1
0
MozillaThunderbird/MozillaThunderbird.changes

718 lines
23 KiB
Plaintext
Raw Normal View History

-------------------------------------------------------------------
Wed Oct 15 10:32:09 CDT 2008 - maw@suse.de
- Review and approve changes.
-------------------------------------------------------------------
Wed Oct 8 09:51:06 CEST 2008 - wr@rosenauer.org
- use system hunspell from 11.0 on (bnc#385739)
- remove more executable bits from non-executable files
-------------------------------------------------------------------
Tue Sep 23 09:42:12 CEST 2008 - wr@rosenauer.org
- security update to version 2.0.0.17 (bnc#429179)
* MFSA 2008-37 / CVE-2008-0016
UTF-8 URL stack buffer overflow
* MFSA 2008-38 / CVE-2008-3835
nsXMLDocument::OnChannelRedirect() same-origin violation
* MFSA 2008-41 / CVE-2008-4058 / CVE-2008-4059 / CVE-2008-4060
Privilege escalation via XPCnativeWrapper pollution
* MFSA 2008-42 / CVE-2008-4061 / CVE-2008-4062 / CVE-2008-4063
CVE-2008-4064
Crashes with evidence of memory corruption
* MFSA 2008-43 / CVE-2008-4065 / CVE-2008-4066
BOM characters, low surrogates stripped from JavaScript before
execution
* MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068
resource: traversal vulnerabilities
* MFSA 2008-46 / CVE-2008-4070
Heap overflow when canceling newsgroup message
-------------------------------------------------------------------
Mon Sep 15 13:06:11 CEST 2008 - wr@rosenauer.org
- fixed undefined operation in nsMailboxService.cpp (abuild.patch)
- cleanup spec a bit while merging from OBS/mozilla
* forwarding old fixes to cups-paper.patch, mozilla.sh.in and
add-plugins.sh (were fixed long ago in the OBS repo)
-------------------------------------------------------------------
Thu Sep 11 21:34:40 CEST 2008 - mauro@suse.de
- Update to 2.0.0.16 (fixed bnc#417869), fixes:
+ MFSA 2008-34 Remote code execution by overflowing CSS
reference counter
+ MFSA 2008-33 Crash and remote code execution in block reflow
+ MFSA 2008-31 Peer-trusted certs can use alt names to spoof
+ MFSA 2008-29 Faulty .properties file results in uninitialized
memory being used
+ MFSA 2008-26 Buffer length checks in MIME processing
+ MFSA 2008-25 Arbitrary code execution in
mozIJSSubScriptLoader.loadSubScript()
+ MFSA 2008-24 Chrome script loading from fastload file
+ MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15)
-------------------------------------------------------------------
Wed Jul 23 18:01:05 CEST 2008 - schwab@suse.de
- Remove unused includes.
-------------------------------------------------------------------
Tue Jun 24 18:43:51 CEST 2008 - maw@suse.de
- Security update to version 2.0.0.14 (bnc#390992):
+ MFSA 2008-15 / CVE-2008-1236 and CVE-2008-1237: Crashes with
evidence of memory corruption (rv:1.8.1.13)
+ MFSA 2008-14 / CVE-2008-1233, CVE-2008-1234, and CVE-2008-1235:
JavaScript privilege escalation and arbitrary code execution
- Drop the following patches: thunderbird-2.0.0.14-backports.patch,
mozilla-missing-decl.patch, and unused-includes.patch
- Respin mozilla-gcc4.3-fixes.patch.
-------------------------------------------------------------------
Fri May 30 17:27:50 CEST 2008 - maw@suse.de
- Add thunderbird-2.0.0.14-backports.patch (bnc390992).
-------------------------------------------------------------------
Fri May 16 16:59:40 CEST 2008 - schwab@suse.de
- Remove unused includes.
-------------------------------------------------------------------
Mon Mar 24 20:17:09 CET 2008 - maw@suse.de
- Add mozilla-missing-decl.patch, which is necessary when building
against new versions of mozilla-nss (bmo#399589).
