lp:ubuntu/natty-security/thunderbird

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #837557: fraudulent DigiNotar certificate issuance

Undecided

Confirmed

Link a bug report

Related blueprints

80. By Chris Coulson on 2012-08-27

* New upstream stable release (THUNDERBIRD_15_0_BUILD1)
  - see LP: #1042165 for USN information

* Update globalmenu-extension to 3.4.1
  + Fixes for LP: #1025011 - HUD search crashes Firefox when Firebug
    is installed
    - Provide our own binding for menupopup nodes which derives from the
      default binding and makes the "state" property work as if there
      were a frame
    - Make all menu nodes reference counted, and hold a strong ref when
      dispatching events, in case the event results in the removal of menu
      nodes
  + Keep the menu we export in sync with the document tree all of the
    time, rather than only when the menus are on screen. The HUD likes to
    open submenus without opening any of its ancestors, which can result in
    us handling events on menu nodes that are no longer in a document
    if an ancestor responds to a bubbled-up event by removing its
    children
  + Ensure we always null check the result of nsIDocument::GetCurrentDoc
  + When tearing down a menu, make sure that we empty out our DbusmenuMenuitem
    in case the parent reuses that item for another menu. Fixes a memory leak
    and an issue where Firebug menu items are duplicated indefinitely each
    time a menu is opened
  + Fix LP: #775080 - Thunderbird with Firetray/MinimizeToTray -
    Global menu disappears
  + Fix LP: #813775 - Hitting an assertion in dbusmenu
  + Fix LP: #775305 - Use style to determine menuitem visibility
* Ensure the Apport hook parses the system preferences on Natty
  - update debian/apport/source_thunderbird.py.in
* Make thunderbird-dbg depend on the correct version of thunderbird
  - update debian/control
* Separate the package name from the application name. This enables us to
  change the package name without having to modify the application (eg,
  to allow us to provide official branded versions of Thunderbird ESR using
  the package name "thunderbird-esr"). In doing this, also drop the patch we
  had to rename Thunderbird in nightlies, and just use some magic in debian/rules
  instead
  - update debian/apport/source_thunderbird.py.in
  - update debian/build/get-orig-source.mk
  - update debian/control.in
  - update debian/control.langpacks
  - update debian/control.langpacks.unavail
  - remove debian/patches/change-moz-app-name.patch
  - update debian/patches/series
  - update debian/rules
  - update debian/thunderbird.install.in
  - update debian/thunderbird.links.in
  - update debian/thunderbird.lintian-overrides.in
  - update debian/thunderbird.postinst.in
  - update debian/thunderbird.postrm.in
  - update debian/thunderbird.preinst.in
  - update debian/thunderbird.sh.in
* Move parts of debian/rules that can be shared with Firefox to a
  new, common file (mozbuild.mk)
  - update debian/rules
  - add debian/build/mozbuild.mk
  - add debian/build/mozvars.mk
  - update debian/build/testsuite.mk
* Make it possible to use the same create-tarball.py for Firefox and
  Thunderbird
  - update debian/build/create-tarball.py
  - update debian/build/get-orig-source.mk
  - add debian/config/tarball.conf
* Switch to source format 3.0
  - add debian/source/format
  - add debian/source/options to diff-ignore the .mozclient.mk file which
    is created during clean, and to pass "--no-preparation"
  - update debian/build/enable-dist-patches.pl
  - rename debian/patches/series => debian/patches/series.in so the source
    isn't built with patches applied
  - add debian/README.source
* Goodbye embedded tarball, and our use of tarball.mk!
  - update debian/build/create-tarball.py
  - update debian/build/extract-file.py
  - update debian/build/get-orig-source.mk
  - update debian/build/mozbuild.mk
* Run the upstream cleansrcdir target during clean
  - update debian/build/mozbuild.mk
* Support the "parallel" option in DEB_BUILD_OPTIONS
  - update debian/build/mozbuild.mk
  - update debian/config/mozconfig.in
* Get rid of pointless python script
  - remove debian/build/extract-file.py
  - update debian/build/mozbuild.mk
* Merge get-orig-source.mk in to mozbuild.mk
  - update debian/build/mozbuild.mk
  - remove debian/build/get-orig-source.mk
* Handle comments in locales.blacklist
  - update debian/build/refresh-supported-locales.pl
  - update debian/config/locales.blacklist
* Fork the upstream text preprocessor and add support for additional
  comparison operators, which means we no longer have to add new
  defines for every distro version specific change we add
  - add debian/build/Expression.py
  - add debian/build/Preprocessor.py
  - update debian/apport/source_thunderbird.py.in
  - update debian/build/mozbuild.mk
  - update debian/config/mozconfig.in
  - update debian/rules
  - update debian/thunderbird.desktop.in
  - update debian/thunderbird.install.in
  - update debian/thunderbird.links.in
  - update debian/thunderbird.postinst.in
  - update debian/thunderbird.postrm.in
  - update debian/thunderbird.preinst.in
* Drop powerpc patches, which are fixed upstream
  - remove debian/patches/fix-dtoa-build-on-ppc.patch and
  - remove debian/patches/fix-build-failure-without-yarr-jit.patch
  - update debian/patches/series.in
* Drop fix-crashreporter-ftbfs-with-gcc4.7.patch, which is fixed upstream

