Commit Graph

816 Commits

Author SHA256 Message Date
Dominique Leuenberger
230a3a6053 Accepting request 440959 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/440959
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=171
2016-11-22 17:57:20 +00:00
Wolfgang Rosenauer
d0c08cd8c9 Accepting request 440956 from home:AndreasStieger:branches:mozilla:Factory
- Mozilla Thunderbird 45.5.0 (boo#1009026)

OBS-URL: https://build.opensuse.org/request/show/440956
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=341
2016-11-19 14:26:56 +00:00
Dominique Leuenberger
8b564a3ec8 Accepting request 433302 from mozilla:Factory
- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders

OBS-URL: https://build.opensuse.org/request/show/433302
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=170
2016-10-06 10:28:08 +00:00
Wolfgang Rosenauer
fa72463659 - update to Thunderbird 45.4.0 (boo#999701)
* Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=339
2016-10-01 18:21:17 +00:00
Dominique Leuenberger
e7bbce444e Accepting request 423934 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/423934
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=169
2016-09-01 12:01:48 +00:00
Wolfgang Rosenauer
f478d3d254 Accepting request 423866 from home:AndreasStieger:branches:mozilla:Factory
Use upstream versioning scheme - append .0

OBS-URL: https://build.opensuse.org/request/show/423866
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=337
2016-08-31 06:57:06 +00:00
Wolfgang Rosenauer
e77528174a - update to Thunderbird 45.3 (boo#991809)
* Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=336
2016-08-30 14:03:54 +00:00
Dominique Leuenberger
3f376bad29 Accepting request 417432 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/417432
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=168
2016-08-12 13:34:53 +00:00
Wolfgang Rosenauer
16ad6788d3 Accepting request 417429 from home:pcerny:mozilla:Factory
flex hotfix - changelog update

OBS-URL: https://build.opensuse.org/request/show/417429
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=334
2016-08-08 09:15:17 +00:00
Wolfgang Rosenauer
d81c4a7fc9 Accepting request 417133 from home:pcerny:mozilla:Factory
flex hotfix

OBS-URL: https://build.opensuse.org/request/show/417133
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=333
2016-08-05 19:12:21 +00:00
Dominique Leuenberger
39317d7868 Accepting request 412624 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/412624
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=167
2016-08-03 09:37:21 +00:00
Wolfgang Rosenauer
0e16848923 Accepting request 412542 from home:Mailaender:branches:mozilla:Factory
added a screenshot for the upcoming software.opensuse.org changes

OBS-URL: https://build.opensuse.org/request/show/412542
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=331
2016-07-21 20:54:18 +00:00
Dominique Leuenberger
ad9bc8e76b Accepting request 407286 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/407286
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=166
2016-07-18 19:18:03 +00:00
Wolfgang Rosenauer
163d55c56a Accepting request 407284 from home:AndreasStieger:branches:mozilla:Factory
add CVEs

OBS-URL: https://build.opensuse.org/request/show/407284
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=329
2016-07-08 13:23:10 +00:00
Wolfgang Rosenauer
e6dba6284a Accepting request 406885 from home:AndreasStieger:branches:mozilla:Factory
build fix

OBS-URL: https://build.opensuse.org/request/show/406885
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=328
2016-07-06 12:33:21 +00:00
Dominique Leuenberger
aa95e1f096 Accepting request 404805 from mozilla:Factory
- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)

OBS-URL: https://build.opensuse.org/request/show/404805
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=165
2016-07-01 07:53:53 +00:00
Wolfgang Rosenauer
be6d7c004a - update to Thunderbird 45.2 (boo#983549)
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=326
2016-06-30 09:53:29 +00:00
Wolfgang Rosenauer
12225ae415 - mozilla-binutils-visibility.patch to fix build issues with
gcc/binutils combination used in Leap 42.2 (boo#984637)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=325
2016-06-24 14:11:32 +00:00
Dominique Leuenberger
ee1dcae4b8 Accepting request 404253 from mozilla:Factory
- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)

- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch

OBS-URL: https://build.opensuse.org/request/show/404253
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=164
2016-06-23 21:22:36 +00:00
Wolfgang Rosenauer
c29742319f - build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
as long as underlying issues have been addressed upstream
  (boo#986162)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=323
2016-06-23 14:40:05 +00:00
Wolfgang Rosenauer
7e7d69ebc9 Accepting request 401908 from home:algraf:branches:mozilla:Factory
- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch

OBS-URL: https://build.opensuse.org/request/show/401908
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=322
2016-06-14 19:47:55 +00:00
Dominique Leuenberger
37a4f0f581 Accepting request 399148 from mozilla:Factory
OBS-URL: https://build.opensuse.org/request/show/399148
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=163
2016-06-05 12:19:03 +00:00
Dominique Leuenberger
516021d1df Accepting request 398145 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/398145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=162
2016-05-31 10:11:21 +00:00
Wolfgang Rosenauer
e6a17911a5 - update to Thunderbird 45.1.1
* When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=320
2016-05-31 08:09:00 +00:00
Wolfgang Rosenauer
e2e9d6aec1 Accepting request 398081 from home:badshah400:branches:mozilla:Factory
Fixed builds for TB the same way, applying the patches unconditionally. Again, sorry for breaking stuff earlier.

