Received: by mail.netbsd.org (Postfix, from userid 605) id E592B84FFF; Sun, 17 Jun 2018 20:57:22 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id DFDBB84FE7 for ; Sun, 17 Jun 2018 20:57:21 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id XvLNNWblcT4y for ; Sun, 17 Jun 2018 20:57:21 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id F0B2284FD9 for ; Sun, 17 Jun 2018 20:57:20 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id E98F8FBEC; Sun, 17 Jun 2018 20:57:20 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1529269040168410" MIME-Version: 1.0 Date: Sun, 17 Jun 2018 20:57:20 +0000 From: "S.P.Zeidler" Subject: CVS commit: [pkgsrc-2018Q1] pkgsrc/mail/thunderbird To: pkgsrc-changes@NetBSD.org Reply-To: spz@netbsd.org X-Mailer: log_accum Message-Id: <20180617205720.E98F8FBEC@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1529269040168410 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: spz Date: Sun Jun 17 20:57:20 UTC 2018 Modified Files: pkgsrc/mail/thunderbird [pkgsrc-2018Q1]: Makefile distinfo Log Message: Pullup ticket #5768 - requested by bsiegert mail/thunderbird: security update Revisions pulled up: - mail/thunderbird/Makefile 1.210 - mail/thunderbird/distinfo 1.200 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: ryoon Date: Fri Jun 1 19:49:40 UTC 2018 Modified Files: pkgsrc/mail/thunderbird: Makefile distinfo Log Message: Update to 52.8.0 Changelog: #CVE-2018-5183: Backport critical security fixes in Skia #CVE-2018-5184: Full plaintext recovery in S/MIME via chosen-ciphertext attack #CVE-2018-5154: Use-after-free with SVG animations and clip paths #CVE-2018-5155: Use-after-free with SVG animations and text paths #CVE-2018-5159: Integer overflow and out-of-bounds write in Skia #CVE-2018-5161: Hang via malformed headers #CVE-2018-5162: Encrypted mail leaks plaintext through src attribute #CVE-2018-5170: Filename spoofing for external attachments #CVE-2018-5168: Lightweight themes can be installed without user interaction #CVE-2018-5174: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update #CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension #CVE-2018-5185: Leaking plaintext through HTML forms #CVE-2018-5150: Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8, and Thunderbird 52.8 To generate a diff of this commit: cvs rdiff -u -r1.209 -r1.210 pkgsrc/mail/thunderbird/Makefile cvs rdiff -u -r1.199 -r1.200 pkgsrc/mail/thunderbird/distinfo To generate a diff of this commit: cvs rdiff -u -r1.208 -r1.208.2.1 pkgsrc/mail/thunderbird/Makefile cvs rdiff -u -r1.199 -r1.199.2.1 pkgsrc/mail/thunderbird/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1529269040168410 Content-Disposition: inline Content-Length: 2123 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/mail/thunderbird/Makefile diff -u pkgsrc/mail/thunderbird/Makefile:1.208 pkgsrc/mail/thunderbird/Makefile:1.208.2.1 --- pkgsrc/mail/thunderbird/Makefile:1.208 Thu Mar 29 10:19:30 2018 +++ pkgsrc/mail/thunderbird/Makefile Sun Jun 17 20:57:20 2018 @@ -1,8 +1,8 @@ -# $NetBSD: Makefile,v 1.208 2018/03/29 10:19:30 wiz Exp $ +# $NetBSD: Makefile,v 1.208.2.1 2018/06/17 20:57:20 spz Exp $ DISTNAME= thunderbird-${TB_VER}.source PKGNAME= thunderbird-${TB_VER} -TB_VER= 52.7.0 +TB_VER= 52.8.0 CATEGORIES= mail MASTER_SITES= ${MASTER_SITE_MOZILLA:=thunderbird/releases/${TB_VER}/source/} EXTRACT_SUFX= .tar.xz Index: pkgsrc/mail/thunderbird/distinfo diff -u pkgsrc/mail/thunderbird/distinfo:1.199 pkgsrc/mail/thunderbird/distinfo:1.199.2.1 --- pkgsrc/mail/thunderbird/distinfo:1.199 Thu Mar 29 10:19:30 2018 +++ pkgsrc/mail/thunderbird/distinfo Sun Jun 17 20:57:20 2018 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.199 2018/03/29 10:19:30 wiz Exp $ +$NetBSD: distinfo,v 1.199.2.1 2018/06/17 20:57:20 spz Exp $ -SHA1 (thunderbird-52.7.0.source.tar.xz) = 9030278d1fb4cd28a3a5e8830cfb98a8f0d45523 -RMD160 (thunderbird-52.7.0.source.tar.xz) = 5a10590da00d39da4cc3849d33f68fafc136f505 -SHA512 (thunderbird-52.7.0.source.tar.xz) = 875ad6f2b030c65d248ecec4f4a5b51767c3ee7944ac72893237efd2af50145ec2e4a9efa8d60807b78bcfb8189969e5a67d15124710e8b0091f639cddfbfe21 -Size (thunderbird-52.7.0.source.tar.xz) = 230410444 bytes +SHA1 (thunderbird-52.8.0.source.tar.xz) = b8aabca309c15ac239a8334df63b330cd6a35c39 +RMD160 (thunderbird-52.8.0.source.tar.xz) = 91120b683059ccd26092add8450480a41f3efdb3 +SHA512 (thunderbird-52.8.0.source.tar.xz) = ce44f32f44244560499c44dbe963a8296cf58cf33e3f26d07be455746ed7f77791084e41bc66b2c90fe46e97fa15ae2041b1f5fcfa94d15b45c4f90172230d03 +Size (thunderbird-52.8.0.source.tar.xz) = 230380780 bytes SHA1 (patch-calendar_lightning_Makefile.in) = 02a1528f2da82f1d4ff4931a7d7dc8227b7fa9f2 SHA1 (patch-calendar_lightning_build_universal.mk) = 86dc2c6b4f9feb835570111078aa5d08a389d0da SHA1 (patch-calendar_providers_gdata_Makefile.in) = 0e90ddc9aecc817b0b150bbc37d23ddec97b093e --_----------=_1529269040168410--