79. By Chris Coulson on 2012-07-13

* New upstream stable release (THUNDERBIRD_14_0_BUILD1)
  - see LP: #1024564 for USN information

[ Chris Coulson <email address hidden> ]
* Update globalmenu-extension to 3.2.5
  - Fix a crash in uGlobalMenu::RecycleList::~RecycleList()
  - Fix LP: #1010580 - update the window event timestamp when handling
    menu events
* Drop patches fixed upstream
  - remove debian/patches/revert-bmo621446-investigation.patch
  - update debian/patches/series
* Refresh patches
  - update debian/patches/add-syspref-dir.patch
* Update desktop file translations
  - update debian/thunderbird.desktop.in
* Add application/x-xpinstall to the MimeType field of the desktop file
  - update debian/thunderbird.desktop.in
* Drop almost all mimetypes from the desktop file. Thunderbird won't display
  any of them if you invoke it with files of these types. It will just
  open a Compose window and add the file as an attachment
  - update debian/thunderbird.desktop.in
* Drop the ability to select between tree/system libraries using a single
  option in debian/rules. It adds additional complexity and was never used
  - update debian/config/mozconfig.in
  - update debian/control.in
  - update debian/thunderbird-dev.links.in
  - update debian/rules
* Shuffle the order of google-breakpad/src/common/dwarf/Makefile.in to fix a
  variable substitution issue, which was causing some objects to be built with
  the wrong compiler flags, resulting in dump_syms crashing (LP: #1002590)
  - add debian/patches/fix-makefile-substitution-bug.patch
* Don't set LD_LIBRARY_PATH in our shell wrapper, and install
  dependentlibs.list instead now
  - update debian/thunderbird.sh.in
  - update debian/thunderbird.install.in
* Drop StartupWMClass from the desktop file now that WM_CLASS is the same
  as the binary name (also fixes LP: #1012158)
  - update debian/thunderbird.desktop.in
  - update debian/rules
* Apport hook improvements:
  - Sort preferences alphabetically in the apport data
  - Treat preferences set in default addons as default prefs so that
    they don't show up in apport data, unless the preference files have
    been modified
  - Support random pref files dropped in to the Thunderbird install folder,
    and preferences from application bundles
  - Fix ordering issues when loading preferences
* Update the Apport blacklist file after dropping thunderbird-bin
  - update debian/apport/blacklist.in

[ Ben Collins <email address hidden> ]
* Cherry pick patch from aurora to use YARR interpreter on ppc
  - update debian/patches/fix-build-failure-without-yarr-jit.patch
  - update debian/patches/series
* Fix ppc build due to new dtoa library
  - add debian/patches/fix-dtoa-build-on-ppc.patch
  - update debian/patches/series

78. By Chris Coulson on 2012-06-15

* New upstream stable release (THUNDERBIRD_13_0_1_BUILD1)
  - see LP: #1007556 for USN information

