commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2024-05-21 18:37:20
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1880 (New)
Package is "MozillaThunderbird"
Tue May 21 18:37:20 2024 rev:335 rq:1175556 version:115.11.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2024-05-06 17:53:07.798815629 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1880/MozillaThunderbird.changes
2024-05-21 18:37:44.005225612 +0200
@@ -1,0 +2,20 @@
+Tue May 14 21:57:55 UTC 2024 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.11.0
+ MFSA 2024-23 (bsc#1224056)
+ * CVE-2024-4367 (bmo#1893645)
+Arbitrary JavaScript execution in PDF.js
+ * CVE-2024-4767 (bmo#1878577)
+IndexedDB files retained in private browsing mode
+ * CVE-2024-4768 (bmo#1886082)
+Potential permissions request bypass via clickjacking
+ * CVE-2024-4769 (bmo#1886108)
+Cross-origin responses could be distinguished between script
+and non-script content-types
+ * CVE-2024-4770 (bmo#1893270)
+Use-after-free could occur when printing to PDF
+ * CVE-2024-4777 (bmo#1878199, bmo#1893340)
+Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
+and Thunderbird 115.11
+
+---
Old:
l10n-115.10.2.tar.xz
thunderbird-115.10.2.source.tar.xz
thunderbird-115.10.2.source.tar.xz.asc
New:
l10n-115.11.0.tar.xz
thunderbird-115.11.0.source.tar.xz
thunderbird-115.11.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.6bX4yL/_old 2024-05-21 18:37:54.281612602 +0200
+++ /var/tmp/diff_new_pack.6bX4yL/_new 2024-05-21 18:37:54.281612602 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.10.2
-%define orig_version 115.10.2
+%define mainver%major.11.0
+%define orig_version 115.11.0
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.10.2.tar.xz -> l10n-115.11.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-115.10.2.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1880/l10n-115.11.0.tar.xz
differ: char 122916, line 502
++ tar_stamps ++
--- /var/tmp/diff_new_pack.6bX4yL/_old 2024-05-21 18:37:55.485658380 +0200
+++ /var/tmp/diff_new_pack.6bX4yL/_new 2024-05-21 18:37:55.489658532 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.10.2"
+VERSION="115.11.0"
VERSION_SUFFIX=""
PREV_VERSION="115.10.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="c00947d502870f27efdbf2170db1c698bf947975"
-RELEASE_TIMESTAMP="20240426204036"
+RELEASE_TAG="5b6eb36cb2ba6e8cd3508d681ca416099b330c89"
+RELEASE_TIMESTAMP="20240513132046"
++ thunderbird-115.10.2.source.tar.xz -> thunderbird-115.11.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.10.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1880/thunderbird-115.11.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2024-05-06 17:52:58
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1880 (New)
Package is "MozillaThunderbird"
Mon May 6 17:52:58 2024 rev:334 rq:1171966 version:115.10.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2024-04-21 20:28:51.881408092 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1880/MozillaThunderbird.changes
2024-05-06 17:53:07.798815629 +0200
@@ -1,0 +2,8 @@
+Sat May 4 20:06:54 UTC 2024 - Andreas Stieger
+
+- Mozilla Thunderbird 115.10.2:
+ https://www.thunderbird.net/en-US/thunderbird/115.10.2/releasenotes/
+ This release is identical to 115.10.1, other than changing the
+ Update channel for self-updating builds to ESR. (bmo#1893271)
+
+---
Old:
l10n-115.10.1.tar.xz
thunderbird-115.10.1.source.tar.xz
thunderbird-115.10.1.source.tar.xz.asc
New:
l10n-115.10.2.tar.xz
thunderbird-115.10.2.source.tar.xz
thunderbird-115.10.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.fdarHY/_old 2024-05-06 17:53:27.631538928 +0200
+++ /var/tmp/diff_new_pack.fdarHY/_new 2024-05-06 17:53:27.635539074 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.10.1
-%define orig_version 115.10.1
+%define mainver%major.10.2
+%define orig_version 115.10.2
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.10.1.tar.xz -> l10n-115.10.2.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.fdarHY/_old 2024-05-06 17:53:27.923549577 +0200
+++ /var/tmp/diff_new_pack.fdarHY/_new 2024-05-06 17:53:27.927549723 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.10.1"
+VERSION="115.10.2"
VERSION_SUFFIX=""
-PREV_VERSION="115.10.0"
+PREV_VERSION="115.10.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="24e9961527d4cbb7f3f92687c40ee2fa96fb44cb"
-RELEASE_TIMESTAMP="20240417192958"
+RELEASE_TAG="c00947d502870f27efdbf2170db1c698bf947975"
+RELEASE_TIMESTAMP="20240426204036"
++ thunderbird-115.10.1.source.tar.xz -> thunderbird-115.10.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.10.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1880/thunderbird-115.10.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2024-04-21 20:27:23
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26366 (New)
Package is "MozillaThunderbird"
Sun Apr 21 20:27:23 2024 rev:333 rq:1169354 version:115.10.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2024-03-22 15:34:29.303531122 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26366/MozillaThunderbird.changes
2024-04-21 20:28:51.881408092 +0200
@@ -1,0 +2,34 @@
+Fri Apr 19 06:34:22 UTC 2024 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.10.1
+ https://www.thunderbird.net/en-US/thunderbird/115.10.1/releasenotes/
+ * fixed hangup introduced with 115.10.0 (bmo#1891889)
+
+---
+Sun Apr 14 11:09:32 UTC 2024 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.10.0
+ https://www.thunderbird.net/en-US/thunderbird/115.10.0/releasenotes/
+ MFSA 2024-20 (bsc#1222535)
+ * CVE-2024-3852 (bmo#1883542)
+GetBoundName in the JIT returned the wrong object
+ * CVE-2024-3854 (bmo#1884552)
+Out-of-bounds-read after mis-optimized switch statement
+ * CVE-2024-3857 (bmo#1886683)
+Incorrect JITting of arguments led to use-after-free during
+garbage collection
+ * CVE-2024-2609 (bmo#1866100)
+Permission prompt input delay could expire when not in focus
+ * CVE-2024-3859 (bmo#1874489)
+Integer-overflow led to out-of-bounds-read in the OpenType sanitizer
+ * CVE-2024-3861 (bmo#1883158)
+Potential use-after-free due to AlignedBuffer self-move
+ * CVE-2024-3863 (bmo#1885855)
+Download Protections were bypassed by .xrm-ms files on Windows
+ * CVE-2024-3302 (bmo#1881183)
+Denial of Service using HTTP/2 CONTINUATION frames
+ * CVE-2024-3864 (bmo#1888333)
+Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
+and Thunderbird 115.10
+
+---
Old:
l10n-115.9.0.tar.xz
thunderbird-115.9.0.source.tar.xz
thunderbird-115.9.0.source.tar.xz.asc
New:
l10n-115.10.1.tar.xz
thunderbird-115.10.1.source.tar.xz
thunderbird-115.10.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.tCHSft/_old 2024-04-21 20:29:06.961961690 +0200
+++ /var/tmp/diff_new_pack.tCHSft/_new 2024-04-21 20:29:06.961961690 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.9.0
-%define orig_version 115.9.0
+%define mainver%major.10.1
+%define orig_version 115.10.1
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.9.0.tar.xz -> l10n-115.10.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-115.9.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26366/l10n-115.10.1.tar.xz
differ: char 13, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.tCHSft/_old 2024-04-21 20:29:07.169969326 +0200
+++ /var/tmp/diff_new_pack.tCHSft/_new 2024-04-21 20:29:07.173969473 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.9.0"
+VERSION="115.10.1"
VERSION_SUFFIX=""
-PREV_VERSION="115.8.1"
+PREV_VERSION="115.10.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="1e95a096fd3c6053c4eeeca935eb8227cf9ee25c"
-RELEASE_TIMESTAMP="20240314154241"
+RELEASE_TAG="24e9961527d4cbb7f3f92687c40ee2fa96fb44cb"
+RELEASE_TIMESTAMP="20240417192958"
++ thunderbird-115.9.0.source.tar.xz -> thunderbird-115.10.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.9.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.26366/thunderbird-115.10.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2024-03-07 18:30:09
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770 (New)
Package is "MozillaThunderbird"
Thu Mar 7 18:30:09 2024 rev:331 rq:1155826 version:115.8.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2024-02-26 19:45:55.547069046 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770/MozillaThunderbird.changes
2024-03-07 18:31:12.004962946 +0100
@@ -1,0 +2,9 @@
+Tue Mar 5 09:09:34 CET 2024 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.8.1
+ https://www.thunderbird.net/en-US/thunderbird/115.8.1/releasenotes/
+ MFSA 2024-11
+ * CVE-2024-1936 (bmo#1860977)
+Leaking of encrypted email subjects to other conversations
+
+---
Old:
l10n-115.8.0.tar.xz
thunderbird-115.8.0.source.tar.xz
thunderbird-115.8.0.source.tar.xz.asc
New:
l10n-115.8.1.tar.xz
thunderbird-115.8.1.source.tar.xz
thunderbird-115.8.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.Lgsjxg/_old 2024-03-07 18:31:56.650610377 +0100
+++ /var/tmp/diff_new_pack.Lgsjxg/_new 2024-03-07 18:31:56.650610377 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.8.0
-%define orig_version 115.8.0
+%define mainver%major.8.1
+%define orig_version 115.8.1
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.8.0.tar.xz -> l10n-115.8.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.Lgsjxg/_old 2024-03-07 18:31:56.890619233 +0100
+++ /var/tmp/diff_new_pack.Lgsjxg/_new 2024-03-07 18:31:56.890619233 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.8.0"
+VERSION="115.8.1"
VERSION_SUFFIX=""
-PREV_VERSION="115.7.0"
+PREV_VERSION="115.8.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="7b8fc4b9edc8825b4f16238a3715c0f785283b1c"
-RELEASE_TIMESTAMP="20240216174500"
+RELEASE_TAG="5b8708dc0314dab535d9357b5dfd6b2bef9441c8"
+RELEASE_TIMESTAMP="20240304230937"
++ thunderbird-115.8.0.source.tar.xz -> thunderbird-115.8.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.8.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770/thunderbird-115.8.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2024-02-26 19:45:04
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770 (New)
Package is "MozillaThunderbird"
Mon Feb 26 19:45:04 2024 rev:330 rq:1150520 version:115.8.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2024-01-24 19:05:52.120657552 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770/MozillaThunderbird.changes
2024-02-26 19:45:55.547069046 +0100
@@ -1,0 +2,64 @@
+Mon Feb 19 22:01:04 UTC 2024 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.8.0
+ MFSA 2024-07 (bsc#1220048)
+ * CVE-2024-1546 (bmo#1843752)
+Out-of-bounds memory read in networking channels
+ * CVE-2024-1547 (bmo#1877879)
+Alert dialog could have been spoofed on another site
+ * CVE-2024-1548 (bmo#1832627)
+Fullscreen Notification could have been hidden by select
+element
+ * CVE-2024-1549 (bmo#1833814)
+Custom cursor could obscure the permission dialog
+ * CVE-2024-1550 (bmo#1860065)
+Mouse cursor re-positioned unexpectedly could have led to
+unintended permission grants
+ * CVE-2024-1551 (bmo#1864385)
+Multipart HTTP Responses would accept the Set-Cookie header
+in response parts
+ * CVE-2024-1552 (bmo#1874502)
+Incorrect code generation on 32-bit ARM devices
+ * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
+bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
+bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
+bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
+Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
+and Thunderbird 115.8
+ * new: Added option to show packet dump when OpenPGP fails to
+decrypt (bmo#1874504)
+ * fixed: Thunderbird slowed down significantly when opening
+email files (.eml) (bmo#1863957)
+ * fixed: Inbox view intermittently reverted to default view
+after moving or deleting messages (bmo#1725127)
+ * fixed: Size of collapsed folders in folder pane did not
+include size of subfolders (bmo#1870641)
+ * fixed: Hovering over folder does not always expand subfolders
+(bmo#1873101)
+ * fixed: Switching to thread pane of a folder using keyboard
+navigation did not focus top message (bmo#1869557)
+ * fixed: Clicking "Sent unsent messages" in Outbox context menu
+while in offline mode did not prompt user to go online
+(bmo#1873487)
+ * fixed: Mail tab-specific Unified Toolbar buttons received
+focus incorrectly (bmo#1872239)
+ * fixed: Quick Filter settings did not persist when Quick
+Filter bar was turned off (bmo#1850266)
+ * fixed: Quick Filters were unusually slow (bmo#1849650)
+ * fixed: OpenPGP Key Manager filtering did not work
+(bmo#1873655)
+ * fixed: OpenPGP sometimes attempted to decrypt message with
+incorrect key (bmo#1865620)
+ * fixed: Autoconfig failed on servers that did not support
+OAuth2 (bmo#1869122)
+ * fixed: Opening different attachments with the same name in
+different messages could cause attachment files to become
+conflated (bmo#1873023)
+ * fixed: Overflowed attachment list could not be scrolled
+(bmo#1871343)
+ * fixed: Passwords disappeared from password manager list after
+applying and clearing filters (bmo#1874646)
+ * fixed: Cookies in cookie manager list disappeared after
+applying and then clearing filters (bmo#1876733)
+
+---
Old:
l10n-115.7.0.tar.xz
thunderbird-115.7.0.source.tar.xz
thunderbird-115.7.0.source.tar.xz.asc
New:
l10n-115.8.0.tar.xz
thunderbird-115.8.0.source.tar.xz
thunderbird-115.8.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.zJYjiF/_old 2024-02-26 19:46:06.391461084 +0100
+++ /var/tmp/diff_new_pack.zJYjiF/_new 2024-02-26 19:46:06.391461084 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.7.0
-%define orig_version 115.7.0
+%define mainver%major.8.0
+%define orig_version 115.8.0
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.7.0.tar.xz -> l10n-115.8.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-115.7.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770/l10n-115.8.0.tar.xz
differ: char 491591, line 1963
++ mozilla.keyring ++
--- /var/tmp/diff_new_pack.zJYjiF/_old 2024-02-26 19:46:06.547466724 +0100
+++
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2024-01-24 19:05:45
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.16006 (New)
Package is "MozillaThunderbird"
Wed Jan 24 19:05:45 2024 rev:329 rq:1141172 version:115.7.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2024-01-12 23:47:02.826156186 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.16006/MozillaThunderbird.changes
2024-01-24 19:05:52.120657552 +0100
@@ -1,0 +2,26 @@
+Sun Jan 21 09:10:11 UTC 2024 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.7.0
+ https://www.thunderbird.net/en-US/thunderbird/115.7.0/releasenotes/
+ MFSA 2024-04 (bsc#1218955)
+ * CVE-2024-0741 (bmo#1864587)
+Out of bounds write in ANGLE
+ * CVE-2024-0742 (bmo#1867152)
+Failure to update user input timestamp
+ * CVE-2024-0746 (bmo#1660223)
+Crash when listing printers on Linux
+ * CVE-2024-0747 (bmo#1764343)
+Bypass of Content Security Policy when directive unsafe-inline was set
+ * CVE-2024-0749 (bmo#1813463)
+Phishing site popup could show local origin in address bar
+ * CVE-2024-0750 (bmo#1863083)
+Potential permissions request bypass via clickjacking
+ * CVE-2024-0751 (bmo#1865689)
+Privilege escalation through devtools
+ * CVE-2024-0753 (bmo#1870262)
+HSTS policy on subdomain could bypass policy of upper domain
+ * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
+Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
+and Thunderbird 115.7
+
+---
Old:
l10n-115.6.1.tar.xz
thunderbird-115.6.1.source.tar.xz
thunderbird-115.6.1.source.tar.xz.asc
New:
l10n-115.7.0.tar.xz
thunderbird-115.7.0.source.tar.xz
thunderbird-115.7.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.j9mSuz/_old 2024-01-24 19:06:18.717617064 +0100
+++ /var/tmp/diff_new_pack.j9mSuz/_new 2024-01-24 19:06:18.721617208 +0100
@@ -1,5 +1,5 @@
#
-# spec file
+# spec file for package MozillaThunderbird
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2006-2023 Wolfgang Rosenauer
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.6.1
-%define orig_version 115.6.1
+%define mainver%major.7.0
+%define orig_version 115.7.0
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -217,7 +217,7 @@
Recommends: libotr5
Recommends: libpulse0
Requires(post): desktop-file-utils
-Requires(postun):desktop-file-utils
+Requires(postun): desktop-file-utils
%define libgssapi libgssapi_krb5.so.2
ExcludeArch:armv6l armv6hl
++ l10n-115.6.1.tar.xz -> l10n-115.7.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-115.6.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.16006/l10n-115.7.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.j9mSuz/_old 2024-01-24 19:06:18.925624568 +0100
+++ /var/tmp/diff_new_pack.j9mSuz/_new 2024-01-24 19:06:18.929624712 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.6.1"
+VERSION="115.7.0"
VERSION_SUFFIX=""
-PREV_VERSION="115.6.0"
+PREV_VERSION="115.6.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="eb6676c39f4e74cdb122a559a3306fe4f46ce4e7"
-RELEASE_TIMESTAMP="20240105183125"
+RELEASE_TAG="403b56578d94234d5cbda0f73fe18caae7c17b49"
+RELEASE_TIMESTAMP="20240119095007"
++ thunderbird-115.6.1.source.tar.xz -> thunderbird-115.7.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.6.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.16006/thunderbird-115.7.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2024-01-12 23:46:51
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.21961 (New)
Package is "MozillaThunderbird"
Fri Jan 12 23:46:51 2024 rev:328 rq:1138352 version:115.6.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-12-20 21:02:50.367739710 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.21961/MozillaThunderbird.changes
2024-01-12 23:47:02.826156186 +0100
@@ -1,0 +2,24 @@
+Wed Jan 10 09:18:01 UTC 2024 - Martin Sirringhaus
+
+- Mozilla Thunderbird 115.6.1
+ https://www.thunderbird.net/en-US/thunderbird/115.6.1/releasenotes/
+ * new: OAuth2 now supported for comcast.net (bmo#1844810)
+ * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
+(conditional STORE) enabled (bmo#1839256)
+ * fixed: Replying to a collapsed thread via keyboard shortcut
+(Ctrl+R/Cmd+R) opened a reply for every message in the thread
+(bmo#1866819)
+ * fixed: Enabling Grouped By view after reversing sort order of
+column header caused messages to be grouped incorrectly
+(bmo#1868794)
+ * fixed: Opening thread pane context menu via keyboard did not
+always scroll view to selection (bmo#1867532)
+ * fixed: New mail indicator for POP3 accounts did not indicate
+new messages ready to be downloaded (bmo#1870619)
+ * fixed: Messages could not be moved to folders using Message >
+Move To if text or a link in the message had been clicked on
+first (bmo#1868474)
+ * fixed: MIME part boundaries were not properly terminated
+(bmo#1805558)
+
+---
Old:
l10n-115.6.0.tar.xz
thunderbird-115.6.0.source.tar.xz
thunderbird-115.6.0.source.tar.xz.asc
New:
l10n-115.6.1.tar.xz
thunderbird-115.6.1.source.tar.xz
thunderbird-115.6.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.uLcNR0/_old 2024-01-12 23:47:14.486582966 +0100
+++ /var/tmp/diff_new_pack.uLcNR0/_new 2024-01-12 23:47:14.502583551 +0100
@@ -1,7 +1,7 @@
#
# spec file
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2006-2023 Wolfgang Rosenauer
#
# All modifications and additions to the file contributed by third parties
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.6.0
-%define orig_version 115.6.0
+%define mainver%major.6.1
+%define orig_version 115.6.1
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.6.0.tar.xz -> l10n-115.6.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.uLcNR0/_old 2024-01-12 23:47:15.566622496 +0100
+++ /var/tmp/diff_new_pack.uLcNR0/_new 2024-01-12 23:47:15.618624400 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.6.0"
+VERSION="115.6.1"
VERSION_SUFFIX=""
-PREV_VERSION="115.5.2"
+PREV_VERSION="115.6.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="fe0d3990d4cb7d12d7ce40cc6646b9c0fbf04667"
-RELEASE_TIMESTAMP="20231214145928"
+RELEASE_TAG="eb6676c39f4e74cdb122a559a3306fe4f46ce4e7"
+RELEASE_TIMESTAMP="20240105183125"
++ thunderbird-115.6.0.source.tar.xz -> thunderbird-115.6.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.6.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.21961/thunderbird-115.6.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-11-08 22:18:54
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.17445 (New)
Package is "MozillaThunderbird"
Wed Nov 8 22:18:54 2023 rev:322 rq:1124229 version:115.4.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-10-25 18:04:14.129293893 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.17445/MozillaThunderbird.changes
2023-11-08 22:20:12.224630403 +0100
@@ -1,0 +2,7 @@
+Sat Nov 4 15:34:08 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.4.2
+ https://www.thunderbird.net/en-US/thunderbird/115.4.2/releasenotes
+- build using rust/cargo 1.72 (1.69 about to be dropped from Factory)
+
+---
Old:
l10n-115.4.1.tar.xz
thunderbird-115.4.1.source.tar.xz
thunderbird-115.4.1.source.tar.xz.asc
New:
l10n-115.4.2.tar.xz
thunderbird-115.4.2.source.tar.xz
thunderbird-115.4.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.PUxKoW/_old 2023-11-08 22:20:28.309221294 +0100
+++ /var/tmp/diff_new_pack.PUxKoW/_new 2023-11-08 22:20:28.321221735 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.4.1
-%define orig_version 115.4.1
+%define mainver%major.4.2
+%define orig_version 115.4.2
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -96,8 +96,8 @@
%else
BuildRequires: gcc-c++
%endif
-BuildRequires: cargo1.69
-BuildRequires: rust1.69
+BuildRequires: cargo1.72
+BuildRequires: rust1.72
%if 0%{useccache} != 0
BuildRequires: ccache
%endif
++ l10n-115.4.1.tar.xz -> l10n-115.4.2.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.PUxKoW/_old 2023-11-08 22:20:28.745237312 +0100
+++ /var/tmp/diff_new_pack.PUxKoW/_new 2023-11-08 22:20:28.745237312 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.4.1"
+VERSION="115.4.2"
VERSION_SUFFIX=""
-PREV_VERSION="115.4.0"
+PREV_VERSION="115.4.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="f9f6aede26e0991093e5935b0d85b1cb9de3c346"
-RELEASE_TIMESTAMP="20231024181440"
+RELEASE_TAG="713f0c8db2933f87d523d36e25fa733bea6694b3"
+RELEASE_TIMESTAMP="20231104124805"
++ thunderbird-115.4.1.source.tar.xz -> thunderbird-115.4.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.4.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.17445/thunderbird-115.4.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-10-25 18:03:34
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.24901 (New)
Package is "MozillaThunderbird"
Wed Oct 25 18:03:34 2023 rev:321 rq:1120173 version:115.4.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-10-12 11:35:51.883471441 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.24901/MozillaThunderbird.changes
2023-10-25 18:04:14.129293893 +0200
@@ -1,0 +2,46 @@
+Tue Oct 24 20:52:32 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.4.1
+ https://www.thunderbird.net/en-US/thunderbird/115.4.1/releasenotes
+ https://www.thunderbird.net/en-US/thunderbird/115.4.0/releasenotes
+ MFSA 2023-47 (bsc#1216338)
+ * CVE-2023-5721 (bmo#1830820)
+Queued up rendering could have allowed websites to clickjack
+ * CVE-2023-5732 (bmo#1690979, bmo#1836962)
+Address bar spoofing via bidirectional characters
+ * CVE-2023-5724 (bmo#1836705)
+Large WebGL draw could have led to a crash
+ * CVE-2023-5725 (bmo#1845739)
+WebExtensions could open arbitrary URLs
+ * CVE-2023-5726 (bmo#1846205)
+Full screen notification obscured by file open dialog on macOS
+ * CVE-2023-5727 (bmo#1847180)
+Download Protections were bypassed by .msix, .msixbundle,
+.appx, and .appxbundle files on Windows
+ * CVE-2023-5728 (bmo#1852729)
+Improper object tracking during GC in the JavaScript engine
+could have led to a crash.
+ * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694, bmo#1848833,
+bmo#1850191, bmo#1850259, bmo#1852596, bmo#1853201, bmo#1854002,
+bmo#1855306, bmo#1855640, bmo#1856695)
+Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
+and Thunderbird 115.4.1
+- removed obsolete mozilla-bmo1846703.patch
+
+---
+Tue Oct 24 16:58:42 UTC 2023 - Andreas Stieger
+
+- Mozilla Thunderbird 115.3.3
+ * fixed: "Folder Location" toolbar button did not work for
+local folders (bmo#1843979)
+ * fixed: "Copy to again" option disappeared from
+context menu after copying to Gmail folder with non-ASCII
+name (bmo#1856712)
+ * fixed: Default reply identity did not use "Delivered-To"
+address when catch-all was active (bmo#1815559)
+ * fixed: "View Headers All" did not work when selected in
+standalone message window (bmo#1855316)
+ * fixed: Viewing the mail filter log displayed an error if no
+log file was present (bmo#1789244)
+
+---
Old:
l10n-115.3.2.tar.xz
mozilla-bmo1846703.patch
thunderbird-115.3.2.source.tar.xz
thunderbird-115.3.2.source.tar.xz.asc
New:
l10n-115.4.1.tar.xz
thunderbird-115.4.1.source.tar.xz
thunderbird-115.4.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.MKIM3g/_old 2023-10-25 18:04:29.973826771 +0200
+++ /var/tmp/diff_new_pack.MKIM3g/_new 2023-10-25 18:04:29.993827444 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.3.2
-%define orig_version 115.3.2
+%define mainver%major.4.1
+%define orig_version 115.4.1
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -203,7 +203,6 @@
Patch20:mozilla-partial-revert-1768632.patch
Patch21:mozilla-bmo1775202.patch
Patch22:mozilla-rust-disable-future-incompat.patch
-Patch23:mozilla-bmo1846703.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
++ l10n-115.3.2.tar.xz -> l10n-115.4.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.MKIM3g/_old 2023-10-25 18:04:30.901857982 +0200
+++ /var/tmp/diff_new_pack.MKIM3g/_new 2023-10-25 18:04:30.905858117 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.3.2"
+VERSION="115.4.1"
VERSION_SUFFIX=""
-PREV_VERSION="115.3.1"
+PREV_VERSION="115.4.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="33f0ab5fb689db8eeebb23c0eae3bff1b7aec37e"
-RELEASE_TIMESTAMP="20231010142850"
+RELEASE_TAG="f9f6aede26e0991093e5935b0d85b1cb9de3c346"
+RELEASE_TIMESTAMP="20231024181440"
++ thunderbird-115.3.2.source.tar.xz -> thunderbird-115.4.1.source.tar.xz
++
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-10-11 23:54:45
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1807 (New)
Package is "MozillaThunderbird"
Wed Oct 11 23:54:45 2023 rev:320 rq:1116802 version:115.3.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-10-01 21:23:51.960031622 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1807/MozillaThunderbird.changes
2023-10-12 11:35:51.883471441 +0200
@@ -1,0 +2,7 @@
+Tue Oct 10 07:23:52 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.3.2
+ Bugfix release
+ https://www.thunderbird.net/en-US/thunderbird/115.3.2/releasenotes
+
+---
Old:
l10n-115.3.1.tar.xz
thunderbird-115.3.1.source.tar.xz
thunderbird-115.3.1.source.tar.xz.asc
New:
l10n-115.3.2.tar.xz
thunderbird-115.3.2.source.tar.xz
thunderbird-115.3.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.bd3TxO/_old 2023-10-12 11:36:01.387815352 +0200
+++ /var/tmp/diff_new_pack.bd3TxO/_new 2023-10-12 11:36:01.387815352 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.3.1
-%define orig_version 115.3.1
+%define mainver%major.3.2
+%define orig_version 115.3.2
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.3.1.tar.xz -> l10n-115.3.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-115.3.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1807/l10n-115.3.2.tar.xz
differ: char 1536145, line 6138
++ tar_stamps ++
--- /var/tmp/diff_new_pack.bd3TxO/_old 2023-10-12 11:36:01.579822300 +0200
+++ /var/tmp/diff_new_pack.bd3TxO/_new 2023-10-12 11:36:01.583822444 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.3.1"
+VERSION="115.3.2"
VERSION_SUFFIX=""
-PREV_VERSION="115.3.0"
+PREV_VERSION="115.3.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="42b3addbca70f64493bdbede7f3f66dc40641a0a"
-RELEASE_TIMESTAMP="20230928194049"
+RELEASE_TAG="33f0ab5fb689db8eeebb23c0eae3bff1b7aec37e"
+RELEASE_TIMESTAMP="20231010142850"
++ thunderbird-115.3.1.source.tar.xz -> thunderbird-115.3.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.3.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1807/thunderbird-115.3.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-10-01 21:22:40
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28202 (New)
Package is "MozillaThunderbird"
Sun Oct 1 21:22:40 2023 rev:319 rq:1114452 version:115.3.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-09-28 00:29:41.641766062 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28202/MozillaThunderbird.changes
2023-10-01 21:23:51.960031622 +0200
@@ -1,0 +2,9 @@
+Fri Sep 29 06:44:26 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.3.1
+ MFSA 2023-45 (bsc#1215814)
+ * CVE-2023-5217 (bmo#180)
+Heap buffer overflow in libvpx
+- Add mozilla-bmo1846703.patch
+
+---
Old:
l10n-115.3.0.tar.xz
thunderbird-115.3.0.source.tar.xz
thunderbird-115.3.0.source.tar.xz.asc
New:
l10n-115.3.1.tar.xz
mozilla-bmo1846703.patch
thunderbird-115.3.1.source.tar.xz
thunderbird-115.3.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.azJIyt/_old 2023-10-01 21:24:05.436519253 +0200
+++ /var/tmp/diff_new_pack.azJIyt/_new 2023-10-01 21:24:05.440519398 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.3.0
-%define orig_version 115.3.0
+%define mainver%major.3.1
+%define orig_version 115.3.1
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -203,6 +203,7 @@
Patch20:mozilla-partial-revert-1768632.patch
Patch21:mozilla-bmo1775202.patch
Patch22:mozilla-rust-disable-future-incompat.patch
+Patch23:mozilla-bmo1846703.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
++ l10n-115.3.0.tar.xz -> l10n-115.3.1.tar.xz ++
++ mozilla-bmo1846703.patch ++
diff -rup a/media/ffvpx/libavcodec/x86/mathops.h
b/media/ffvpx/libavcodec/x86/mathops.h
--- a/media/ffvpx/libavcodec/x86/mathops.h 2023-09-28 20:57:25.994782086
+0200
+++ b/media/ffvpx/libavcodec/x86/mathops.h 2023-09-28 20:57:50.084785348
+0200
@@ -35,12 +35,20 @@
static av_always_inline av_const int MULL(int a, int b, unsigned shift)
{
int rt, dummy;
+if (__builtin_constant_p(shift))
__asm__ (
"imull %3 \n\t"
"shrdl %4, %%edx, %%eax \n\t"
:"=a"(rt), "=d"(dummy)
-:"a"(a), "rm"(b), "ci"((uint8_t)shift)
+:"a"(a), "rm"(b), "i"(shift & 0x1F)
);
+else
+__asm__ (
+"imull %3 \n\t"
+"shrdl %4, %%edx, %%eax \n\t"
+:"=a"(rt), "=d"(dummy)
+:"a"(a), "rm"(b), "c"((uint8_t)shift)
+);
return rt;
}
@@ -113,19 +121,31 @@ __asm__ volatile(\
// avoid +32 for shift optimization (gcc should do that ...)
