diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index cd8204e..7eb78e8 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,17 @@ +------------------------------------------------------------------- +Wed Jun 12 06:23:28 UTC 2019 - Wolfgang Rosenauer + +- Mozilla Thunderbird 60.7.1 + MFSA 2019-17 (boo#1137595) + * CVE-2019-11703 (bmo#1553820) + Heap buffer overflow in icalparser.c + * CVE-2019-11704 (bmo#1553814) + Heap buffer overflow in icalvalue.c + * CVE-2019-11705 (bmo#1553808) + Stack buffer overflow in icalrecur.c + * CVE-2019-11706 (bmo#1555646) + Type confusion in icalproperty.c + ------------------------------------------------------------------- Sat Jun 8 16:35:04 UTC 2019 - Aaron Puchert diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index ec407b5..27e5fab 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -17,9 +17,9 @@ # -%define mainversion 60.7.0 +%define mainversion 60.7.1 %define update_channel release -%define releasedate 20190517095026 +%define releasedate 20190611205646 %bcond_without mozilla_tb_kde4 %bcond_with mozilla_tb_valgrind diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index ff01b01..9f876ea 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:cb833126ba1629ca8e0f0513985ffa29186d043e3c3567a2958cf161cfbe88f6 -size 28376 +oid sha256:fd1f008f57c10fce0090a283f129fe2ddf828276da54b6b3fb151e93c4106bcb +size 28360 diff --git a/create-tar.sh b/create-tar.sh index 4d67be6..89e4cad 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,9 +2,9 @@ CHANNEL="esr60" BRANCH="releases/comm-$CHANNEL" -RELEASE_TAG="5822a83963e333699a33099c37c65bcd6527b988" +RELEASE_TAG="a9f99cffa752340d368ddf90ba813c44c82eafce" MOZ_RELEASE_TAG="2ae9b50be57173c299c10df512590e2feb164977" -VERSION="60.7.0" +VERSION="60.7.1" VERSION_SUFFIX="" LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json" diff --git a/l10n-60.7.0.tar.xz b/l10n-60.7.0.tar.xz deleted file mode 100644 index 7630860..0000000 --- a/l10n-60.7.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a7e16167b32a6215ca5a44aaa56ba1bffa079c4027ffa6cd4e6509a4f3f78571 -size 27452196 diff --git a/l10n-60.7.1.tar.xz b/l10n-60.7.1.tar.xz new file mode 100644 index 0000000..47f7f2f --- /dev/null +++ b/l10n-60.7.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:41474b0be56ff86da77f11f37cfd30579b61309fbf8ed6f136550a5a4f4f22f7 +size 27447064 diff --git a/mozilla-bmo1519629.patch b/mozilla-bmo1519629.patch index 6f17d0a..26e58d9 100644 --- a/mozilla-bmo1519629.patch +++ b/mozilla-bmo1519629.patch @@ -23,6 +23,25 @@ diff --git a/servo/components/style/lib.rs b/servo/components/style/lib.rs extern crate bitflags; #[allow(unused_extern_crates)] extern crate byteorder; #[cfg(feature = "gecko")] #[macro_use] #[no_link] extern crate cfg_if; +@@ -143,17 +143,17 @@ pub mod values; + #[cfg(feature = "servo")] pub use html5ever::Prefix; + #[cfg(feature = "servo")] pub use html5ever::LocalName; + #[cfg(feature = "servo")] pub use html5ever::Namespace; + + /// The CSS properties supported by the style system. + /// Generated from the properties.mako.rs template by build.rs + #[macro_use] + #[allow(unsafe_code)] +-#[deny(missing_docs)] ++//#[deny(missing_docs)] + pub mod properties { + include!