diff --git a/.gitattributes b/.gitattributes index 1bb3b38..172ec92 100644 --- a/.gitattributes +++ b/.gitattributes @@ -22,4 +22,4 @@ *.zip filter=lfs diff=lfs merge=lfs -text *.zst filter=lfs diff=lfs merge=lfs -text ## Specific LFS patterns -mailredirect-0.7.4.xpi filter=lfs diff=lfs merge=lfs -text +mailredirect-0.7.5.xpi filter=lfs diff=lfs merge=lfs -text diff --git a/MozillaThunderbird-2.0.0.16-rpmlintrc b/MozillaThunderbird-2.0.0.16-rpmlintrc new file mode 100644 index 0000000..86c1048 --- /dev/null +++ b/MozillaThunderbird-2.0.0.16-rpmlintrc @@ -0,0 +1 @@ +addFilter("no-jar-manifest") diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index ee85804..9289eba 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,19 @@ +------------------------------------------------------------------- +Thu Sep 11 21:34:40 CEST 2008 - mauro@suse.de + +- Update to 2.0.0.16 (fixed bnc#417869), fixes: + + MFSA 2008-34 Remote code execution by overflowing CSS + reference counter + + MFSA 2008-33 Crash and remote code execution in block reflow + + MFSA 2008-31 Peer-trusted certs can use alt names to spoof + + MFSA 2008-29 Faulty .properties file results in uninitialized + memory being used + + MFSA 2008-26 Buffer length checks in MIME processing + + MFSA 2008-25 Arbitrary code execution in + mozIJSSubScriptLoader.loadSubScript() + + MFSA 2008-24 Chrome script loading from fastload file + + MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15) + ------------------------------------------------------------------- Wed Jul 23 18:01:05 CEST 2008 - schwab@suse.de diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 26c96e1..d63e681 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -1,10 +1,17 @@ # -# spec file for package MozillaThunderbird (Version 2.0.0.14) +# spec file for package MozillaThunderbird (Version 2.0.0.16) # # Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany. -# This file and all modifications and additions to the pristine -# package are under the same license as the package itself. # +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + # Please submit bugfixes or comments via http://bugs.opensuse.org/ # @@ -13,8 +20,8 @@ Name: MozillaThunderbird BuildRequires: fdupes gcc-c++ libgnomeui-devel libidl-devel mozilla-nss-devel orbit-devel unzip update-desktop-files zip License: GPL v2 or later; LGPL v2.1 or later; MOZILLA PUBLIC LICENSE (MPL/NPL) -Version: 2.0.0.14 -Release: 11 +Version: 2.0.0.16 +Release: 1 Summary: The Stand-Alone Mozilla Mail Component Url: http://www.mozilla.org/products/thunderbird/ Group: Productivity/Networking/Email/Clients @@ -23,13 +30,14 @@ Source1: MozillaThunderbird.desktop Source2: add-plugins.sh.in Source3: mozilla.sh.in Source4: l10n-%{version}.tar.bz2 -Source5: mailredirect-0.7.4.xpi +Source5: mailredirect-0.7.5.xpi Source6: suse-default-prefs.js -Source9: enigmail-0.95.6.tar.gz +Source9: enigmail-0.95.7.tar.bz2 Source11: enigmail.manifest +Source12: %{name}-%{version}-rpmlintrc Patch1: replytolist.patch Patch2: thunderbird-appname.patch -Patch3: mozilla-gcc4.3-fixes.patch +#Patch3: mozilla-gcc4.3-fixes.patch Patch4: locale.patch Patch5: abuild.patch Patch6: nspr-prdtoa.patch @@ -50,7 +58,7 @@ Patch26: cups-paper.patch Patch27: thunderbird-1.5.0.8-uninitalized-vars-232305.patch #Patch28: thunderbird-gcc4.3-fixes.patch Patch29: visibility.patch -Patch30: unused-includes.patch +#Patch30: unused-includes.