#define NEG_SSR32 NEG_SSR32
static inline int32_t NEG_SSR32( int32_t a, int8_t s){
+if (__builtin_constant_p(s))
__asm__ ("sarl %1, %0\n\t"
: "+r" (a)
- : "ic" ((uint8_t)(-s))
+ : "i" (-s & 0x1F)
);
+else
+__asm__ ("sarl %1, %0\n\t"
+ : "+r" (a)
+ : "c" ((uint8_t)(-s))
+);
return a;
}
#define NEG_USR32 NEG_USR32
static inline uint32_t NEG_USR32(uint32_t a, int8_t s){
+if (__builtin_constant_p(s))
__asm__ ("shrl %1, %0\n\t"
: "+r" (a)
- : "ic" ((uint8_t)(-s))
+ : "i" (-s & 0x1F)
);
+else
+__asm__ ("shrl %1, %0\n\t"
+ : "+r" (a)
+ : "c" ((uint8_t)(-s))
+);
return a;
}
++ tar_stamps ++
--- /var/tmp/diff_new_pack.azJIyt/_old 2023-10-01 21:24:05.660527359 +0200
+++ /var/tmp/diff_new_pack.azJIyt/_new 2023-10-01 21:24:05.664527503 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.3.0"
+VERSION="115.3.1"
VERSION_SUFFIX=""
-PREV_VERSION="115.2.3"
+PREV_VERSION="115.3.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="1218aebde8d83fe28bbdfe39c63d7a10044829c2"
-RELEASE_TIMESTAMP="20230926115257"
+RELEASE_TAG="42b3addbca70f64493bdbede7f3f66dc40641a0a"
+RELEASE_TIMESTAMP="20230928194049"
++ thunderbird-115.3.0.source.tar.xz -> thunderbird-115.3.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.3.0.source.tar.xz
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-09-28 00:25:51
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.23327 (New)
Package is "MozillaThunderbird"
Thu Sep 28 00:25:51 2023 rev:318 rq:1113844 version:115.3.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-09-21 22:22:39.472015186 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.23327/MozillaThunderbird.changes
2023-09-28 00:29:41.641766062 +0200
@@ -1,0 +2,20 @@
+Tue Sep 26 07:15:31 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.3.0
+ https://www.thunderbird.net/en-US/thunderbird/115.3.0/releasenotes
+ MFSA 2023-43 (bsc#1215575)
+ * CVE-2023-5168 (bmo#1846683)
+Out-of-bounds write in FilterNodeD2D1
+ * CVE-2023-5169 (bmo#1846685)
+Out-of-bounds write in PathOps
+ * CVE-2023-5171 (bmo#1851599)
+Use-after-free in Ion Compiler
+ * CVE-2023-5174 (bmo#1848454)
+Double-free in process spawning on Windows
+ * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
+bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
+bmo#1851195)
+Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
+and Thunderbird 115.3
+
+---
Old:
l10n-115.2.3.tar.xz
thunderbird-115.2.3.source.tar.xz
thunderbird-115.2.3.source.tar.xz.asc
New:
l10n-115.3.0.tar.xz
thunderbird-115.3.0.source.tar.xz
thunderbird-115.3.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.MvPB49/_old 2023-09-28 00:29:53.758203412 +0200
+++ /var/tmp/diff_new_pack.MvPB49/_new 2023-09-28 00:29:53.762203556 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.2.3
-%define orig_version 115.2.3
+%define mainver%major.3.0
+%define orig_version 115.3.0
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.2.3.tar.xz -> l10n-115.3.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.MvPB49/_old 2023-09-28 00:29:53.982211498 +0200
+++ /var/tmp/diff_new_pack.MvPB49/_new 2023-09-28 00:29:53.986211642 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.2.3"
+VERSION="115.3.0"
VERSION_SUFFIX=""
-PREV_VERSION="115.2.2"
+PREV_VERSION="115.2.3"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="637b9308f926ec203608ab5e5da0de39311ec0c9"
-RELEASE_TIMESTAMP="20230919180656"
+RELEASE_TAG="1218aebde8d83fe28bbdfe39c63d7a10044829c2"
+RELEASE_TIMESTAMP="20230926115257"
++ thunderbird-115.2.3.source.tar.xz -> thunderbird-115.3.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.2.3.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.23327/thunderbird-115.3.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-09-21 22:22:38
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770 (New)
Package is "MozillaThunderbird"
Thu Sep 21 22:22:38 2023 rev:317 rq:1112694 version:115.2.3
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-09-13 20:46:51.598986719 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770/MozillaThunderbird.changes
2023-09-21 22:22:39.472015186 +0200
@@ -1,0 +2,7 @@
+Wed Sep 20 06:27:29 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 115.2.3
+ Bugfix release:
+ https://www.thunderbird.net/en-US/thunderbird/115.2.3/releasenotes
+
+---
Old:
l10n-115.2.2.tar.xz
thunderbird-115.2.2.source.tar.xz
thunderbird-115.2.2.source.tar.xz.asc
New:
l10n-115.2.3.tar.xz
thunderbird-115.2.3.source.tar.xz
thunderbird-115.2.3.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.fQeeWp/_old 2023-09-21 22:22:54.300553268 +0200
+++ /var/tmp/diff_new_pack.fQeeWp/_new 2023-09-21 22:22:54.304553412 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.2.2
-%define orig_version 115.2.2
+%define mainver%major.2.3
+%define orig_version 115.2.3
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.2.2.tar.xz -> l10n-115.2.3.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.fQeeWp/_old 2023-09-21 22:22:54.552562412 +0200
+++ /var/tmp/diff_new_pack.fQeeWp/_new 2023-09-21 22:22:54.556562557 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.2.2"
+VERSION="115.2.3"
VERSION_SUFFIX=""
-PREV_VERSION="115.2.1"
+PREV_VERSION="115.2.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="1ec58b37ccc264122e9902c6be26701189de5575"
-RELEASE_TIMESTAMP="20230912052425"
+RELEASE_TAG="637b9308f926ec203608ab5e5da0de39311ec0c9"
+RELEASE_TIMESTAMP="20230919180656"
++ thunderbird-115.2.2.source.tar.xz -> thunderbird-115.2.3.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.2.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1770/thunderbird-115.2.3.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-09-13 20:44:58
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1766 (New)
Package is "MozillaThunderbird"
Wed Sep 13 20:44:58 2023 rev:316 rq:1110767 version:115.2.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-09-07 21:15:33.135335043 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1766/MozillaThunderbird.changes
2023-09-13 20:46:51.598986719 +0200
@@ -1,0 +2,33 @@
+Tue Sep 12 21:08:50 UTC 2023 - Andreas Stieger
+
+- Mozilla Thunderbird 115.2.2
+ https://www.thunderbird.net/en-US/thunderbird/115.2.2/releasenotes
+ MFSA 2023-40 (bsc#1215231)
+ * CVE-2023-4863 (bmo# bmo#1852649)
+Heap buffer overflow in libwebp
+
+---
+Tue Sep 12 21:00:52 UTC 2023 - Andreas Stieger
+
+- Mozilla Thunderbird 115.2.1
+ https://www.thunderbird.net/en-US/thunderbird/115.2.1/releasenotes
+ * new: Column separators are now shown between all columns in
+tree view (bmo#1847441)
+ * fixed: New mail notification always opened message in message
+pane, even if pane was disabled (bmo#1840092)
+ * fixed: After moving an IMAP message to another folder, the
+incorrect message was selected in the message list
+(bmo#1845376)
+ * fixed: Adding a tag to an IMAP message opened in a tab failed
+(bmo#1844452)
+ * fixed: Junk/Spam folders were not always shown in Unified
+Folders mode (bmo#1838672)
+ * fixed: Middle-clicking a folder or message did not open it in
+a background tab, as in previous versions (bmo#1842482)
+ * fixed: Settings tab visual improvements: Advanced Fonts
+dialog, Section headers hidden behind search box
+(bmo#1717382,bmo#1846751)
+ * fixed: Various visual and style fixes
+(bmo#1843707,bmo#1849823)
+
+---
Old:
l10n-115.2.0.tar.xz
thunderbird-115.2.0.source.tar.xz
thunderbird-115.2.0.source.tar.xz.asc
New:
l10n-115.2.2.tar.xz
thunderbird-115.2.2.source.tar.xz
thunderbird-115.2.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.WNYxmE/_old 2023-09-13 20:47:03.675417532 +0200
+++ /var/tmp/diff_new_pack.WNYxmE/_new 2023-09-13 20:47:03.679417676 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %%major.99
%define major 115
-%define mainver%major.2.0
-%define orig_version 115.2.0
+%define mainver%major.2.2
+%define orig_version 115.2.2
%define orig_suffix%nil
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-115.2.0.tar.xz -> l10n-115.2.2.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.WNYxmE/_old 2023-09-13 20:47:03.899425524 +0200
+++ /var/tmp/diff_new_pack.WNYxmE/_new 2023-09-13 20:47:03.903425667 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr115"
-VERSION="115.2.0"
+VERSION="115.2.2"
VERSION_SUFFIX=""
-PREV_VERSION="115.1.1"
+PREV_VERSION="115.2.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr115;
-RELEASE_TAG="ffd49506d62c329824f7adb4896602a8c77ec7e8"
-RELEASE_TIMESTAMP="20230828145448"
+RELEASE_TAG="1ec58b37ccc264122e9902c6be26701189de5575"
+RELEASE_TIMESTAMP="20230912052425"
++ thunderbird-115.2.0.source.tar.xz -> thunderbird-115.2.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-115.2.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1766/thunderbird-115.2.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2023-09-07 21:13:51 Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1766 (New) Package is "MozillaThunderbird" Thu Sep 7 21:13:51 2023 rev:315 rq:1109528 version:115.2.0 Changes: --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2023-08-03 17:29:28.595652087 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1766/MozillaThunderbird.changes 2023-09-07 21:15:33.135335043 +0200 @@ -2 +2 @@ -Tue Aug 1 20:15:02 UTC 2023 - Wolfgang Rosenauer +Sun Aug 27 08:17:34 UTC 2023 - Wolfgang Rosenauer @@ -4,2 +4,53 @@ -- Mozilla Thunderbird 102.14.0 - MFSA 2023-32 (bsc#1213746) +- Mozilla Thunderbird 115.2.0 + https://www.thunderbird.net/en-US/thunderbird/115.2.0/releasenotes + MFSA 2023-38 (bsc#1214606) + * CVE-2023-4573 (bmo#1846687) +Memory corruption in IPC CanvasTranslator + * CVE-2023-4574 (bmo#1846688) +Memory corruption in IPC ColorPickerShownCallback + * CVE-2023-4575 (bmo#1846689) +Memory corruption in IPC FilePickerShownCallback + * CVE-2023-4576 (bmo#1846694) +Integer Overflow in RecordedSourceSurfaceCreation + * CVE-2023-4577 (bmo#1847397) +Memory corruption in JIT UpdateRegExpStatics + * CVE-2023-4051 (bmo#1821884) +Full screen notification obscured by file open dialog + * CVE-2023-4578 (bmo#1839007) +Error reporting methods in SpiderMonkey could have triggered +an Out of Memory Exception + * CVE-2023-4053 (bmo#1839079) +Full screen notification obscured by external program + * CVE-2023-4580 (bmo#1843046) +Push notifications saved to disk unencrypted + * CVE-2023-4581 (bmo#1843758) +XLL file extensions were downloadable without warnings + * CVE-2023-4582 (bmo#1773874) +Buffer Overflow in WebGL glGetProgramiv + * CVE-2023-4583 (bmo#1842030) +Browsing Context potentially not cleared when closing Private +Window + * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080, +bmo#1846526, bmo#1847529) +Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, +Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 + * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082, +bmo#1847904, bmo#1848999) +Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, +and Thunderbird 115.2 + +--- +Tue Aug 15 07:53:02 UTC 2023 - Wolfgang Rosenauer + +- Mozilla Thunderbird 115.1.1 + bugfixes as documented here + https://www.thunderbird.net/en-US/thunderbird/115.1.1/releasenotes + +--- +Tue Aug 1 07:51:37 UTC 2023 - Wolfgang Rosenauer + +- Mozilla Thunderbird 115.1.0 + New major release with Supernova UI + Releasenotes for 115.0: + https://www.thunderbird.net/en-US/thunderbird/115.0/releasenotes + MFSA 2023-33 (bsc#1213746) @@ -17,0 +69,2 @@ + * CVE-2023-4052 (bmo#1824420) +File deletion and privilege escalation through Firefox uninstaller @@ -22,2 +75,2 @@ - * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235, -bmo#1842325, bmo#1843847) + * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, +bmo#1843847) @@ -25,0 +79,14 @@ + * CVE-2023-4057 (bmo#1841682) +Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, +and Thunderbird 115.1 +- requires NSS 3.90 +- add patches: + mozilla-rust-disable-future-incompat.patch + mozilla-partial-revert-1768632.patch + mozilla-bmo1775202.patch +- removed obsolete patches: + gcc13-fix.patch + mozilla-bmo1568145.patch + mozilla-bmo1005535.patch + mozilla-s390x-skia-gradient.patch +- update create-tar.sh Old: gcc13-fix.patch l10n-102.14.0.tar.xz mozilla-bmo1005535.patch mozilla-bmo1568145.patch mozilla-s390x-skia-gradient.patch thunderbird-102.14.0.source.tar.xz thunderbird-102.14.0.source.tar.xz.asc New: l10n-115.2.0.tar.xz mozilla-bmo1775202.patch mozilla-partial-revert-1768632.patch mozilla-rust-disable-future-incompat.patch thunderbird-115.2.0.source.tar.xz thunderbird-115.2.0.source.tar.xz.asc Other differences: -- ++ MozillaThunderbird.spec ++ --- /var/tmp/diff_new_pack.lLkz3d/_old 2023-09-07 21:15:45.863790057 +0200 +++ /var/tmp/diff_new_pack.lLkz3d/_new 2023-09-07 21:15:45.863790057 +0200 @@ -2,7 +2,7 @@ # spec file # # Copyright (c) 2023 SUSE LLC -# 2006-2023 Wolfgang Rosenauer +# Copyright (c) 2006-2023 Wolfgang Rosenauer # # All modifications and additions to the file contributed by third parties # remain the
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-08-03 17:29:27
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.22712 (New)
Package is "MozillaThunderbird"
Thu Aug 3 17:29:27 2023 rev:314 rq:1102113 version:102.14.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-07-26 13:25:47.700669930 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.22712/MozillaThunderbird.changes
2023-08-03 17:29:28.595652087 +0200
@@ -1,0 +2,26 @@
+Tue Aug 1 20:15:02 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.14.0
+ MFSA 2023-32 (bsc#1213746)
+ * CVE-2023-4045 (bmo#1833876)
+Offscreen Canvas could have bypassed cross-origin restrictions
+ * CVE-2023-4046 (bmo#1837686)
+Incorrect value used during WASM compilation
+ * CVE-2023-4047 (bmo#1839073)
+Potential permissions request bypass via clickjacking
+ * CVE-2023-4048 (bmo#1841368)
+Crash in DOMParser due to out-of-memory conditions
+ * CVE-2023-4049 (bmo#1842658)
+Fix potential race conditions when releasing platform objects
+ * CVE-2023-4050 (bmo#1843038)
+Stack buffer overflow in StorageManager
+ * CVE-2023-4054 (bmo#1840777)
+Lack of warning when opening appref-ms files
+ * CVE-2023-4055 (bmo#1782561)
+Cookie jar overflow caused unexpected cookie jar state
+ * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
+bmo#1842325, bmo#1843847)
+Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
+Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
+
+---
@@ -6 +32 @@
- * CVE-2023-3417 (bmo#1835582)
+ * CVE-2023-3417 (bmo#1835582, boo#1213658)
Old:
l10n-102.13.1.tar.xz
thunderbird-102.13.1.source.tar.xz
thunderbird-102.13.1.source.tar.xz.asc
New:
l10n-102.14.0.tar.xz
thunderbird-102.14.0.source.tar.xz
thunderbird-102.14.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.JxaRxV/_old 2023-08-03 17:30:08.387892914 +0200
+++ /var/tmp/diff_new_pack.JxaRxV/_new 2023-08-03 17:30:08.395892963 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.13.1
-%define orig_version 102.13.1
+%define mainver%major.14.0
+%define orig_version 102.14.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.13.1.tar.xz -> l10n-102.14.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.JxaRxV/_old 2023-08-03 17:30:08.775895263 +0200
+++ /var/tmp/diff_new_pack.JxaRxV/_new 2023-08-03 17:30:08.787895335 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.13.1"
+VERSION="102.14.0"
VERSION_SUFFIX=""
-PREV_VERSION="102.13.0"
+PREV_VERSION="102.13.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="c1181d5307e80c773d3d2781b18f7bdd2353d66d"
-RELEASE_TIMESTAMP="20230724161345"
+RELEASE_TAG="d83d81499d87f2360995ae0448fcaa40e0cd106a"
+RELEASE_TIMESTAMP="20230801134847"
++ thunderbird-102.13.1.source.tar.xz -> thunderbird-102.14.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.13.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.22712/thunderbird-102.14.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-07-26 13:24:38
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.15225 (New)
Package is "MozillaThunderbird"
Wed Jul 26 13:24:38 2023 rev:313 rq:1100766 version:102.13.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-07-09 20:39:11.204713675 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.15225/MozillaThunderbird.changes
2023-07-26 13:25:47.700669930 +0200
@@ -1,0 +2,8 @@
+Tue Jul 25 06:56:46 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.13.1
+ MFSA 2023-28
+ * CVE-2023-3417 (bmo#1835582)
+File Extension Spoofing using the Text Direction Override Character
+
+---
Old:
l10n-102.13.0.tar.xz
thunderbird-102.13.0.source.tar.xz
thunderbird-102.13.0.source.tar.xz.asc
New:
l10n-102.13.1.tar.xz
thunderbird-102.13.1.source.tar.xz
thunderbird-102.13.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.5P7Muk/_old 2023-07-26 13:26:03.472765114 +0200
+++ /var/tmp/diff_new_pack.5P7Muk/_new 2023-07-26 13:26:03.480765162 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.13.0
-%define orig_version 102.13.0
+%define mainver%major.13.1
+%define orig_version 102.13.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.13.0.tar.xz -> l10n-102.13.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.5P7Muk/_old 2023-07-26 13:26:03.700766490 +0200
+++ /var/tmp/diff_new_pack.5P7Muk/_new 2023-07-26 13:26:03.704766514 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.13.0"
+VERSION="102.13.1"
VERSION_SUFFIX=""
-PREV_VERSION="102.12.0"
+PREV_VERSION="102.13.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="2bf94c4d195694485df5d632f2453888cf4f6657"
-RELEASE_TIMESTAMP="20230704155023"
+RELEASE_TAG="c1181d5307e80c773d3d2781b18f7bdd2353d66d"
+RELEASE_TIMESTAMP="20230724161345"
++ thunderbird-102.13.0.source.tar.xz -> thunderbird-102.13.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.13.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.15225/thunderbird-102.13.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-07-09 20:39:07
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.23466 (New)
Package is "MozillaThunderbird"
Sun Jul 9 20:39:07 2023 rev:312 rq:1097755 version:102.13.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-06-11 19:57:40.600026783 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.23466/MozillaThunderbird.changes
2023-07-09 20:39:11.204713675 +0200
@@ -1,0 +2,21 @@
+Fri Jul 7 12:47:11 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.13.0
+ * Upstream RNP version numbers now recognized as official in about:support
+ MFSA 2023-24 (bsc#1212438)
+ * CVE-2023-37201 (bmo#1826002)
+Use-after-free in WebRTC certificate generation
+ * CVE-2023-37202 (bmo#1834711)
+Potential use-after-free from compartment mismatch in
+SpiderMonkey
+ * CVE-2023-37207 (bmo#1816287)
+Fullscreen notification obscured
+ * CVE-2023-37208 (bmo#1837675)
+Lack of warning when opening Diagcab files
+ * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
+bmo#1836550, bmo#1837450)
+Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
+and Thunderbird 102.13
+- mozilla-llvm16.patch has been applied upstream, remove it here
+
+---
Old:
l10n-102.12.0.tar.xz
mozilla-llvm16.patch
thunderbird-102.12.0.source.tar.xz
thunderbird-102.12.0.source.tar.xz.asc
New:
l10n-102.13.0.tar.xz
thunderbird-102.13.0.source.tar.xz
thunderbird-102.13.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.rUn9XO/_old 2023-07-09 20:39:23.248786141 +0200
+++ /var/tmp/diff_new_pack.rUn9XO/_new 2023-07-09 20:39:23.256786189 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.12.0
-%define orig_version 102.12.0
+%define mainver%major.13.0
+%define orig_version 102.13.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -207,7 +207,6 @@
Patch21:one_swizzle_to_rule_them_all.patch
Patch22:svg-rendering.patch
Patch23:gcc13-fix.patch
-Patch24:mozilla-llvm16.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -297,7 +296,6 @@
%patch21 -p1
%patch22 -p1
%patch23 -p1
-%patch24 -p1
%endif
%build
++ l10n-102.12.0.tar.xz -> l10n-102.13.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.rUn9XO/_old 2023-07-09 20:39:23.460787417 +0200
+++ /var/tmp/diff_new_pack.rUn9XO/_new 2023-07-09 20:39:23.464787440 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.12.0"
+VERSION="102.13.0"
VERSION_SUFFIX=""
-PREV_VERSION="102.11.2"
+PREV_VERSION="102.12.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="9d42734e12597ccdb59fee178bf369d8c328dcad"
-RELEASE_TIMESTAMP="20230604001933"
+RELEASE_TAG="2bf94c4d195694485df5d632f2453888cf4f6657"
+RELEASE_TIMESTAMP="20230704155023"
++ thunderbird-102.12.0.source.tar.xz -> thunderbird-102.13.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.12.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.23466/thunderbird-102.13.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-06-11 19:54:52
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.15902 (New)
Package is "MozillaThunderbird"
Sun Jun 11 19:54:52 2023 rev:311 rq:1091973 version:102.12.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-05-27 20:38:50.067086049 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.15902/MozillaThunderbird.changes
2023-06-11 19:57:40.600026783 +0200
@@ -1,0 +2,19 @@
+Sun Jun 4 08:22:58 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.12.0:
+ MFSA 2023-21 (bsc#1211922)
+ * CVE-2023-34414 (bmo#1695986)
+Click-jacking certificate exceptions through rendering lag
+ * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
+bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
+bmo#1830206, bmo#1830795, bmo#189)
+Memory safety bugs fixed in Thunderbird 102.12
+ * fixed: "Searching the directory for recipients certificates"
+popup could block compose window when "S/MIME reminder" was
+enabled and using an LDAP address book (bmo#1833651)
+ * fixed: Some elements still used animations with "prefers-
+reduced-motion" set (bmo#1833353)
+ * fixed: Visual and theme improvements
+(bmo#1832943,bmo#1832990)
+
+---
@@ -5,4 +24,15 @@
- * fixed POP3 regressions ins 102.11.1
- * https://www.thunderbird.net/en-US/thunderbird/102.11.2/releasenotes/
- Thunderbird 102.11.1
- * https://www.thunderbird.net/en-US/thunderbird/102.11.1/releasenotes/
+ * fixed: Thunderbird 102.11.1 contained POP3 client regressions
+with offline mode and TLS certificate overrides
+(bmo#1801286,bmo#1816596,bmo#1798785)
+- Includes changes from Thunderbird 102.11.1
+ * fixed: POP message retrieval stopped after a network error
+occurred and connectivity was restored (bmo#1798785)
+ * fixed: Reused SMTP connections sometimes silently
+disconnected, causing timeouts (bmo#1766382)
+ * fixed: Thunderbird could freeze if saving a sent message to
+IMAP failed (bmo#1745130)
+ * fixed: Creating OpenPGP keys with no expiration was not
+possible (bmo#1830094)
+ * fixed: News reader did not always issue GROUP command after
+authentication with remote server, preventing Thundebird from
+displaying or refreshing news from the server (bmo#1824377)
Old:
l10n-102.11.2.tar.xz
thunderbird-102.11.2.source.tar.xz
thunderbird-102.11.2.source.tar.xz.asc
New:
l10n-102.12.0.tar.xz
thunderbird-102.12.0.source.tar.xz
thunderbird-102.12.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.5USlm1/_old 2023-06-11 19:57:48.664075412 +0200
+++ /var/tmp/diff_new_pack.5USlm1/_new 2023-06-11 19:57:48.668075435 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.11.2
-%define orig_version 102.11.2
+%define mainver%major.12.0
+%define orig_version 102.12.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.11.2.tar.xz -> l10n-102.12.0.tar.xz ++
++ mozilla-llvm16.patch ++
--- /var/tmp/diff_new_pack.5USlm1/_old 2023-06-11 19:57:48.852076545 +0200
+++ /var/tmp/diff_new_pack.5USlm1/_new 2023-06-11 19:57:48.856076569 +0200
@@ -14,44 +14,6 @@
Co-Authored-by: Patrick Walton
-From c03b37697a1e117995ea76203e5c0ce7d6696c4e Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Emilio=20Cobos=20=C3=81lvarez?=
-Date: Wed, 9 Nov 2022 13:33:19 +0100
-Subject: [PATCH] ir: Don't crash with built-in unexposed types from libclang.
