view layout, the message display pane showed
garbled content under some circumstances
* Various theme changes to achieve "pixel perfection": Unread icon,
"no results" icon, paragraph format and font selector, background
of folder summary tooltip
* Tags were lost on messages in shared IMAP folders under some
circumstances
* Calendar: Event attendee dialog was not displayed correctly
MFSA 2020-04 (bsc#1160498)
* CVE-2019-17026 (bmo#1607443)
IonMonkey type confusion with StoreElementHole and FallibleStoreElement
* CVE-2019-17015 (bmo#1599005)
Memory corruption in parent process during new content process
initialization on Windows
* CVE-2019-17016 (bmo#1599181)
Bypass of @namespace CSS sanitization during pasting
* CVE-2019-17017 (bmo#1603055)
Type Confusion in XPCVariant.cpp
* CVE-2019-17021 (bmo#1599008)
Heap address disclosure in parent process during content process
initialization on Windows
* CVE-2019-17022 (bmo#1602843)
CSS sanitization does not escape HTML tags
* CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605, bmo#1601826)
Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
-------------------------------------------------------------------
Fri Dec 27 17:23:35 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>

10
MozillaThunderbird.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package MozillaThunderbird
#
# Copyright (c) 2019 SUSE LLC
# Copyright (c) 2020 SUSE LLC
# 2006-2019 Wolfgang Rosenauer <wr@rosenauer.org>
#
# All modifications and additions to the file contributed by third parties
@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 68
%define mainver %major.3.1
%define orig_version 68.3.1
%define mainver %major.4.1
%define orig_version 68.4.1
%define orig_suffix %{nil}
%define update_channel release
%define source_prefix thunderbird-%{mainver}
@ -167,12 +167,11 @@ Patch16: mozilla-bmo849632.patch
Patch17: mozilla-bmo1504834-part1.patch
Patch18: mozilla-bmo1504834-part2.patch
Patch19: mozilla-bmo1504834-part3.patch
Patch20: mozilla-bmo1511604.patch
Patch20: mozilla-bmo1602730.patch
Patch21: mozilla-bmo1554971.patch
Patch22: mozilla-nestegg-big-endian.patch
Patch24: mozilla-fix-top-level-asm.patch
Patch25: mozilla-bmo1504834-part4.patch
Patch26: mozilla-bmo1583471.patch
%endif # only_print_mozconfig
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: coreutils fileutils textutils /bin/sh
@ -270,7 +269,6 @@ fi
%patch22 -p1
%patch24 -p1
%patch25 -p1
%patch26 -p1
%endif # only_print_mozconfig
%build

3
l10n-68.3.1.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:da16edc9ee3c12cb9697bbebc5185fb96068fdd87b9e8fb537ea395e3a32741f
size 28485232

3
l10n-68.4.1.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ea94549fd3e9445927c79ab37e99fc1642eb0276a09e7d5e30452b3d0828172d
size 28489552

53
mozilla-bmo1511604.patch
View File

@ -1,53 +0,0 @@
# HG changeset patch
# User A. Wilcox <AWilcox@Wilcox-Tech.com>
# Date 1543674229 0
# Sat Dec 01 14:23:49 2018 +0000
# Node ID 0309ff19e46b126c527e633518d7de8570442114
# Parent 5b5a6a164acbd4da6131808bd12e42e7b0a33c2a
Bug 1511604 - Swizzle YCbCr->RGB data on big-endian machines
Taken from https://bugzilla.mozilla.org/show_bug.cgi?id=1511604
This is very closely related to mozilla-bmo1504834
Again, input for skia is swizzled to LE, as skia only understands LE.
diff -r 5b5a6a164acb gfx/ycbcr/YCbCrUtils.cpp
--- a/gfx/ycbcr/YCbCrUtils.cpp Mon Sep 09 17:59:29 2019 +0200
+++ b/gfx/ycbcr/YCbCrUtils.cpp Tue Sep 10 08:22:10 2019 +0200
@@ -3,7 +3,9 @@
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+#include "mozilla/EndianUtils.h"
#include "gfx2DGlue.h"
+#include "mozilla/gfx/Swizzle.h"
#include "YCbCrUtils.h"
#include "yuv_convert.h"
@@ -236,6 +238,13 @@
yuvtype,
srcData.mYUVColorSpace);
}
+#if MOZ_BIG_ENDIAN
+ // libyuv makes endian-correct result, which needs to be swapped to BGRX
+ if (aDestFormat != SurfaceFormat::R5G6B5_UINT16)
+ gfx::SwizzleData(aDestBuffer, aStride, gfx::SurfaceFormat::X8R8G8B8,
+ aDestBuffer, aStride, gfx::SurfaceFormat::B8G8R8X8,
+ srcData.mPicSize);
+#endif
}
void
@@ -257,6 +266,12 @@
aSrcStrideYA,
aSrcStrideUV,
aDstStrideARGB);
+#if MOZ_BIG_ENDIAN
+ // libyuv makes endian-correct result, which needs to be swapped to BGRA
+ gfx::SwizzleData(aDstARGB, aDstStrideARGB, gfx::SurfaceFormat::A8R8G8B8,
+ aDstARGB, aDstStrideARGB, gfx::SurfaceFormat::B8G8R8A8,
+ IntSize(aWidth, aHeight));
+#endif
}
} // namespace gfx