-------------------------------------------------------------------
Fri Mar 7 18:34:42 CET 2008 - maw@suse.de
- Security update to version 2.0.0.12 (bnc#354469)
* MFSA 2008-12 Buffer overflow in external MIME bodies
- Replace mozilla-maxpathlen.patch with mozilla-path_len.patch, for
consistency's sake.
-------------------------------------------------------------------
Thu Jan 17 17:56:04 CET 2008 - maw@suse.de
- Add mozilla-maxpathlen.patch (#354150 and bmo #412610).
-------------------------------------------------------------------
Tue Jan 15 20:36:54 CET 2008 - maw@suse.de
- Merge changes from the build service (thanks, Wolfgang)
- Update to version 2.0.9.9 (MFSA 2007-29)
- Update enigmail to version 0.95.6
- Add a -devel subpackage
- Various fixes to enable building with gcc 4.3.
-------------------------------------------------------------------
Tue Nov 13 17:50:35 CET 2007 - maw@suse.de
- Add thunderbird-gcc4.3-fixes.patch
- Add visibility.patch.
-------------------------------------------------------------------
Thu Sep 13 17:00:36 CEST 2007 - cthiel@suse.de
- recommend gpg instead of requireing a fixed path
-------------------------------------------------------------------
Wed Sep 12 18:25:34 CEST 2007 - maw@suse.de
- Added gpg/pinentry requirements (#309160).
-------------------------------------------------------------------
Tue Sep 4 00:57:26 CEST 2007 - maw@suse.de
- Don't run %fdupes on directories where multiple partitions
are liable to be mounted.
-------------------------------------------------------------------
Mon Sep 3 17:50:50 CEST 2007 - maw@suse.de
- Merge some changes from the build service (thanks, Wolfgang):
+ Provide locale info (#302288)
+ Update releasedate
- Uncomment %clean.
-------------------------------------------------------------------
Tue Aug 21 18:45:00 CEST 2007 - maw@suse.de
- Use %fdupes.
-------------------------------------------------------------------
Tue Aug 21 18:12:36 CEST 2007 - maw@suse.de
- Merge updates from the build service:
- Update to security release 2.0.0.6:
* MFSA 2007-26 Privilege escalation through chrome-loaded
about:blank windows
* MFSA 2007-27 Unescaped URIs passed to external programs
- Update enigmail to version 0.95.3.
-------------------------------------------------------------------
Wed Aug 15 15:04:09 CEST 2007 - maw@suse.de
- On x86_64, s390, and s390x, deactivate the hidden visibility
support, thereby fixing the build.
-------------------------------------------------------------------
Wed Jul 25 21:52:23 CEST 2007 - maw@suse.de
- Security update to version 2.0.0.5 (#288115)
- This new release has fixes for:
MFSA 2007-18
CVE-2007-3734 - Browser flaws
CVE-2007-3735 - Javascript flaws
MFSA 2007-19
CVE-2007-3736
MFSA 2007-20
CVE-2007-3089
MFSA 2007-21
CVE-2007-3737
MFSA 2007-22
CVE-2007-3285
MFSA 2007-23
CVE-2007-3670
MFSA 2007-24
CVE-2007-3656
MFSA 2007-25
CVE-2007-3738
- Update to enigmail 0.95.2.
-------------------------------------------------------------------
Thu Jun 21 17:23:18 CEST 2007 - adrian@suse.de
- fix changelog entry order
-------------------------------------------------------------------
Fri Jun 15 18:09:28 CDT 2007 - maw@suse.de
- Merge update to 2.0.0.4 from the build service (thanks, Wolfgang)
- Remove some commented out stuff.
-------------------------------------------------------------------
Wed Jun 13 23:00:38 CEST 2007 - wr@rosenauer.org
- update to maintenance release 2.0.0.4
- update enigmail to 0.95.1
- adopted patches:
* fixed cups-paper.patch (copied from FF)
* removed obsolete visibility.patch
-------------------------------------------------------------------
Tue Jun 12 11:53:55 CDT 2007 - maw@suse.de
- Merge chagnges from the build service (thanks, Wolfgang)
- Now use l10n-%{version}.tar.bz2 instead of l10n.tar.bz2 as
before.