-
-This fixes #2325.
-
-The issue is that `__bf16` is not exposed at all by libclang, which
-causes us to crash. It's a bit of a shame libclang doesn't expose it but
-there's no rust equivalent I think, so this should be ok for now.
-
-Unfortunately no test because the header crashes older clang versions.
-
-diff --git a/Cargo.lock b/Cargo.lock
-index 163674ec5d..28456ee0ba 100644
a/Cargo.lock
-+++ b/Cargo.lock
-@@ -394,8 +394,6 @@ dependencies = [
- [[package]]
- name = "bindgen"
- version = "0.56.0"
--source = "registry+https://github.com/rust-lang/crates.io-index;
--checksum = "2da379dbebc0b76ef63ca68d8fc6e71c0f13e59432e0987e508c1820e6ab5239"
- dependencies = [
- "bitflags",
- "cexpr",
-diff --git a/Cargo.toml b/Cargo.toml
-index d918adae95..1298f7 100644
a/Cargo.toml
-+++ b/Cargo.toml
-@@ -117,6 +117,7 @@ packed_simd = {
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-05-27 20:38:25
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533 (New)
Package is "MozillaThunderbird"
Sat May 27 20:38:25 2023 rev:310 rq:1089289 version:102.11.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-05-11 12:34:32.203012848 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533/MozillaThunderbird.changes
2023-05-27 20:38:50.067086049 +0200
@@ -1,0 +2,10 @@
+Sat May 27 07:46:10 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.11.2
+ * fixed POP3 regressions ins 102.11.1
+ * https://www.thunderbird.net/en-US/thunderbird/102.11.2/releasenotes/
+ Thunderbird 102.11.1
+ * https://www.thunderbird.net/en-US/thunderbird/102.11.1/releasenotes/
+- updated mozilla.keyring
+
+---
Old:
l10n-102.11.0.tar.xz
thunderbird-102.11.0.source.tar.xz
thunderbird-102.11.0.source.tar.xz.asc
New:
l10n-102.11.2.tar.xz
thunderbird-102.11.2.source.tar.xz
thunderbird-102.11.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.f7JQp6/_old 2023-05-27 20:39:00.803150199 +0200
+++ /var/tmp/diff_new_pack.f7JQp6/_new 2023-05-27 20:39:00.807150223 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.11.0
-%define orig_version 102.11.0
+%define mainver%major.11.2
+%define orig_version 102.11.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.11.0.tar.xz -> l10n-102.11.2.tar.xz ++
++ mozilla.keyring ++
--- /var/tmp/diff_new_pack.f7JQp6/_old 2023-05-27 20:39:00.983151275 +0200
+++ /var/tmp/diff_new_pack.f7JQp6/_new 2023-05-27 20:39:00.987151299 +0200
@@ -1,5 +1,5 @@
-This file contains the PGP keys of various developers that work on
-Mozilla and its subprojects (such as Firefox and Thunderbird).
+This file contains the public PGP key that is used to sign builds and
+artifacts of Mozilla projects (such as Firefox and Thunderbird).
Please realize that this file itself or the public key servers may be
compromised. You are encouraged to validate the authenticity of these keys in
@@ -14,6 +14,7 @@
sub rsa4096 2017-06-22 [S] [expired: 2019-06-22]
sub rsa4096 2019-05-30 [S] [expires: 2021-05-29]
sub rsa4096 2021-05-17 [S] [expires: 2023-05-17]
+sub rsa4096 2023-05-05 [S] [expires: 2025-05-04]
-BEGIN PGP PUBLIC KEY BLOCK-
@@ -364,7 +365,42 @@
PcHqLWpFDtEdLv6YtOwScE0eYb5/SA3XsmK3qgzEAzBfchwl4PqAhiQAf/tbx5Eg
AUbFmwhEcgd9xMY5w6+8/5FjoXwHYmdfjKT9iD7QxF3LnymskoKQQGWBHiwJjaA8
LYPpopUg9we00zNdSGNXv1Lau9AM//ATiusH8iLJj33ofQh6FviQG6W3TlLPqx/o
-IxxNj5bPAQy6dRKB1TxlWr4X0pUWxuqBeObPoHS9j0ysxKPruw==
-=81zK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 MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-05-11 12:33:56
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533 (New)
Package is "MozillaThunderbird"
Thu May 11 12:33:56 2023 rev:309 rq:1086176 version:102.11.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-04-28 16:25:51.314881181 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533/MozillaThunderbird.changes
2023-05-11 12:34:32.203012848 +0200
@@ -1,0 +2,25 @@
+Thu May 11 06:45:57 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.11.0
+ * https://www.thunderbird.net/en-US/thunderbird/102.11.0/releasenotes
+ MFSA 2023-18 (bsc#1211175)
+ * CVE-2023-32205 (bmo#1753339, bmo#1753341)
+Browser prompts could have been obscured by popups
+ * CVE-2023-32206 (bmo#1824892)
+Crash in RLBox Expat driver
+ * CVE-2023-32207 (bmo#1826116)
+Potential permissions request bypass via clickjacking
+ * CVE-2023-32211 (bmo#1823379)
+Content process crash due to invalid wasm code
+ * CVE-2023-32212 (bmo#1826622)
+Potential spoof due to obscured address bar
+ * CVE-2023-32213 (bmo#182)
+Potential memory corruption in FileReader::DoReadData()
+ * CVE-2023-32214 (bmo#1828716)
+Potential DoS via exposed protocol handlers
+ * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
+bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024, bmo#1827144,
+bmo#1827359, bmo#1830186)
+Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
+
+---
Old:
l10n-102.10.1.tar.xz
thunderbird-102.10.1.source.tar.xz
thunderbird-102.10.1.source.tar.xz.asc
New:
l10n-102.11.0.tar.xz
thunderbird-102.11.0.source.tar.xz
thunderbird-102.11.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.vTfSlP/_old 2023-05-11 12:34:53.003115074 +0200
+++ /var/tmp/diff_new_pack.vTfSlP/_new 2023-05-11 12:34:53.007115093 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.10.1
-%define orig_version 102.10.1
+%define mainver%major.11.0
+%define orig_version 102.11.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.10.1.tar.xz -> l10n-102.11.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.vTfSlP/_old 2023-05-11 12:34:53.267116371 +0200
+++ /var/tmp/diff_new_pack.vTfSlP/_new 2023-05-11 12:34:53.271116391 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.10.1"
+VERSION="102.11.0"
VERSION_SUFFIX=""
-PREV_VERSION="102.10.0"
+PREV_VERSION="102.10.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="6eabe0915354d878fe93e2b02547cebe83f1fd6d"
-RELEASE_TIMESTAMP="20230421163959"
+RELEASE_TAG="e075eaac980f3465ce15797842d675a5e9fa9085"
+RELEASE_TIMESTAMP="20230503190012"
++ thunderbird-102.10.1.source.tar.xz -> thunderbird-102.11.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.10.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533/thunderbird-102.11.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-04-28 16:24:28
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533 (New)
Package is "MozillaThunderbird"
Fri Apr 28 16:24:28 2023 rev:308 rq:1083507 version:102.10.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-04-12 12:51:35.280927650 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533/MozillaThunderbird.changes
2023-04-28 16:25:51.314881181 +0200
@@ -1,0 +2,6 @@
+Sun Apr 23 07:54:15 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.10.1
+ * https://www.thunderbird.net/en-US/thunderbird/102.10.1/releasenotes
+
+---
Old:
l10n-102.10.0.tar.xz
thunderbird-102.10.0.source.tar.xz
thunderbird-102.10.0.source.tar.xz.asc
New:
l10n-102.10.1.tar.xz
thunderbird-102.10.1.source.tar.xz
thunderbird-102.10.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.QNUz0N/_old 2023-04-28 16:25:59.626929697 +0200
+++ /var/tmp/diff_new_pack.QNUz0N/_new 2023-04-28 16:25:59.634929744 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.10.0
-%define orig_version 102.10.0
+%define mainver%major.10.1
+%define orig_version 102.10.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.10.0.tar.xz -> l10n-102.10.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.QNUz0N/_old 2023-04-28 16:25:59.878931168 +0200
+++ /var/tmp/diff_new_pack.QNUz0N/_new 2023-04-28 16:25:59.882931191 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.10.0"
+VERSION="102.10.1"
VERSION_SUFFIX=""
-PREV_VERSION="102.9.1"
+PREV_VERSION="102.10.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="d8df3bebc4b529388b62b9cb4df152f13910fbe3"
-RELEASE_TIMESTAMP="20230407145224"
+RELEASE_TAG="6eabe0915354d878fe93e2b02547cebe83f1fd6d"
+RELEASE_TIMESTAMP="20230421163959"
++ thunderbird-102.10.0.source.tar.xz -> thunderbird-102.10.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.10.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533/thunderbird-102.10.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-04-12 12:51:34
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19717 (New)
Package is "MozillaThunderbird"
Wed Apr 12 12:51:34 2023 rev:307 rq:1078519 version:102.10.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-03-27 18:15:48.578957606 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.19717/MozillaThunderbird.changes
2023-04-12 12:51:35.280927650 +0200
@@ -1,0 +2,54 @@
+Wed Apr 5 21:10:11 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.10.0
+ * New messages will automatically select S/MIME if configured and
+OpenPGP is not
+ * Calendar events with timezone America/Mexico_City incorrectly
+applied Daylight Savings Time
+ MFSA 2023-15 (bsc#1210212)
+ * CVE-2023-29531 (bmo#1794292)
+Out-of-bound memory access in WebGL on macOS
+ * CVE-2023-29532 (bmo#1806394)
+Mozilla Maintenance Service Write-lock bypass
+ * CVE-2023-29533 (bmo#1798219, bmo#1814597)
+Fullscreen notification obscured
+ * MFSA-TMP-2023-0001 (bmo#1819244)
+Double-free in libwebp
+ * CVE-2023-29535 (bmo#1820543)
+Potential Memory Corruption following Garbage Collector compaction
+ * CVE-2023-29536 (bmo#1821959)
+Invalid free from JavaScript code
+ * CVE-2023-0547 (bmo#1811298)
+Revocation status of S/Mime recipient certificates was not checked
+ * CVE-2023-29479 (bmo#1824978)
+Hang when processing certain OpenPGP messages
+ * CVE-2023-29539 (bmo#1784348)
+Content-Disposition filename truncation leads to Reflected
+File Download
+ * CVE-2023-29541 (bmo#1810191)
+Files with malicious extensions could have been downloaded
+unsafely on Linux
+ * CVE-2023-29542 (bmo#1810793, bmo#1815062)
+Bypass of file download extension restrictions
+ * CVE-2023-29545 (bmo#1823077)
+Windows Save As dialog resolved environment variables
+ * CVE-2023-1945 (bmo#1777588)
+Memory Corruption in Safe Browsing Code
+ * CVE-2023-29548 (bmo#1822754)
+Incorrect optimization result on ARM64
+ * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498, bmo#1814217,
+bmo#1818357, bmo#1818762, bmo#1819493, bmo#1820389, bmo#1820602,
+bmo#1821448, bmo#1822413, bmo#1824828)
+Memory safety bugs fixed in Thunderbird 102.10
+- add mozilla-llvm16.patch to fix build with LLVM16
+
+---
+Wed Mar 29 10:50:35 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.9.1
+ MFSA 2023-12
+ * CVE-2023-28427 (bmo#1822595)
+Matrix SDK bundled with Thunderbird vulnerable to
+denial-of-service attack
+
+---
Old:
l10n-102.9.0.tar.xz
thunderbird-102.9.0.source.tar.xz
thunderbird-102.9.0.source.tar.xz.asc
New:
l10n-102.10.0.tar.xz
mozilla-llvm16.patch
thunderbird-102.10.0.source.tar.xz
thunderbird-102.10.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.CYNjLo/_old 2023-04-12 12:51:52.561028637 +0200
+++ /var/tmp/diff_new_pack.CYNjLo/_new 2023-04-12 12:51:52.569028684 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.9.0
-%define orig_version 102.9.0
+%define mainver%major.10.0
+%define orig_version 102.10.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -207,6 +207,7 @@
Patch21:one_swizzle_to_rule_them_all.patch
Patch22:svg-rendering.patch
Patch23:gcc13-fix.patch
+Patch24:mozilla-llvm16.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -296,6 +297,7 @@
%patch21 -p1
%patch22 -p1
%patch23 -p1
+%patch24 -p1
%endif
%build
++ l10n-102.9.0.tar.xz -> l10n-102.10.0.tar.xz ++
++ mozilla-llvm16.patch ++
>From 80738016a36e803fe3bf8b8f6f388c6589d86a1c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Emilio=20Cobos=20=C3=81lvarez?=
Date: Tue, 18 Oct 2022 02:17:18 +0200
Subject: [PATCH] clang: Detect anonymous items explicitly, rather than relying
on empty names.
In Clang 16, anonymous items may return names like
`(anonymous union at ..)` rather than empty names.
The right way to detect them is using clang_Cursor_isAnonymous.