1360
mozilla-bmo1583471.patch
View File

File diff suppressed because it is too large Load Diff

28
mozilla-bmo1602730.patch Normal file
View File

@ -0,0 +1,28 @@
diff -r 6ef20eee3f8f gfx/layers/basic/BasicCompositor.cpp
--- a/gfx/layers/basic/BasicCompositor.cpp Thu Oct 31 09:11:56 2019 +0100
+++ b/gfx/layers/basic/BasicCompositor.cpp Wed Dec 11 16:16:09 2019 +0100
@@ -693,9 +693,13 @@
RefPtr<SourceSurface> sourceMask;
Matrix maskTransform;
+ // Setting an alpha-mask here breaks the URL-bar on big endian (s390x)
+ // if the typed URL is too long for the textbox (automatic scrolling needed)
+#if MOZ_LITTLE_ENDIAN
if (aTransform.Is2D()) {
SetupMask(aEffectChain, dest, offset, sourceMask, maskTransform);
}
+#endif
CompositionOp blendMode = CompositionOp::OP_OVER;
if (Effect* effect =
diff -r 6ef20eee3f8f gfx/layers/composite/CompositableHost.cpp
--- a/gfx/layers/composite/CompositableHost.cpp Thu Oct 31 09:11:56 2019 +0100
+++ b/gfx/layers/composite/CompositableHost.cpp Wed Dec 11 16:16:09 2019 +0100
@@ -91,6 +91,7 @@
}
MOZ_ASSERT(source);
+ // Alternatively: Comment out these lines where the alpha-mask is set
RefPtr<EffectMask> effect =
new EffectMask(source, source->GetSize(), aTransform);
aEffects.mSecondaryEffects[EffectTypes::MASK] = effect;

8
tar_stamps
View File

@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr68"
VERSION="68.3.1"
VERSION="68.4.1"
VERSION_SUFFIX=""
PREV_VERSION="68.3.0"
PREV_VERSION="68.3.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68"
RELEASE_TAG="dfeab0e6d5a43c6bcb1575bbdc5c0d018b42df9b"
RELEASE_TIMESTAMP="20191215232630"
RELEASE_TAG="afc61dccd44560fac1f8647821e55b110e3fe370"
RELEASE_TIMESTAMP="20200108224327"

3
thunderbird-68.3.1.source.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:76284cd3f192ac5678bbf10e1ce9308e913c2e6dde89e055d3ffe568e0e71fa6
size 338866820

16
thunderbird-68.3.1.source.tar.xz.asc
View File

@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl326PMACgkQ8aZmj7t9
Vy5Zxw//XO3KWh8fuqJXTriaH9pnBscj1hwxfS/rSM5jKc1uCSIl7xioZFpNFI/P
OYtRQF1DPosspy2wmwQrQ0xfqJpNvnCxnRqtRj3wbt1Ukale8crq86tD1omXQsS6
NfeOymQi76Fqh4PfgXX40JWCR2acb6JZzyFsRay0ziIf0wL5T8cOPK8LFET6Jjw4
8g8Kpd2fan8rEJIUpq/DYNSpcJxEh9eUugMYaVtVDZ3VKJYRFqM/bqnKPIWwR5Yr
FvjEvp7FqsqcBum1FamcxXKcuBUXEQrFMMlK/djzeS0P4eNJ9tJ/rCs5Os5Xl0md
xRFilhSvyVt2LA678OfxFb6P7tn6eOrfQaAq63Oa/UmAABULFKlZaf+Lt2tnyDbM
hTPIGzzJwR5Jf/v4PEWScQ3jG6fu40MmCskZOubMlbBbbhSWY4xcRjIRYs3ls4+Q
/a4CpbgIWi5H5xHT+7u6hcAw1KTJgoV6Jbel1ZFQoOAUIsePuMNINAXHfgIE7oV+
t+R/kkfoZKwt7lpq8sEuu63QVhvY5N2iNPR1faCJC8l0lfHvOV18Ta7++ZnUciuk
TTN2vUJTk0gmjcCqFiErkkmbBtNdFs1vxCCx7Py+OQHzrD3a4coVaL2kb50Sn8L6
BG4zr75XNT5OEp+Cqz84kqf7NsjpdsoWRVbblKv+o0oDljTv5zM=
=k++m
-----END PGP SIGNATURE-----

3
thunderbird-68.4.1.source.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:dc7fc4bfd9daafcfc5fd4cb743cd1cf15de2f5fe5041a6ad7015ab7b345c52b7
size 331482720

16
thunderbird-68.4.1.source.tar.xz.asc Normal file
View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=SJt7
-----END PGP SIGNATURE-----