-------------------------------------------------------------------
Tue Jun 5 18:20:13 CEST 2007 - maw@suse.de
- Security update to version 1.5.0.12 (#271197).
-------------------------------------------------------------------
Tue Jun 5 15:55:08 CEST 2007 - sbrabec@suse.cz
- Removed invalid desktop category "Application" (#254654).
-------------------------------------------------------------------
Thu Apr 19 07:15:36 CEST 2007 - wr@rosenauer.org
- update to final version 2.0.0.0
(http://www.mozilla.com/en-US/thunderbird/2.0.0.0/releasenotes/)
- update enigmail to 0.95.0
-------------------------------------------------------------------
Wed Apr 18 14:16:44 CEST 2007 - mfabian@suse.de
- add Japanese to the languages which get PANGO enabled in the
start script to support the Japanese combining characters
U+3099 U+309A (see bugzilla #262718 comment #29).
-------------------------------------------------------------------
Thu Apr 12 16:35:43 CEST 2007 - wr@rosenauer.org
- update to 2.0.0.0rc1
- enabled translations package
-------------------------------------------------------------------
Fri Mar 30 11:35:01 CEST 2007 - wr@rosenauer.org
- update to snapshot 2.0.0.0pre-20070329
- security update enigmail 0.94.3
(Bugtraq #22758)
-------------------------------------------------------------------
Fri Mar 30 10:35:03 CEST 2007 - meissner@suse.de
- require unzip
-------------------------------------------------------------------
Tue Mar 13 08:36:31 CET 2007 - wr@rosenauer.org
- update to snapshot 2.0pre-20060312
- removed implicit NSS version dependency
-------------------------------------------------------------------
Thu Mar 8 15:56:56 CET 2007 - meissner@suse.de
- Upgraded to 1.5.0.10 security release.
- Upgraded to enigmail 0.94.2.
-------------------------------------------------------------------
Thu Feb 15 19:47:56 CET 2007 - wr@rosenauer.org
- update to snapshot 2.0beta2-20060214
- fixed build on SLES9
-------------------------------------------------------------------
Mon Feb 5 18:56:14 CET 2007 - wr@rosenauer.org
- fixed check in add-plugins.sh (#242237)
-------------------------------------------------------------------
Tue Jan 30 10:50:51 CST 2007 - maw@suse.de
- Add thunderbird-1.5.0.8-uninitalized-vars-232305.patch (#232305).
-------------------------------------------------------------------
Thu Jan 18 17:59:26 CST 2007 - maw@suse.de
- Add undefined-ops.patch, silencing some warnings.
-------------------------------------------------------------------
Thu Nov 9 01:41:19 CET 2006 - jhargadon@suse.de
- security update to version 1.5.0.8
-------------------------------------------------------------------
Tue Sep 12 20:51:58 CEST 2006 - stark@suse.de
- security update to version 1.5.0.7
-------------------------------------------------------------------
Mon Aug 14 11:37:46 CEST 2006 - stark@suse.de
- update enigmail to 0.94.1
* Added support for signing attachments with inline-PGP
- update mailredirect to 0.7.4
- added backend patch to allow replies to list with
ReplyToListThunderbirdExtension (#199125, bmo #45715)
- added mailnews.clobber_list_reply pref which switches
"Reply All" to "Reply List" functionality if set
-------------------------------------------------------------------
Thu Jul 27 06:50:44 CEST 2006 - stark@suse.de
- security update to version 1.5.0.5 (#195043)
- fixed overwrite confirmation for GTK filesaver (#179531)
-------------------------------------------------------------------
Wed Jun 7 19:52:37 CEST 2006 - stark@suse.de
- fixed up BuildRequires
-------------------------------------------------------------------
Fri Jun 2 12:18:49 CEST 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Fri Jun 2 12:13:48 CEST 2006 - stark@suse.de
- update to security/stability release 1.5.0.4 (#179011)
(http://www.mozilla.org/projects/security/known-vulnerabilities.html#Thunderbird)
-------------------------------------------------------------------
Mon May 15 07:16:13 CEST 2006 - stark@suse.de
- update to version 1.5.0.2
