------------------------------------------------------------------- Thu Sep 11 21:34:40 CEST 2008 - mauro@suse.de - Update to 2.0.0.16 (fixed bnc#417869), fixes: + MFSA 2008-34 Remote code execution by overflowing CSS reference counter + MFSA 2008-33 Crash and remote code execution in block reflow + MFSA 2008-31 Peer-trusted certs can use alt names to spoof + MFSA 2008-29 Faulty .properties file results in uninitialized memory being used + MFSA 2008-26 Buffer length checks in MIME processing + MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript() + MFSA 2008-24 Chrome script loading from fastload file + MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15) ------------------------------------------------------------------- Wed Jul 23 18:01:05 CEST 2008 - schwab@suse.de - Remove unused includes. ------------------------------------------------------------------- Tue Jun 24 18:43:51 CEST 2008 - maw@suse.de - Security update to version 2.0.0.14 (bnc#390992): + MFSA 2008-15 / CVE-2008-1236 and CVE-2008-1237: Crashes with evidence of memory corruption (rv:1.8.1.13) + MFSA 2008-14 / CVE-2008-1233, CVE-2008-1234, and CVE-2008-1235: JavaScript privilege escalation and arbitrary code execution - Drop the following patches: thunderbird-2.0.0.14-backports.patch, mozilla-missing-decl.patch, and unused-includes.patch - Respin mozilla-gcc4.3-fixes.patch. ------------------------------------------------------------------- Fri May 30 17:27:50 CEST 2008 - maw@suse.de - Add thunderbird-2.0.0.14-backports.patch (bnc390992). ------------------------------------------------------------------- Fri May 16 16:59:40 CEST 2008 - schwab@suse.de - Remove unused includes. ------------------------------------------------------------------- Mon Mar 24 20:17:09 CET 2008 - maw@suse.de - Add mozilla-missing-decl.patch, which is necessary when building against new versions of mozilla-nss (bmo#399589). ------------------------------------------------------------------- Fri Mar 7 18:34:42 CET 2008 - maw@suse.de - Security update to version 2.0.0.12 (bnc#354469) * MFSA 2008-12 Buffer overflow in external MIME bodies - Replace mozilla-maxpathlen.patch with mozilla-path_len.patch, for consistency's sake. ------------------------------------------------------------------- Thu Jan 17 17:56:04 CET 2008 - maw@suse.de - Add mozilla-maxpathlen.patch (#354150 and bmo #412610). ------------------------------------------------------------------- Tue Jan 15 20:36:54 CET 2008 - maw@suse.de - Merge changes from the build service (thanks, Wolfgang) - Update to version 2.0.9.9 (MFSA 2007-29) - Update enigmail to version 0.95.6 - Add a -devel subpackage - Various fixes to enable building with gcc 4.3. ------------------------------------------------------------------- Tue Nov 13 17:50:35 CET 2007 - maw@suse.de - Add thunderbird-gcc4.3-fixes.patch - Add visibility.patch. ------------------------------------------------------------------- Thu Sep 13 17:00:36 CEST 2007 - cthiel@suse.de - recommend gpg instead of requireing a fixed path ------------------------------------------------------------------- Wed Sep 12 18:25:34 CEST 2007 - maw@suse.de - Added gpg/pinentry requirements (#309160). ------------------------------------------------------------------- Tue Sep 4 00:57:26 CEST 2007 - maw@suse.de - Don't run %fdupes on directories where multiple partitions are liable to be mounted. ------------------------------------------------------------------- Mon Sep 3 17:50:50 CEST 2007 - maw@suse.de - Merge some changes from the build service (thanks, Wolfgang): + Provide locale info (#302288) + Update releasedate - Uncomment %clean. ------------------------------------------------------------------- Tue Aug 21 18:45:00 CEST 2007 - maw@suse.de - Use %fdupes. ------------------------------------------------------------------- Tue Aug 21 18:12:36 CEST 2007 - maw@suse.de - Merge updates from the build service: - Update to security release 2.0.0.6: * MFSA 2007-26 Privilege escalation through chrome-loaded about:blank windows * MFSA 2007-27 Unescaped URIs passed to external programs - Update enigmail to version 0.95.3. ------------------------------------------------------------------- Wed Aug 15 15:04:09 CEST 2007 - maw@suse.de - On x86_64, s390, and s390x, deactivate the hidden visibility support, thereby fixing the