head 1.7; access; symbols pkgsrc-2016Q1:1.6.0.6 pkgsrc-2016Q1-base:1.6 pkgsrc-2015Q4:1.6.0.4 pkgsrc-2015Q4-base:1.6 pkgsrc-2015Q3:1.6.0.2 pkgsrc-2015Q3-base:1.6 pkgsrc-2015Q2:1.5.0.22 pkgsrc-2015Q2-base:1.5 pkgsrc-2015Q1:1.5.0.20 pkgsrc-2015Q1-base:1.5 pkgsrc-2014Q4:1.5.0.18 pkgsrc-2014Q4-base:1.5 pkgsrc-2014Q3:1.5.0.16 pkgsrc-2014Q3-base:1.5 pkgsrc-2014Q2:1.5.0.14 pkgsrc-2014Q2-base:1.5 pkgsrc-2014Q1:1.5.0.12 pkgsrc-2014Q1-base:1.5 pkgsrc-2013Q4:1.5.0.10 pkgsrc-2013Q4-base:1.5 pkgsrc-2013Q3:1.5.0.8 pkgsrc-2013Q3-base:1.5 pkgsrc-2013Q2:1.5.0.6 pkgsrc-2013Q2-base:1.5 pkgsrc-2013Q1:1.5.0.4 pkgsrc-2013Q1-base:1.5 pkgsrc-2012Q4:1.5.0.2 pkgsrc-2012Q4-base:1.5 pkgsrc-2012Q3:1.4.0.2 pkgsrc-2012Q3-base:1.4 pkgsrc-2012Q2:1.3.0.2 pkgsrc-2012Q2-base:1.3 pkgsrc-2012Q1:1.2.0.2 pkgsrc-2012Q1-base:1.2 pkgsrc-2011Q4:1.1.0.18 pkgsrc-2011Q4-base:1.1 pkgsrc-2011Q3:1.1.0.16 pkgsrc-2011Q3-base:1.1 pkgsrc-2011Q2:1.1.0.14 pkgsrc-2011Q2-base:1.1 pkgsrc-2011Q1:1.1.0.12 pkgsrc-2011Q1-base:1.1 pkgsrc-2010Q4:1.1.0.10 pkgsrc-2010Q4-base:1.1 pkgsrc-2010Q3:1.1.0.8 pkgsrc-2010Q3-base:1.1 pkgsrc-2010Q2:1.1.0.6 pkgsrc-2010Q2-base:1.1 pkgsrc-2010Q1:1.1.0.4 pkgsrc-2010Q1-base:1.1 pkgsrc-2009Q4:1.1.0.2 pkgsrc-2009Q4-base:1.1; locks; strict; comment @# @; 1.7 date 2016.04.17.18.33.50; author ryoon; state dead; branches; next 1.6; commitid IRmqpxXR05Y7G03z; 1.6 date 2015.07.09.15.17.35; author ryoon; state Exp; branches; next 1.5; commitid uOBMkh3qU83NGCsy; 1.5 date 2012.10.12.18.28.59; author ryoon; state Exp; branches; next 1.4; 1.4 date 2012.09.02.06.43.44; author ryoon; state Exp; branches; next 1.3; 1.3 date 2012.04.28.16.56.59; author ryoon; state Exp; branches; next 1.2; 1.2 date 2012.03.10.11.42.40; author ryoon; state Exp; branches; next 1.1; 1.1 date 2009.11.29.03.06.44; author tnn; state Exp; branches; next ; desc @@ 1.7 log @Update to 45.0 * Regen patch names Changelog: New Add a Correspondents column combining Sender and Recipient New Much better support for XMPP chatrooms and commands. New Remote content exceptions: Improved options to add exceptions. New Implement option to always use HTML formatting to prevent unexpected format loss when converting messages to plain text. New Use OpenStreetmap for maps (even allow the user to choose from list of map services) New Allow spell checking and dictionary selection in the subject line New Add dropdown in compose to allow specific setting of font size. New Return/Enter in composer will now insert a new paragraph by default (shift-Enter will insert a line break) New Mail.ru supports OAuth authentication. New Allow copying of name and email address from the message header of an email New Allow editing of From when composing a message. Fixed Fixed: When sending e-mail which was composed using Chinese, Japanese or Korean characters, unwanted extra spaces were inserted within the text. Fixed Spell checker checked spelling in invisible HTML parts of the message. Fixed When saving a draft that is edited as new message, original draft was overwritten. Fixed External images not displayed in reply/forward Fixed Properly preserve pre-formatted blocks in message replies. Fixed Crashed in some cases while parsing IMAP messages. Fixed Copy/paste from a plain text editor lost white-space (multiple spaces/blanks, tabs, newlines) Fixed "Open Draft"/"Forward"/"Edit As New"/"Reply" created message composition with incorrect character encoding. Fixed Fixed: Grouped By view sort direction change was broken, plus enabled custom column grouping. Fixed Fixed: New emails into a mailbox did not adhere to sort order by received. Fixed Fixed: Box.com attachments failed to upload. Fixed Fixed: Drag and drop of multiple attachments failed to OS file folder. Fixed XMPP had connection problems for users with large rosters Security