From: Paweł Gołaszewski <blues@pld-linux.org>
Date: Mon, 15 Jun 2009 13:51:17 +0000 (+0000)
Subject: - multiple security blockers
X-Git-Tag: icedove-7_0_1-0_1~161
X-Git-Url: http://git.pld-linux.org/?a=commitdiff_plain;h=2a0600bd3371dd287da62cc4e074767b666f7cad;p=packages%2Fthunderbird.git

- multiple security blockers

Changed files:
    TODO -> 1.1
    icedove.spec -> 1.24
---

diff --git a/TODO b/TODO
new file mode 100644
index 0000000..c40f489
--- /dev/null
+++ b/TODO
@@ -0,0 +1,3 @@
+# TODO:
+- CHECK all features of enigmail
+- separate spec for enigmail
diff --git a/icedove.spec b/icedove.spec
index 2a40de5..40a555e 100644
--- a/icedove.spec
+++ b/icedove.spec
@@ -1,8 +1,4 @@
 #
-# TODO:
-#   - CHECK all features of enigmail
-#   - separate spec for enigmail
-#
 # Conditional builds
 %bcond_without	enigmail	# don't build enigmail - GPG/PGP support
 %bcond_without	gnomeui		# disable gnomeui support
@@ -43,6 +39,20 @@ Patch6:		%{name}-myspell.patch
 Patch7:		%{name}-regionNames.patch
 Patch8:		%{name}-prefs.patch
 URL:		http://www.pld-linux.org/Packages/Icedove
+# http://www.mozilla.org/security/announce/2009/mfsa2009-24.html
+# http://www.mozilla.org/security/announce/2009/mfsa2009-29.html
+# http://www.mozilla.org/security/announce/2009/mfsa2009-32.html
+# Solution: update to 2.0.0.22:
+BuildRequires:	security(CVE-2009-1392)
+BuildRequires:	security(CVE-2009-1832)
+BuildRequires:	security(CVE-2009-1833)
+BuildRequires:	security(CVE-2009-1838)
+BuildRequires:	security(CVE-2009-1841)
+#
+# http://www.mozilla.org/security/announce/2009/mfsa2009-27.html
+# Solution: update to 2.0.0.22:
+BuildRequires:	security(CVE-2009-1836)
+#
 %{?with_gnomevfs:BuildRequires:	GConf2-devel >= 1.2.1}
 BuildRequires:	automake
 BuildRequires:	freetype-devel >= 1:2.1.8