Sophie: thunderbird-0:17.0.9-1.mga2 src

thunderbird-17.0.9-1.mga2.src.rpm

Tue Sep 17 2013 luigiwalser <luigiwalser> 0:17.0.9-1.mga2
+ Revision: 480938
- new version 10.0.11esr
- new version 10.0.9esr

+ fwang
- br simplejson
- new version 17.0.9esr
- new version 17.0.8esr
- new version 17.0.7esr
- new version 17.0.6esr
- new version 17.0.5esr
- new version 17.0.4esr
- build without system libpng as it requires libpng 1.5.11 now
- add asc file
- new version 17.0.3esr as 10.0esr is not support any more by upstream
- new version 10.0.12esr
- more patch on vpx 1.0
- add patch to recognize recent nspr and nss
- new version 10.0.10esr
- new version 10.0.8esr
- new version 10.0.6esr
- new version 10.0.5esr

+ doktor5000
-new version 10.0.7
- new version 10.0.4 ESR (Extended Support Release)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-20.html
(Miscellaneous memory safety hazards [CVE-2012-0468, CVE-2012-0467])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-22.html
(use-after-free in IDBKeyRange[CVE-2012-0469])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-23.html
(Invalid frees causes heap corruption in gfxImageSurface [CVE-2012-0470])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-24.html
(Potential XSS via multibyte content processing errors [CVE-2012-0471])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-25.html
(Potential memory corruption during font rendering using cairo-dwrite
[CVE-2012-0472])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-26.html
(WebGL.drawElements may read illegal video memory due to
FindMaxUshortElement error [CVE-2012-0473])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-27.html
(Page load short-circuit can lead to XSS [CVE-2012-0474])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-28.html
(Ambiguous IPv6 in Origin headers may bypass webserver access restrictions
[CVE-2012-0475])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-29.html
(Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
[CVE-2012-0477])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-30.html
(Crash with WebGL content using textImage2D [CVE-2012-0478])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-31.html
(Off-by-one error in OpenType Sanitizer [CVE-2011-3062])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-33.html
(Potential site identity spoofing when loading RSS and Atom feeds
[CVE-2012-0479])
- switch to Enigmail 1.4, officially supported version for ESR releases
o fixes a problem with inline PGP decrpytion
Sat Mar 17 2012 doktor5000 <doktor5000> 0:10.0.3-1.mga2
+ Revision: 223775
- use system nss shlibsign instead of missing bundled one

+ fwang
- new version 10.0.3 ESR (Extended Support Release)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-13.html
(XSS with Drag and Drop and Javascript: URL [CVE-2012-0455])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-14.html
(SVG issues found with Address Sanitizer [CVE-2012-0456, CVE-2012-0457])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-15.html
(XSS with multiple Content Security Policy headers [CVE-2012-0451])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-16.html
(Escalation of privilege with Javascript: URL as home page [CVE-2012-0458])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-17.html
(Crash when accessing keyframe cssText after dynamic modification
[CVE-2012-0459])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-18.html
(window.fullScreen writeable by untrusted content [CVE-2012-0460])
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-19.html
(Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28)
[CVE-2012-0461, CVE-2012-0462, CVE-2012-0464, CVE-2012-0463 ])
Fri Mar 2 2012 fwang <fwang> 0:10.0.2-5.mga2
+ Revision: 216687
- fix build with latest vpx
- rebuild for new vpx
Mon Feb 27 2012 fwang <fwang> 0:10.0.2-4.mga2
+ Revision: 215481
- add correct epoch
Mon Feb 27 2012 fwang <fwang> 0:10.0.2-3.mga2
+ Revision: 215479
- correct obsoletes
Wed Feb 22 2012 doktor5000 <doktor5000> 0:10.0.2-2.mga2
+ Revision: 212040
- readd missing linebreak, restores content of default preference file
- new version 10.0.2 ESR (Extended Support Release)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-11.html
(libpng integer overflow [CVE-2011-3026])
- added BuildRequires on libevent-devel and libvpx-devel
- enable vpx, libevent and optimization
- add Patch100 to use libcanberra for playing sounds (rediffed from upstream,
mozilla-thunderbird-mga-use-libcanberra.patch)
- add requires_exception for libxul
- removed support for thunderbird.cfg
- drop all unused patches
- remove useless commented-out stuff
- remove separate enigmail-l10n packages (thanks to Anssi Hannula)
- reset mkrel to previous state
- add notice about work-in-progress
- use proper macros in %setup and Source URL
- remove useless commented-out stuff
- drop long-obsolete & unused Source30 (mozilla-thunderbird-open-browser.sh)
- drop unneeded Source30 (mozilla-thunderbird-open-browser-xdg.sh)
- remove complicated handling of Source12
(mozilla-thunderbird-mageia-default-prefs.js)