Fixes #2312
Closes #2316
Co-Authored-by: Patrick Walton
>From c03b37697a1e117995ea76203e5c0ce7d6696c4e Mon Sep 17 00:00:00 2001
From:
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-03-27 18:15:46
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.31432 (New)
Package is "MozillaThunderbird"
Mon Mar 27 18:15:46 2023 rev:306 rq:1074474 version:102.9.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-03-16 22:59:10.039700265 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.31432/MozillaThunderbird.changes
2023-03-27 18:15:48.578957606 +0200
@@ -1,0 +2,5 @@
+Sun Mar 26 10:57:52 UTC 2023 - Wolfgang Rosenauer
+
+- add gcc13-fix.patch to support current Tumbleweed
+
+---
New:
gcc13-fix.patch
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.3OeL7C/_old 2023-03-27 18:15:54.382988233 +0200
+++ /var/tmp/diff_new_pack.3OeL7C/_new 2023-03-27 18:15:54.386988254 +0200
@@ -206,6 +206,7 @@
Patch20:mozilla-bmo531915.patch
Patch21:one_swizzle_to_rule_them_all.patch
Patch22:svg-rendering.patch
+Patch23:gcc13-fix.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -294,6 +295,7 @@
%patch20 -p1
%patch21 -p1
%patch22 -p1
+%patch23 -p1
%endif
%build
++ gcc13-fix.patch ++
diff --git a/dom/media/webrtc/sdp/RsdparsaSdpGlue.cpp
b/dom/media/webrtc/sdp/RsdparsaSdpGlue.cpp
index 8c8a0369c3..01a1a1d817 100644
--- a/dom/media/webrtc/sdp/RsdparsaSdpGlue.cpp
+++ b/dom/media/webrtc/sdp/RsdparsaSdpGlue.cpp
@@ -4,6 +4,7 @@
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
* You can obtain one at http://mozilla.org/MPL/2.0/. */
#include
+#include
#include "sdp/RsdparsaSdpInc.h"
#include "sdp/RsdparsaSdpGlue.h"
diff --git a/gfx/2d/Rect.h b/gfx/2d/Rect.h
index 4875ad6714..f52437bbdc 100644
--- a/gfx/2d/Rect.h
+++ b/gfx/2d/Rect.h
@@ -15,6 +15,7 @@
#include "mozilla/Maybe.h"
#include
+#include
namespace mozilla {
diff --git a/toolkit/components/telemetry/pingsender/pingsender.cpp
b/toolkit/components/telemetry/pingsender/pingsender.cpp
index 01fdb63c29..a61b9d3693 100644
--- a/toolkit/components/telemetry/pingsender/pingsender.cpp
+++ b/toolkit/components/telemetry/pingsender/pingsender.cpp
@@ -4,6 +4,7 @@
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
#include
+#include
#include
#include
#include
diff --git a/tools/profiler/core/platform.cpp b/tools/profiler/core/platform.cpp
index bd20110f12..08e38d6938 100644
--- a/tools/profiler/core/platform.cpp
+++ b/tools/profiler/core/platform.cpp
@@ -1106,7 +1106,7 @@ class ActivePS {
continue;
}
ThreadRegistry::OffThreadRef::RWFromAnyThreadWithLock lockedThreadData =
- offThreadRef.LockedRWFromAnyThread();
+ offThreadRef.GetLockedRWFromAnyThread();
MOZ_RELEASE_ASSERT(array.append(ProfiledThreadListElement{
profiledThreadData->Info().RegisterTime(),
lockedThreadData->GetJSContext(), profiledThreadData}));
@@ -4050,7 +4050,7 @@ void SamplerThread::Run() {
if (threadStackSampling) {
ThreadRegistry::OffThreadRef::RWFromAnyThreadWithLock
- lockedThreadData = offThreadRef.LockedRWFromAnyThread();
+ lockedThreadData = offThreadRef.GetLockedRWFromAnyThread();
// Suspend the thread and collect its stack data in the local
// buffer.
mSampler.SuspendAndSampleAndResumeThread(
@@ -4764,7 +4764,7 @@ static ProfilingStack* locked_register_thread(
aLock, aOffThreadRef.UnlockedConstReaderCRef().Info());
if (threadProfilingFeatures != ThreadProfilingFeatures::NotProfiled) {
ThreadRegistry::OffThreadRef::RWFromAnyThreadWithLock
- lockedRWFromAnyThread = aOffThreadRef.LockedRWFromAnyThread();
+ lockedRWFromAnyThread = aOffThreadRef.GetLockedRWFromAnyThread();
ProfiledThreadData* profiledThreadData = ActivePS::AddLiveProfiledThread(
aLock, MakeUnique(
@@ -5629,7 +5629,7 @@ static void locked_profiler_start(PSLockRef aLock,
PowerOfTwo32 aCapacity,
ActivePS::ProfilingFeaturesForThread(aLock, info);
if (threadProfilingFeatures != ThreadProfilingFeatures::NotProfiled) {
ThreadRegistry::OffThreadRef::RWFromAnyThreadWithLock lockedThreadData =
- offThreadRef.LockedRWFromAnyThread();
+ offThreadRef.GetLockedRWFromAnyThread();
ProfiledThreadData* profiledThreadData = ActivePS::AddLiveProfiledThread(
aLock,
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-03-16 22:59:08
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.31432 (New)
Package is "MozillaThunderbird"
Thu Mar 16 22:59:08 2023 rev:305 rq:1072474 version:102.9.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-02-19 18:19:20.149623565 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.31432/MozillaThunderbird.changes
2023-03-16 22:59:10.039700265 +0100
@@ -1,0 +2,28 @@
+Sun Mar 12 09:52:40 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.9.0
+ * https://www.thunderbird.net/en-US/thunderbird/102.9.0/releasenotes
+ MFSA 2023-11 (bsc#1209173))
+ * CVE-2023-25751 (bmo#1814899)
+Incorrect code generation during JIT compilation
+ * CVE-2023-28164 (bmo#1809122)
+URL being dragged from a removed cross-origin iframe into the
+same tab triggered navigation
+ * CVE-2023-28162 (bmo#1811327)
+Invalid downcast in Worklets
+ * CVE-2023-25752 (bmo#1811627)
+Potential out-of-bounds when accessing throttled streams
+ * CVE-2023-28163 (bmo#1817768)
+Windows Save As dialog resolved environment variables
+ * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
+bmo#1817442, bmo#1818674)
+Memory safety bugs fixed in Thunderbird 102.9
+- update create-tar.sh
+- build using rust 1.67
+
+---
+Tue Mar 7 18:30:09 UTC 2023 - Manfred Hollstein
+
+- Ensure gcc11-c++ gets used on Leap 15.5, too.
+
+---
Old:
l10n-102.8.0.tar.xz
thunderbird-102.8.0.source.tar.xz
thunderbird-102.8.0.source.tar.xz.asc
New:
l10n-102.9.0.tar.xz
thunderbird-102.9.0.source.tar.xz
thunderbird-102.9.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.ixINwt/_old 2023-03-16 22:59:29.827797711 +0100
+++ /var/tmp/diff_new_pack.ixINwt/_new 2023-03-16 22:59:29.835797751 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.8.0
-%define orig_version 102.8.0
+%define mainver%major.9.0
+%define orig_version 102.9.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -85,7 +85,7 @@
BuildRequires: dbus-1-glib-devel
BuildRequires: fdupes
BuildRequires: memory-constraints
-%if 0%{?suse_version} < 1550 && 0%{?sle_version} <= 150400
+%if 0%{?suse_version} < 1550 && 0%{?sle_version} <= 150500
BuildRequires: gcc11-c++
%else
BuildRequires: gcc-c++
@@ -100,8 +100,8 @@
# minimal requirement:
BuildRequires: rust+cargo >= 1.59
# actually used upstream:
-BuildRequires: cargo1.63
-BuildRequires: rust1.63
+BuildRequires: cargo1.67
+BuildRequires: rust1.67
%endif
%if 0%{useccache} != 0
BuildRequires: ccache
@@ -180,7 +180,7 @@
Source7:l10n-%{orig_version}%{orig_suffix}.tar.xz
Source9:thunderbird.appdata.xml
Source13: spellcheck.js
-Source14:
https://github.com/openSUSE/firefox-scripts/raw/f4363ab1d76e173666e56408d44fe00af16ddbd8/create-tar.sh
+Source14:
https://github.com/openSUSE/firefox-scripts/raw/9b77cf0/create-tar.sh
Source20:
https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/source/%{srcname}-%{orig_version}%{orig_suffix}.source.tar.xz.asc
Source21:
https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/KEY#/mozilla.keyring
# Gecko/Toolkit
@@ -334,7 +334,7 @@
export MOZ_TELEMETRY_REPORTING=1
export MOZ_REQUIRE_SIGNING=
export MACH_USE_SYSTEM_PYTHON=1
-%if 0%{?suse_version} < 1550 && 0%{?sle_version} <= 150400
+%if 0%{?suse_version} < 1550 && 0%{?sle_version} <= 150500
export CC=gcc-11
%else
%if 0%{?clang_build} == 0
++ create-tar.sh ++
--- /var/tmp/diff_new_pack.ixINwt/_old 2023-03-16 22:59:29.907798105 +0100
+++ /var/tmp/diff_new_pack.ixINwt/_new 2023-03-16 22:59:29.911798126 +0100
@@ -16,10 +16,17 @@
set_internal_variables
- check_what_changed
+ check_what_to_do_with_source_tarballs
download_upstream_source_tarballs
- create_locales_tarballs
+ if [ -z ${SKIP_LOCALES+x} ]; then
+check_what_to_do_with_locales_tarballs
+create_locales_tarballs
+ else
+printf "%-40s: User forced skip (SKIP_LOCALES set)\n" "locales"
+ fi
+
+ clean_up_old_tarballs
}
function print_usage_and_exit() {
@@ -64,7 +71,9 @@
else
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-02-19 18:19:17
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.22824 (New)
Package is "MozillaThunderbird"
Sun Feb 19 18:19:17 2023 rev:304 rq:1066604 version:102.8.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-02-09 16:22:15.286418640 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.22824/MozillaThunderbird.changes
2023-02-19 18:19:20.149623565 +0100
@@ -1,0 +2,38 @@
+Wed Feb 15 07:46:58 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.8.0
+ * https://www.thunderbird.net/en-US/thunderbird/102.8.0/releasenotes
+ MFSA 2023-07 (bsc#1208144)
+ * CVE-2023-0616 (bmo#1806507)
+User Interface lockup with messages combining S/MIME and OpenPGP
+ * CVE-2023-25728 (bmo#1790345)
+Content security policy leak in violation reports using iframes
+ * CVE-2023-25730 (bmo#1794622)
+Screen hijack via browser fullscreen mode
+ * CVE-2023-0767 (bmo#1804640)
+Arbitrary memory write via PKCS 12 in NSS
+ * CVE-2023-25735 (bmo#1810711)
+Potential use-after-free from compartment mismatch in SpiderMonkey
+ * CVE-2023-25737 (bmo#1811464)
+Invalid downcast in SVGUtils::SetupStrokeGeometry
+ * CVE-2023-25738 (bmo#1811852)
+Printing on Windows could potentially crash Thunderbird with
+some device drivers
+ * CVE-2023-25739 (bmo#1811939)
+Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext
+ * CVE-2023-25729 (bmo#1792138)
+Extensions could have opened external schemes without user knowledge
+ * CVE-2023-25732 (bmo#1804564)
+Out of bounds memory write from EncodeInputStream
+ * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143, bmo#1812338)
+Opening local .url files could cause unexpected network loads
+ * CVE-2023-25742 (bmo#1813424)
+Web Crypto ImportKey crashes tab
+ * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449, bmo#1803628,
+bmo#1810536)
+Memory safety bugs fixed in Thunderbird 102.8
+- requires
+ NSPR >= 4.34.1
+ NSS >= 3.79.4
+
+---
Old:
l10n-102.7.2.tar.xz
thunderbird-102.7.2.source.tar.xz
thunderbird-102.7.2.source.tar.xz.asc
New:
l10n-102.8.0.tar.xz
thunderbird-102.8.0.source.tar.xz
thunderbird-102.8.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.TMU9bu/_old 2023-02-19 18:19:29.657683979 +0100
+++ /var/tmp/diff_new_pack.TMU9bu/_new 2023-02-19 18:19:29.661684005 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.7.2
-%define orig_version 102.7.2
+%define mainver%major.8.0
+%define orig_version 102.8.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -108,8 +108,8 @@
%endif
BuildRequires: libXcomposite-devel
BuildRequires: libcurl-devel
-BuildRequires: mozilla-nspr-devel >= 4.34
-BuildRequires: mozilla-nss-devel >= 3.79
+BuildRequires: mozilla-nspr-devel >= 4.34.1
+BuildRequires: mozilla-nss-devel >= 3.79.4
BuildRequires: nasm >= 2.14
BuildRequires: nodejs >= 10.22.1
%if 0%{?sle_version} >= 12 && 0%{?sle_version} < 15
++ l10n-102.7.2.tar.xz -> l10n-102.8.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.7.2.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.22824/l10n-102.8.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.TMU9bu/_old 2023-02-19 18:19:29.897685504 +0100
+++ /var/tmp/diff_new_pack.TMU9bu/_new 2023-02-19 18:19:29.90568 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.7.2"
+VERSION="102.8.0"
VERSION_SUFFIX=""
-PREV_VERSION="102.7.1"
+PREV_VERSION="102.7.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="0f6deed0752b618055c34e06c268af3da9d1548d"
-RELEASE_TIMESTAMP="20230206162758"
+RELEASE_TAG="d2f3330ed11584d3f02ba72cf2fbaa397cd5f3f4"
+RELEASE_TIMESTAMP="20230214184313"
++ thunderbird-102.7.2.source.tar.xz -> thunderbird-102.8.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.7.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.22824/thunderbird-102.8.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-02-09 16:22:04
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4462 (New)
Package is "MozillaThunderbird"
Thu Feb 9 16:22:04 2023 rev:303 rq:1063880 version:102.7.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2023-02-02 18:21:43.981027218 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4462/MozillaThunderbird.changes
2023-02-09 16:22:15.286418640 +0100
@@ -1,0 +2,6 @@
+Wed Feb 8 07:59:46 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.7.2
+ * Various crash fixes
+
+---
Old:
l10n-102.7.1.tar.xz
thunderbird-102.7.1.source.tar.xz
thunderbird-102.7.1.source.tar.xz.asc
New:
l10n-102.7.2.tar.xz
thunderbird-102.7.2.source.tar.xz
thunderbird-102.7.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.ZE3Nqq/_old 2023-02-09 16:22:28.626487363 +0100
+++ /var/tmp/diff_new_pack.ZE3Nqq/_new 2023-02-09 16:22:28.634487404 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.7.1
-%define orig_version 102.7.1
+%define mainver%major.7.2
+%define orig_version 102.7.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.7.1.tar.xz -> l10n-102.7.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.7.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4462/l10n-102.7.2.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.ZE3Nqq/_old 2023-02-09 16:22:28.846488496 +0100
+++ /var/tmp/diff_new_pack.ZE3Nqq/_new 2023-02-09 16:22:28.846488496 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.7.1"
+VERSION="102.7.2"
VERSION_SUFFIX=""
-PREV_VERSION="102.7.0"
+PREV_VERSION="102.7.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="88d80acadbab4acb4d81cb2934caa807cd59e85a"
-RELEASE_TIMESTAMP="20230123204438"
+RELEASE_TAG="0f6deed0752b618055c34e06c268af3da9d1548d"
+RELEASE_TIMESTAMP="20230206162758"
++ thunderbird-102.7.1.source.tar.xz -> thunderbird-102.7.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.7.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.4462/thunderbird-102.7.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2023-02-02 18:07:12
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32243 (New)
Package is "MozillaThunderbird"
Thu Feb 2 18:07:12 2023 rev:302 rq:1062396 version:102.7.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-12-23 10:21:00.511311268 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32243/MozillaThunderbird.changes
2023-02-02 18:21:43.981027218 +0100
@@ -1,0 +2,38 @@
+Tue Jan 31 21:48:13 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.7.1
+ * Microsoft Office 365 accounts were unable to authenticate
+ * https://www.thunderbird.net/en-US/thunderbird/102.7.1/releasenotes/
+ MFSA 2023-04
+ * CVE-2023-0430 (bmo#1769000)
+Revocation status of S/Mime signature certificates was not checked
+- update create-tar.sh
+
+---
+Tue Jan 17 13:27:01 UTC 2023 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.7.0
+ https://www.thunderbird.net/en-US/thunderbird/102.7.0/releasenotes/
+ MFSA 2023-03 (bsc#1207119)
+ * CVE-2022-46871 (bmo#1795697)
+libusrsctp library out of date
+ * CVE-2023-23598 (bmo#1800425)
+Arbitrary file read from GTK drag and drop on Linux
+ * CVE-2023-23599 (bmo#1777800)
+Malicious command could be hidden in devtools output on
+Windows
+ * CVE-2023-23601 (bmo#1794268)
+URL being dragged from cross-origin iframe into same tab
+triggers navigation
+ * CVE-2023-23602 (bmo#1800890)
+Content Security Policy wasn't being correctly applied to
+WebSockets in WebWorkers
+ * CVE-2022-46877 (bmo#1795139)
+Fullscreen notification bypass
+ * CVE-2023-23603 (bmo#1800832)
+Calls to console.log allowed bypasing Content
+Security Policy via format directive
+ * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
+Memory safety bugs fixed in Thunderbird 102.7
+
+---
Old:
l10n-102.6.1.tar.xz
thunderbird-102.6.1.source.tar.xz
thunderbird-102.6.1.source.tar.xz.asc
New:
l10n-102.7.1.tar.xz
thunderbird-102.7.1.source.tar.xz
thunderbird-102.7.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.nyCHDl/_old 2023-02-02 18:21:54.373090985 +0100
+++ /var/tmp/diff_new_pack.nyCHDl/_new 2023-02-02 18:21:54.417091255 +0100
@@ -1,8 +1,8 @@
#
# spec file
#
-# Copyright (c) 2022 SUSE LLC
-# 2006-2022 Wolfgang Rosenauer
+# Copyright (c) 2023 SUSE LLC
+# 2006-2023 Wolfgang Rosenauer
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.6.1
-%define orig_version 102.6.1
+%define mainver%major.7.1
+%define orig_version 102.7.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -180,7 +180,7 @@
Source7:l10n-%{orig_version}%{orig_suffix}.tar.xz
Source9:thunderbird.appdata.xml
Source13: spellcheck.js
-Source14:
https://github.com/openSUSE/firefox-scripts/raw/4503820/create-tar.sh
+Source14:
https://github.com/openSUSE/firefox-scripts/raw/f4363ab1d76e173666e56408d44fe00af16ddbd8/create-tar.sh
Source20:
https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/source/%{srcname}-%{orig_version}%{orig_suffix}.source.tar.xz.asc
Source21:
https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/KEY#/mozilla.keyring
# Gecko/Toolkit
++ create-tar.sh ++
635 lines (skipped)
between /work/SRC/openSUSE:Factory/MozillaThunderbird/create-tar.sh
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32243/create-tar.sh
++ l10n-102.6.1.tar.xz -> l10n-102.7.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.6.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32243/l10n-102.7.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.nyCHDl/_old 2023-02-02 18:21:55.169095869 +0100
+++ /var/tmp/diff_new_pack.nyCHDl/_new 2023-02-02 18:21:55.173095894 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.6.1"
+VERSION="102.7.1"
VERSION_SUFFIX=""
-PREV_VERSION="102.6.0"
+PREV_VERSION="102.7.0"
PREV_VERSION_SUFFIX=""
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-12-23 10:20:59
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1563 (New)
Package is "MozillaThunderbird"
Fri Dec 23 10:20:59 2022 rev:301 rq:1044166 version:102.6.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-12-15 19:23:42.063542832 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1563/MozillaThunderbird.changes
2022-12-23 10:21:00.511311268 +0100
@@ -1,0 +2,13 @@
+Tue Dec 20 08:06:29 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.6.1
+ * Remote content did not load in user-defined signatures
+ * Addons that added new action buttons were not shown for addon
+upgrades, requiring removal and reinstall
+ * Various stability improvements
+ MFSA 2022-54
+ * CVE-2022-46874 (bmo#1746139)
+Drag and Dropped Filenames could have been truncated to
+malicious extensions
+
+---
Old:
l10n-102.6.0.tar.xz
thunderbird-102.6.0.source.tar.xz
thunderbird-102.6.0.source.tar.xz.asc
New:
l10n-102.6.1.tar.xz
thunderbird-102.6.1.source.tar.xz
thunderbird-102.6.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.h1UwQT/_old 2022-12-23 10:21:11.639374864 +0100
+++ /var/tmp/diff_new_pack.h1UwQT/_new 2022-12-23 10:21:11.643374887 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.6.0
-%define orig_version 102.6.0
+%define mainver%major.6.1
+%define orig_version 102.6.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.6.0.tar.xz -> l10n-102.6.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.h1UwQT/_old 2022-12-23 10:21:11.871376190 +0100
+++ /var/tmp/diff_new_pack.h1UwQT/_new 2022-12-23 10:21:11.875376213 +0100
