2017-02-12 07:26:18 by Ryo ONODERA | Files touched by this commit (1451) |
Log message:
Recursive revbump from fonts/harfbuzz
|
2017-02-11 09:09:08 by Ryo ONODERA | Files touched by this commit (2) |
Log message:
Update to 45.7.0
Changelog:
Fixed Message preview pane non-functional after IMAP folder was renamed or moved
Fixed "Move To" button on "Search Messages" panel not working
Fixed Message sent to "undisclosed recipients" shows no recipient \
(non-functional since Thunderbird version 38)
Fixed Calendar: No way to accept/decline email invitations when sent and \
received messages are stored in the same folder
Fixed Various security fixes
Security fixes:
#CVE-2017-5375: Excessive JIT code allocation allows bypass of ASLR and DEP
#CVE-2017-5376: Use-after-free in XSL
#CVE-2017-5378: Pointer and frame data leakage of Javascript objects
#CVE-2017-5380: Potential use-after-free during DOM manipulations
#CVE-2017-5390: Insecure communication methods in Developer Tools JSON viewer
#CVE-2017-5396: Use-after-free with Media Decoder
#CVE-2017-5383: Location bar spoofing with unicode characters
#CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
|
2017-02-06 14:56:14 by Thomas Klausner | Files touched by this commit (1452) |
Log message:
Recursive bump for harfbuzz's new graphite2 dependency.
|
2017-01-21 21:06:55 by Ryo ONODERA | Files touched by this commit (157) |
Log message:
Recursive revbump from audio/pulseaudio-10.0
|
2017-01-17 00:45:17 by Thomas Klausner | Files touched by this commit (103) |
Log message:
Recursive bump for libvpx shlib major change.
|
2017-01-03 00:59:21 by Ryo ONODERA | Files touched by this commit (2) |
Log message:
Update to 45.6.0
Changelog:
Fixed The system integration dialog was shown every time when starting \
Thunderbird
Fixed Various security fixes
Security vulnerabilities fixed in Thunderbird 45.6
#CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements
#CVE-2016-9895: CSP bypass using marquee tag
#CVE-2016-9897: Memory corruption in libGLES
#CVE-2016-9898: Use-after-free in Editor while manipulating DOM subtrees
#CVE-2016-9900: Restricted external resources can be loaded by SVG images \
through data URLs
#CVE-2016-9904: Cross-origin information leak in shared atoms
#CVE-2016-9905: Crash in EnumerateSubDocuments
#CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6
|
2016-12-04 06:17:46 by Ryo ONODERA | Files touched by this commit (667) |
Log message:
Recursive revbump from textproc/icu 58.1
|
2016-12-03 12:14:48 by Ryo ONODERA | Files touched by this commit (2) |  |
Log message:
Update to 45.5.1
Changelog:
45.5.1:
#CVE-2016-9079: Use-after-free in SVG Animation
45.5.0:
#CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
#CVE-2016-5294: Arbitrary target directory for result files of update process
#CVE-2016-5297: Incorrect argument length checking in JavaScript
#CVE-2016-9066: Integer overflow leading to a buffer overflow in nsScriptLoadHandler
#CVE-2016-5291: Same-origin policy violation using local HTML file and saved \
shortcut file
#CVE-2016-9074: Insufficient timing side-channel resistance in divSpoiler
#CVE-2016-5290: Memory safety bugs fixed in Thunderbird 45.5
|
2016-10-27 00:50:13 by Ryo ONODERA | Files touched by this commit (2) |
Log message:
Update to 45.4.0
Changelog:
Fixed "Apply columns to..." did not honor special folders
Fixed Threading broken when editing message draft, due to loss of Message-ID
Fixed Mail saved as template copied In-Reply-To and References from original \
email.
Fixed Additional spaces were inserted when drafts were edited.
Fixed Recipient addresses were shown in red despite being inserted from the \
address book in some circumstances.
Fixed Display name was truncated if no separating space before email address.
|
2016-09-18 14:35:06 by Ryo ONODERA | Files touched by this commit (2) |
Log message:
Update to 45.3.0
Changelog:
Fixed Certain messages caused corruption of the drafts summary database.
Fixed "edit as new message" on a received message pre-filled the \
sender as the composing identity.
Fixed Disposition-Notification-To could not be used in mail.compose.other.header
Fixed Various security fixes
Fixed in Thunderbird 45.3
2016-62 Miscellaneous memory safety hazards (rv:48.0 / rv:45.3)
|