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: libstdc++ fileutils textutils /bin/sh %if %suse_version > 1000 @@ -78,7 +86,7 @@ Requires: mozilla-nspr >= %(rpm -q --queryformat '%{VERSION}' mozilla-nspr BuildRequires: mozilla-nss-devel %endif %define _unpackaged_files_terminate_build 0 -%define releasedate 2008042100 +%define releasedate 2008072000 %define progname thunderbird %define progdir %{_prefix}/%_lib/thunderbird %define my_provides /tmp/my-provides @@ -115,7 +123,7 @@ Authors: %package translations License: GPL v2 or later; LGPL v2.1 or later; MOZILLA PUBLIC LICENSE (MPL/NPL) Summary: Translations of MozillaThunderbird -Provides: locale(MozillaThunderbird:af;be;bg;ca;cs;da;de;el;en_GB;es_AR;es_ES;eu;fi;fr;ga_IE;he;hu;it;ja;ko;lt;mk;nb_NO;nl;nn_NO;pa_IN;pl;pt_BR;pt_PT;ru;sk;sl;sv_SE;tr;uk;zh_CN;zh_TW) +Provides: locale(MozillaThunderbird:be;bg;ca;cs;da;de;el;en_GB;es_AR;es_ES;eu;fi;fr;ga_IE;hu;it;ja;ko;lt;mk;nb_NO;nl;nn_NO;pa_IN;pl;pt_BR;pt_PT;ru;sk;sl;sv_SE;tr;zh_CN;zh_TW) Group: Productivity/Networking/Email/Clients PreReq: %{name} = %{version} @@ -164,7 +172,7 @@ cd $RPM_BUILD_DIR cd $RPM_BUILD_DIR/mozilla %patch1 %patch2 -%patch3 +#%patch3 %patch4 %patch5 %patch6 @@ -183,7 +191,7 @@ cd $RPM_BUILD_DIR/mozilla %patch26 %patch27 -p0 # %patch28 -p1 -%patch30 +#%patch30 %build export MOZ_BUILD_DATE=%{releasedate} @@ -672,6 +680,19 @@ exit 0 %{_bindir}/thunderbird-config %changelog +* Thu Sep 11 2008 mauro@suse.de +- Update to 2.0.0.16 (fixed bnc#417869), fixes: + + MFSA 2008-34 Remote code execution by overflowing CSS + reference counter + + MFSA 2008-33 Crash and remote code execution in block reflow + + MFSA 2008-31 Peer-trusted certs can use alt names to spoof + + MFSA 2008-29 Faulty .properties file results in uninitialized + memory being used + + MFSA 2008-26 Buffer length checks in MIME processing + + MFSA 2008-25 Arbitrary code execution in + mozIJSSubScriptLoader.loadSubScript() + + MFSA 2008-24 Chrome script loading from fastload file + + MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15) * Wed Jul 23 2008 schwab@suse.de - Remove unused includes. * Tue Jun 24 2008 maw@suse.de diff --git a/enigmail-0.95.6.tar.gz b/enigmail-0.95.6.tar.gz deleted file mode 100644 index 9517314..0000000 --- a/enigmail-0.95.6.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:08d77f64ae8f240530e1c448427725ac5baa6e7465dffd1fec8e52298862d5f9 -size 1183899 diff --git a/enigmail-0.95.7.tar.bz2 b/enigmail-0.95.7.tar.bz2 new file mode 100644 index 0000000..21aea8e --- /dev/null +++ b/enigmail-0.95.7.