- update mailredirect to 0.7.3
- save printer settings properly (#174082, bmo #324072)
- improved postscript output (bmo #334485)
- changed defaults for printer properties (#6534)
- get available paper sizes from CUPS (#65482)
-------------------------------------------------------------------
Sat Mar 18 22:23:49 CET 2006 - stark@suse.de
- translations package is suggested now by main package
- yet another set of upstream fixes (#148876)
-------------------------------------------------------------------
Sun Mar 12 19:52:08 CET 2006 - stark@suse.de
- added Khmer (km-*) to pango locales (#157397)
- yet another set of upstream fixes (#148876)
-------------------------------------------------------------------
Sat Mar 4 21:27:42 CET 2006 - stark@suse.de
- latest security fixes from upstream (#148876)
- show multiple Reply-To addresses (bmo #106189)
-------------------------------------------------------------------
Fri Feb 24 09:00:40 CET 2006 - stark@suse.de
- added GTK category to desktop-file
- dumpstack.patch is in upstream patches now
- get some more patches (#148876)
-------------------------------------------------------------------
Tue Feb 14 07:28:48 CET 2006 - stark@suse.de
- applied set of security patches (#148876)
-------------------------------------------------------------------
Tue Feb 7 20:09:32 CET 2006 - stark@suse.de
- fixed disabling of Pango (#148788)
-------------------------------------------------------------------
Thu Feb 2 21:50:18 CET 2006 - stark@suse.de
- defined gssapi lib explicitely (#147670)
-------------------------------------------------------------------
Wed Feb 1 17:34:34 CET 2006 - stark@suse.de
- removed additional CA certs from builtin NSS
- make it possible to choose $HOME as download directory
(#144894, bmo #300856)
- cleaned up BuildRequires
-------------------------------------------------------------------
Wed Jan 25 21:33:47 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Mon Jan 23 08:39:32 CET 2006 - stark@suse.de
- disable Pango if MOZ_ENABLE_PANGO is not set
and no typical language which needs Pango is used (#143428)
- preload libaoss for plugin sound (#117079)
- fix to ignore X composite extension (#135373)
-------------------------------------------------------------------
Wed Jan 18 09:38:18 CET 2006 - stark@suse.de
- added default (font) settings
- tweak useragent
- fixed DumpStackToFile() for glibc 2.4
-------------------------------------------------------------------
Thu Jan 12 10:35:03 CET 2006 - stark@suse.de
- update to 1.5 (20060111)
- added sytem extensions patch
- added XUL filechooser patch (MOZ_XUL_PICKER)
- update enigmail to 0.94.0
- use -fstack-protector where available
- use system NSS since CODE10
-------------------------------------------------------------------
Wed Dec 28 08:35:38 CET 2005 - stark@suse.de
- update to 1.5rc2 (20051227)
-------------------------------------------------------------------
Sun Dec 11 08:16:01 CET 2005 - stark@suse.de
- update to 1.5 (20051211)
- update enigmail to 0.93.2
-------------------------------------------------------------------
Tue Nov 29 09:53:05 CET 2005 - stark@suse.de
- update enigmail to 0.93.1
- added patch for GTK2 handling (#134831)
-------------------------------------------------------------------
Fri Nov 25 10:29:26 CET 2005 - stark@suse.de
- update to 1.5 (20051124)
-------------------------------------------------------------------
Fri Oct 28 06:47:11 CEST 2005 - stark@suse.de
- update to latest 1.5 snapshot (20051027)
- added patch to be able to reply to and forward rfc822 messages
(bmo #204350)
- again don't provide and require NSS stuff
- removed disable-gconf patch (no registration needed in build
process anymore)
- added mailredirect extension
- removed update functionality
-------------------------------------------------------------------
Mon Oct 10 21:50:36 CEST 2005 - stark@suse.de
- update to 1.5b2 (20051008)
- preinstall Enigmail (version 0.93.0) as global extension
