From: Raspbian automatic forward porter Date: Tue, 26 Feb 2019 02:20:39 +0000 (+0000) Subject: Merge version 1:60.4.0-1+rpi1 and 1:60.5.1-1 to produce 1:60.5.1-1+rpi1 X-Git-Tag: archive/raspbian/1%60.5.1-1+rpi1~1 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=b99efe4c7372c0718cb9c834e2ea45cabe30b74f;p=thunderbird.git Merge version 1:60.4.0-1+rpi1 and 1:60.5.1-1 to produce 1:60.5.1-1+rpi1 --- b99efe4c7372c0718cb9c834e2ea45cabe30b74f diff --cc debian/changelog index f9e0e38493,5ee8e8a4e6..3a535b5bf9 --- a/debian/changelog +++ b/debian/changelog @@@ -1,15 -1,135 +1,148 @@@ - thunderbird (1:60.4.0-1+rpi1) buster-staging; urgency=medium ++thunderbird (1:60.5.1-1+rpi1) buster-staging; urgency=medium + + [changes brought over from firefox-esr 60.3.0esr-1+rpi1 by Peter Michael Green at Wed, 05 Dec 2018 06:56:52 +0000] + * Hack broken rust target selection so it produces the right target + on raspbian. + * Fix clean target. + + [changes introduced in 60.4.0-1+rpi1 by Peter Michael Green] + * Further fixes to clean target (still not completely fixed :( ). + * Add build-depends on clang-6.0 (to match libclang-6.0-dev) + - -- Peter Micheal Green Fri, 18 Jan 2019 23:40:33 +0000 ++ -- Raspbian forward porter Tue, 26 Feb 2019 02:20:34 +0000 ++ + thunderbird (1:60.5.1-1) unstable; urgency=medium + + [ Alexander Nitsch ] + * [c9775d4] Make the logo SVG square + The original SVG source isn't completely square, modifying the SVG file + so all generated other files from the input are also exactly square. + * [6096812] Add script for generating PNGs from logo SVG + * [4e9e5cc] Update icon PNGs to be properly scaled + + [ Carsten Schoenert ] + * [9e5527d] d/source.filter: add some configure scripts + Filter out some files that are named 'configure', they are rebuild later + anyway. The filtering of these files is moved from gbp.conf to + source.filter. + * [b63f2a2] Revert "d/gbp.conf: ignore configure script while importing" + Reverting this commit as we need to move the files to filter to + source.filter as the behaviour wasn't the expected outcome. + * [4965c2a] New upstream version 60.5.1 + Fixed CVE issues in upstream version 60.5.0 (MFSA 2019-06) + CVE-2018-18356: Use-after-free in Skia + CVE-2019-5785: Integer overflow in Skia + CVE-2018-18335: Buffer overflow in Skia with accelerated Canvas 2D + CVE-2018-18509: S/MIME signature spoofing + + -- Carsten Schoenert Thu, 14 Feb 2019 20:01:03 +0100 + + thunderbird (1:60.5.0-3) unstable; urgency=medium + + * [3e274d8] d/rules: move disable debug option into configure step + Adding the option '--disable-debug-symbols' to the file mozconfig.default + in case the build is running on a 32bit architecture instead of expanding + the variable 'CONFIGURE_FLAGS'. The configuration approach for this option + taken from firefox-esr was not working for the thunderbird package. + * [b3d82d3] d/rules: reorder LDFLAGS for better readability + Make the used additional options for LDFLAGS better readable by reordering + the various used options. Also adding the option '-Wl, --as-needed' to the + list of used options here. + * [62d11e3] d/rules: use 'compress-debug-sections' only on 64bit + Do not set 'LDFLAGS += -Wl,--compress-debug-sections=zlib' globally, lets + use this option only if we are on a 64bit architecture as otherwise the + build is failing on 32bit architectures again. We don't want to build any + debug information on 32bit anyway so we don't need this option on these + platforms. + * [6225c44] d/mozconfig.default: adding option for mipsel + We don't have set up any options for the mipsel platform before, but the + build needs some additional options too on this platform to succeed. + * [4e348d9] d/mozconfig.default: disable ion on mips and mipsel + The build will fail on mips{,el} if we have enabled ION, the JaveScript + JIT compiler on these platforms will loose some performance by this. + + -- Carsten Schoenert Tue, 05 Feb 2019 17:11:25 +0100 + + thunderbird (1:60.5.0-2) unstable; urgency=medium + + * [aa2dbe3] d/changelog: update MFSA information for 60.5.0 + The MFSA gut published shortly after the upload of the previous version. + Adding the CVE numbers for MFSA 2019-03 to the changelog accordingly like + happen for 1:60.4.0-1 too. + * [71807dc] rebuild patch queue from patch-queue branch + Due greater changes to the source the previous rebuild and refreshing of + the patch queue wasn't correctly nor complete. Some more rework was needed + and some patches got cherry-picked from firefox-esr. + readded patches (not included upstream): + porting-mips/Bug-1444303-MIPS-Fix-build-failures-after-Bug-1425580-par.patch + porting-mips/Bug-1444834-MIPS-Stubout-MacroAssembler-speculationBarrie.patch + cherry-picked from firefox-esr: + fixes/Bug-1470701-Use-run-time-page-size-when-changing-map.patch + fixes/Bug-1505608-Try-to-ensure-the-bss-section-of-the-elf.patch + porting-powerpc/powerpc-Don-t-use-static-page-sizes-on-powerpc.patch + removed patches (included upstream): + porting-s390x/FTBFS-s390x-Use-jit-none-AtomicOperations-sparc.h-on-s390.patch + * [eaa065b] apparmor: update profile from upstream (commit 7ace41b1) + * [c761425] d/rules: make dh_clean more robust + Remove some regenerated files in dh_clean to the build will not fail in + case the buils needs to be started twice within the same build environment. + * [aa7b033] d/gbp.conf: ignore configure script while importing + The shipped scripts '*configure' in the toplevel folder and also in js/src + aren't needed and we can them filter out while importing the tarballs. + These scripts got (re)created by dh_auto_configure nevertheless. + * [9f0acb2] d/rules: tweek LDFLAGS more to reduce RAM usage + Reduce RAM usage while linking by using compressed sections. + (picked from firefox-esr) + * [62f195d] d/rules: Don't build debug symbols on non 64bit platforms + Reduce even more RAM usage while linking by don't build debugging symbols + if we build on non 64bit architectures. + (picked from firefox-esr) + + -- Carsten Schoenert Fri, 01 Feb 2019 09:24:30 +0100 + + thunderbird (1:60.5.0-1) unstable; urgency=medium + + * d/source.filter: update filter list + Updating the list of files to filter out while repacking the upstream + tarball based on recent work done in debian/experimental. + Unfortunately a lot of semi minimized *.js files from the original + upstream tarball are later needed within some integrated consoles like the + AddOn debugger or the error console. Don't filter out such files for now. + (Closes: #911198) + * [edab34d] d/changelog: update MFSA information for 60.4.0 + While releasing and uploading the Debian version 1:60.4.0-1 no MFSA + information was available, adding this information now into the changelog + entry for 1:60.4.0-1. + * [f3f44a3] New upstream version 60.5.0 + Fixed CVE issues in upstream version 60.5.0 (MFSA 2019-03) + CVE-2018-18500: Use-after-free parsing HTML5 stream + CVE-2018-18505: Privilege escalation through IPC channel messages + CVE-2016-5824: DoS (use-after-free) via a crafted ics file + CVE-2018-18501: Memory safety bugs fixed in Firefox 65, Firefox ESR 60.5, + and Thunderbird 60.5 + * [ccac089] rebuild patch queue from patch-queue branch + removed patches (included upstream): + porting-mips/Bug-1444303-MIPS-Fix-build-failures-after-Bug-1425580-par.patch + porting-mips/Bug-1444834-MIPS-Stubout-MacroAssembler-speculationBarrie.patch + removed patches (dropped by us): + debian-hacks/Don-t-build-testing-suites-and-stuff.patch + debian-hacks/Don-t-build-testing-suites-and-stuff-part-2.patch + refreshed patches: + debian-hacks/Add-another-preferences-directory-for-applications-p.patch + porting-armel/Bug-1463035-Remove-MOZ_SIGNAL_TRAMPOLINE.-r-darchons.patch + porting-kfreebsd-hurd/FTBFS-hurd-fixing-unsupported-platform-Hurd.patch + porting-kfreebsd-hurd/adding-missed-HURD-adoptions.patch + porting-kfreebsd-hurd/ipc-chromium-fix-if-define-for-kFreeBSD-and-Hurd.patch + porting-m68k/Add-m68k-support-to-Thunderbird.patch + porting-s390x/FTBFS-s390x-Use-jit-none-AtomicOperations-sparc.h-on-s390.patch + porting-sparc64/Bug-1434726-Early-startup-crash-on-Linux-sparc64-in-HashI.patch + * [43c28c2] d/s/lintian-overrides: more files to ignore + Related to [4201f43] the override list for the source needs to be adjusted + as we have now more files included there Lintian is complaining about + missing source. These files are no 'real' minimized JS files, but the have + mostly some long lines that are triggered the Lintian check. + + -- Carsten Schoenert Tue, 29 Jan 2019 20:24:29 +0100 thunderbird (1:60.4.0-1) unstable; urgency=medium diff --cc debian/patches/series index 350e07bb3a,f8eb26c65a..bc83dcd5a5 --- a/debian/patches/series +++ b/debian/patches/series @@@ -32,9 -34,6 +34,7 @@@ fixes/Fix-big-endian-build-for-SKIA.pat porting-sparc64/Bug-1434726-Early-startup-crash-on-Linux-sparc64-in-HashI.patch fixes/Use-msse-2-fpmath-C-CXXFLAGS-only-on-x86_64-platforms.patch fixes/Build-also-gdata-provider-as-xpi-file.patch - debian-hacks/Don-t-build-testing-suites-and-stuff-part-2.patch porting-armel/Bug-1463035-Remove-MOZ_SIGNAL_TRAMPOLINE.-r-darchons.patch porting-armel/Avoid-using-vmrs-vmsr-on-armel.patch - porting-mips/Bug-1444303-MIPS-Fix-build-failures-after-Bug-1425580-par.patch - porting-mips/Bug-1444834-MIPS-Stubout-MacroAssembler-speculationBarrie.patch + porting-powerpc/powerpc-Don-t-use-static-page-sizes-on-powerpc.patch +raspbian-rust-triplet-hack.patch diff --cc debian/rules index b8a2b98086,95535a2d30..62a964662d --- a/debian/rules +++ b/debian/rules @@@ -74,19 -84,11 +84,22 @@@ build override_dh_auto_clean: dh_auto_clean --builddirectory=obj-thunderbird + find -type f -name "*.pyc" -exec rm {} \; + rm -rf third_party/python/psutil/tmp + rm -f configure old-configure js/src/configure js/src/old-configure mozconfig.* # needed for thunderbird-l10n rm -rf $(THUNDERBIRD_L10N_BUILDDIR) + find third_party/python/psutil/tmp/ ! -name 'tmpoJXh06.o' -type f -exec rm -f {} + + rm -f third_party/python/psutil/psutil/*.so + rm -rf third_party/python/psutil/build/temp* + rm -rf third_party/python/psutil/build/lib* + find . -name '*.pyc' -delete + rm -f mozconfig.* + #building seems to result in stripping comments out of the configure stubs, + #but the .in files seem to match what is in the source tarball, so copy them over + cp configure.in configure + cp js/src/configure.in js/src/configure + rm -f js/src/old-configure override_dh_auto_configure: # run autoconf for all configure files