- Mozilla Thunderbird 60.7.1

MFSA 2019-17 (boo#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=471

MozillaThunderbird.changes

@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed Jun 12 06:23:28 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 60.7.1
+  MFSA 2019-17 (boo#1137595)
+  * CVE-2019-11703 (bmo#1553820)
+    Heap buffer overflow in icalparser.c
+  * CVE-2019-11704 (bmo#1553814)
+    Heap buffer overflow in icalvalue.c
+  * CVE-2019-11705 (bmo#1553808)
+    Stack buffer overflow in icalrecur.c
+  * CVE-2019-11706 (bmo#1555646)
+    Type confusion in icalproperty.c
+
 -------------------------------------------------------------------
 Sat Jun  8 16:35:04 UTC 2019 - Aaron Puchert <aaronpuchert@alice-dsl.net>
 

MozillaThunderbird.spec

@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.7.0
+%define mainversion 60.7.1
 %define update_channel release
-%define releasedate 20190517095026
+%define releasedate 20190611205646
 
 %bcond_without mozilla_tb_kde4
 %bcond_with    mozilla_tb_valgrind

compare-locales.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:cb833126ba1629ca8e0f0513985ffa29186d043e3c3567a2958cf161cfbe88f6
-size 28376
+oid sha256:fd1f008f57c10fce0090a283f129fe2ddf828276da54b6b3fb151e93c4106bcb
+size 28360

create-tar.sh

@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="5822a83963e333699a33099c37c65bcd6527b988"
+RELEASE_TAG="a9f99cffa752340d368ddf90ba813c44c82eafce"
 MOZ_RELEASE_TAG="2ae9b50be57173c299c10df512590e2feb164977"
-VERSION="60.7.0"
+VERSION="60.7.1"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 

l10n-60.7.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a7e16167b32a6215ca5a44aaa56ba1bffa079c4027ffa6cd4e6509a4f3f78571
-size 27452196

l10n-60.7.1.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:41474b0be56ff86da77f11f37cfd30579b61309fbf8ed6f136550a5a4f4f22f7
+size 27447064

mozilla-bmo1519629.patch

@@ -23,6 +23,25 @@ diff --git a/servo/components/style/lib.rs b/servo/components/style/lib.rs
  extern crate bitflags;
  #[allow(unused_extern_crates)] extern crate byteorder;
  #[cfg(feature = "gecko")] #[macro_use] #[no_link] extern crate cfg_if;
+@@ -143,17 +143,17 @@ pub mod values;
+ #[cfg(feature = "servo")] pub use html5ever::Prefix;
+ #[cfg(feature = "servo")] pub use html5ever::LocalName;
+ #[cfg(feature = "servo")] pub use html5ever::Namespace;
+ 
+ /// The CSS properties supported by the style system.
+ /// Generated from the properties.mako.rs template by build.rs
+ #[macro_use]
+ #[allow(unsafe_code)]
+-#[deny(missing_docs)]
++//#[deny(missing_docs)]
+ pub mod properties {
+     include!(concat!(env!("OUT_DIR"), "/properties.rs"));
+ }
+ 
+ // uses a macro from properties
+ #[cfg(feature = "servo")] #[allow(unsafe_code)] pub mod servo;
+ 
+ #[cfg(feature = "gecko")]
 diff --git a/servo/components/style_traits/lib.rs b/servo/components/style_traits/lib.rs
 --- a/servo/components/style_traits/lib.rs
 +++ b/servo/components/style_traits/lib.rs

thunderbird-60.7.0.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:377ca762624df103dd768dc36b7632537b46aa83ddc9d336a157cadcde8bb51d
-size 285728804

thunderbird-60.7.0.source.tar.xz.asc

@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.14 (GNU/Linux)
-
-iQIcBAABCAAGBQJc3qdrAAoJELu+vbskxvNVuSEP/0E9BjAqFcNm8nomHcFsXLj3
-3onvO1d6wQKiKFtu3iTr+alPpXo0BDPb6bGCsIMavVhdod0zN9dRZoesXH0pQaIn
-6MGkUZEs+PqRutCfQHLDV1dKz+kpWkXlz5APAjZU3CUq1kaMGIEk7J1avSsTC4Yd
-ZADkF0dAfP1oWDI8yJEy9YTML3Hcppu+lAEhI7ZDvRDcDAezcGvoFmSkbZLt7His
-7EkpvlCEqyX57zvF7bsRYH3jKs+hJ/BD9I8cvIWXJtpzjpb9d1uUfJXH0mBzVW2B
-/nKZOyPB0+YkTkGPOzRsySZUoQP56J1g8nlYl+3fYYvROw7cEkLbJYr55qnXBDB0
-1UKrfIQkyd9RCcJ9GnXg6bWYVBxgzi7v/L+CVx/+B1b8fQ4XSX4S55jgh8woG/wJ
-KdpDxscCU0OG7NQsRgISIAJSGHCHZx+SPRgvxfQ+Bf8nJ4oyrnj9ljs/oevRWQ+b
-RPAdMaqh14f+kR/qGVOW/xQoi9C7RZ7u+Blyl1WD2S+IPeN5UubDKiXmz+Y/VbJ7
-vkjGkLxty3ousGSIk/e36rIaHoXZK78d9R/VHYrwyaRSMTWHPUnanMpQ7OuTb6xP
-fCBAZfyJQDDpwoB9GP6fYB/H7Sac2I8JzLO46/s2HZ+zOJiCYQ7X10QB18uii97w
-dgs+jlwdIl+RJU5DD73e
-=Icmv
------END PGP SIGNATURE-----

thunderbird-60.7.1.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f638cb12415af3a34134fa6c60ba082752c949461ca92e529205a05ac6486453
+size 284760060

thunderbird-60.7.1.source.tar.xz.asc

@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.14 (GNU/Linux)
+
+iQIcBAABCAAGBQJdAC0FAAoJELu+vbskxvNVWf0QAJ46bUwVa6YoFnyo97fW3xgC
+mJ6Lgom8nPrz6lqIZJkEuD92dCY46yDN6sUq9AdN/LXibQf5UXwIhxAmb/dnQOdr
+KPgaEW2Cz33+DCCMk1fwbNL+gAUpSWEPssaIqXqvw9tQkauz55DSxhB4GQzaA0g+
+D0AQpFc6VNSbJnaNrfeJuIlFbbeQVp+/vYOKN2fVscjL8CBQ8fPE/3AYgyMCbhSO
+EukNL9fKPaLqUY0MlQy8GufJJhI1QgXatkVphv85OtOZHHnTUPi+88pbZ++11TUY
+Lelgz5pvGMe0mi8ITZq22U5AVSLOGg9ehsJZtwUzQ0vgxIdhyoRAiCA7SCHjRpXE
+Iyny7YB/H+tyou8Vh7+zi6AmoY1CsH2lfXx4eN78Zn6fnqCkHsJNaIHKMe7IlNTK
+kWyPsuM9AG1tqPUx7reHl8Spf/JX3bvhGeN+8oUlndvBxRSIY9L3PMowmStih+PQ
+eUqcaNxruboB2aCPbDjyatt2bWjDG/156dEYfzVmDeGNRJWr8UqEionQTHdLXuEg
+74EqkZl8i2IdyfOzX2k65tq+Qshu4AmBkq65lWcl/zF1QFO80xFdXNJSOC0OV3Yk
+BB8nOCQ2IW+dVMRgPYQ5AWgZIS2fhcTjNGmxqHhfirbgBKhxPFlSv+baTkY360bW
+7kpU+raPELA3mTCdIG2x
+=BoQ0
+-----END PGP SIGNATURE-----