Log Message: |
- new version 10.0.1, switch to ESR (Extended Support Release)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-01.html
(miscellaneous memory safety hazards [CVE-2012-0442] [CVE-2012-0443]
fixed in 10.0 )
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-03.html
(<iframe> element exposed across domains via name attribute [CVE-2012-0445]
fixed in 10.0)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-04.html
(child nodes from nsDOMAttribute still accessible after removal of nodes
[CVE-2011-3659] fixed in 10.0)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-05.html
(frame scripts calling into untrusted objects bypass security checks
[CVE-2012-0446] fixed in 10.0)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-06.html
(uninitialized memory appended when encoding icon images may cause
information disclosure [CVE-2012-0447] fixed in 10.0
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-07.html
(potential Memory Corruption When Decoding Ogg Vorbis files
[CVE-2012-0444] fixed in 10.0)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-08.html
(crash with malformed embedded XSLT stylesheets [CVE-2012-0449]
fixed in 10.0)
o fixes http://www.mozilla.org/security/announce/2012/mfsa2012-10.html
(use after free in nsXBLDocumentInfo::ReadPrototypeBindings [CVE-2012-0452])
- update enigmail to 1.3.5, needed for thunderbird 10.0
- updated mageia-default-prefs.js, reenabled locale matching to system locale
- change new default preference (extensions.autoDisableScopes) to not
automatically disable systemwide installed addons, like language packs
- added BuildRequires on yasm, mesagl-devel, startup-notification-devel, dbus,
libevent-devel and libvpx-devel
- added Requires on libcanberra for playing sounds
- add Patch100 to use libcanberra for playing sounds (rediffed from upstream,
mozilla-thunderbird-mga-use-libcanberra.patch)
- rediffed Patch201, disabling default application dialog on Thunderbird start
- use bundled libpng, system one is too old and updating it is a no-go for mga1
- do not build against system libxul, add requires_exception for libxul
- disable updater and bundled lightning, disable compilation of lightning
- enable gio, vpx and libevent and optimization
- use org.mageia as distribution id
- removed thunderbird.cfg
- add -fPIC to CFLAGS
|