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ab763fdbde5bd249a1e40309d656fa5cdbc0e614fbc59f1a2704f80dd084ee3b +size 852073 diff --git a/l10n-2.0.0.14.tar.bz2 b/l10n-2.0.0.14.tar.bz2 deleted file mode 100644 index 326a5af..0000000 --- a/l10n-2.0.0.14.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a1adc1bcb66483932c583237aca9e068249c7f562e64c1eeb000d12800ec4bb6 -size 10037405 diff --git a/l10n-2.0.0.16.tar.bz2 b/l10n-2.0.0.16.tar.bz2 new file mode 100644 index 0000000..7c34141 --- /dev/null +++ b/l10n-2.0.0.16.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:af3ca4352febce1b0134c0d157c1aa15ce91f5c1239b0b4a11d8d850e2cb3b28 +size 10042542 diff --git a/mailredirect-0.7.4.xpi b/mailredirect-0.7.4.xpi deleted file mode 100644 index b41c4f8..0000000 --- a/mailredirect-0.7.4.xpi +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:29ae7e31d8d611626aa69a1079a45c94b9a40025eaf53e3972a22dcbba8568d1 -size 105999 diff --git a/mailredirect-0.7.5.xpi b/mailredirect-0.7.5.xpi new file mode 100644 index 0000000..48aee74 --- /dev/null +++ b/mailredirect-0.7.5.xpi @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:08815def52275fc8b9c998b9ee0b1a56abae3092c646302a984ac4832b5c412b +size 105913 diff --git a/mozilla-gcc4.3-fixes.patch b/mozilla-gcc4.3-fixes.patch deleted file mode 100644 index 58891c6..0000000 --- a/mozilla-gcc4.3-fixes.patch +++ /dev/null @@ -1,109 +0,0 @@ -References: -https://bugzilla.mozilla.org/show_bug.cgi?id=403675 -https://bugzilla.mozilla.org/show_bug.cgi?id=386362 - -Index: modules/libpr0n/encoders/png/nsPNGEncoder.h -=================================================================== -RCS file: /cvsroot/mozilla/modules/libpr0n/encoders/png/nsPNGEncoder.h,v -retrieving revision 1.1.18.1 -diff -u -p -6 -r1.1.18.1 nsPNGEncoder.h ---- modules/libpr0n/encoders/png/nsPNGEncoder.h 20 May 2006 17:20:49 -0000 1.1.18.1 -+++ modules/libpr0n/encoders/png/nsPNGEncoder.h 13 Nov 2007 22:07:36 -0000 -@@ -35,14 +35,16 @@ - * - * ***** END LICENSE BLOCK ***** */ - - #include "imgIEncoder.h" - #ifdef MOZILLA_1_8_BRANCH - #define imgIEncoder imgIEncoder_MOZILLA_1_8_BRANCH -+#ifndef NS_DECL_IMGIENCODER - #define NS_DECL_IMGIENCODER NS_DECL_IMGIENCODER_MOZILLA_1_8_BRANCH - #endif -+#endif - - #include - - #define NS_PNGENCODER_CID \ - { /* 38d1592e-b81e-432b-86f8-471878bbfe07 */ \ - 0x38d1592e, \ -@@ -60,12 +62,20 @@ public: - NS_DECL_ISUPPORTS - NS_DECL_IMGIENCODER - NS_DECL_NSIINPUTSTREAM - - nsPNGEncoder(); - -+ NS_IMETHOD InitFromData(const PRUint8* aData, -+ PRUint32 aLength, // (unused, req'd by JS) -+ PRUint32 aWidth, -+ PRUint32 aHeight, -+ PRUint32 aStride, -+ PRUint32 aInputFormat, -+ const nsAString& aOutputOptions); -+ - private: - ~nsPNGEncoder(); - - protected: - void ConvertHostARGBRow(const PRUint8* aSrc, PRUint8* aDest, - PRUint32 aPixelWidth, PRBool aUseTransparency); -Index: modules/libpr0n/encoders/jpeg/nsJPEGEncoder.h -=================================================================== -RCS file: /cvsroot/mozilla/modules/libpr0n/encoders/jpeg/nsJPEGEncoder.h,v -retrieving revision 