pkgsrc/mail/thunderbird/distinfo
ryoon 2a81e2a7c5 Update to 52.9.1
Changelog:
    changed
    Thunderbird will now prompt to compact IMAP folders even if the account is online. Note: Under certain circumstances an incorrect estimate of the expected gain is shown.

    fixed
    Complete fix of the EFAIL vulnerability: 1) Removing some HTML crafted to carry out an attack. 2) Optionally: Not decrypting subordinate message parts that otherwise might reveal decrypted content to the attacker. Preference mailnews.p7m_subparts_external needs to be set to true for added security.

    fixed
    Various problems when forwarding messages inline when using "simple" HTML view

    fixed
    Deleting or detaching attachments corrupted messages under certain circumstances (not working only in Thunderbird version 52.9.0)

    fixed
    Various security fixes

Security fixes:
#CVE-2018-12359: Buffer overflow using computed size of canvas element
#CVE-2018-12360: Use-after-free when using focus()
#CVE-2018-12372: S/MIME and PGP decryption oracles can be built with HTML emails
#CVE-2018-12373: S/MIME plaintext can be leaked through HTML reply/forward
#CVE-2018-12362: Integer overflow in SSSE3 scaler
#CVE-2018-12363: Use-after-free when appending DOM nodes
#CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins
#CVE-2018-12365: Compromised IPC child process can list local filenames
#CVE-2018-12366: Invalid data handling during QCMS transformations
#CVE-2018-12368: No warning when opening executable SettingContent-ms files
#CVE-2018-12374: Using form to exfiltrate encrypted mail part by pressing enter in form field
#CVE-2018-5188: Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, Firefox ESR 52.9, and Thunderbird 52.9
2018-07-30 19:51:47 +00:00

121 lines
12 KiB
Text

$NetBSD: distinfo,v 1.201 2018/07/30 19:51:47 ryoon Exp $
SHA1 (thunderbird-52.9.1.source.tar.xz) = 9970d78084fe979f568ea00bf06b8e81a738e630
RMD160 (thunderbird-52.9.1.source.tar.xz) = b3169a0154fa85648a98ba0d74f264abd224b323
SHA512 (thunderbird-52.9.1.source.tar.xz) = 0de80a5036b1e8a5a8549c546b4693cb285ee4d10f546f4b4aceed9e1d6c64b9dbafce7bacaaf057112130036f7b41fb2e0fa3343412140e6ac926dd94c27d23
Size (thunderbird-52.9.1.source.tar.xz) = 230475264 bytes
SHA1 (patch-calendar_lightning_Makefile.in) = 02a1528f2da82f1d4ff4931a7d7dc8227b7fa9f2
SHA1 (patch-calendar_lightning_build_universal.mk) = 86dc2c6b4f9feb835570111078aa5d08a389d0da
SHA1 (patch-calendar_providers_gdata_Makefile.in) = 0e90ddc9aecc817b0b150bbc37d23ddec97b093e
SHA1 (patch-ldap_c-sdk_include_portable.h) = 7b36594a98beb5af9f82810a052ad2d4706ac968
SHA1 (patch-mail_app_nsMailApp.cpp) = 8834e141e4526af4b6a7a65195fd8f13d7c9cdb1
SHA1 (patch-mail_components_shell_nsMailGNOMEIntegration.cpp) = cbd87d7d7fc8df32b7fd444148d48a92c54c94d9