(concat!(env!("OUT_DIR"), "/properties.rs")); + } + + // uses a macro from properties + #[cfg(feature = "servo")] #[allow(unsafe_code)] pub mod servo; + + #[cfg(feature = "gecko")] diff --git a/servo/components/style_traits/lib.rs b/servo/components/style_traits/lib.rs --- a/servo/components/style_traits/lib.rs +++ b/servo/components/style_traits/lib.rs diff --git a/thunderbird-60.7.0.source.tar.xz b/thunderbird-60.7.0.source.tar.xz deleted file mode 100644 index f0d8bde..0000000 --- a/thunderbird-60.7.0.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:377ca762624df103dd768dc36b7632537b46aa83ddc9d336a157cadcde8bb51d -size 285728804 diff --git a/thunderbird-60.7.0.source.tar.xz.asc b/thunderbird-60.7.0.source.tar.xz.asc deleted file mode 100644 index 4db6495..0000000 --- a/thunderbird-60.7.0.source.tar.xz.asc +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v2.0.14 (GNU/Linux) - -iQIcBAABCAAGBQJc3qdrAAoJELu+vbskxvNVuSEP/0E9BjAqFcNm8nomHcFsXLj3 -3onvO1d6wQKiKFtu3iTr+alPpXo0BDPb6bGCsIMavVhdod0zN9dRZoesXH0pQaIn -6MGkUZEs+PqRutCfQHLDV1dKz+kpWkXlz5APAjZU3CUq1kaMGIEk7J1avSsTC4Yd -ZADkF0dAfP1oWDI8yJEy9YTML3Hcppu+lAEhI7ZDvRDcDAezcGvoFmSkbZLt7His -7EkpvlCEqyX57zvF7bsRYH3jKs+hJ/BD9I8cvIWXJtpzjpb9d1uUfJXH0mBzVW2B -/nKZOyPB0+YkTkGPOzRsySZUoQP56J1g8nlYl+3fYYvROw7cEkLbJYr55qnXBDB0 -1UKrfIQkyd9RCcJ9GnXg6bWYVBxgzi7v/L+CVx/+B1b8fQ4XSX4S55jgh8woG/wJ -KdpDxscCU0OG7NQsRgISIAJSGHCHZx+SPRgvxfQ+Bf8nJ4oyrnj9ljs/oevRWQ+b -RPAdMaqh14f+kR/qGVOW/xQoi9C7RZ7u+Blyl1WD2S+IPeN5UubDKiXmz+Y/VbJ7 -vkjGkLxty3ousGSIk/e36rIaHoXZK78d9R/VHYrwyaRSMTWHPUnanMpQ7OuTb6xP -fCBAZfyJQDDpwoB9GP6fYB/H7Sac2I8JzLO46/s2HZ+zOJiCYQ7X10QB18uii97w -dgs+jlwdIl+RJU5DD73e -=Icmv ------END PGP SIGNATURE----- diff --git a/thunderbird-60.7.1.source.tar.xz b/thunderbird-60.7.1.source.tar.xz new file mode 100644 index 0000000..a98f45a --- /dev/null +++ b/thunderbird-60.7.1.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f638cb12415af3a34134fa6c60ba082752c949461ca92e529205a05ac6486453 +size 284760060 diff --git a/thunderbird-60.7.1.source.tar.xz.asc b/thunderbird-60.7.1.source.tar.xz.asc new file mode 100644 index 0000000..70d6f00 --- /dev/null +++ b/thunderbird-60.7.1.source.tar.xz.asc @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.14 (GNU/Linux) + +iQIcBAABCAAGBQJdAC0FAAoJELu+vbskxvNVWf0QAJ46bUwVa6YoFnyo97fW3xgC +mJ6Lgom8nPrz6lqIZJkEuD92dCY46yDN6sUq9AdN/LXibQf5UXwIhxAmb/dnQOdr +KPgaEW2Cz33+DCCMk1fwbNL+gAUpSWEPssaIqXqvw9tQkauz55DSxhB4GQzaA0g+ +D0AQpFc6VNSbJnaNrfeJuIlFbbeQVp+/vYOKN2fVscjL8CBQ8fPE/3AYgyMCbhSO +EukNL9fKPaLqUY0MlQy8GufJJhI1QgXatkVphv85OtOZHHnTUPi+88pbZ++11TUY +Lelgz5pvGMe0mi8ITZq22U5AVSLOGg9ehsJZtwUzQ0vgxIdhyoRAiCA7SCHjRpXE +Iyny7YB/H+tyou8Vh7+zi6AmoY1CsH2lfXx4eN78Zn6fnqCkHsJNaIHKMe7IlNTK +kWyPsuM9AG1tqPUx7reHl8Spf/JX3bvhGeN+8oUlndvBxRSIY9L3PMowmStih+PQ +eUqcaNxruboB2aCPbDjyatt2bWjDG/156dEYfzVmDeGNRJWr8UqEionQTHdLXuEg +74EqkZl8i2IdyfOzX2k65tq+Qshu4AmBkq65lWcl/zF1QFO80xFdXNJSOC0OV3Yk +BB8nOCQ2IW+dVMRgPYQ5AWgZIS2fhcTjNGmxqHhfirbgBKhxPFlSv+baTkY360bW +7kpU+raPELA3mTCdIG2x +=BoQ0 +-----END PGP SIGNATURE-----