bugs: Fixed in Thunderbird 45 2016-37 Font vulnerabilities in the Graphite 2 library 2016-36 Use-after-free during processing of DER encoded keys in NSS 2016-35 Buffer overflow during ASN.1 decoding in NSS 2016-34 Out-of-bounds read in HTML parser following a failed allocation 2016-27 Use-after-free during XML transformations 2016-24 Use-after-free in SetBody 2016-23 Use-after-free in HTML5 string parser 2016-20 Memory leak in libstagefright when deleting an array during MP4 processing 2016-19 Linux video memory DOS with Intel drivers 2016-18 CSP reports fail to strip location information for embedded iframe pages 2016-17 Local file overwriting and potential privilege escalation through CSP reports 2016-16 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7) @ text @$NetBSD: patch-zc,v 1.6 2015/07/09 15:17:35 ryoon Exp $ --- mail/app/nsMailApp.cpp.orig 2015-06-08 17:40:39.000000000 +0000 +++ mail/app/nsMailApp.cpp @@@@ -15,6 +15,26 @@@@ #include #include #endif +/* + * On netbsd-4, ulimit -n is 64 by default; too few for us. + */ +static void netbsd_fixrlimit(void) { + struct rlimit rlp; + if (getrlimit(RLIMIT_NOFILE, &rlp) == -1) { + fprintf(stderr, "warning: getrlimit failed\n"); + return; + } + if (rlp.rlim_cur >= 512) + return; + if (rlp.rlim_max < 512) { + fprintf(stderr, "warning: hard limit of 'ulimit -n' too low\n"); + rlp.rlim_cur = rlp.rlim_max; + } + else + rlp.rlim_cur = 512; + if (setrlimit(RLIMIT_NOFILE, &rlp) == -1) + fprintf(stderr, "warning: setrlimit failed\n"); + } #ifdef XP_MACOSX #include "MacQuirks.h" @@@@ -218,6 +238,7 @@@@ FileExists(const char *path) static nsresult InitXPCOMGlue(const char *argv0, nsIFile **xreDirectory) { + netbsd_fixrlimit(); char exePath[MAXPATHLEN]; nsresult rv = mozilla::BinaryPath::Get(argv0, exePath); @ 1.6 log @Update to 38.0.1 Changelog: What's New New GMail supports OAuth2 authentication, removing the need to manually select "allow less secure applications" in Google options for the account. (bug 849540) New Ship Lightning calendar addon with Thunderbird and enable with an opt-out dialog (bug 1113183) New Filter sent messages (bug 11039) New Filter messages when archived (bug 479823) New Enable search in multiple/all address books (bug 170270) New Add support for Yahoo Messenger in Chat (bug 955574) New Support Internationalized domain name URLs for RSS feeds (Bug 1018589) New Show expanded columns in folder pane (bug 464973) New Allow file-per-message (maildir) local message storage (bug 845952) New Add a Learn more link to the support page in feeds subscribe dialog (bug 1053782) New Add reading position marker line to conversations (bug 760762) New The editor for twitter should show inputtable character count (bug 736002) Changed Thunderbird will no longer use SHA-1 to sign messages (bug 1018259) Changed Removed rarely used character sets: T.61-8bit, non-encoding Mac encoders, VISCII, x-viet-tcvn5712, x-viet-vps x-johab, ARMSCII8 , map us-ascii to windows-1252, ISO-8859-6-I and -E and ISO-8859-8-E, (bug 1068505 and others.) Changed Disable CONDSTORE support for IMAP to prevent discrepancies in IMAP message status (deleted, unread) on some servers (bug 912216) Changed Make OpenSearch queries open in the user's default browser (bug 1120777) Changed Default to using SSL for XMPP and IRC. This might cause issues for self-signed certificates (bug 1122567, bug 1122666) Fixed Replied/forwarded icons disappear after folder repair, detach/delete (bug 840418) Fixed Attachment "Save As" files are displayed in Tools/Saved Files (bug 914517) Fixed Adding unknown email addresses to Mailing list, then deleting ghost duplicate entries from contacts pane, caused dataloss in mailing list (bug 628035) Fixed Web site from RSS feed was not rendered correctly (bug 662907) Fixed