@@ -1,8 +1,8 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.6.0"
+VERSION="102.6.1"
VERSION_SUFFIX=""
-PREV_VERSION="102.5.1"
+PREV_VERSION="102.6.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
++ thunderbird-102.6.0.source.tar.xz -> thunderbird-102.6.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.6.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1563/thunderbird-102.6.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-12-15 19:23:40
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1835 (New)
Package is "MozillaThunderbird"
Thu Dec 15 19:23:40 2022 rev:300 rq:1042791 version:102.6.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-12-02 13:12:53.61816 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1835/MozillaThunderbird.changes
2022-12-15 19:23:42.063542832 +0100
@@ -1,0 +2,27 @@
+Tue Dec 13 13:49:09 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.6.0
+ https://www.thunderbird.net/en-US/thunderbird/102.6.0/releasenotes/
+ MFSA 2022-53 (bsc#1206242)
+ * CVE-2022-46880 (bmo#1749292)
+Use-after-free in WebGL
+ * CVE-2022-46872 (bmo#1799156)
+Arbitrary file read from a compromised content process
+ * CVE-2022-46881 (bmo#1770930)
+Memory corruption in WebGL
+ * CVE-2022-46874 (bmo#1746139)
+Drag and Dropped Filenames could have been truncated to
+malicious extensions
+ * CVE-2022-46875 (bmo#1786188)
+Download Protections were bypassed by .atloc and .ftploc
+files on Mac OS
+ * CVE-2022-46882 (bmo#1789371)
+Use-after-free in WebGL
+ * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
+bmo#1801102, bmo#1801315, bmo#1802395)
+Memory safety bugs fixed in Thunderbird 102.6
+- removed obsolete patches
+ mozilla-newer-cbindgen.patch
+ mozilla-glibc236.patch
+
+---
Old:
l10n-102.5.1.tar.xz
mozilla-glibc236.patch
mozilla-newer-cbindgen.patch
thunderbird-102.5.1.source.tar.xz
thunderbird-102.5.1.source.tar.xz.asc
New:
l10n-102.6.0.tar.xz
thunderbird-102.6.0.source.tar.xz
thunderbird-102.6.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.bHmvIP/_old 2022-12-15 19:23:52.075599797 +0100
+++ /var/tmp/diff_new_pack.bHmvIP/_new 2022-12-15 19:23:52.083599842 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.5.1
-%define orig_version 102.5.1
+%define mainver%major.6.0
+%define orig_version 102.6.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -206,8 +206,6 @@
Patch20:mozilla-bmo531915.patch
Patch21:one_swizzle_to_rule_them_all.patch
Patch22:svg-rendering.patch
-Patch23:mozilla-newer-cbindgen.patch
-Patch24:mozilla-glibc236.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -296,8 +294,6 @@
%patch20 -p1
%patch21 -p1
%patch22 -p1
-%patch23 -p1
-%patch24 -p1
%endif
%build
++ l10n-102.5.1.tar.xz -> l10n-102.6.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.bHmvIP/_old 2022-12-15 19:23:52.403601663 +0100
+++ /var/tmp/diff_new_pack.bHmvIP/_new 2022-12-15 19:23:52.407601686 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.5.1"
+VERSION="102.6.0"
VERSION_SUFFIX=""
-PREV_VERSION="102.5.0"
+PREV_VERSION="102.5.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="bbf216e50e6a8cb4362b2b77feeb8ca4a1d78914"
-RELEASE_TIMESTAMP="20221129154640"
+RELEASE_TAG="563cc2baf242975fda41000da903db513713dc65"
+RELEASE_TIMESTAMP="20221208182320"
++ thunderbird-102.5.1.source.tar.xz -> thunderbird-102.6.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.5.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1835/thunderbird-102.6.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-12-02 13:12:40
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1835 (New)
Package is "MozillaThunderbird"
Fri Dec 2 13:12:40 2022 rev:299 rq:1039407 version:102.5.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-11-17 17:24:14.544982252 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1835/MozillaThunderbird.changes
2022-12-02 13:12:53.61816 +0100
@@ -1,0 +2,10 @@
+Wed Nov 30 20:49:28 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.5.1
+ MFSA 2022-50
+ * CVE-2022-45414 (bmo#1788096)
+Quoting from an HTML email with certain tags will trigger network
+requests and load remote content, regardless of a configuration
+to block remote content
+
+---
Old:
l10n-102.5.0.tar.xz
thunderbird-102.5.0.source.tar.xz
thunderbird-102.5.0.source.tar.xz.asc
New:
l10n-102.5.1.tar.xz
thunderbird-102.5.1.source.tar.xz
thunderbird-102.5.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.DssYXA/_old 2022-12-02 13:13:05.565837190 +0100
+++ /var/tmp/diff_new_pack.DssYXA/_new 2022-12-02 13:13:05.573837233 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.5.0
-%define orig_version 102.5.0
+%define mainver%major.5.1
+%define orig_version 102.5.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.5.0.tar.xz -> l10n-102.5.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.5.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1835/l10n-102.5.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.DssYXA/_old 2022-12-02 13:13:05.865838839 +0100
+++ /var/tmp/diff_new_pack.DssYXA/_new 2022-12-02 13:13:05.869838861 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.5.0"
+VERSION="102.5.1"
VERSION_SUFFIX=""
-PREV_VERSION="102.4.2"
+PREV_VERSION="102.5.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="b6e9b5a1d1b53d26cfb7032ef2ff02203ab0486b"
-RELEASE_TIMESTAMP="20221115143058"
+RELEASE_TAG="bbf216e50e6a8cb4362b2b77feeb8ca4a1d78914"
+RELEASE_TIMESTAMP="20221129154640"
++ thunderbird-102.5.0.source.tar.xz -> thunderbird-102.5.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.5.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1835/thunderbird-102.5.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-11-17 17:24:06
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1597 (New)
Package is "MozillaThunderbird"
Thu Nov 17 17:24:06 2022 rev:298 rq:1036233 version:102.5.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-11-06 12:41:59.05314 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1597/MozillaThunderbird.changes
2022-11-17 17:24:14.544982252 +0100
@@ -1,0 +2,34 @@
+Sat Nov 12 22:48:04 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.5.0
+ * changes and fixes as described here
+https://www.thunderbird.net/en-US/thunderbird/102.5.0/releasenotes
+ MFSA 2022-49 (bsc#1205270)
+ * CVE-2022-45403 (bmo#1762078)
+Service Workers might have learned size of cross-origin media files
+ * CVE-2022-45404 (bmo#1790815)
+Fullscreen notification bypass
+ * CVE-2022-45405 (bmo#1791314)
+Use-after-free in InputStream implementation
+ * CVE-2022-45406 (bmo#1791975)
+Use-after-free of a JavaScript Realm
+ * CVE-2022-45408 (bmo#1793829)
+Fullscreen notification bypass via windowName
+ * CVE-2022-45409 (bmo#1796901)
+Use-after-free in Garbage Collection
+ * CVE-2022-45410 (bmo#1658869)
+ServiceWorker-intercepted requests bypassed SameSite cookie policy
+ * CVE-2022-45411 (bmo#1790311)
+Cross-Site Tracing was possible via non-standard override headers
+ * CVE-2022-45412 (bmo#1791029)
+Symlinks may resolve to partially uninitialized buffers
+ * CVE-2022-45416 (bmo#1793676)
+Keystroke Side-Channel Leakage
+ * CVE-2022-45418 (bmo#1795815)
+Custom mouse cursor could have been drawn over browser UI
+ * CVE-2022-45420 (bmo#1792643)
+Iframe contents could be rendered outside the iframe
+ * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
+Memory safety bugs fixed in Thunderbird 102.5
+
+---
Old:
l10n-102.4.2.tar.xz
thunderbird-102.4.2.source.tar.xz
thunderbird-102.4.2.source.tar.xz.asc
New:
l10n-102.5.0.tar.xz
thunderbird-102.5.0.source.tar.xz
thunderbird-102.5.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.iEHv61/_old 2022-11-17 17:24:23.725030816 +0100
+++ /var/tmp/diff_new_pack.iEHv61/_new 2022-11-17 17:24:23.733030858 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.4.2
-%define orig_version 102.4.2
+%define mainver%major.5.0
+%define orig_version 102.5.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.4.2.tar.xz -> l10n-102.5.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.iEHv61/_old 2022-11-17 17:24:24.105032826 +0100
+++ /var/tmp/diff_new_pack.iEHv61/_new 2022-11-17 17:24:24.109032847 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.4.2"
+VERSION="102.5.0"
VERSION_SUFFIX=""
-PREV_VERSION="102.4.1"
+PREV_VERSION="102.4.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="bece6c033f6b24b9c126598da7c6eb5bc2a48b14"
-RELEASE_TIMESTAMP="20221101185644"
+RELEASE_TAG="b6e9b5a1d1b53d26cfb7032ef2ff02203ab0486b"
+RELEASE_TIMESTAMP="20221115143058"
++ thunderbird-102.4.2.source.tar.xz -> thunderbird-102.5.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.4.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1597/thunderbird-102.5.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-11-06 12:41:50
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New)
Package is "MozillaThunderbird"
Sun Nov 6 12:41:50 2022 rev:297 rq:1033698 version:102.4.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-10-28 19:28:42.674384874 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes
2022-11-06 12:41:59.05314 +0100
@@ -1,0 +2,9 @@
+Sat Nov 5 16:19:55 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.4.2
+ * "Address Book" button in Account Central will now create a
+CardDAV address book instead of a local address book
+ * Bugfixes as described here
+https://www.thunderbird.net/en-US/thunderbird/102.4.2/releasenotes
+
+---
Old:
l10n-102.4.1.tar.xz
thunderbird-102.4.1.source.tar.xz
thunderbird-102.4.1.source.tar.xz.asc
New:
l10n-102.4.2.tar.xz
thunderbird-102.4.2.source.tar.xz
thunderbird-102.4.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.FL0xtq/_old 2022-11-06 12:42:09.201364243 +0100
+++ /var/tmp/diff_new_pack.FL0xtq/_new 2022-11-06 12:42:09.201364243 +0100
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.4.1
-%define orig_version 102.4.1
+%define mainver%major.4.2
+%define orig_version 102.4.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.4.1.tar.xz -> l10n-102.4.2.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.FL0xtq/_old 2022-11-06 12:42:09.409365485 +0100
+++ /var/tmp/diff_new_pack.FL0xtq/_new 2022-11-06 12:42:09.409365485 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.4.1"
+VERSION="102.4.2"
VERSION_SUFFIX=""
-PREV_VERSION="102.4.0"
+PREV_VERSION="102.4.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="e572bc3cfa07492189aec439e98378b0811ae3bb"
-RELEASE_TIMESTAMP="20221024184826"
+RELEASE_TAG="bece6c033f6b24b9c126598da7c6eb5bc2a48b14"
+RELEASE_TIMESTAMP="20221101185644"
++ thunderbird-102.4.1.source.tar.xz -> thunderbird-102.4.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.4.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/thunderbird-102.4.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-10-28 19:28:39
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New)
Package is "MozillaThunderbird"
Fri Oct 28 19:28:39 2022 rev:296 rq:1031395 version:102.4.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-10-24 11:13:06.807199475 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes
2022-10-28 19:28:42.674384874 +0200
@@ -1,0 +2,22 @@
+Tue Oct 25 20:42:11 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.4.1
+ * Thunderbird will now catch and report errors parsing vCards
+that contain incorrectly formatted dates
+ * Dynamic language switching did not update interface when switched
+to right-to-left languages
+ * Custom header data was discarded after messages were saved as
+draft and reopened
+ * -remote command line argument did not work, affecting integration
+with various applications such as LibreOffice
+ * Messages received via some SMS-to-email services could not
+display images
+ * VCards with nickname field set could not be edited
+ * Some recurring events were missing from Agenda on first load
+ * Download requests for remote ICS calendars incorrectly set
+"Accept" header to text/xml
+ * Monthly events created on the 31st of a month with <30 days placed
+first occurrence 1-2 days after the beginning of the following month
+ * Various visual and UX improvements
+
+---
Old:
l10n-102.4.0.tar.xz
thunderbird-102.4.0.source.tar.xz
thunderbird-102.4.0.source.tar.xz.asc
New:
l10n-102.4.1.tar.xz
thunderbird-102.4.1.source.tar.xz
thunderbird-102.4.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.CtMx9V/_old 2022-10-28 19:28:54.294443146 +0200
+++ /var/tmp/diff_new_pack.CtMx9V/_new 2022-10-28 19:28:54.302443186 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.4.0
-%define orig_version 102.4.0
+%define mainver%major.4.1
+%define orig_version 102.4.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.4.0.tar.xz -> l10n-102.4.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.CtMx9V/_old 2022-10-28 19:28:54.598444671 +0200
+++ /var/tmp/diff_new_pack.CtMx9V/_new 2022-10-28 19:28:54.602444691 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.4.0"
+VERSION="102.4.1"
VERSION_SUFFIX=""
-PREV_VERSION="102.3.3"
+PREV_VERSION="102.4.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="c064680366a130c4c02ba9b85ef324f0f075c47b"
-RELEASE_TIMESTAMP="20221014171633"
+RELEASE_TAG="e572bc3cfa07492189aec439e98378b0811ae3bb"
+RELEASE_TIMESTAMP="20221024184826"
++ thunderbird-102.4.0.source.tar.xz -> thunderbird-102.4.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.4.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/thunderbird-102.4.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2022-10-24 11:12:46 Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New) Package is "MozillaThunderbird" Mon Oct 24 11:12:46 2022 rev:295 rq:1030583 version:102.4.0 Changes: --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2022-10-22 14:13:22.652779305 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes 2022-10-24 11:13:06.807199475 +0200 @@ -5,0 +6,10 @@ + MFSA 2022-46 (bsc#1203477) + * CVE-2022-42927 (bmo#1789128) +Same-origin policy violation could have leaked cross-origin URLs + * CVE-2022-42928 (bmo#1791520) +Memory Corruption in JS Engine + * CVE-2022-42929 (bmo#1789439) +Denial of Service via window.print + * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041) +Memory safety bugs fixed in Firefox 106, Firefox ESR 102.4 and +Thunderbird 102.4.0 Other differences: --
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-10-22 14:12:48
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New)
Package is "MozillaThunderbird"
Sat Oct 22 14:12:48 2022 rev:294 rq:1030125 version:102.4.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-10-13 15:40:08.734495342 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes
2022-10-22 14:13:22.652779305 +0200
@@ -1,0 +2,6 @@
+Fri Oct 14 19:54:03 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.4.0
+ https://www.thunderbird.net/en-US/thunderbird/102.4.0/releasenotes
+
+---
Old:
l10n-102.3.3.tar.xz
thunderbird-102.3.3.source.tar.xz
thunderbird-102.3.3.source.tar.xz.asc
New:
l10n-102.4.0.tar.xz
thunderbird-102.4.0.source.tar.xz
thunderbird-102.4.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.y5ZDwj/_old 2022-10-22 14:13:31.380799989 +0200
+++ /var/tmp/diff_new_pack.y5ZDwj/_new 2022-10-22 14:13:31.38479 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.3.3
-%define orig_version 102.3.3
+%define mainver%major.4.0
+%define orig_version 102.4.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.3.3.tar.xz -> l10n-102.4.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.y5ZDwj/_old 2022-10-22 14:13:31.632800587 +0200
+++ /var/tmp/diff_new_pack.y5ZDwj/_new 2022-10-22 14:13:31.636800596 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.3.3"
+VERSION="102.4.0"
VERSION_SUFFIX=""
-PREV_VERSION="102.3.2"
+PREV_VERSION="102.3.3"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="afeec21c1fcc27ba58f98f629e85609a728f79e6"
-RELEASE_TIMESTAMP="20221010194951"
+RELEASE_TAG="c064680366a130c4c02ba9b85ef324f0f075c47b"
+RELEASE_TIMESTAMP="20221014171633"
++ thunderbird-102.3.3.source.tar.xz -> thunderbird-102.4.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.3.3.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/thunderbird-102.4.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-10-13 15:40:03
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New)
Package is "MozillaThunderbird"
Thu Oct 13 15:40:03 2022 rev:293 rq:1010277 version:102.3.3
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-10-10 18:46:32.447124133 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes
2022-10-13 15:40:08.734495342 +0200
@@ -1,0 +2,12 @@
+Tue Oct 11 20:40:12 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.3.3
+ * Option added to show containing address book for a contact when
+using All Address Books in vertical mode
+ * Thunderbird will try to use POP NTLM authentication even if
+not advertised by server
+ * Task List and Today Pane sidebars will no longer load when not visible
+ * bugfixes as documented here
+https://www.thunderbird.net/en-US/thunderbird/102.3.3/releasenotes
+
+---
Old:
l10n-102.3.2.tar.xz
thunderbird-102.3.2.source.tar.xz
thunderbird-102.3.2.source.tar.xz.asc
New:
l10n-102.3.3.tar.xz
thunderbird-102.3.3.source.tar.xz
thunderbird-102.3.3.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.fKdv6x/_old 2022-10-13 15:40:39.030562850 +0200
+++ /var/tmp/diff_new_pack.fKdv6x/_new 2022-10-13 15:40:39.038562866 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.3.2
-%define orig_version 102.3.2
+%define mainver%major.3.3
+%define orig_version 102.3.3
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.3.2.tar.xz -> l10n-102.3.3.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.3.2.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/l10n-102.3.3.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.fKdv6x/_old 2022-10-13 15:40:39.406563585 +0200
+++ /var/tmp/diff_new_pack.fKdv6x/_new 2022-10-13 15:40:39.410563593 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.3.2"
+VERSION="102.3.3"
VERSION_SUFFIX=""
-PREV_VERSION="102.3.1"
+PREV_VERSION="102.3.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="cbf94a7c5bc38bb46e79027e4df9e98a33f33ef6"
-RELEASE_TIMESTAMP="20221005130639"
+RELEASE_TAG="afeec21c1fcc27ba58f98f629e85609a728f79e6"
+RELEASE_TIMESTAMP="20221010194951"
++ thunderbird-102.3.2.source.tar.xz -> thunderbird-102.3.3.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.3.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/thunderbird-102.3.3.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-10-10 18:46:30
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New)
Package is "MozillaThunderbird"
Mon Oct 10 18:46:30 2022 rev:292 rq:1009070 version:102.3.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-10-04 20:37:11.584870866 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes
2022-10-10 18:46:32.447124133 +0200
@@ -1,0 +2,9 @@
+Thu Oct 6 07:28:32 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.3.2
+ * Thunderbird will try to use POP CRAM-MD5 authentication even if
+not advertised by server
+ * more bugfixes as in
+https://www.thunderbird.net/en-US/thunderbird/102.3.2/releasenotes
+
+---
Old:
l10n-102.3.1.tar.xz