build. ------------------------------------------------------------------- Wed Jul 25 21:52:23 CEST 2007 - maw@suse.de - Security update to version 2.0.0.5 (#288115) - This new release has fixes for: MFSA 2007-18 CVE-2007-3734 - Browser flaws CVE-2007-3735 - Javascript flaws MFSA 2007-19 CVE-2007-3736 MFSA 2007-20 CVE-2007-3089 MFSA 2007-21 CVE-2007-3737 MFSA 2007-22 CVE-2007-3285 MFSA 2007-23 CVE-2007-3670 MFSA 2007-24 CVE-2007-3656 MFSA 2007-25 CVE-2007-3738 - Update to enigmail 0.95.2. ------------------------------------------------------------------- Thu Jun 21 17:23:18 CEST 2007 - adrian@suse.de - fix changelog entry order ------------------------------------------------------------------- Fri Jun 15 18:09:28 CDT 2007 - maw@suse.de - Merge update to 2.0.0.4 from the build service (thanks, Wolfgang) - Remove some commented out stuff. ------------------------------------------------------------------- Wed Jun 13 23:00:38 CEST 2007 - wr@rosenauer.org - update to maintenance release 2.0.0.4 - update enigmail to 0.95.1 - adopted patches: * fixed cups-paper.patch (copied from FF) * removed obsolete visibility.patch ------------------------------------------------------------------- Tue Jun 12 11:53:55 CDT 2007 - maw@suse.de - Merge chagnges from the build service (thanks, Wolfgang) - Now use l10n-%{version}.tar.bz2 instead of l10n.tar.bz2 as before. ------------------------------------------------------------------- Tue Jun 5 18:20:13 CEST 2007 - maw@suse.de - Security update to version 1.5.0.12 (#271197). ------------------------------------------------------------------- Tue Jun 5 15:55:08 CEST 2007 - sbrabec@suse.cz - Removed invalid desktop category "Application" (#254654). ------------------------------------------------------------------- Thu Apr 19 07:15:36 CEST 2007 - wr@rosenauer.org - update to final version 2.0.0.0 (http://www.mozilla.com/en-US/thunderbird/2.0.0.0/releasenotes/) - update enigmail to 0.95.0 ------------------------------------------------------------------- Wed Apr 18 14:16:44 CEST 2007 - mfabian@suse.de - add Japanese to the languages which get PANGO enabled in the start script to support the Japanese combining characters U+3099 U+309A (see bugzilla #262718 comment #29). ------------------------------------------------------------------- Thu Apr 12 16:35:43 CEST 2007 - wr@rosenauer.org - update to 2.0.0.0rc1 - enabled translations package ------------------------------------------------------------------- Fri Mar 30 11:35:01 CEST 2007 - wr@rosenauer.org - update to snapshot 2.0.0.0pre-20070329 - security update enigmail 0.94.3 (Bugtraq #22758) ------------------------------------------------------------------- Fri Mar 30 10:35:03 CEST 2007 - meissner@suse.de - require unzip ------------------------------------------------------------------- Tue Mar 13 08:36:31 CET 2007 - wr@rosenauer.org - update to snapshot 2.0pre-20060312 - removed implicit NSS version dependency ------------------------------------------------------------------- Thu Mar 8 15:56:56 CET 2007 - meissner@suse.de - Upgraded to 1.5.0.10 security release. - Upgraded to enigmail 0.94.2. ------------------------------------------------------------------- Thu Feb 15 19:47:56 CET 2007 - wr@rosenauer.org - update to snapshot 2.0beta2-20060214 - fixed build on SLES9 ------------------------------------------------------------------- Mon Feb 5 18:56:14 CET 2007 - wr@rosenauer.org - fixed check in add-plugins.sh (#242237) ------------------------------------------------------------------- Tue Jan 30 10:50:51 CST 2007 - maw@suse.de - Add thunderbird-1.5.0.8-uninitalized-vars-232305.patch (#232305). ------------------------------------------------------------------- Thu Jan 18 17:59:26 CST 2007 - maw@suse.de - Add undefined-ops.patch, silencing some warnings. ------------------------------------------------------------------- Thu Nov 9 01:41:19 CET 2006 - jhargadon@suse.de - security update to version 1.5.0.8 ------------------------------------------------------------------- Tue Sep 12 20:51:58 CEST 2006 - stark@suse.de - security update to version 1.5.0.7 ------------------------------------------------------------------- Mon Aug 14 11:37:46 CEST 2006 - stark@suse.de - update enigmail to 0.94.1 * Added support for signing attachments with inline-PGP - update mailredirect to 0.7.4 - added