pool/MozillaThunderbird
SHA256
4
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Accepting request 448120 from mozilla:Factory

Browse Source 
- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
                   audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
                   subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
                   SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
                   (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6

    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5

OBS-URL: https://build.opensuse.org/request/show/448120
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=173
This commit is contained in:
Ludwig Nussel 2017-01-04 18:29:14 +00:00 committed by Git OBS Bridge
commit b1a91366fa
8 changed files with 33 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
MozillaThunderbird.changes
View File

@ -1,3 +1,23 @@
-------------------------------------------------------------------
Thu Dec 29 08:33:21 UTC 2016 - wr@rosenauer.org
- update to Thunderbird 45.6.0 (boo#1015422)
* The system integration dialog was shown every time when starting
Thunderbird
* MFSA 2016-96
CVE-2016-9899: Use-after-free while manipulating DOM events and
audio elements (bmo#1317409)
CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
CVE-2016-9898: Use-after-free in Editor while manipulating DOM
subtrees (bmo#1314442)
CVE-2016-9900: Restricted external resources can be loaded by
SVG images through data URLs (bmo#1319122)
CVE-2016-9904: Cross-origin information leak in shared atoms
(bmo#1317936)
CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6
-------------------------------------------------------------------
Thu Dec 1 09:58:57 UTC 2016 - astieger@suse.com
@ -20,7 +40,7 @@ Sat Nov 19 14:20:05 UTC 2016 - astieger@suse.com
nsScriptLoadHandler (bsc#1010404)
CVE-2016-5291: Same-origin policy violation using local HTML file
and saved shortcut file (bsc#1010410)
CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
(bsc#1010427)
- Changed behavior:
* Changed recipient address entry: Arrow-keys now copy the pop-up

4
MozillaThunderbird.spec
View File

@ -17,9 +17,9 @@
#
%define mainversion 45.5.1
%define mainversion 45.6.0
%define update_channel release
%define releasedate 2016113000
%define releasedate 2016122200
%if %suse_version > 1310
%define gstreamer_ver 1.0

4
compare-locales.tar.xz
View File

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:fc7ce1f99172c4b1aa55d53d5020d8857037a877f1a4451e076b0fc5c8e0b8c3
size 28456
oid sha256:b00a893fa3aa495805aeb20ddebd1f51e2c4c352de1eaa42bede6f5ab9119848
size 28360

4
create-tar.sh
View File

@ -2,8 +2,8 @@
CHANNEL="esr45"
BRANCH="releases/comm-$CHANNEL"
RELEASE_TAG="THUNDERBIRD_45_5_1_RELEASE"
VERSION="45.5.1"
RELEASE_TAG="THUNDERBIRD_45_6_0_RELEASE"
VERSION="45.6.0"
echo "cloning $BRANCH..."
hg clone http://hg.mozilla.org/$BRANCH thunderbird

3
l10n-45.5.1.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:124b78fc0a49add15d01687e15ffb439c30d5b9f307d1612653a9b56f25b37bd
size 24297980

3
l10n-45.6.0.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:de63f7341fc4f6724951358a574ac2fc92833df802e13a4e28544ffba3d63550
size 24499928

3
thunderbird-45.5.1-source.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:663705df0c2b5432e9238eae17dfa8bb25b307370f6686da1305fa23bfde5bd5
size 212479860

3
thunderbird-45.6.0-source.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d535cb2cfc2a3fd2ff82bba209b2e348eeb0331badd55d6520c841ad49e2cb02
size 211901108