- add all supported locales and use if installed
-------------------------------------------------------------------
Tue Oct 4 09:32:11 CEST 2005 - stark@suse.de
- update to 1.5b2 (20051003) (RPM version 1.4.1)
- prerequire NSPR
- prepared translations subpackage
- fixed filelist
- fixed build with new gcc
-------------------------------------------------------------------
Wed Sep 21 14:32:28 CEST 2005 - stark@suse.de
- update to 1.5b1 (20050920)
- added spellchecker integration with myspell (add-plugins.sh)
- removed aviary-install-global patch (not needed anymore, with
new EM)
- enabled pango font rendering (through cairo hopefully)
- fixed GNOME gconf registration (#117851)
-------------------------------------------------------------------
Sat Aug 20 20:33:10 CEST 2005 - stark@suse.de
- workaround for linking with pangoxft and pangox
(broken by gtk 2.8 update) (#105764)
-------------------------------------------------------------------
Thu Aug 18 08:48:17 CEST 2005 - stark@suse.de
- fixed Gdk-WARNING at startup (gtk.patch)
- fixed regression in profile locking change (bmo #303633)
- fixed crash with gtk 2.7 (bmo #300226, bnc #104586)
-------------------------------------------------------------------
Wed Aug 3 07:23:50 CEST 2005 - stark@suse.de
- fixed profile locking (bmo #151188)
-------------------------------------------------------------------
Fri Jul 29 07:06:57 CEST 2005 - stark@suse.de
- don't require and provide NSS libs (#98002)
-------------------------------------------------------------------
Fri Jul 22 11:00:05 CEST 2005 - stark@suse.de
- fixed printing patch
-------------------------------------------------------------------
Tue Jul 19 10:45:22 CEST 2005 - stark@suse.de
- added NSPR to PreReq
- disable stripping in specfile
-------------------------------------------------------------------
Fri Jul 15 07:01:45 CEST 2005 - stark@suse.de
- update to 1.0.6 which restores API compatibility
- fixed width calculation in Postscript module (bmo #290292)
-------------------------------------------------------------------
Thu Jul 14 12:29:41 CEST 2005 - stark@suse.de
- fixed filelist to include icon-file and startscript again
-------------------------------------------------------------------
Tue Jul 12 06:28:21 CEST 2005 - stark@suse.de
- fixed remote usage behaviour in start script (bnc #41903)
- update to 1.0.5 security release
- fixed quoting patch
- moved desktop file to a Gnome independent location
- don't strip explicitely
- use RPM_OPT_FLAGS for NSS component
- fixed implicit declarations and uninitialized used variables
-------------------------------------------------------------------
Thu Apr 28 10:45:51 CEST 2005 - stark@suse.de
- updated to current 1.0 branch version
- use static NSPR from other location
-------------------------------------------------------------------
Sat Apr 23 23:13:52 CEST 2005 - stark@suse.de
- activate usage of system NSPR for distributions after 9.3
- add patch to be able to use systen NSPR at all
- extended desktop file
-------------------------------------------------------------------
Fri Apr 22 12:48:13 CEST 2005 - ro@suse.de
- apply mozilla-gcc4.patch
-------------------------------------------------------------------
Wed Mar 23 08:28:57 CET 2005 - stark@suse.de
- update to 1.0.2
- use system NSPR on SUSE releases after 9.3
- made startscript PIS aware
- set g-application-name correctly (bmo #281979)
-------------------------------------------------------------------
Mon Mar 7 21:27:33 CET 2005 - stark@suse.de
- don't use gconfd in registration phase (#66381)
-------------------------------------------------------------------
Fri Feb 25 18:03:31 CET 2005 - stark@suse.de
- update to version 1.0.1
-------------------------------------------------------------------
Tue Feb 22 21:59:53 CET 2005 - stark@suse.de
- added patch to create Postscript level 2 (instead of 3)
(special thanks to Jungshik Shin)
- disabled freetype explicitly to be able to use the above patch
(freetype wasn't used anymore since some time anyway)