backend patch to allow replies to list with ReplyToListThunderbirdExtension (#199125, bmo #45715) - added mailnews.clobber_list_reply pref which switches "Reply All" to "Reply List" functionality if set ------------------------------------------------------------------- Thu Jul 27 06:50:44 CEST 2006 - stark@suse.de - security update to version 1.5.0.5 (#195043) - fixed overwrite confirmation for GTK filesaver (#179531) ------------------------------------------------------------------- Wed Jun 7 19:52:37 CEST 2006 - stark@suse.de - fixed up BuildRequires ------------------------------------------------------------------- Fri Jun 2 12:18:49 CEST 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Fri Jun 2 12:13:48 CEST 2006 - stark@suse.de - update to security/stability release 1.5.0.4 (#179011) (http://www.mozilla.org/projects/security/known-vulnerabilities.html#Thunderbird) ------------------------------------------------------------------- Mon May 15 07:16:13 CEST 2006 - stark@suse.de - update to version 1.5.0.2 - update mailredirect to 0.7.3 - save printer settings properly (#174082, bmo #324072) - improved postscript output (bmo #334485) - changed defaults for printer properties (#6534) - get available paper sizes from CUPS (#65482) ------------------------------------------------------------------- Sat Mar 18 22:23:49 CET 2006 - stark@suse.de - translations package is suggested now by main package - yet another set of upstream fixes (#148876) ------------------------------------------------------------------- Sun Mar 12 19:52:08 CET 2006 - stark@suse.de - added Khmer (km-*) to pango locales (#157397) - yet another set of upstream fixes (#148876) ------------------------------------------------------------------- Sat Mar 4 21:27:42 CET 2006 - stark@suse.de - latest security fixes from upstream (#148876) - show multiple Reply-To addresses (bmo #106189) ------------------------------------------------------------------- Fri Feb 24 09:00:40 CET 2006 - stark@suse.de - added GTK category to desktop-file - dumpstack.patch is in upstream patches now - get some more patches (#148876) ------------------------------------------------------------------- Tue Feb 14 07:28:48 CET 2006 - stark@suse.de - applied set of security patches (#148876) ------------------------------------------------------------------- Tue Feb 7 20:09:32 CET 2006 - stark@suse.de - fixed disabling of Pango (#148788) ------------------------------------------------------------------- Thu Feb 2 21:50:18 CET 2006 - stark@suse.de - defined gssapi lib explicitely (#147670) ------------------------------------------------------------------- Wed Feb 1 17:34:34 CET 2006 - stark@suse.de - removed additional CA certs from builtin NSS - make it possible to choose $HOME as download directory (#144894, bmo #300856) - cleaned up BuildRequires ------------------------------------------------------------------- Wed Jan 25 21:33:47 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Mon Jan 23 08:39:32 CET 2006 - stark@suse.de - disable Pango if MOZ_ENABLE_PANGO is not set and no typical language which needs Pango is used (#143428) - preload libaoss for plugin sound (#117079) - fix to ignore X composite extension (#135373) ------------------------------------------------------------------- Wed Jan 18 09:38:18 CET 2006 - stark@suse.de - added default (font) settings - tweak useragent - fixed DumpStackToFile() for glibc 2.4 ------------------------------------------------------------------- Thu Jan 12 10:35:03 CET 2006 - stark@suse.de - update to 1.5 (20060111) - added sytem extensions patch - added XUL filechooser patch (MOZ_XUL_PICKER) - update enigmail to 0.94.0 - use -fstack-protector where available - use system NSS since CODE10 ------------------------------------------------------------------- Wed Dec 28 08:35:38 CET 2005 - stark@suse.de - update to 1.5rc2 (20051227) ------------------------------------------------------------------- Sun Dec 11 08:16:01 CET 2005 - stark@suse.de - update to 1.5 (20051211) - update enigmail to 0.93.2 ------------------------------------------------------------------- Tue Nov 29 09:53:05 CET 2005 - stark@suse.de - update enigmail to 0.93.1 - added patch for GTK2 handling (#134831) ------------------------------------------------------------------- Fri Nov 25 10:29:26 CET 2005 - stark@suse.de - update to 1.5 (20051124) ------------------------------------------------------------------- Fri Oct 28 06:47:11 CEST 2005 - stark@suse.de - update to latest 1.5 snapshot (20051027) - added patch to be able to reply to and forward rfc822 messages (bmo #204350) - again don't provide and require NSS stuff - removed disable-gconf patch (no registration needed in build process anymore) - added mailredirect extension - removed update functionality ------------------------------------------------------------------- Mon Oct 10 21:50:36 CEST 2005 - stark@suse.de - update to 1.5b2 (20051008) - preinstall Enigmail (version 0.93.0) as global extension - add all supported locales and use if installed ------------------------------------------------------------------- Tue Oct 4 09:32:11 CEST 2005 - stark@suse.de - update to 1.5b2 (20051003) (RPM version 1.4.1) - prerequire NSPR - prepared translations subpackage - fixed filelist - fixed build with new gcc ------------------------------------------------------------------- Wed Sep 21 14:32:28 CEST 2005 - stark@suse.de - update to 1.5b1 (20050920) - added spellchecker integration with myspell (add-plugins.sh) - removed aviary-install-global patch (not needed anymore, with new EM) - enabled pango font rendering (through cairo hopefully) - fixed GNOME gconf registration (#117851) ------------------------------------------------------------------- Sat Aug 20 20:33:10 CEST 2005 - stark@suse.de - workaround for linking with pangoxft and pangox (broken by gtk 2.8 update) (#105764) ------------------------------------------------------------------- Thu Aug 18 08:48:17 CEST 2005 - stark@suse.de - fixed Gdk-WARNING at startup (gtk.patch) - fixed regression in profile locking change (bmo #303633) - fixed crash with gtk 2.7 (bmo #300226, bnc #104586) ------------------------------------------------------------------- Wed Aug 3 07:23:50 CEST 2005 - stark@suse.de - fixed profile locking (bmo #151188) ------------------------------------------------------------------- Fri Jul 29 07:06:57 CEST 2005 - stark@suse.de - don't require and provide NSS libs (#98002) ------------------------------------------------------------------- Fri Jul 22 11:00:05 CEST 2005 - stark@suse.de - fixed printing patch ------------------------------------------------------------------- Tue Jul 19 10:45:22 CEST 2005 - stark@suse.de - added NSPR to PreReq - disable stripping in specfile ------------------------------------------------------------------- Fri Jul 15 07:01:45 CEST 2005 - stark@suse.de - update to 1.0.6 which restores API compatibility - fixed width calculation in Postscript module (bmo #290292) ------------------------------------------------------------------- Thu Jul 14 12:29:41 CEST 2005 - stark@suse.de - fixed filelist to include icon-file and startscript again ------------------------------------------------------------------- Tue Jul 12 06:28:21 CEST 2005 - stark@suse.de - fixed remote usage behaviour in start script (bnc #41903) - update to 1.0.5 security release - fixed quoting patch - moved desktop file to a Gnome independent location - don't strip explicitely - use RPM_OPT_FLAGS for NSS component - fixed implicit declarations and uninitialized used variables ------------------------------------------------------------------- Thu Apr 28 10:45:51 CEST 2005 - stark@suse.de - updated to current 1.0 branch version - use static NSPR from other location ------------------------------------------------------------------- Sat Apr 23 23:13:52 CEST 2005 - stark@suse.de - activate usage of system NSPR for distributions after 9.3 - add patch to be able to use systen NSPR at all - extended desktop file ------------------------------------------------------------------- Fri Apr 22 12:48:13 CEST 2005 - ro@suse.de - apply mozilla-gcc4.patch ------------------------------------------------------------------- Wed Mar 23 08:28:57 CET 2005 - stark@suse.de - update to 1.0.2 - use system NSPR on SUSE releases after 9.3 - made startscript PIS aware - set g-application-name correctly (bmo #281979) ------------------------------------------------------------------- Mon Mar 7 21:27:33 CET 2005 - stark@suse.de - don't use gconfd in registration phase (#66381) ------------------------------------------------------------------- Fri Feb 25 18:03:31 CET 2005 - stark@suse.de - update to version 1.0.1 ------------------------------------------------------------------- Tue Feb 22 21:59:53 CET 2005 - stark@suse.de - added patch to create Postscript level 2 (instead of 3) (special thanks to Jungshik Shin) - disabled freetype explicitly to be able to use the above patch (freetype wasn't used anymore since some time anyway) ------------------------------------------------------------------- Wed Feb 2 14:02:34 CET 2005 - stark@suse.de - added a JS crasher fix (bmc #268535) ------------------------------------------------------------------- Sat Jan 22 13:17:37 CET 2005 - stark@suse.de - added some backported bugfixes ------------------------------------------------------------------- Tue Dec 7 10:26:15 CET 2004 - stark@suse.de - update to 1.0 - fixed extra lines in replies (bmo #144998) - fixed build on s390/s390x ------------------------------------------------------------------- Wed Nov 24 07:16:17 CET 2004 - stark@suse.de - update to 20041123 snapshot - inherit downloadFolder patch from Firefox ------------------------------------------------------------------- Fri Nov 12 10:58:46 CET 2004 - stark@suse.de - fixed chrome filelist ------------------------------------------------------------------- Thu Nov 4 08:12:51 CET 2004 - stark@suse.de - update to 0.9 - sync patch-set with firefox base - fixed neededforbuild to get GNOME functionalities ------------------------------------------------------------------- Fri Sep 17 10:30:36 CEST 2004 - stark@suse.de - added some missing fixes for official release - synced add-plugins.sh ------------------------------------------------------------------- Sat Sep 11 13:47:50 CEST 2004 - stark@suse.de - update to official 0.8 version (20040911) - fixed enigmail config ------------------------------------------------------------------- Mon Sep 6 08:58:08 CEST 2004 - stark@suse.de - fixed profile directory ------------------------------------------------------------------- Fri Sep 3 21:50:19 CEST 2004 - stark@suse.de - update to thunderbird 0.8 (20040903) - update enigmail to 0.86.0 and ipc to 1.0.8 (deactivated) ------------------------------------------------------------------- Tue Aug 24 08:09:42 CEST 2004 - stark@suse.de - update to thunderbird 0.7.3 - update enigmail to 0.85.0 and ipc to 1.0.7 ------------------------------------------------------------------- Tue Jun 29 11:31:39 CEST 2004 - stark@suse.de - update to thunderbird 0.7.1 - update enigmail to 0.84.1 ------------------------------------------------------------------- Wed May 12 18:16:28 CEST 2004 - ro@suse.de - add some missing return values ------------------------------------------------------------------- Mon May 3 13:16:26 CEST 2004 - stark@suse.de - update to Thunderbird 0.6 (based on 1.7rc1) - use official branding for release builds - added desktop-icon (#39139) ------------------------------------------------------------------- Fri Apr 2 10:32:00 CEST 2004 - stark@suse.de - removing relocation of TEMP directory (#34391) ------------------------------------------------------------------- Fri Mar 26 18:09:27 CET 2004 - uli@suse.de - fixed hang during build on s390* (bug #35440) ------------------------------------------------------------------- Sun Mar 7 23:19:54 CET 2004 - ro@suse.de - match function declaration in enigmail mimedummy.cpp ------------------------------------------------------------------- Fri Mar 5 07:00:23 CET 2004 - stark@suse.de - more fixes for #35179 - added firefox as default handler for its protocols - update enigmail to 0.83.4 ------------------------------------------------------------------- Wed Mar 3 06:52:35 CET 2004 - stark@suse.de - removed unused patches for GTK2 build ------------------------------------------------------------------- Sun Feb 29 14:35:02 CET 2004 - stark@suse.de - improved start-script to interact with firefox and mozilla (#35179) ------------------------------------------------------------------- Fri Feb 27 06:50:16 CET 2004 - stark@suse.de - update to 0.5 - spec-file cleanup ------------------------------------------------------------------- Wed Oct 15 17:08:01 CEST 2003 - stark@suse.de - update to 0.3 (sync with mozilla 1.5) ------------------------------------------------------------------- Tue Jul 15 09:18:45 CEST 2003 - stark@suse.de - initial package (snapshot 20030714)