+ fwang
- turn to hunspell dict, bug#4437
- more specific obsoletes, to handle upgrading from mga1
Tue Feb 14 2012 fwang <fwang> 0:10.0.1-2.mga2
+ Revision: 208722
- bump rel
- switch to ESR (Extended Support Release)
Mon Feb 13 2012 fwang <fwang> 0:10.0.1-1.mga2
+ Revision: 208384
- new version 10.0.1
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-01.html
(miscellaneous memory safety hazards [CVE-2012-0442] [CVE-2012-0443]
fixed in 10.0 )
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-03.html
( element exposed across domains via name attribute [CVE-2012-0445] fixed in 10.0) o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-04.html (child nodes from nsDOMAttribute still accessible after removal of nodes [CVE-2011-3659] fixed in 10.0) o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-05.html (frame scripts calling into untrusted objects bypass security checks [CVE-2012-0446] fixed in 10.0) o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-06.html (uninitialized memory appended when encoding icon images may cause information disclosure [CVE-2012-0447] fixed in 10.0) o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-07.html (potential Memory Corruption When Decoding Ogg Vorbis files [CVE-2012-0444] fixed in 10.0) o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-08.html (crash with malformed embedded XSLT stylesheets [CVE-2012-0449] fixed in 10.0) o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-10.html (use after free in nsXBLDocumentInfo::ReadPrototypeBindings [CVE-2012-0452]) - suggest canberra for sound playing, cups for printing. </li> <li>Wed Feb 1 2012 fwang <fwang> 0:10.0-1.mga2 + Revision: 203805 - new version 10.0 - update enigmail to 1.3.5, needed for thunderbird 10.0 </li> <li>Mon Dec 26 2011 fwang <fwang> 0:9.0.1-3.mga2 + Revision: 187727 - change new default preference (extensions.autoDisableScopes) to not automatically disable systemwide installed addons, like language packs </li> <li>Sun Dec 25 2011 fwang <fwang> 0:9.0.1-2.mga2 + Revision: 187365 - real obsoletes </li> <li>Sat Dec 24 2011 fwang <fwang> 0:9.0.1-1.mga2 + Revision: 187179 - new version 9.0.1 - convert desktop file into source, and merge translations from mandriva - rename enigmail l10n package also - rename spec - rename to thunderbird </li> <li>Wed Dec 21 2011 fwang <fwang> 0:9.0-1.mga2 + Revision: 185428 - fix build with latest libpng - new version 9.0 - update configure options - use client.mk to build - new version 8.0 </li> <li>Sat Oct 1 2011 fwang <fwang> 0:7.0.1-1.mga2 + Revision: 150609 - new version 7.0.1 </li> <li>Wed Sep 28 2011 fwang <fwang> 0:7.0-1.mga2 + Revision: 149769 - fix str fmt - new version 7.0 </li> <li>Sun Sep 25 2011 fwang <fwang> 0:6.0.2-3.mga2 + Revision: 147618 - new enigmail ver </li> <li>Sun Sep 11 2011 fwang <fwang> 0:6.0.2-2.mga2 + Revision: 142367 - br newer png </li> <li>Wed Sep 7 2011 fwang <fwang> 0:6.0.2-1.mga2 + Revision: 140880 - new version 6.0.2 </li> <li>Wed Aug 31 2011 fwang <fwang> 0:6.0.1-1.mga2 + Revision: 136940 - new version 6.0.1 - update language list - update language list - br dbus - fix enigmail version - enable gio - 1.3 should compatible with tb6 - new version 6.0 - disable bundled lightning - add epoch - fix enigmail ver - br static devel of nss - sync patches too - sync with mandriva rpm - build with fpic - do not build with system xul - br mesa - br yasm - fix config problem - add sig file - new version 5.0 + dmorgan <dmorgan> - Update enigmail to version 1.3.1 ( required for thunderbird 6.0) - Revert official branding change - disable updater and official branding - Fix to use