From f85086f38bc96a85be2427dd09cc7033781b4041cad32b1e2b3f4df270eba78a Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 11 Dec 2013 09:07:36 +0000 Subject: [PATCH] - update to Thunderbird 24.2.0 (bnc#854370) * requires NSS 3.15.3.1 or higher * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards * MFSA 2013-108/CVE-2013-5616 (bmo#938341) Use-after-free in event listeners * MFSA 2013-109/CVE-2013-5618 (bmo#926361) Use-after-free during Table Editing * MFSA 2013-111/CVE-2013-6671 (bmo#930281) Segmentation violation when replacing ordered list elements * MFSA 2013-113/CVE-2013-6673 (bmo#970380) Trust settings for built-in roots ignored during EV certificate validation * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449) Use-after-free in synthetic mouse movement * MFSA 2013-115/CVE-2013-5615 (bmo#929261) GetElementIC typed array stubs can be generated outside observed typesets * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693) JPEG information leak * MFSA 2013-117 (bmo#946351) Mis-issued ANSSI/DCSSI certificate (fixed via NSS 3.15.3.1) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=233 --- MozillaThunderbird.changes | 27 +++++++++++++++++++++++++++ MozillaThunderbird.spec | 6 +++--- compare-locales.tar.bz2 | 4 ++-- create-tar.sh | 4 ++-- l10n-24.1.1.tar.bz2 | 3 --- l10n-24.2.0.tar.bz2 | 3 +++ thunderbird-24.1.1-source.tar.bz2 | 3 --- thunderbird-24.2.0-source.tar.bz2 | 3 +++ 8 files changed, 40 insertions(+), 13 deletions(-) delete mode 100644 l10n-24.1.1.tar.bz2 create mode 100644 l10n-24.2.0.tar.bz2 delete mode 100644 thunderbird-24.1.1-source.tar.bz2 create mode 100644 thunderbird-24.2.0-source.tar.bz2 diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 88831c3..55895cc 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,30 @@ +------------------------------------------------------------------- +Sun Dec 8 10:18:03 UTC 2013 - wr@rosenauer.org + +- update to Thunderbird 24.2.0 (bnc#854370) + * requires NSS 3.15.3.1 or higher + * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 + Miscellaneous memory safety hazards + * MFSA 2013-108/CVE-2013-5616 (bmo#938341) + Use-after-free in event listeners + * MFSA 2013-109/CVE-2013-5618 (bmo#926361) + Use-after-free during Table Editing + * MFSA 2013-111/CVE-2013-6671 (bmo#930281) + Segmentation violation when replacing ordered list elements + * MFSA 2013-113/CVE-2013-6673 (bmo#970380) + Trust settings for built-in roots ignored during EV certificate + validation + * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449) + Use-after-free in synthetic mouse movement + * MFSA 2013-115/CVE-2013-5615 (bmo#929261) + GetElementIC typed array stubs can be generated outside observed + typesets + * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693) + JPEG information leak + * MFSA 2013-117 (bmo#946351) + Mis-issued ANSSI/DCSSI certificate + (fixed via NSS 3.15.3.1) + ------------------------------------------------------------------- Tue Nov 19 08:08:00 UTC 2013 - wr@rosenauer.org diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 330eb97..74d23e5 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -17,7 +17,7 @@ # -%define mainversion 24.1.1 +%define mainversion 24.2.0 %define update_channel release %define gstreamer_ver 0.10 %define with_kde 1 @@ -34,7 +34,7 @@ BuildRequires: libgnomeui-devel BuildRequires: libidl-devel BuildRequires: libnotify-devel BuildRequires: mozilla-nspr-devel >= 4.10.2 -BuildRequires: mozilla-nss-devel >= 3.15.3 +BuildRequires: mozilla-nss-devel >= 3.15.3.1 BuildRequires: nss-shared-helper-devel BuildRequires: python BuildRequires: startup-notification-devel @@ -50,7 +50,7 @@ BuildRequires: pkgconfig(gstreamer-plugins-base-%gstreamer_ver) %endif Version: %{mainversion} Release: 0 -%define releasedate 2013111800 +%define releasedate 2013120700 Provides: thunderbird = %{version} %if %{with_kde} # this is needed to match this package with the kde4 helper package without the main package diff --git a/compare-locales.tar.bz2 b/compare-locales.tar.bz2 index 239b284..8b1f4af 100644 --- a/compare-locales.tar.bz2 +++ b/compare-locales.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:0ae14dffae85fffa2325fd259cb27006124957432308865c09988a1b495c91b9 -size 29874 +oid sha256:8f7c714b55bfdf4e39c93acd74e18f91e12a9fa639a90e0992ea4c3f19cf79e6 +size 29887 diff --git a/create-tar.sh b/create-tar.sh index a584699..a88cf82 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="esr24" BRANCH="releases/comm-$CHANNEL" -RELEASE_TAG="THUNDERBIRD_24_1_1_RELEASE" -VERSION="24.1.1" +RELEASE_TAG="THUNDERBIRD_24_2_0_RELEASE" +VERSION="24.2.0" echo "cloning $BRANCH..." hg clone http://hg.mozilla.org/$BRANCH thunderbird diff --git a/l10n-24.1.1.tar.bz2 b/l10n-24.1.1.tar.bz2 deleted file mode 100644 index 7dbf8c9..0000000 --- a/l10n-24.1.1.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:58548b860fa110a2ab22f4126cd4b086cf0c011dfe60b80e7acec9a2d88b6b8e -size 27965056 diff --git a/l10n-24.2.0.tar.bz2 b/l10n-24.2.0.tar.bz2 new file mode 100644 index 0000000..528dd7e --- /dev/null +++ b/l10n-24.2.0.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c233fcaf0f3ab142699efaf987c162baeb6871dc5e63ef2f7cbc82159b754417 +size 27985537 diff --git a/thunderbird-24.1.1-source.tar.bz2 b/thunderbird-24.1.1-source.tar.bz2 deleted file mode 100644 index f7bf5b1..0000000 --- a/thunderbird-24.1.1-source.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:2a22a776153522fc92ca8e0ddf5fbfc5cd660b284866a248b5e0caf4d724d43e -size 142417457 diff --git a/thunderbird-24.2.0-source.tar.bz2 b/thunderbird-24.2.0-source.tar.bz2 new file mode 100644 index 0000000..78c40c0 --- /dev/null +++ b/thunderbird-24.2.0-source.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6a76caee6a9400d2d0f35ad07d8f7687425b7048398b6e61362b764fb81c1593 +size 142466564