Email address with leading/trailing whitespace displayed wrongly with added quotes when composing ["foo"@@bar.com] (bug 286760) Fixed Force display of Sender header if S/MIME sender is the signer (bug 332639) Fixed Addressing autocomplete widget: Typed text in red despite results/matches found if suggestions change by last input (bug 1042561) Fixed Status bar not accessible (bug 934875) Fixed Wrong folder may be deleted when requesting junk delete (bug 1018960) Fixed Severe UI stutter or freezes getting new mail for very large folders (bug 870556) Fixed Automatically rejoin multi-user conversations on reconnect for XMPP (bug 1014472) Fixed Various improvements when using IRC on moznet (bug 1083768 and others) Fixed Significantly improve XMPP support (bug 1085022 and others) Fixed Fixes for connecting to non-standard IRC networks (bug 870556 and others) Fixed Automatically reclaim IRC nicks during a reconnect (bug 1087566) Fixed Changing location in editor doesn't preserve the font when returning to end of text/line (bug 756984) Fixed Inline spell checker loses red underlines after a backspace is used (bug 1100966) Known Issues unresolved Automatic addon compatibility update checks were not completed, so existing addon compatibilities may not be accurate. unresolved Copy/Paste into plain text editor deletes newlines from quoted text (bug 1143570) unresolved Importing data from Outlook or Eudora crashes (bug 917961) Security: Fixed in Thunderbird 38.0.1 2015-58 Mozilla Windows updater can be run outside of application directory 2015-57 Privilege escalation through IPC channel messages 2015-54 Buffer overflow when parsing compressed XML 2015-51 Use-after-free during text processing with vertical text enabled 2015-48 Buffer overflow with SVG content and CSS 2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer 2015-46 Miscellaneous memory safety hazards (rv:38.0 / rv:31.7) @ text @d1 1 a1 1 $NetBSD: patch-zc,v 1.5 2012/10/12 18:28:59 ryoon Exp $ @ 1.5 log @Update to 16.0.1 Changelog: FIXED 16.0.1: Vulnerability outlined here https://blog.mozilla.org/security/2012/10/10/security-vulnerability-in-firefox-16/ NEW We have now added box.com to the list of online storage services that are available for use with Thunderbird Filelink NEW Silent, background updates. Thunderbird will now download and apply updates in the background allowing you to start quickly the next time Thunderbird starts up. FIXED Various fixes and performance improvements FIXED Various security fixes Fixed in Thunderbird 16.0.1 MFSA 2012-89 defaultValue security checks not applied MFSA 2012-88 Miscellaneous memory safety hazards (rv:16.0.1) Fixed in Thunderbird 16 MFSA 2012-87 Use-after-free in the IME State Manager MFSA 2012-86 Heap memory corruption issues found using Address Sanitizer MFSA 2012-85 Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer MFSA 2012-84 Spoofing and script injection through location.hash MFSA 2012-83 Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties MFSA 2012-82 top object and location property accessible by plugins MFSA 2012-81 GetProperty function can bypass security checks MFSA 2012-80 Crash with invalid cast when using instanceof operator MFSA 2012-79 DOS and crash with full screen and history navigation MFSA 2012-77 Some DOMWindowUtils methods bypass security checks MFSA 2012-76 Continued access to initial origin after setting document.domain MFSA 2012-75 select element persistance allows for attacks MFSA 2012-74 Miscellaneous memory safety hazards (rv:16.0/ rv:10.0.8) @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- mail/app/nsMailApp.cpp.orig 2012-10-02 17:01:07.000000000 +0000 d5 1 a5 2 @@@@ -12,6 +12,26 @@@@ #include d7 1 d32 3 a34 3 @@@@ -115,6 +135,7 @@@@ static int do_main(const char *exePath, int