1.1.14.1 -diff -u -p -6 -r1.1.14.1 nsJPEGEncoder.h ---- modules/libpr0n/encoders/jpeg/nsJPEGEncoder.h 20 May 2006 17:20:48 -0000 1.1.14.1 -+++ modules/libpr0n/encoders/jpeg/nsJPEGEncoder.h 13 Nov 2007 22:07:57 -0000 -@@ -36,14 +36,16 @@ - * - * ***** END LICENSE BLOCK ***** */ - - #include "imgIEncoder.h" - #ifdef MOZILLA_1_8_BRANCH - #define imgIEncoder imgIEncoder_MOZILLA_1_8_BRANCH -+#ifndef NS_DECL_IMGIENCODER - #define NS_DECL_IMGIENCODER NS_DECL_IMGIENCODER_MOZILLA_1_8_BRANCH - #endif -+#endif - - // needed for JPEG library - #include - - extern "C" { - #include "jpeglib.h" -@@ -66,12 +68,20 @@ public: - NS_DECL_ISUPPORTS - NS_DECL_IMGIENCODER - NS_DECL_NSIINPUTSTREAM - - nsJPEGEncoder(); - -+ NS_IMETHOD InitFromData(const PRUint8* aData, -+ PRUint32 aLength, // (unused, req'd by JS) -+ PRUint32 aWidth, -+ PRUint32 aHeight, -+ PRUint32 aStride, -+ PRUint32 aInputFormat, -+ const nsAString& aOutputOptions); -+ - private: - ~nsJPEGEncoder(); - - protected: - - void ConvertHostARGBRow(const PRUint8* aSrc, PRUint8* aDest, -Index: modules/libpr0n/public/imgIEncoder.idl -=================================================================== -RCS file: /cvsroot/mozilla/modules/libpr0n/public/imgIEncoder.idl,v -retrieving revision 1.1.10.3 -diff -u -p -r1.1.10.3 imgIEncoder.idl ---- modules/libpr0n/public/imgIEncoder.idl 20 May 2006 17:20:49 -0000 1.1.10.3 -+++ modules/libpr0n/public/imgIEncoder.idl 14 Nov 2007 10:41:40 -0000 -@@ -96,6 +96,6 @@ interface nsIFile; - [scriptable, uuid(CCC5B3AD-3E67-4e3d-97E1-B06B2E96FEF8)] - interface imgIEncoder : nsISupports - { -- void encodeClipboardImage(in nsIClipboardImage aClipboardImage, out nsIFile aImageFile); -+ /* void encodeClipboardImage(in nsIClipboardImage aClipboardImage, out nsIFile aImageFile); */ - }; - diff --git a/thunderbird-2.0.0.14-source.tar.bz2 b/thunderbird-2.0.0.14-source.tar.bz2 deleted file mode 100644 index e8886e9..0000000 --- a/thunderbird-2.0.0.14-source.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:35ec3a5e4b55681f5c0e4cc157aae564e85375b3a57d33a139ee16251daff898 -size 37740573 diff --git a/thunderbird-2.0.0.16-source.tar.bz2 b/thunderbird-2.0.0.16-source.tar.bz2 new file mode 100644 index 0000000..a229b7d --- /dev/null +++ b/thunderbird-2.0.0.16-source.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b6ed2f4ae30e1a382d576475d567c1e23dcd25ba01fe35f7b02de2e5c9e2a280 +size 40580763 diff --git a/unused-includes.patch b/unused-includes.patch deleted file mode 100644 index b31a37a..0000000 --- a/unused-includes.patch +++ /dev/null @@ -1,21 +0,0 @@ ---- xpcom/reflect/xptcall/src/md/unix/xptcinvoke_ipf32.cpp -+++ xpcom/reflect/xptcall/src/md/unix/xptcinvoke_ipf32.cpp -@@ -39,8 +39,6 @@ - - #include "xptcprivate.h" - --#include -- - // "This code is for IA64 only" - - ---- xpcom/reflect/xptcall/src/md/unix/xptcinvoke_ipf64.cpp -+++ xpcom/reflect/xptcall/src/md/unix/xptcinvoke_ipf64.cpp -@@ -40,7 +40,6 @@ - #include "xptcprivate.h" - - #include --#include - - // "This code is for IA64 only" -