* Update globalmenu-extension to v3.2.3
  - Reduce our memory footprint a bit, which wasn't really a lot anyway
  - Avoid the use of the component manager for accessing commonly used
    services, where "commonly used" means "accessed when building every
    menu item". This should save some CPU cycles when building or
    refreshing menus
  - Try to recycle menuitems when they are removed from a menu by
    adding contiguous blocks of removed items to a "free list" which
    is emptied asynchronously, and reusing the items in this list when
    new items are added in place of the removed items. This means that
    menus which fully refresh on opening no longer alter the menu
    structure, but instead just update properties on existing nodes.
    This has a few benefits:
    + With no layout changes, unity-panel-service doesn't request
      the entire menu structure, which significantly reduces dbus traffic
      and makes it much faster to refresh the menu contents
    + The size of the menu doesn't change when it is refreshed, which
      eliminates the flicker that used to occur when opening some menus
  - Remove all use of the global observer service for sending our own
    internal notifications around
  - Get rid of a static initializer
  - Don't support older than Thunderbird 11
  - Fix some GError leaks
  - Hide the internal menu when creating a native menu, rather than
    waiting for confirmation that the native menu is registered
    successfully. We don't try to create a native menu if we don't
    find a menu service to register the menu with anyway
  - Keep menu contents updated whilst the menu is open, rather than
    just whilst it is opening
  - Fix LP: #915888 - Formatting toolbar menu entry is inverted
* Refresh build-depends:
  - Bump minimum GTK version to 2.14 as we build with GIO support
  - Add minimum requirement for glib (2.18)
  - Drop libidl-dev, this doesn't appear to be needed now
  - Bump minimum NSPR version to 4.9.0 for --enable-system-nspr builds
  - Bump minimum sqlite version to 3.7.10 for --enable-system-sqlite
    builds
  - Bump minimum NSS version to 3.13.2 for --enable-system-nss builds
* Clean up the file exclude list and add comments for excluded files
  - update debian/build/create-tarball.py
* Make it easy to run Thunderbird in valgrind for builds that are compiled
  with explicit valgrind support
  - update debian/thunderbird.sh.in
* Refresh patches:
  - update debian/patches/revert-bmo621446-investigation.patch
  - update debian/patches/dont-include-hyphenation-patterns.patch
* Drop patches fixed upstream:
  - remove debian/patches/use-menubar-text-colour-on-tabbar.patch
  - remove debian/patches/no-sps-profiler-on-unsupported-archs.patch
  - remove debian/patches/distro-locale-searchplugins.patch
  - remove debian/patches/avoid-dbus-roundtrip-for-httpchannel.patch
  - update debian/patches/series
* Bump debhelper compat to 7
  - update debian/apport/blacklist.in
  - update debian/appoty/source_thunderbird.py.in
  - update debian/compat
  - update debian/config/mozconfig.in
  - update debian/control.in
  - update debian/rules
  - update debian/thunderbird-dev.install.in
  - update debian/thunderbird-dev.links.in
  - update debian/thunderbird-globalmenu.dirs.in
  - update debian/thunderbird-gnome-support.install.in
  - update debian/thunderbird.dirs.in
  - update debian/thunderbird.install.in
  - update debian/thunderbird.links.in
  - update debian/thunderbird.lintian-overrides.in
  - update debian/thunderbird.sh.in
* Use "general.useragent.locale" to select the searchengine locale
  - update debian/patches/distro-locale-searchplugins.patch
  - add debian/patches/dont-override-general-useragent-locale.patch
  - update debian/patches/series
* Drop no-dynamic-nss-softokn.patch. This patch has no documentation and
  it doesn't look like it's actually useful for anything
* Apport hook improvements:
  - Add support for reporting preference defaults that are set by extensions
  - When reporting preferences, record the source of each preference
  - Report plugin packages for plugins that are installed with the
    package manager
  - Add some addon manager related prefs to the whitelist
  - Display additional metadata in the extensions report
  - Take "default-to-compatible" in to account when determining whether
    the user is running incompatible addons
  - Attach submitted crash ID's to bug reports
  - Report if files in the profile folder have broken permissions
* Update compare-locales to 0.9.5
* Fix for NSS libs not being signed, breaking FIPS
  - update debian/rules
* Update StartupWMClass to the correct name
  - update debian/thunderbird.desktop.in
  - update debian/rules