mga instead of mdv + doktor5000 <doktor5000> - update mageia-default-prefs.js, reenabled localisation matching to system locale - rediffed Patch201, disabling default application dialog on Thunderbird start - really disable compilation of lightning </li> <li>Sun Jun 26 2011 fwang <fwang> 0:3.1.11-2.mga2 + Revision: 113989 - rebuild for new hunspell </li> <li>Tue Jun 21 2011 fwang <fwang> 0:3.1.11-1.mga2 + Revision: 111659 - new version 3.1.11 </li> <li>Sun Jun 19 2011 ahmad <ahmad> 0:3.1.10-2.mga2 + Revision: 109557 - Rebuild against libnotify-0.7 </li> <li>Fri Apr 29 2011 ahmad <ahmad> 0:3.1.10-1.mga1 + Revision: 93463 - Update to 3.1.10 - Rediff run-mozilla patch - Drop an old patch from SOURCES dir </li> <li>Fri Mar 25 2011 ahmad <ahmad> 0:3.1.9-11.mga1 + Revision: 77483 - revert previous commit, gio support doesn't work as it should resulting in http/ https links handler having to be configured manually for all new and old tb profiles. gnomevfs support at least reads the value from gconf settings (which uses www- browser by default) </li> <li>Mon Mar 21 2011 ahmad <ahmad> 0:3.1.9-10.mga1 + Revision: 75310 - disable gnomvfs support - enable gio support - disable updater as we don't support updating the application this way </li> <li>Wed Mar 16 2011 ahmad <ahmad> 0:3.1.9-8.mga1 + Revision: 72283 - conflict with mozilla-thunderbird-lightning <= 1.3.9 </li> <li>Fri Mar 11 2011 ahmad <ahmad> 0:3.1.9-7.mga1 + Revision: 68321 - drop old/uneeded scriptlets that update the destkop-database and hicolor icon-cache; they were replaced by rpm filetriggers ages ago </li> <li>Fri Mar 11 2011 ahmad <ahmad> 0:3.1.9-6.mga1 + Revision: 68246 - don't obsolete -lightning here and in the mozilla-thunderbird-lightning src.rpm urpmi can't smoothly handle a package obsoleted by two packages </li> <li>Fri Mar 11 2011 ahmad <ahmad> 0:3.1.9-5.mga1 + Revision: 68165 - obsolete the -lightning sub-package that was built from thunderbird src.rpm </li> <li>Fri Mar 11 2011 ahmad <ahmad> 0:3.1.9-4.mga1 + Revision: 68147 - define build_bundled_lightning, and disable it: o the thunderbird tarball doesn't have the langpacks for lightning o lightning has a separate release schedule (Fedora) </li> <li>Wed Mar 9 2011 colin <colin> 0:3.1.9-2.mga1 + Revision: 66827 - Extract the correct plugin id from lightning extension </li> <li>Sat Mar 5 2011 ahmad <ahmad> 0:3.1.9-1.mga1 + Revision: 64596 - update to 3.1.9 + dmorgan <dmorgan> - obsoletes old package </li> <li>Tue Mar 1 2011 ahmad <ahmad> 0:3.1.8-1.mga1 + Revision: 62332 - update to 3.1.8 </li> <li>Mon Feb 28 2011 dmorgan <dmorgan> 0:3.1.7-3.mga1 + Revision: 61407 - Remove remaining mdv macro - Remove remaining mdv macro - Fix %els - Fix %else - Adapt for mageia - Remove mdv macros Adapt for mageia + ennael <ennael> - imported package mozilla-thunderbird </li> </ul> </div>  </div> <div class="sophie_footer"> <hr style="clear: both"> <a href="http://www.perl.org/"><img height="64" width="64" src="http://sophie.zarb.org/static/images/perl.png" alt="Perl"></a> :: <a href="http://catalyst.perl.org/"><img height="64" src="http://sophie.zarb.org/static/images/catalyst.png" alt="Catalyst"></a> :: <a href="http://www.postgresql.org/"><img height="64" width="64" src="http://sophie.zarb.org/static/images/postgresql.png" alt="PostgreSQL"></a> :: <a href="http://www.rpm.org/"><img height="64" width="64" src="http://sophie.zarb.org/static/images/rpmlogo.png" alt="RPM"></a> <a href="http://validator.w3.org/check?uri=referer"> <img src="http://www.w3.org/Icons/valid-html401" alt="Valid HTML 4.01 Transitional" height="31" width="88"></a> </div> </body> </html>