SHA1 (patch-mail_installer_package-manifest.in) = 3829a4d1ae7e8da29ae90d8ac31856fe260c2acc
SHA1 (patch-mail_installer_removed-files.in) = 1a6744cda9842046b9d4b388333678a580d49d43
SHA1 (patch-mailnews_compose_src_nsMsgCompose.cpp) = f44e66c9985e69904768126649162cc15681c2d0
SHA1 (patch-mailnews_compose_src_nsMsgSend.cpp) = 6d9f04350a4bf7a33f478af591fa26f990bd999e
SHA1 (patch-mozilla_browser_branding_unofficial_locales_en-US_brand.dtd) = 1cd7faa6a098e2bc609d941406b46e6f737fbb63
SHA1 (patch-mozilla_build_gyp.mozbuild) = c7081e530a60af88be428d7779139415483fac56
SHA1 (patch-mozilla_build_moz.configure_init.configure) = 1d0d8ddb9a4ea7a395067ccc31be1e6f81791271
SHA1 (patch-mozilla_build_moz.configure_keyfiles.configure) = 00f4a844bae782735e52303bfca4271de369449f
SHA1 (patch-mozilla_build_moz.configure_memory.configure) = 4a3b72925949dde4a60fecc7be801e189c1af727
SHA1 (patch-mozilla_build_moz.configure_old.configure) = 5388284dbc6c5bbaf2ea2116e91c2c6f182d6847
SHA1 (patch-mozilla_build_pgo_profileserver.py) = 7a88be17fc5939aa2bc5af334dde3222b6cc3ba3
SHA1 (patch-mozilla_config_Makefile.in) = ef7b31712e3be7620dfaf548d4138c6b425eb2ca
SHA1 (patch-mozilla_config_baseconfig.mk) = 92891a656cb83de0f5ff7f88d10579cdde0e1359
SHA1 (patch-mozilla_config_external_moz.build) = bf05e5da3781087c4e588e0bdccaee05b9d02b24
SHA1 (patch-mozilla_config_stl__wrappers_ios) = f84d793f65bc7c7d1ffc7b542f846b394cf6de50
SHA1 (patch-mozilla_config_stl__wrappers_ostream) = b36e7e199e355a0950e0db51c45fb34ce5ea2cc4
SHA1 (patch-mozilla_config_system-headers) = 4665d754c8e498b3a34f877836287c7723ce930f
SHA1 (patch-mozilla_config_system__wrappers_unwind.h) = 81752c113fcbef0a4ead18be1fbab1660c7d2fa9
SHA1 (patch-mozilla_dom_base_moz.build) = ea955077112082d25be57c7ad58102670e117821
SHA1 (patch-mozilla_dom_media_AudioStream.cpp) = c44bd89b7246ef9a5770b826967f342ce6fe18ae
SHA1 (patch-mozilla_dom_media_AudioStream.h) = a8f4160cc59c0cc92144dffb8fd468ad4d8ca70d
SHA1 (patch-mozilla_dom_media_moz.build) = 3d9719c07eed295f5054a59c1bffefa71df774f1
SHA1 (patch-mozilla_dom_media_platforms_ffmpeg_ffvpx_FFVPXRuntimeLinker.cpp) = 702db96c0699a012712b1e886ac55c932f124e80
SHA1 (patch-mozilla_dom_plugins_ipc_PluginModuleChild.cpp) = 375a2ebda12bd4633c7ae3d5c0e0b6de6a61bb0f
SHA1 (patch-mozilla_dom_plugins_ipc_PluginModuleChild.h) = 7009f9f2d01ca96f0ef6ca6f412485a4576f3072
SHA1 (patch-mozilla_dom_system_OSFileConstants.cpp) = cff51ad6909e0ceaa401c2825ca538f4271ac786
SHA1 (patch-mozilla_extensions_spellcheck_hunspell_glue_mozHunspell.cpp) = 07a8e9f7ea6ec5f667877ba78cf2c0b80c87f3f1
SHA1 (patch-mozilla_gfx_cairo_libpixman_src_pixman-arm-neon-asm.S) = 14b213eff89b78ecfe3ff74a4daca13138defd2e