OBS-URL: https://build.opensuse.org/request/show/398081
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=319
2016-05-26 05:55:57 +00:00
Wolfgang Rosenauer
825fd5282e Accepting request 397789 from home:badshah400:branches:openSUSE:Factory:Rings:2-TestDVD
Add patches to fix building against gcc >= 6

OBS-URL: https://build.opensuse.org/request/show/397789
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=318
2016-05-25 07:19:28 +00:00
Dominique Leuenberger
e3f192b061 Accepting request 396129 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/396129
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=161
2016-05-20 09:55:04 +00:00
Wolfgang Rosenauer
9192f70485 Accepting request 395139 from home:dimstar:Factory
- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).

- The exact same fix was done in MozillaFirefox in March 2015

OBS-URL: https://build.opensuse.org/request/show/395139
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=316
2016-05-17 06:38:09 +00:00
Wolfgang Rosenauer
bde1e0ee1f - update to Thunderbird 45.1.0 (boo#977333)
* MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  in this particular case (i.e. do not pass
- update to Thunderbird 45.0 (boo#969894)
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=315
2016-05-13 05:36:32 +00:00
Wolfgang Rosenauer
f244ebf410 - For openSUSE > 13.2, the build fails for i586 as it goes out of
memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass 
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).

- update to Thunderbird 45.0
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=314
2016-04-30 13:53:52 +00:00
Dominique Leuenberger
5259c109e3 Accepting request 386004 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/386004
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=160
2016-04-11 07:13:39 +00:00
Wolfgang Rosenauer
c7c14f778a Accepting request 385776 from home:AndreasStieger:branches:mozilla:Factory
Mozilla Thunderbird 38.7.2

OBS-URL: https://build.opensuse.org/request/show/385776
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=312
2016-04-07 20:21:42 +00:00
Dominique Leuenberger
01008f27f9 Accepting request 383091 from mozilla:Factory
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/383091
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=159
2016-04-07 11:35:11 +00:00
Wolfgang Rosenauer
96f5c06ecf - update to Thunderbird 38.7.1
* disabled Graphite font shaping library

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=310
2016-03-25 20:24:23 +00:00
Dominique Leuenberger
6cc7ea8df0 Accepting request 373458 from mozilla:Factory
- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)

OBS-URL: https://build.opensuse.org/request/show/373458
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=158
2016-03-20 10:48:33 +00:00
Wolfgang Rosenauer
df5751d33a - update to Thunderbird 38.7.0 (boo#969894)
* MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=308
2016-03-15 15:00:26 +00:00
Dominique Leuenberger
b7af7687d9 Accepting request 362033 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/362033
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=157
2016-03-02 13:20:52 +00:00
Wolfgang Rosenauer
35e3b574dc Accepting request 361907 from home:AndreasStieger:branches:mozilla:Factory
adjust _constraints to current peak build memory and disk usage

OBS-URL: https://build.opensuse.org/request/show/361907
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=306
2016-02-26 20:59:10 +00:00
Dominique Leuenberger
44d2a75f52 Accepting request 359408 from mozilla:Factory
- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation

OBS-URL: https://build.opensuse.org/request/show/359408
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=156
2016-02-25 20:57:16 +00:00
Wolfgang Rosenauer
2c46f24181 - update to Thunderbird 38.6.0 (boo#963520)
* Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=304
2016-02-13 22:43:38 +00:00
Dominique Leuenberger
bf426d38cc Accepting request 357295 from mozilla:Factory
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/357295
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=155
2016-02-12 10:20:50 +00:00
Wolfgang Rosenauer
357946612d Accepting request 355724 from home:olh:branches:mozilla:Factory
- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.

OBS-URL: https://build.opensuse.org/request/show/355724
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=302
2016-01-26 06:33:46 +00:00
Dominique Leuenberger
8507199109 Accepting request 354747 from mozilla:Factory
1

OBS-URL: https://build.opensuse.org/request/show/354747
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=154
2016-01-23 00:14:14 +00:00
Wolfgang Rosenauer
7116c1cc9d Accepting request 354473 from home:olh:branches:mozilla:Factory
- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond

OBS-URL: https://build.opensuse.org/request/show/354473
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=300
2016-01-19 10:28:29 +00:00
Dominique Leuenberger
048f52ad7a Accepting request 351297 from mozilla:Factory
OBS-URL: https://build.opensuse.org/request/show/351297
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=153
2016-01-05 08:41:03 +00:00
Wolfgang Rosenauer
d3c64bdb3b - update to Thunderbird 38.5.1
* requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=299
2015-12-30 08:16:54 +00:00
Dominique Leuenberger
5a4a0de36c Accepting request 350596 from mozilla:Factory
- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs

OBS-URL: https://build.opensuse.org/request/show/350596
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=152
2015-12-27 00:59:47 +00:00
Wolfgang Rosenauer
4ced64011d - update to Thunderbird 38.5.0 (bnc#959277)
* MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=297
2015-12-23 20:10:39 +00:00
Dominique Leuenberger
e76517dbff Accepting request 346366 from mozilla:Factory
- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)

--------------------------------------------------------------------

OBS-URL: https://build.opensuse.org/request/show/346366
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=151
2015-12-03 12:29:04 +00:00
Wolfgang Rosenauer
f3c23e58a5 - update to Thunderbird 38.4.0 (bnc#952810)
* MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)
--------------------------------------------------------------------

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=295
2015-11-24 07:57:32 +00:00