Hello community,

here is the log from the commit of package MozillaThunderbird for openSUSE:11.4
checked in at Wed Aug 24 17:09:48 CEST 2011.



--------
--- old-versions/11.4/UPDATES/all/MozillaThunderbird/MozillaThunderbird.changes 
2011-06-21 18:47:11.000000000 +0200
+++ 11.4/MozillaThunderbird/MozillaThunderbird.changes  2011-08-17 
22:46:53.000000000 +0200
@@ -1,0 +2,19 @@
+Fri Aug  5 07:30:24 UTC 2011 - w...@rosenauer.org
+
+- security update to version 3.1.12 (bnc#712224) MFSA 2011-32
+  * CVE-2011-2982
+    Miscellaneous memory safety hazards
+  * CVE-2011-0084 (bmo#648094)
+    Crash in SVGTextElement.getCharNumAtPosition()
+  * CVE-2011-2981
+    Privilege escalation using event handlers
+  * CVE-2011-2378 (bmo#648065)
+    Dangling pointer vulnerability in appendChild
+  * CVE-2011-2984 (bmo#572129)
+    Privilege escalation dropping a tab element in content area
+  * CVE-2011-2980 (bmo#642469)
+    Binary planting vulnerability in ThinkPadSensor::Startup
+  * CVE-2011-2983 (bmo#626297)
+    Private data leakage using RegExp.input
+
+-------------------------------------------------------------------

calling whatdependson for 11.4-i586


Old:
----
  l10n-3.1.11.tar.bz2
  thunderbird-3.1.11-source.tar.bz2

New:
----
  l10n-3.1.12.tar.bz2
  mozilla-implicit-declarations.patch
  thunderbird-3.1.12-source.tar.bz2

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ MozillaThunderbird.spec ++++++
--- /var/tmp/diff_new_pack.GTjqsj/_old  2011-08-24 17:09:33.000000000 +0200
+++ /var/tmp/diff_new_pack.GTjqsj/_new  2011-08-24 17:09:33.000000000 +0200
@@ -26,10 +26,10 @@
 BuildRequires:  nss-shared-helper-devel
 %endif
 License:        MPLv1.1 or GPLv2+ or LGPLv2+
-%define mainversion 3.1.11
+%define mainversion 3.1.12
 Version:        %{mainversion}
 Release:        0.<RELEASE2>
-%define releasedate 2011061600
+%define releasedate 2011080400
 Provides:       thunderbird = %{version}
 Summary:        The Stand-Alone Mozilla Mail Component
 Url:            http://www.mozilla.org/products/thunderbird/
@@ -54,6 +54,7 @@
 Patch11:        thunderbird-shared-nss-db.patch
 Patch13:        mozilla-xsmp.patch
 Patch14:        mozilla-gcc46.patch
+Patch15:        mozilla-implicit-declarations.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 PreReq:         coreutils fileutils textutils /bin/sh
 ### build options
@@ -141,7 +142,7 @@
 
 %package -n enigmail
 Version:        1.1.2
-Release:        9.<RELEASE7>
+Release:        9.<RELEASE9>
 License:        MPLv1.1 or GPLv2+
 Summary:        OpenPGP addon for Thunderbird and SeaMonkey
 Group:          Productivity/Networking/Email/Clients
@@ -170,6 +171,7 @@
 %patch10 -p1
 %patch13 -p1
 %patch14 -p1
+%patch15 -p1
 popd
 # comm-central patches
 %patch2 -p1

++++++ create-tar.sh ++++++
--- /var/tmp/diff_new_pack.GTjqsj/_old  2011-08-24 17:09:33.000000000 +0200
+++ /var/tmp/diff_new_pack.GTjqsj/_new  2011-08-24 17:09:33.000000000 +0200
@@ -2,8 +2,8 @@
 
 
 BRANCH="releases/comm-1.9.2" # comm-central
-RELEASE_TAG="THUNDERBIRD_3_1_11_RELEASE"
-VERSION="3.1.11"
+RELEASE_TAG="THUNDERBIRD_3_1_12_RELEASE"
+VERSION="3.1.12"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird

++++++ l10n-3.1.11.tar.bz2 -> l10n-3.1.12.tar.bz2 ++++++
old-versions/11.4/UPDATES/all/MozillaThunderbird/l10n-3.1.11.tar.bz2 
11.4/MozillaThunderbird/l10n-3.1.12.tar.bz2 differ: char 11, line 1

++++++ mozilla-implicit-declarations.patch ++++++
# HG changeset patch
# Parent e3c883f8276a5fd4afab00e226cf19031d6fc5ae
diff --git a/gfx/qcms/iccread.c b/gfx/qcms/iccread.c
--- a/gfx/qcms/iccread.c
+++ b/gfx/qcms/iccread.c
@@ -18,16 +18,17 @@
 // NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE 
 // LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION 
 // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION 
 // WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 #include <math.h>
 #include <assert.h>
 #include <stdlib.h>
+#include <string.h>
 #include "qcmsint.h"
 
 //XXX: use a better typename
 typedef uint32_t __be32;
 typedef uint16_t __be16;
 
 #if 0
 not used yet
++++++ thunderbird-3.1.11-source.tar.bz2 -> thunderbird-3.1.12-source.tar.bz2 
++++++
old-versions/11.4/UPDATES/all/MozillaThunderbird/thunderbird-3.1.11-source.tar.bz2
 11.4/MozillaThunderbird/thunderbird-3.1.12-source.tar.bz2 differ: char 11, 
line 1


++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



Remember to have fun...

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

Reply via email to