SHA1 (patch-mozilla_gfx_gl_GLContextProviderGLX.cpp) = f8b7ad2c1d1b8f0a4492fc49d1e5884ec4bdf4c4
SHA1 (patch-mozilla_gfx_graphite2_moz-gr-update.sh) = a74a7dd83de0d04aeb8694db5b49803f8db58235
SHA1 (patch-mozilla_gfx_graphite2_src_Bidi.cpp) = 423009ff077aa4c0862fd5b8ec9066eb054440cf
SHA1 (patch-mozilla_gfx_moz.build) = ced2bc2e349cb4d58137ae64f4ec75b04239e854
SHA1 (patch-mozilla_gfx_skia_generate__mozbuild.py) = c85162fd7517a4e006512fef42a3c5124d2704aa
SHA1 (patch-mozilla_gfx_skia_moz.build) = 359b4f6fc45ec4fcc6376cc67ec3c2485cb15877
SHA1 (patch-mozilla_gfx_thebes_moz.build) = ba8f4af4ec885bee26949470682d2e48e240c7de
SHA1 (patch-mozilla_gfx_ycbcr_moz.build) = 84eab4220cbce9ad44a62b7ba64e838927382b13
SHA1 (patch-mozilla_gfx_ycbcr_yuv__row__arm.S) = b0a01fed529bbbea8e1ca06d8154f9cf331f844d
SHA1 (patch-mozilla_image_Downscaler.h) = 9d1915b1b9cbdedb6082f6d6796d9ad6e4a8e411
SHA1 (patch-mozilla_image_decoders_nsJPEGDecoder.cpp) = 8b92f3f59dba8928462264b9e0da1d02dc4c8c5f
SHA1 (patch-mozilla_intl_hyphenation_glue_hnjalloc.h) = 9159bfaa44bf70c04602a1ac10f698ef4f4a5187
SHA1 (patch-mozilla_intl_unicharutil_util_moz.build) = 2e348f1cd77f3f7ab17f276cde28eaa53fa501f2
SHA1 (patch-mozilla_ipc_chromium_src_base_atomicops.h) = b70f38db87e80de06f061e7ee7664d47b1000f12
SHA1 (patch-mozilla_ipc_chromium_src_base_message__pump__libevent.cc) = 71825dd5ab9e8f3055fc276558dc73f5489ade15
SHA1 (patch-mozilla_ipc_chromium_src_base_platform__thread.h) = a0d0cff52de77a45def4789a7f6f30603c13f07a
SHA1 (patch-mozilla_ipc_chromium_src_base_platform__thread__posix.cc) = ebc6e578c4697d22f5771cc6f4215895bb9e41af
SHA1 (patch-mozilla_ipc_chromium_src_base_process__util.h) = 56b13a62b9bb6b4a0b94ed285f33fa5d67c56dc8
SHA1 (patch-mozilla_ipc_chromium_src_base_process__util__posix.cc) = 4dc6f93024eea761a53dc1df2933eb2f51612058
SHA1 (patch-mozilla_ipc_chromium_src_base_sys__info__posix.cc) = d2b220541fd1d29fb0972faa1bd4ce1d69d6ed31
SHA1 (patch-mozilla_ipc_chromium_src_base_time__posix.cc) = d92e2f338c9c6e91aa7b7ad10d614a6def8707b9
SHA1 (patch-mozilla_ipc_chromium_src_build_build__config.h) = 1cb374897dfee04780299c5345da7a883f633967
SHA1 (patch-mozilla_ipc_chromium_src_chrome_common_transport__dib.h) = 74f68181b1770e8f2aa7325f8cd57d510fda7fa5
SHA1 (patch-mozilla_ipc_glue_GeckoChildProcessHost.cpp) = 076893b0af074e42d1a02e0c536ac13147dd4727
SHA1 (patch-mozilla_js_src_jit_arm_Architecture-arm.cpp) = d5dca8ad127f44375de0481b3afb1b5e64ec1f9b
SHA1 (patch-mozilla_js_src_jit_none_AtomicOperations-sparc.h) = e85996849acce2799806493c2a6fcc87d1e399f4
SHA1 (patch-mozilla_js_src_moz.build) = 9220c6c618b1db6f88fd58b27b9ae9f742d2602a
SHA1 (patch-mozilla_js_src_old-configure.in) = 8349fe3c700404c2c2d9512068edab9b097508c9
SHA1 (patch-mozilla_js_xpconnect_src_XPCConvert.cpp) = fb20844c866045677ce7b14099cf7a748d430f64