main(int argc, char* argv[]) d39 1 a39 1 #ifdef XP_MACOSX @ 1.4 log @Update to 15.0 * Update Mozilla Lightning to 1.7 * Update Enigmail to 1.4.4 (functionality is not tested yet; should be updated) * Regen patches Changelog: NEW Multi-Channel Chat: You now can enjoy real time conversation with your contacts, right from your favorite messaging application. NEW Do Not Track: This option has been implemented as an addition to Search the Web. NEW Ubuntu One is now supported in Filelink - the option to upload large attachments to online storage services. NEW New User Interface: Thunderbird is replicating the new look and feel of Mozilla Firefox in an effort to provide a similar user experience across all Mozilla software desktop or mobile and all platforms. FIXED Various fixes and performance improvements FIXED Various security fixes MFSA 2012-72 Web console eval capable of executing chrome-privileged code MFSA 2012-70 Location object security checks bypassed by chrome code MFSA 2012-68 DOMParser loads linked resources in extensions when parsing text/html MFSA 2012-67 Installer will launch incorrect executable following new installation MFSA 2012-65 Out-of-bounds read in format-number in XSLT MFSA 2012-64 Graphite 2 memory corruption MFSA 2012-63 SVG buffer overflow and use-after-free issues MFSA 2012-62 WebGL use-after-free and memory corruption MFSA 2012-61 Memory corruption with bitmap format images with negative height MFSA 2012-59 Location object can be shadowed using Object.defineProperty MFSA 2012-58 Use-after-free issues found using Address Sanitizer MFSA 2012-57 Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7) @ text @d1 1 a1 1 $NetBSD: patch-zc,v 1.3 2012/04/28 16:56:59 ryoon Exp $ d3 1 a3 1 --- mail/app/nsMailApp.cpp.orig 2012-08-25 00:24:32.000000000 +0000 d5 4 a8 5 @@@@ -19,6 +19,27 @@@@ #include #include +#include d28 1 a28 1 +} d30 3 a32 3 #include "nsCOMPtr.h" #include "nsILocalFile.h" @@@@ -115,6 +136,7 @@@@ static int do_main(const char *exePath, @ 1.3 log @Update to 12.0 * Remove unused option. * Update enigmail to 1.4.1 Changelog: * Global Search results now include message extracts in the results * Various security fixes * Various improvements to RSS feed subscription and general feed handling * Thunderbird now supports add-ons that provide different types of local mail storage @ text @d1 1 a1 1 $NetBSD: patch-zc,v 1.2 2012/03/10 11:42:40 ryoon Exp $ d3 1 a3 1 --- mail/app/nsMailApp.cpp.orig 2012-04-20 22:32:37.000000000 +0000 d5 1 a5 1 @@@@ -52,6 +52,27 @@@@ d33 1 a33 1 @@@@ -151,6 +172,7 @@@@ static int do_main(const char *exePath, @ 1.2 log @Update to 10.0.2 * Add new features. * Fix security bugs * See http://www.mozilla.org/en-US/thunderbird/10.0/releasenotes/ @ text @d1 1 a1 1 $NetBSD: patch-zc,v 1.1 2009/11/29 03:06:44 tnn Exp $ d3 1 a3 1 --- mail/app/nsMailApp.cpp.orig 2012-02-16 10:18:22.000000000 +0000 d5 1 a5 1 @@@@ -48,6 +48,27 @@@@ d33 1 a33 1 @@@@ -147,6 +168,7 @@@@ static int do_main(const char *exePath, d40 1 a40 1 nsresult rv = mozilla::BinaryPath::Get(argv[0], exePath); @ 1.1 log @update to thunderbird-3.0rc1. The 2.x version is still available in mail/thunderbird2. Major changes: - New Mail Account Setup Wizard - Redesigned Mail Toolbar - Tabbed Email Messages - Smart Folders - New Message Summary View - Column Headings - Message Archive - Activity Manager - New Add-ons Manager - Improved Address Book - Improved Gmail Integration Full release notes: http://www.mozillamessaging.com/en-US/thunderbird/3.0rc1/releasenotes/ @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- mail/app/nsMailApp.cpp.orig 2009-11-22 03:44:31.000000000 +0100 d5 1 a5 1 @@@@ -44,6 +44,27 @@@@ d33 1 a33 1 @@@@ -83,6 +104,7 @@@@ public: d38 1 a38 1 ScopedLogging log; d40 1 a40 1 nsCOMPtr appini; @