thunderbird-102.3.1.source.tar.xz
thunderbird-102.3.1.source.tar.xz.asc
New:
l10n-102.3.2.tar.xz
thunderbird-102.3.2.source.tar.xz
thunderbird-102.3.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.3YQpqW/_old 2022-10-10 18:47:11.435208746 +0200
+++ /var/tmp/diff_new_pack.3YQpqW/_new 2022-10-10 18:47:11.439208754 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.3.1
-%define orig_version 102.3.1
+%define mainver%major.3.2
+%define orig_version 102.3.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.3.1.tar.xz -> l10n-102.3.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.3.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/l10n-102.3.2.tar.xz
differ: char 27, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.3YQpqW/_old 2022-10-10 18:47:11.655209224 +0200
+++ /var/tmp/diff_new_pack.3YQpqW/_new 2022-10-10 18:47:11.663209242 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.3.1"
+VERSION="102.3.2"
VERSION_SUFFIX=""
-PREV_VERSION="102.3.0"
+PREV_VERSION="102.3.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="07a17b101f904a686bbdf798ba2e820079a8323f"
-RELEASE_TIMESTAMP="20220928170044"
+RELEASE_TAG="cbf94a7c5bc38bb46e79027e4df9e98a33f33ef6"
+RELEASE_TIMESTAMP="20221005130639"
++ thunderbird-102.3.1.source.tar.xz -> thunderbird-102.3.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.3.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/thunderbird-102.3.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-10-04 20:37:03
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New)
Package is "MozillaThunderbird"
Tue Oct 4 20:37:03 2022 rev:291 rq:1007697 version:102.3.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-10-03 13:43:52.421232179 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes
2022-10-04 20:37:11.584870866 +0200
@@ -1,0 +2,5 @@
+Mon Oct 3 10:08:03 UTC 2022 - Wolfgang Rosenauer
+
+- build using rust 1.63
+
+---
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.mTyq6q/_old 2022-10-04 20:37:14.808875449 +0200
+++ /var/tmp/diff_new_pack.mTyq6q/_new 2022-10-04 20:37:14.812875455 +0200
@@ -100,8 +100,8 @@
# minimal requirement:
BuildRequires: rust+cargo >= 1.59
# actually used upstream:
-BuildRequires: cargo1.60
-BuildRequires: rust1.60
+BuildRequires: cargo1.63
+BuildRequires: rust1.63
%endif
%if 0%{useccache} != 0
BuildRequires: ccache
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-10-03 13:43:50
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New)
Package is "MozillaThunderbird"
Mon Oct 3 13:43:50 2022 rev:290 rq:1007573 version:102.3.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-09-23 14:14:46.637918845 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes
2022-10-03 13:43:52.421232179 +0200
@@ -1,0 +2,27 @@
+Wed Sep 28 08:13:07 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.3.1
+ * Compose window encryption options now only appear for encryption
+technologies that have already been configured
+ * Number of contacts in currently selected address book now
+displayed at bottom of Address Book list column
+ Fixes
+ * Password prompt did not include server hostname for POP servers
+ * Edit Contact was missing from Contacts sidebar context menus
+ * Address Book contact lists cut off display of some characters,
+the result being unreadable
+ MFSA 2022-43
+ * CVE-2022-39249 (bmo#1791765)
+Matrix SDK bundled with Thunderbird vulnerable to an
+impersonation attack by malicious server administrators
+ * CVE-2022-39250 (bmo#1791765)
+Matrix SDK bundled with Thunderbird vulnerable to a device
+verification attack
+ * CVE-2022-39251 (bmo#1791765)
+Matrix SDK bundled with Thunderbird vulnerable to an
+impersonation attack
+ * CVE-2022-39236 (bmo#1791765)
+Matrix SDK bundled with Thunderbird vulnerable to a data
+corruption issue
+
+---
Old:
l10n-102.3.0.tar.xz
thunderbird-102.3.0.source.tar.xz
thunderbird-102.3.0.source.tar.xz.asc
New:
l10n-102.3.1.tar.xz
thunderbird-102.3.1.source.tar.xz
thunderbird-102.3.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.mkwacl/_old 2022-10-03 13:44:04.193258075 +0200
+++ /var/tmp/diff_new_pack.mkwacl/_new 2022-10-03 13:44:04.201258093 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.3.0
-%define orig_version 102.3.0
+%define mainver%major.3.1
+%define orig_version 102.3.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.3.0.tar.xz -> l10n-102.3.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.3.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/l10n-102.3.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.mkwacl/_old 2022-10-03 13:44:04.401258533 +0200
+++ /var/tmp/diff_new_pack.mkwacl/_new 2022-10-03 13:44:04.401258533 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.3.0"
+VERSION="102.3.1"
VERSION_SUFFIX=""
-PREV_VERSION="102.2.2"
+PREV_VERSION="102.3.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="04f60827c1b53ab86121c7d122d3a8216219ff9f"
-RELEASE_TIMESTAMP="20220914215727"
+RELEASE_TAG="07a17b101f904a686bbdf798ba2e820079a8323f"
+RELEASE_TIMESTAMP="20220928170044"
++ thunderbird-102.3.0.source.tar.xz -> thunderbird-102.3.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.3.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/thunderbird-102.3.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2022-09-23 14:14:26 Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275 (New) Package is "MozillaThunderbird" Fri Sep 23 14:14:26 2022 rev:289 rq:1005289 version:102.3.0 Changes: --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2022-09-09 18:22:42.196125243 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2275/MozillaThunderbird.changes 2022-09-23 14:14:46.637918845 +0200 @@ -1,0 +2,77 @@ +Fri Sep 16 08:17:49 UTC 2022 - Wolfgang Rosenauer + +- Mozilla Thunderbird 102.3.0 + https://www.thunderbird.net/en-US/thunderbird/102.3.0/releasenotes/ + * Thunderbird will no longer attempt to import account passwords +when importing from another Thunderbird profile in order to +prevent profile corruption and permanent data loss. (bmo#1790605) + * Devtools performance profile will use Thunderbird presets +instead of Web Developer presets (bmo#1785954) + * Thunderbird startup performance improvements (bmo#1785967) + * Saving email source and images failed (bmo#1777323, bmo#1778804) + * Error message was shown repeatedly when temporary disk +space was full (bmo#1788580) + * Attaching OpenPGP keys without a set size to non-encrypted +messages briefly displayed a size of zero bytes (bmo#1788952) + * Global Search entry box initially contained "undefined" (bmo#1780963) + * Delete from POP Server mail filter rule intermittently +failed to trigger (bmo#1789418) + * Connections to POP3 servers without UIDL support failed (bmo#1789314) + * Pop accounts with "Fetch headers only" set downloaded complete +messages if server did not advertise TOP capability (bmo#1789356) + * "File -> New -> Address Book Contact" from Compose window did +not work (bmo#1782418) + * Attach "My vCard" option in compose window was not available +(bmo#1787614) + * Improved performance of matching a contact to an email address +(bmo#1782725) + * Address book only recognized a contact's first two email +addresses (bmo#1777156) + * Address book search and autocomplete failed if a contact vCard +could not be parsed (bmo#1789793) + * Downloading NNTP messages for offline use failed (bmo#1785773) + * NNTP client became stuck when connecting to Public-Inbox servers +(bmo#1786203, boo#1203554) + * Various visual and UX improvements (bmo#1782235, bmo#1787448, +bmo#1788725, bmo#1790324) + * unresolved: No dedicated "Department" field in address book +(bmo#180) + MFSA 2022-42 (bsc#1203477) + * CVE-2022-40959 (bmo#1782211) +Bypassing FeaturePolicy restrictions on transient pages + * CVE-2022-40960 (bmo#1787633) +Data-race when parsing non-UTF-8 URLs in threads + * CVE-2022-40958 (bmo#1779993) +Bypassing Secure Context restriction for cookies with __Host +and __Secure prefix + * CVE-2022-40956 (bmo#1770094) +Content-Security-Policy base-uri bypass + * CVE-2022-40957 (bmo#1777604) +Incoherent instruction cache when building WASM on ARM64 + * CVE-2022-3155 (bmo#1789061) +Attachment files saved to disk on macOS could be executed +without warning + * CVE-2022-40962 (bmo#1767360, bmo#1776655, bmo#1777574, bmo#1784835, +bmo#1785109, bmo#1786502, bmo#1789440) +Memory safety bugs fixed in Thunderbird 102.3 + +--- +Thu Sep 8 06:31:58 UTC 2022 - Wolfgang Rosenauer + +- Mozilla Thunderbird 102.2.2 + https://www.thunderbird.net/en-US/thunderbird/102.2.2/releasenotes/ + * Setting added to change Calendar event double-click action to +open Edit Event dialog rather than view only; +Set calendar.events.defaultActionEdit to true + * Running Compact Folders on maildir folders caused a redownload +of all messages in the folder + * Accessing mail folders in profiles with many folders was slow + * SMTP servers were not always properly initialized, and were not +listed in Account Settings + * APOP authentication unsupported when connecting to POP3 server + * OpenPGP key discovery failed + * POP accounts hosted by AOL were not able to authenticate using OAuth2 + * Unable to open context menu in newsgroups header for groups +that are not subscribed + +--- Old: l10n-102.2.2.tar.xz thunderbird-102.2.2.source.tar.xz thunderbird-102.2.2.source.tar.xz.asc New: l10n-102.3.0.tar.xz thunderbird-102.3.0.source.tar.xz thunderbird-102.3.0.source.tar.xz.asc Other differences:
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-09-09 18:22:38
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083 (New)
Package is "MozillaThunderbird"
Fri Sep 9 18:22:38 2022 rev:288 rq:1001927 version:102.2.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-09-02 21:56:20.988268437 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/MozillaThunderbird.changes
2022-09-09 18:22:42.196125243 +0200
@@ -1,0 +2,19 @@
+Thu Sep 8 06:31:58 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.2.2
+ https://www.thunderbird.net/en-US/thunderbird/102.2.2/releasenotes/
+ * Setting added to change Calendar event double-click action to
+open Edit Event dialog rather than view only;
+Set calendar.events.defaultActionEdit to true
+ * Running Compact Folders on maildir folders caused a redownload
+of all messages in the folder
+ * Accessing mail folders in profiles with many folders was slow
+ * SMTP servers were not always properly initialized, and were not
+listed in Account Settings
+ * APOP authentication unsupported when connecting to POP3 server
+ * OpenPGP key discovery failed
+ * POP accounts hosted by AOL were not able to authenticate using OAuth2
+ * Unable to open context menu in newsgroups header for groups
+that are not subscribed
+
+---
Old:
l10n-102.2.1.tar.xz
thunderbird-102.2.1.source.tar.xz
thunderbird-102.2.1.source.tar.xz.asc
New:
l10n-102.2.2.tar.xz
thunderbird-102.2.2.source.tar.xz
thunderbird-102.2.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.pK4i26/_old 2022-09-09 18:22:53.240154477 +0200
+++ /var/tmp/diff_new_pack.pK4i26/_new 2022-09-09 18:22:53.244154488 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.2.1
-%define orig_version 102.2.1
+%define mainver%major.2.2
+%define orig_version 102.2.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.2.1.tar.xz -> l10n-102.2.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.2.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/l10n-102.2.2.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.pK4i26/_old 2022-09-09 18:22:53.412154932 +0200
+++ /var/tmp/diff_new_pack.pK4i26/_new 2022-09-09 18:22:53.412154932 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.2.1"
+VERSION="102.2.2"
VERSION_SUFFIX=""
-PREV_VERSION="102.2.0"
+PREV_VERSION="102.2.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="b606061ac37965c6fa7b2f3c1c3d1f849d4f404c"
-RELEASE_TIMESTAMP="20220831174222"
+RELEASE_TAG="d7b8d9ca8221e879d452d70e04116fda72538604"
+RELEASE_TIMESTAMP="20220906224751"
++ thunderbird-102.2.1.source.tar.xz -> thunderbird-102.2.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.2.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/thunderbird-102.2.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-09-02 21:56:12
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083 (New)
Package is "MozillaThunderbird"
Fri Sep 2 21:56:12 2022 rev:287 rq:1000596 version:102.2.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-08-27 11:48:07.857590551 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/MozillaThunderbird.changes
2022-09-02 21:56:20.988268437 +0200
@@ -1,0 +2,18 @@
+Thu Sep 1 06:48:28 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.2.1
+ MFSA 2022-38 (bsc#1203007)
+ * CVE-2022-3033 (bmo#1784838)
+Leaking of sensitive information when composing a response to
+an HTML email with a META refresh tag
+ * CVE-2022-3032 (bmo#1783831)
+Remote content specified in an HTML document that was nested
+inside an iframe's srcdoc attribute was not blocked
+ * CVE-2022-3034 (bmo#1745751)
+An iframe element in an HTML email could trigger a network
+request
+ * CVE-2022-36059 (bmo#1787741)
+Matrix SDK bundled with Thunderbird vulnerable to denial-of-
+service attack
+
+---
Old:
l10n-102.2.0.tar.xz
thunderbird-102.2.0.source.tar.xz
thunderbird-102.2.0.source.tar.xz.asc
New:
l10n-102.2.1.tar.xz
thunderbird-102.2.1.source.tar.xz
thunderbird-102.2.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.QZ2yZn/_old 2022-09-02 21:56:37.280307866 +0200
+++ /var/tmp/diff_new_pack.QZ2yZn/_new 2022-09-02 21:56:37.284307875 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.2.0
-%define orig_version 102.2.0
+%define mainver%major.2.1
+%define orig_version 102.2.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.2.0.tar.xz -> l10n-102.2.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.2.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/l10n-102.2.1.tar.xz
differ: char 27, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.QZ2yZn/_old 2022-09-02 21:56:37.496308388 +0200
+++ /var/tmp/diff_new_pack.QZ2yZn/_new 2022-09-02 21:56:37.504308408 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.2.0"
+VERSION="102.2.1"
VERSION_SUFFIX=""
-PREV_VERSION="102.1.2"
+PREV_VERSION="102.2.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="89ba701459beaaffd4216e142b9502b8ee460159"
-RELEASE_TIMESTAMP="20220822195114"
+RELEASE_TAG="b606061ac37965c6fa7b2f3c1c3d1f849d4f404c"
+RELEASE_TIMESTAMP="20220831174222"
++ thunderbird-102.2.0.source.tar.xz -> thunderbird-102.2.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.2.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/thunderbird-102.2.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-08-27 11:48:04
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083 (New)
Package is "MozillaThunderbird"
Sat Aug 27 11:48:04 2022 rev:286 rq:999347 version:102.2.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-08-15 19:56:37.372792902 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/MozillaThunderbird.changes
2022-08-27 11:48:07.857590551 +0200
@@ -1,0 +2,22 @@
+Fri Aug 19 18:24:06 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.2.0
+ * https://www.thunderbird.net/en-US/thunderbird/102.2.0/releasenotes/
+ MFSA 2022-36 (bsc#1202645)
+ * CVE-2022-38472 (bmo#1769155)
+Address bar spoofing via XSLT error handling
+ * CVE-2022-38473 (bmo#1771685)
+Cross-origin XSLT Documents would have inherited the parent's
+permissions
+ * CVE-2022-38476 (bmo#1760998)
+Data race and potential use-after-free in PK11_ChangePW
+ * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159, bmo#1773363)
+Memory safety bugs fixed in Thunderbird 102.2
+ * CVE-2022-38478 (bmo#1770630, bmo#1776658)
+Memory safety bugs fixed in Thunderbird 102.2, and
+Thunderbird 91.13
+- disabled automatic usage of wayland because of known issues
+ using MOZ_ENABLE_WAYLAND=1 in environment would still enable it
+ (boo#1202606)
+
+---
Old:
l10n-102.1.2.tar.xz
thunderbird-102.1.2.source.tar.xz
thunderbird-102.1.2.source.tar.xz.asc
New:
l10n-102.2.0.tar.xz
thunderbird-102.2.0.source.tar.xz
thunderbird-102.2.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.2cTbQI/_old 2022-08-27 11:48:18.957614397 +0200
+++ /var/tmp/diff_new_pack.2cTbQI/_new 2022-08-27 11:48:18.965614414 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.1.2
-%define orig_version 102.1.2
+%define mainver%major.2.0
+%define orig_version 102.2.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.1.2.tar.xz -> l10n-102.2.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.1.2.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/l10n-102.2.0.tar.xz
differ: char 27, line 1
++ mozilla.sh.in ++
--- /var/tmp/diff_new_pack.2cTbQI/_old 2022-08-27 11:48:19.133614775 +0200
+++ /var/tmp/diff_new_pack.2cTbQI/_new 2022-08-27 11:48:19.137614784 +0200
@@ -89,7 +89,7 @@
# $XDG_SESSION_TYPE should contain either x11 or wayland
if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ] && [ -z
"$MOZ_ENABLE_WAYLAND" ]; then
- export MOZ_ENABLE_WAYLAND=1
+ export MOZ_ENABLE_WAYLAND=0
fi
##
++ tar_stamps ++
--- /var/tmp/diff_new_pack.2cTbQI/_old 2022-08-27 11:48:19.181614878 +0200
+++ /var/tmp/diff_new_pack.2cTbQI/_new 2022-08-27 11:48:19.181614878 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.1.2"
+VERSION="102.2.0"
VERSION_SUFFIX=""
-PREV_VERSION="102.1.1"
+PREV_VERSION="102.1.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="866a7981895be684f4462051ad717cb48cd228e4"
-RELEASE_TIMESTAMP="20220808204007"
+RELEASE_TAG="89ba701459beaaffd4216e142b9502b8ee460159"
+RELEASE_TIMESTAMP="20220822195114"
++ thunderbird-102.1.2.source.tar.xz -> thunderbird-102.2.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.1.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/thunderbird-102.2.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-08-15 19:56:35
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1521 (New)
Package is "MozillaThunderbird"
Mon Aug 15 19:56:35 2022 rev:285 rq:995033 version:102.1.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-08-10 17:12:39.185606681 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1521/MozillaThunderbird.changes
2022-08-15 19:56:37.372792902 +0200
@@ -1,0 +2,5 @@
+Sun Aug 14 08:03:00 UTC 2022 - Wolfgang Rosenauer
+
+- added mozilla-glibc236.patch (bmo#1782988, boo#1202323)
+
+---
New:
mozilla-glibc236.patch
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.aJvexv/_old 2022-08-15 19:56:39.744799515 +0200
+++ /var/tmp/diff_new_pack.aJvexv/_new 2022-08-15 19:56:39.748799526 +0200
@@ -207,6 +207,7 @@
Patch21:one_swizzle_to_rule_them_all.patch
Patch22:svg-rendering.patch
Patch23:mozilla-newer-cbindgen.patch
+Patch24:mozilla-glibc236.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -296,6 +297,7 @@
%patch21 -p1
%patch22 -p1
%patch23 -p1
+%patch24 -p1
%endif
%build
++ mozilla-glibc236.patch ++
# HG changeset patch
# User Mike Hommey
# Date 1660077764 0
# Node ID 970ebbe54477a0e518bfee8aeddf487ad9bd4365
# Parent caca601f2f5e87dd660434f3db2156e950151adb
Bug 1782988 - Avoid build bustage when building against glibc 2.36 or newer.