SHA1 (patch-mozilla_js_xpconnect_src_xpcprivate.h) = 4dc5838b1fe482aca023ce992ebf414ee39d0aef
SHA1 (patch-mozilla_media_libcubeb_src_cubeb.c) = 993d921016d126a3fbd139b212c35a09606d184c
SHA1 (patch-mozilla_media_libcubeb_src_cubeb__alsa.c) = 8139652f4d101135efe6ec379cbf89e83061c488
SHA1 (patch-mozilla_media_libcubeb_src_cubeb__oss.c) = 779f068a9af2d09f0b14ac389f65fa130aa1b1f1
SHA1 (patch-mozilla_media_libcubeb_src_moz.build) = f9cb6e0382f4f128c5519bc8e0b0c3ec20008098
SHA1 (patch-mozilla_media_libcubeb_tests_moz.build) = 15f7c6b35f54293a1938a64d03c35ff7b9d80005
SHA1 (patch-mozilla_media_libcubeb_update.sh) = d3ccffb2ce71be1007004b014df88a6aa86380ab
SHA1 (patch-mozilla_media_libsoundtouch_src_cpu__detect__x86.cpp) = e97b974d4eccc22699047413460b8c4687f9e658
SHA1 (patch-mozilla_media_libsoundtouch_src_soundtouch__perms.h) = f7cc1a66d37283b0a513fbbfe3cd5a8232be8ecc
SHA1 (patch-mozilla_media_libtheora_lib_arm_armcpu.c) = 8ac0fc27df926fcdb40ea578f9bc89b845a4e72b
SHA1 (patch-mozilla_media_libtheora_moz.build) = 3bd3028981ef2c55d8e5eebdd83003cc851bd8cd
SHA1 (patch-mozilla_media_libtremor_moz.build) = f89b26d3fe8f0e95e6e5f3daa48278388cfa04ce
SHA1 (patch-mozilla_media_libvorbis_moz.build) = 7bf326ce53781bbcad81e78c59b6054a2b65a618
SHA1 (patch-mozilla_media_libyuv_source_mjpeg__decoder.cc) = f16d6931f02cc5feeb58b5d3bde509de8289205c
SHA1 (patch-mozilla_media_openmax__dl_dl_api_armCOMM__s.h) = dec3d3d538a4301920aa641d2d8da1e6c9b7bb54
SHA1 (patch-mozilla_media_webrtc_signaling_test_common.build) = ba9072c990805d8105eaeb6d2715b2602529c5c0
SHA1 (patch-mozilla_media_webrtc_trunk_webrtc_modules_video__capture_linux_device__info__linux.cc) = 7f1cc6815ded686bed7335685a66d873e7971c0a
SHA1 (patch-mozilla_media_webrtc_trunk_webrtc_modules_video__capture_linux_video__capture__linux.cc) = 8187760eeaa2c466b629b21cd8d3d460e532497f
SHA1 (patch-mozilla_media_webrtc_trunk_webrtc_modules_video__capture_video__capture.gypi) = a46581a5832a4a81d36dab78a1fab3dae94ac8fd
SHA1 (patch-mozilla_memory_mozalloc_mozalloc__abort.cpp) = 2c2169296c3388fa49f57f55193ebc94892b2c91
SHA1 (patch-mozilla_mfbt_Poison.cpp) = 725f20137d6e0b19d85ee4c5a2fe286015652bad
SHA1 (patch-mozilla_mobile_android_installer_Makefile.in) = eaafdebbc98b0230ca4aff998f3f319bd65e93c2
SHA1 (patch-mozilla_modules_libjar_nsZipArchive.cpp) = b306f3e037aced574e6e245d2bd80ffd5020a43e
SHA1 (patch-mozilla_mozglue_build_arm.cpp) = fcaf79cb25eef5d36e793d54ce5c1fff188bf951
SHA1 (patch-mozilla_mozglue_build_arm.h) = 40d8d2039c68fc825857a3c970eec2f296275cc5
SHA1 (patch-mozilla_netwerk_dns_moz.build) = 4ee9fa2a3b33a0fb9ad4c0f883b084f6417b993f
SHA1 (patch-mozilla_old-configure.in) = 651bc7aed6cea83ae21a1ac8febf13374ae8c854
SHA1 (patch-mozilla_toolkit_components_osfile_modules_osfile__unix__back.jsm) = ba8e6e427374dbf9f5de695ead6014f560fb305e