77. By Chris Coulson on 2012-04-29

* New upstream stable release (THUNDERBIRD_12_0_1_BUILD1)
  - see LP: #987305 for USN information

* Update globalmenu-extension to 2.0.6
* Call xvfb-run with "-a" in case there are other servers running on the
  builder
  - update debian/build/testsuite.mk
* Make sure to add a binary libgconf2-4 dependency, as dpkg-shlibdeps
  won't do this for us now.
  - update debian/rules
  - update debian/control{,.in}
* Thunderbird recommends libcanberra0 now that bmo: #635918 has landed
  (LP: #732572)
  - update debian/control{,in}
* Refresh patches
  - update debian/patches/no-sps-profiler-on-unsupported-archs.patch
* Drop patches fixed upstream
  - remove debian/patches/ctypes-callback-reentry-fix.patch
  - update debian/patches/series
* Drop the version number from the install path, like we've done for Firefox
  - update debian/rules
  - update debian/thunderbird-dev.install.in
  - update debian/thunderbird-dev.links.in
  - update debian/thunderbird.dirs.in
  - update debian/thunderbird.links.in
  - update debian/thunderbird.lintian-overrides.in
* Fix LP: #939652 - Web search functionality is broken in Ubuntu builds.
  Ship the localized Opensearch plugins in distribution/searchplugins.
  Also add a patch to use the locale of the global chrome package to
  select the search locale, like we do with Firefox. Add another patch
  to fix various bugs in webSearchProvider.js (see bmo: #733802)
  - add debian/patches/distro-locale-searchplugins.patch
  - update debian/rules
  - update debian/thunderbird.dirs.in
  - update debian/thunderbird.install.in
  - update debian/thunderbird.links.in
  - update debian/vendor.js
* Fix LP: #894166 - Make Thunderbird work with our system hyphenation
  patterns, and stop including our own
  - update debian/vendor.js
  - add debian/patches/dont-include-hyphenation-patterns.patch
  - update debian/patches/series
* Fix LP: #925907 - 12.04 Thunderbird colour theme is unreadable. Use
  -moz-menubartext rather than MenuText for elements with menubar styled
  backgrounds. Should also fix LP: #856939
  - add debian/patches/use-menubar-text-colour-on-tabbar.patch
  - update debian/patches/series
* Make the language packs Architecture: any. Whilst they are actually
  architecture independent, we do install them in to /usr/lib (as the
  extensions location is shared with architecture-specific extensions).
  This also avoids the problem of offering incompatible language pack
  upgrades to users on architectures where Thunderbird fails to build
  (I'm looking at you, powerpc)
  - update debian/control.langpacks
  - update debian/control.langpacks.unavail
  - update debian/rules
  - refresh debian/control
* Disable fix-build-failure-without-yarr-jit.patch, as it needs some work.
  This means that there is currently no powerpc support

76. By Micah Gersten on 2012-03-13

* New upstream release v3.1.20 (THUNDERBIRD_3_1_20_BUILD1)
  - see LP: #953720 for USN information

75. By Micah Gersten on 2012-02-16

* New upstream release v3.1.19 (THUNDERBIRD_3_1_19_BUILD1)
  - see LP: #933399 for USN information

74. By Micah Gersten on 2012-01-31

* New upstream release v3.1.18 (THUNDERBIRD_3_1_18_BUILD2)
  - see USN-1350-1

73. By Micah Gersten on 2011-11-08

* New upstream release v3.1.16 (THUNDERBIRD_3_1_16_BUILD2)
  - see USN-1254-1

72. By Micah Gersten on 2011-09-22

* New upstream release v3.1.15 (THUNDERBIRD_3_1_15_BUILD1)
  - see USN-1213-1

71. By Micah Gersten on 2011-08-31

* New upstream release v3.1.13 (THUNDERBIRD_3_1_13_BUILD1)
  - Distrust and disable DigiNotar Root CA due to fraudulent certificate
    issuance (LP: #837557)