-------------------------------------------------------------------
Wed Feb 2 14:02:34 CET 2005 - stark@suse.de
- added a JS crasher fix (bmc #268535)
-------------------------------------------------------------------
Sat Jan 22 13:17:37 CET 2005 - stark@suse.de
- added some backported bugfixes
-------------------------------------------------------------------
Tue Dec 7 10:26:15 CET 2004 - stark@suse.de
- update to 1.0
- fixed extra lines in replies (bmo #144998)
- fixed build on s390/s390x
-------------------------------------------------------------------
Wed Nov 24 07:16:17 CET 2004 - stark@suse.de
- update to 20041123 snapshot
- inherit downloadFolder patch from Firefox
-------------------------------------------------------------------
Fri Nov 12 10:58:46 CET 2004 - stark@suse.de
- fixed chrome filelist
-------------------------------------------------------------------
Thu Nov 4 08:12:51 CET 2004 - stark@suse.de
- update to 0.9
- sync patch-set with firefox base
- fixed neededforbuild to get GNOME functionalities
-------------------------------------------------------------------
Fri Sep 17 10:30:36 CEST 2004 - stark@suse.de
- added some missing fixes for official release
- synced add-plugins.sh
-------------------------------------------------------------------
Sat Sep 11 13:47:50 CEST 2004 - stark@suse.de
- update to official 0.8 version (20040911)
- fixed enigmail config
-------------------------------------------------------------------
Mon Sep 6 08:58:08 CEST 2004 - stark@suse.de
- fixed profile directory
-------------------------------------------------------------------
Fri Sep 3 21:50:19 CEST 2004 - stark@suse.de
- update to thunderbird 0.8 (20040903)
- update enigmail to 0.86.0 and ipc to 1.0.8 (deactivated)
-------------------------------------------------------------------
Tue Aug 24 08:09:42 CEST 2004 - stark@suse.de
- update to thunderbird 0.7.3
- update enigmail to 0.85.0 and ipc to 1.0.7
-------------------------------------------------------------------
Tue Jun 29 11:31:39 CEST 2004 - stark@suse.de
- update to thunderbird 0.7.1
- update enigmail to 0.84.1
-------------------------------------------------------------------
Wed May 12 18:16:28 CEST 2004 - ro@suse.de
- add some missing return values
-------------------------------------------------------------------
Mon May 3 13:16:26 CEST 2004 - stark@suse.de
- update to Thunderbird 0.6 (based on 1.7rc1)
- use official branding for release builds
- added desktop-icon (#39139)
-------------------------------------------------------------------
Fri Apr 2 10:32:00 CEST 2004 - stark@suse.de
- removing relocation of TEMP directory (#34391)
-------------------------------------------------------------------
Fri Mar 26 18:09:27 CET 2004 - uli@suse.de
- fixed hang during build on s390* (bug #35440)
-------------------------------------------------------------------
Sun Mar 7 23:19:54 CET 2004 - ro@suse.de
- match function declaration in enigmail mimedummy.cpp
-------------------------------------------------------------------
Fri Mar 5 07:00:23 CET 2004 - stark@suse.de
- more fixes for #35179
- added firefox as default handler for its protocols
- update enigmail to 0.83.4
-------------------------------------------------------------------
Wed Mar 3 06:52:35 CET 2004 - stark@suse.de
- removed unused patches for GTK2 build
-------------------------------------------------------------------
Sun Feb 29 14:35:02 CET 2004 - stark@suse.de
- improved start-script to interact with firefox and mozilla
(#35179)
-------------------------------------------------------------------
Fri Feb 27 06:50:16 CET 2004 - stark@suse.de
- update to 0.5
- spec-file cleanup
-------------------------------------------------------------------
Wed Oct 15 17:08:01 CEST 2003 - stark@suse.de
- update to 0.3 (sync with mozilla 1.5)
-------------------------------------------------------------------
Tue Jul 15 09:18:45 CEST 2003 - stark@suse.de
- initial package (snapshot 20030714)