From 21edfd304e2a3a6114d2c5c709ca8a6445e82c3f86082b8055bda089b80efa14 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 22 Nov 2017 10:48:23 +0000 Subject: [PATCH 1/3] - update to Thunderbird 52.5.0 (bsc#1068101) MFSA 2017-25 * CVE-2017-7828 (bmo#1406750. bmo#1412252) Use-after-free of PressShell while restyling layout * CVE-2017-7830 (bmo#1408990) Cross-origin URL information leak through Resource Timing API * CVE-2017-7826 Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=388 --- MozillaThunderbird.changes | 12 ++++++++++++ MozillaThunderbird.spec | 4 ++-- compare-locales.tar.xz | 4 ++-- create-tar.sh | 4 ++-- l10n-52.4.0.tar.xz | 3 --- l10n-52.5.0.tar.xz | 3 +++ thunderbird-52.4.0-source.tar.xz | 3 --- thunderbird-52.5.0-source.tar.xz | 3 +++ 8 files changed, 24 insertions(+), 12 deletions(-) delete mode 100644 l10n-52.4.0.tar.xz create mode 100644 l10n-52.5.0.tar.xz delete mode 100644 thunderbird-52.4.0-source.tar.xz create mode 100644 thunderbird-52.5.0-source.tar.xz diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 4d1a24a..e93c42c 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,15 @@ +------------------------------------------------------------------- +Wed Nov 22 10:02:35 UTC 2017 - wr@rosenauer.org + +- update to Thunderbird 52.5.0 (bsc#1068101) + MFSA 2017-25 + * CVE-2017-7828 (bmo#1406750. bmo#1412252) + Use-after-free of PressShell while restyling layout + * CVE-2017-7830 (bmo#1408990) + Cross-origin URL information leak through Resource Timing API + * CVE-2017-7826 + Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 + ------------------------------------------------------------------- Wed Oct 4 09:18:39 UTC 2017 - astieger@suse.com diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index d87c024..454deac 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -17,9 +17,9 @@ # -%define mainversion 52.4.0 +%define mainversion 52.5.0 %define update_channel release -%define releasedate 201710040000 +%define releasedate 201711210000 %bcond_without mozilla_tb_kde4 %bcond_with mozilla_tb_valgrind diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index 60115dc..16a6195 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:ff8e61e8497eedc3c4526d40bac0a1ef00621cebc68ef0bbd652c26edca0071d -size 28372 +oid sha256:1b49c2014db3bd6fc015c950f5f1b7dba25e99d89ac7646658514f6129976ae6 +size 28388 diff --git a/create-tar.sh b/create-tar.sh index a46660b..e71401f 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="esr52" BRANCH="releases/comm-$CHANNEL" -RELEASE_TAG="THUNDERBIRD_52_4_0_RELEASE" -VERSION="52.4.0" +RELEASE_TAG="THUNDERBIRD_52_5_0_RELEASE" +VERSION="52.5.0" echo "cloning $BRANCH..." hg clone http://hg.mozilla.org/$BRANCH thunderbird diff --git a/l10n-52.4.0.tar.xz b/l10n-52.4.0.tar.xz deleted file mode 100644 index 9a6b1b2..0000000 --- a/l10n-52.4.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:636948bdb506cf2a31cac5a0398166eb26ad119d7a0850b4dc648339ff0abb8b -size 26197408 diff --git a/l10n-52.5.0.tar.xz b/l10n-52.5.0.tar.xz new file mode 100644 index 0000000..81e5055 --- /dev/null +++ b/l10n-52.5.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:7a924cf19c3ecd601d2004ba0166b9b28f331153355ef5478358605aeb3650d0 +size 26215464 diff --git a/thunderbird-52.4.0-source.tar.xz b/thunderbird-52.4.0-source.tar.xz deleted file mode 100644 index 7a9a319..0000000 --- a/thunderbird-52.4.0-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:e89f460319d4671b86d99815300c27523d7a07a3952374f6ccfdc028cd59dc30 -size 240372488 diff --git a/thunderbird-52.5.0-source.tar.xz b/thunderbird-52.5.0-source.tar.xz new file mode 100644 index 0000000..6897bf5 --- /dev/null +++ b/thunderbird-52.5.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:57246e6a6a3ae40f3ed21a2f43ee6589b2c77383af9f0d238ead262d0612a236 +size 242215136 From db14770321e485417329b423646641badfa091ae8556cdafad8efdc1436a8ed3 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 22 Nov 2017 19:21:46 +0000 Subject: [PATCH 2/3] Accepting request 544396 from home:Zaitor:branches:mozilla:Factory Resub rebased OBS-URL: https://build.opensuse.org/request/show/544396 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=389 --- MozillaThunderbird.changes | 10 ++++++++++ MozillaThunderbird.spec | 8 +++++++- 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index e93c42c..1e66a60 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -10,6 +10,16 @@ Wed Nov 22 10:02:35 UTC 2017 - wr@rosenauer.org * CVE-2017-7826 Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 +------------------------------------------------------------------- +Fri Nov 10 22:12:18 UTC 2017 - zaitor@opensuse.org + +- Drop obsolete libgnomeui-devel BuildRequires: No longer needed. +- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0), + pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0), + pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and + pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by + libgnomeui-devel, and is what configure really checks for. + ------------------------------------------------------------------- Wed Oct 4 09:18:39 UTC 2017 - astieger@suse.com diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 454deac..553e760 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -39,7 +39,6 @@ BuildRequires: gcc-c++ BuildRequires: hunspell-devel BuildRequires: libXcomposite-devel BuildRequires: libcurl-devel -BuildRequires: libgnomeui-devel BuildRequires: libidl-devel BuildRequires: libnotify-devel BuildRequires: mozilla-nspr-devel >= 4.13.1 @@ -52,6 +51,13 @@ BuildRequires: xorg-x11-libXt-devel BuildRequires: xz BuildRequires: yasm BuildRequires: zip +BuildRequires: pkgconfig(gconf-2.0) >= 1.2.1 +BuildRequires: pkgconfig(gobject-2.0) +BuildRequires: pkgconfig(gtk+-2.0) >= 2.18.0 +BuildRequires: pkgconfig(gtk+-unix-print-2.0) +BuildRequires: pkgconfig(glib-2.0) >= 2.22 +BuildRequires: pkgconfig(gobject-2.0) +BuildRequires: pkgconfig(gdk-x11-2.0) BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) %if %{with mozilla_tb_valgrind} From ca09b0503fbaebaa1d04be6af2af7629223f25d2b5335d18e505dedb84fcfd49 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Sat, 25 Nov 2017 07:08:27 +0000 Subject: [PATCH 3/3] * Better support for Charter/Spectrum IMAP: Thunderbird will now detect Charter's IMAP service and send an additional IMAP select command to the server. Check the various preferences ending in "force_select" to see whether auto-detection has discovered this case. * In search folders spanning multiple base folders clicking on a message sometimes marked another message as read * IMAP alerts have been corrected and now show the correct server name in case of connection problems * POP alerts have been corrected and now indicate connection problems in case the configured POP server cannot be found MFSA 2017-26 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=390 --- MozillaThunderbird.changes | 14 ++++++++++++-- MozillaThunderbird.spec | 6 +++--- 2 files changed, 15 insertions(+), 5 deletions(-) diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 1e66a60..c66cdc0 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -2,7 +2,17 @@ Wed Nov 22 10:02:35 UTC 2017 - wr@rosenauer.org - update to Thunderbird 52.5.0 (bsc#1068101) - MFSA 2017-25 + * Better support for Charter/Spectrum IMAP: Thunderbird will now + detect Charter's IMAP service and send an additional IMAP select + command to the server. Check the various preferences ending in + "force_select" to see whether auto-detection has discovered this case. + * In search folders spanning multiple base folders clicking on a + message sometimes marked another message as read + * IMAP alerts have been corrected and now show the correct server + name in case of connection problems + * POP alerts have been corrected and now indicate connection problems + in case the configured POP server cannot be found + MFSA 2017-26 * CVE-2017-7828 (bmo#1406750. bmo#1412252) Use-after-free of PressShell while restyling layout * CVE-2017-7830 (bmo#1408990) @@ -12,7 +22,7 @@ Wed Nov 22 10:02:35 UTC 2017 - wr@rosenauer.org ------------------------------------------------------------------- Fri Nov 10 22:12:18 UTC 2017 - zaitor@opensuse.org - + - Drop obsolete libgnomeui-devel BuildRequires: No longer needed. - Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0), pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0), diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 553e760..a03309b 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -52,12 +52,12 @@ BuildRequires: xz BuildRequires: yasm BuildRequires: zip BuildRequires: pkgconfig(gconf-2.0) >= 1.2.1 +BuildRequires: pkgconfig(gdk-x11-2.0) +BuildRequires: pkgconfig(glib-2.0) >= 2.22 +BuildRequires: pkgconfig(gobject-2.0) BuildRequires: pkgconfig(gobject-2.0) BuildRequires: pkgconfig(gtk+-2.0) >= 2.18.0 BuildRequires: pkgconfig(gtk+-unix-print-2.0) -BuildRequires: pkgconfig(glib-2.0) >= 2.22 -BuildRequires: pkgconfig(gobject-2.0) -BuildRequires: pkgconfig(gdk-x11-2.0) BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) %if %{with mozilla_tb_valgrind}