SHA1 (patch-mozilla_toolkit_components_osfile_modules_osfile__unix__front.jsm) = 005ad5608501fdcdeb042715a69ea3073d62fc75
SHA1 (patch-mozilla_toolkit_components_protobuf_src_google_protobuf_stubs_atomicops.h) = bf5dc4c221f5822e38a62c6a848c01c65e65dd4d
SHA1 (patch-mozilla_toolkit_components_protobuf_src_google_protobuf_stubs_platform__macros.h) = aa895f7147fdcdaa1dd75b17f96c562d15eed718
SHA1 (patch-mozilla_toolkit_components_terminator_nsTerminator.cpp) = 6b62b786f8c78fb894a941684f7d65deec14f672
SHA1 (patch-mozilla_toolkit_library_moz.build) = eef7aad4ff31b8149ca95d50f349fdc1fdd354d8
SHA1 (patch-mozilla_toolkit_modules_GMPUtils.jsm) = 324ad1359a071213f83ad5f3b313e88c93812db3
SHA1 (patch-mozilla_toolkit_moz.configure) = 6de0e9146d798c4c82b01890bac85ecb54e6a413
SHA1 (patch-mozilla_toolkit_mozapps_extensions_test_browser_browser__gmpProvider.js) = ade771fd3c905bddfe40b96333d4836738786881
SHA1 (patch-mozilla_toolkit_mozapps_installer_packager.mk) = 46fac105a5baaf7579b9c2b4596b753bd6219517
SHA1 (patch-mozilla_toolkit_xre_glxtest.cpp) = a76049f61427fccf9896960ff9cc18e753e2cadd
SHA1 (patch-mozilla_toolkit_xre_nsEmbedFunctions.cpp) = c6c1390f527f4b45e879f090531a53c3dc798873
SHA1 (patch-mozilla_xpcom_base_nscore.h) = 019d54275e162756294f6e803884b4af5578b45f
SHA1 (patch-mozilla_xpcom_build_XPCOMInit.cpp) = b801a81787d71d56caff6886870817bb926fefac
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_Makefile.in) = 71737ca3a31fa2e7c99fc07419a41918b9b37d26
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcinvoke__arm__netbsd.cpp) = a6f3de24e78589bec5029d70872eb3d3def42690
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcinvoke__asm__mips.S) = d5e610e8170382786bd33ef9ccf7976e3a5ab361
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcinvoke__asm__ppc__netbsd.s) = 83b335036eb14ec01a6292b321954b4e92039253
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcinvoke__netbsd__m68k.cpp) = b62ea1e6a09de47c3070eb0ecfe20e33f119fce2
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcinvoke__ppc__netbsd.cpp) = 6bf93b8a0fe332185f5af6bbb0e2dc3312884b50
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcinvoke__sparc64__netbsd.cpp) = 9caec5bc1b6ed70c9d59adacaefa7a8f90c2a5cc
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcstubs__arm__netbsd.cpp) = 976c0c82fd5aa6223cf6d4f79166faeaf6377033
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcstubs__asm__mips.S) = edbf6721ac8d74dc314f4c70fc5c74ebb6f44076
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcstubs__asm__sparc64__netbsd.s) = a04a46c13752d4c92bbba8b96d85cb430f3a4ac6
SHA1 (patch-mozilla_xpcom_reflect_xptcall_md_unix_xptcstubs__netbsd__m68k.cpp) = bb0d322a00c42e6ce1a5a931fecdcaf1b58109bc