r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D153716
diff --git a/ipc/chromium/src/third_party/libevent/README.mozilla
b/ipc/chromium/src/third_party/libevent/README.mozilla
--- a/ipc/chromium/src/third_party/libevent/README.mozilla
+++ b/ipc/chromium/src/third_party/libevent/README.mozilla
@@ -17,11 +17,15 @@ evconfig-private.h can be found in the r
You then need to modify the EVENT__SIZEOF_* constants in the generated Linux,
Android, and BSD headers to be appropriate for both 32-bit and 64-bit
platforms.
Mac doesn't need this since only 64-bit is supported. Use __LP64__ to
distinguish the two cases. If you get something wrong, the CHECK_EVENT_SIZEOF
static assertions in message_pump_libevent.cc will fail. If a new constant is
added, also add a static assertion for it to message_pump_libevent.cc.
+You also need to modify the EVENT__HAVE_ARC4RANDOM and
EVENT__HAVE_ARC4RANDOM_BUF
+constants in the generated Linux header to account for the results of the
arc4random
+and arc4random_buf configure checks.
+
2. No additional patches are needed at this time, but be careful to avoid
clobbering changes to the various event-config.h files which have been
customized
over time to avoid various build bustages.
diff --git a/ipc/chromium/src/third_party/libevent/linux/event2/event-config.h
b/ipc/chromium/src/third_party/libevent/linux/event2/event-config.h
--- a/ipc/chromium/src/third_party/libevent/linux/event2/event-config.h
+++ b/ipc/chromium/src/third_party/libevent/linux/event2/event-config.h
@@ -24,24 +24,28 @@
/* #undef EVENT__DISABLE_THREAD_SUPPORT */
/* Define to 1 if you have the `accept4' function. */
#define EVENT__HAVE_ACCEPT4 1
/* Define to 1 if you have the header file. */
/* #undef EVENT__HAVE_AFUNIX_H 1 */
+#ifdef HAVE_ARC4RANDOM
/* Define to 1 if you have the `arc4random' function. */
-/* #undef EVENT__HAVE_ARC4RANDOM */
+#define EVENT__HAVE_ARC4RANDOM 1
+#endif
/* Define to 1 if you have the `arc4random_addrandom' function. */
/* #undef EVENT__HAVE_ARC4RANDOM_ADDRANDOM */
+#ifdef HAVE_ARC4RANDOM_BUF
/* Define to 1 if you have the `arc4random_buf' function. */
-/* #undef EVENT__HAVE_ARC4RANDOM_BUF */
+#define EVENT__HAVE_ARC4RANDOM_BUF 1
+#endif
/* Define to 1 if you have the header file. */
#define EVENT__HAVE_ARPA_INET_H 1
/* Define to 1 if you have the `clock_gettime' function. */
#define EVENT__HAVE_CLOCK_GETTIME 1
/* Define to 1 if you have the declaration of `CTL_KERN', and to 0 if you
# HG changeset patch
# User Mike Hommey
# Date 1660077764 0
# Node ID a61813bd9f0a0048b84a2c56a77a06eb5e269ab2
# Parent 970ebbe54477a0e518bfee8aeddf487ad9bd4365
Bug 1782988 - Fix use of arc4random_buf use in ping.cpp. r=gsvelto
The code was probably never built before glibc 2.36, because before
that, only Android and some BSDs had arc4random_buf, but none of those
actually built this code.
Differential Revision: https://phabricator.services.mozilla.com/D154024
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-08-10 17:12:30
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1521 (New)
Package is "MozillaThunderbird"
Wed Aug 10 17:12:30 2022 rev:284 rq:993911 version:102.1.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-08-03 21:16:07.251351187 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1521/MozillaThunderbird.changes
2022-08-10 17:12:39.185606681 +0200
@@ -1,0 +2,15 @@
+Tue Aug 9 06:24:56 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.1.2
+ * fix for bmo#165 (no POP download progress bar) was backed
+out from this release to address broken POP message download
+with Fetch headers only selected in Account Settings (bmo#1783552)
+
+---
+Mon Aug 8 06:46:01 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.1.1
+ Bugfixes:
+ * https://www.thunderbird.net/en-US/thunderbird/102.1.1/releasenotes/
+
+---
Old:
l10n-102.1.0.tar.xz
thunderbird-102.1.0.source.tar.xz
thunderbird-102.1.0.source.tar.xz.asc
New:
l10n-102.1.2.tar.xz
thunderbird-102.1.2.source.tar.xz
thunderbird-102.1.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.qTLkqk/_old 2022-08-10 17:12:57.613654781 +0200
+++ /var/tmp/diff_new_pack.qTLkqk/_new 2022-08-10 17:12:57.617654792 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
-%define mainver%major.1.0
-%define orig_version 102.1.0
+%define mainver%major.1.2
+%define orig_version 102.1.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-102.1.0.tar.xz -> l10n-102.1.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.1.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1521/l10n-102.1.2.tar.xz
differ: char 27, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.qTLkqk/_old 2022-08-10 17:12:57.821655323 +0200
+++ /var/tmp/diff_new_pack.qTLkqk/_new 2022-08-10 17:12:57.825655334 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
-VERSION="102.1.0"
+VERSION="102.1.2"
VERSION_SUFFIX=""
-PREV_VERSION="102.0.3"
+PREV_VERSION="102.1.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102;
-RELEASE_TAG="7fc691fc18b8cddcf185d1b72ebc403e8983ada9"
-RELEASE_TIMESTAMP="20220725200630"
+RELEASE_TAG="866a7981895be684f4462051ad717cb48cd228e4"
+RELEASE_TIMESTAMP="20220808204007"
++ thunderbird-102.1.0.source.tar.xz -> thunderbird-102.1.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.1.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1521/thunderbird-102.1.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-08-03 21:16:01
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533 (New)
Package is "MozillaThunderbird"
Wed Aug 3 21:16:01 2022 rev:283 rq:992051 version:102.1.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-06-30 13:18:00.345517341 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1533/MozillaThunderbird.changes
2022-08-03 21:16:07.251351187 +0200
@@ -1,0 +2,50 @@
+Tue Jul 26 09:03:40 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.1.0
+ * https://www.thunderbird.net/en-US/thunderbird/102.1.0/releasenotes
+ MFSA 2022-32 (bsc#1201758)
+ * CVE-2022-36319 (bmo#1737722)
+Mouse Position spoofing with CSS transforms
+ * CVE-2022-36318 (bmo#1771774)
+Directory indexes for bundled resources reflected URL parameters
+ * CVE-2022-36314 (bmo#1773894)
+Opening local .lnk files could cause unexpected
+network loads
+ * CVE-2022-2505 (bmo#1769739, bmo#1772824)
+Memory safety bugs fixed in Thunderbird 102.1
+- added mozilla-newer-cbindgen.patch to fix build with
+ rust-cbindgen >= 0.24 (and also require that for build)
+- added mozilla-pgo.patch to fix LTO builds with gcc
+
+---
+Tue Jul 19 07:31:52 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.0.3
+ Bugfixes as in
+ * https://www.thunderbird.net/en-US/thunderbird/102.0.3/releasenotes/
+
+---
+Sat Jul 9 21:53:27 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 102.0.2
+ * https://www.thunderbird.net/en-US/thunderbird/102.0/releasenotes/
+- removed obsolete patches
+ mozilla-bmo1504834-part2.patch
+ mozilla-bmo1504834-part4.patch
+ mozilla-bmo1602730.patch
+ mozilla-bmo1626236.patch
+ mozilla-bmo1724679.patch
+ mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
+ mozilla-sandbox-fips.patch
+- added patches inherited from FF 102
+ one_swizzle_to_rule_them_all.patch
+ svg-rendering.patch
+- fix KDE detection (boo#1200987) in mozilla-kde.patch
+- requires
+ rust = 1.60
+ NSPR >= 4.34
+ NSS >= 3.79
+ rust-cbindgen >= 0.23.0
+- remove special breakpad debug symbol creation
+
+---
Old:
l10n-91.11.0.tar.xz
mozilla-bmo1504834-part2.patch
mozilla-bmo1504834-part4.patch
mozilla-bmo1602730.patch
mozilla-bmo1626236.patch
mozilla-bmo1724679.patch
mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
mozilla-sandbox-fips.patch
thunderbird-91.11.0.source.tar.xz
thunderbird-91.11.0.source.tar.xz.asc
New:
l10n-102.1.0.tar.xz
mozilla-newer-cbindgen.patch
mozilla-pgo.patch
one_swizzle_to_rule_them_all.patch
svg-rendering.patch
thunderbird-102.1.0.source.tar.xz
thunderbird-102.1.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.Zo0Zun/_old 2022-08-03 21:16:18.711381263 +0200
+++ /var/tmp/diff_new_pack.Zo0Zun/_new 2022-08-03 21:16:18.719381284 +0200
@@ -28,9 +28,9 @@
# orig_suffix b3
# major 69
# mainver %major.99
-%define major 91
-%define mainver%major.11.0
-%define orig_version 91.11.0
+%define major 102
+%define mainver%major.1.0
+%define orig_version 102.1.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -66,7 +66,7 @@
%define gnome_dir %{_prefix}
%define desktop_file_name %{progname}
%define __provides_exclude ^lib.*\\.so.*$
-%define __requires_exclude
^(libmoz.*|liblgpllibs.*|libxul.*|libldap.*|libldif.*|libprldap.*)$
+%define __requires_exclude
^(libmoz.*|liblgpllibs.*|libxul.*|libldap.*|libldif.*|libprldap.*|librnp.*)$
%define localize 1
%define crashreporter 0
%define with_pipewire0_3 1
@@ -85,27 +85,31 @@
BuildRequires: dbus-1-glib-devel
BuildRequires: fdupes
BuildRequires: memory-constraints
-%if 0%{?suse_version} <= 1320
-BuildRequires: gcc9-c++
+%if 0%{?suse_version} < 1550 && 0%{?sle_version} <= 150400
+BuildRequires: gcc11-c++
%else
BuildRequires: gcc-c++
%endif
%if 0%{?suse_version} < 1550 && 0%{?sle_version} < 150300
-BuildRequires: cargo >= 1.51
-BuildRequires: rust >= 1.51
+BuildRequires: cargo >= 1.59
+BuildRequires: rust >= 1.59
%else
# Newer sle/leap/tw use parallel versioned rust releases which have
# a different method for provides that we can use to request a
# specific version
-BuildRequires: rust+cargo
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-06-30 13:17:57
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1548 (New)
Package is "MozillaThunderbird"
Thu Jun 30 13:17:57 2022 rev:282 rq:985736 version:91.11.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-06-01 17:34:43.690745492 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1548/MozillaThunderbird.changes
2022-06-30 13:18:00.345517341 +0200
@@ -1,0 +2,32 @@
+Sun Jun 26 08:53:26 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.11.0
+ * CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did not work
+additional fix applied
+ * "Save-As" attachment dialog did not have filename pre-populated
+ MFSA 2022-26 (bsc#1200793)
+ * CVE-2022-34479 (bmo#1745595)
+A popup window could be resized in a way to overlay the
+address bar with web content
+ * CVE-2022-34470 (bmo#1765951)
+Use-after-free in nsSHistory
+ * CVE-2022-34468 (bmo#1768537)
+CSP sandbox header without `allow-scripts` can be bypassed
+via retargeted javascript: URI
+ * CVE-2022-2226 (bmo#1775441)
+An email with a mismatching OpenPGP signature date was
+accepted as valid
+ * CVE-2022-34481 (bmo#1497246)
+Potential integer overflow in ReplaceElementsAt
+ * CVE-2022-31744 (bmo#1757604)
+CSP bypass enabling stylesheet injection
+ * CVE-2022-34472 (bmo#1770123)
+Unavailable PAC file resulted in OCSP requests being blocked
+ * CVE-2022-34478 (bmo#1773717)
+Microsoft protocols can be attacked if a user accepts a prompt
+ * CVE-2022-2200 (bmo#1771381)
+Undesired attributes could be set as part of prototype pollution
+ * CVE-2022-34484 (bmo#1763634, bmo#1772651)
+Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird 102
+
+---
Old:
l10n-91.10.0.tar.xz
thunderbird-91.10.0.source.tar.xz
thunderbird-91.10.0.source.tar.xz.asc
New:
l10n-91.11.0.tar.xz
thunderbird-91.11.0.source.tar.xz
thunderbird-91.11.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.PvrHMd/_old 2022-06-30 13:18:07.565522754 +0200
+++ /var/tmp/diff_new_pack.PvrHMd/_new 2022-06-30 13:18:07.569522758 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.10.0
-%define orig_version 91.10.0
+%define mainver%major.11.0
+%define orig_version 91.11.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.10.0.tar.xz -> l10n-91.11.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.PvrHMd/_old 2022-06-30 13:18:07.789522922 +0200
+++ /var/tmp/diff_new_pack.PvrHMd/_new 2022-06-30 13:18:07.793522926 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.10.0"
+VERSION="91.11.0"
VERSION_SUFFIX=""
-PREV_VERSION="91.9.1"
+PREV_VERSION="91.10.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="a52d41376d0374e23a0848e42a21454150c4d6a2"
-RELEASE_TIMESTAMP="20220520005021"
+RELEASE_TAG="da48e7ecf800ec7761a3b6e0ca81e0c90adc30f7"
+RELEASE_TIMESTAMP="20220628000715"
++ thunderbird-91.10.0.source.tar.xz -> thunderbird-91.11.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.10.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1548/thunderbird-91.11.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-06-01 17:34:24
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1548 (New)
Package is "MozillaThunderbird"
Wed Jun 1 17:34:24 2022 rev:281 rq:980158 version:91.10.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-05-23 15:51:32.158634521 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1548/MozillaThunderbird.changes
2022-06-01 17:34:43.690745492 +0200
@@ -1,0 +2,30 @@
+Thu May 26 07:56:09 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.10.0
+ * Various UX and theme improvements
+ MFSA 2022-22 (bsc#1200027)
+ * CVE-2022-31736 (bmo#1735923)
+Cross-Origin resource's length leaked
+ * CVE-2022-31737 (bmo#1743767)
+Heap buffer overflow in WebGL
+ * CVE-2022-31738 (bmo#1756388)
+Browser window spoof using fullscreen mode
+ * CVE-2022-31739 (bmo#1765049)
+Attacker-influenced path traversal when saving downloaded
+files
+ * CVE-2022-31740 (bmo#1766806)
+Register allocation problem in WASM on arm64
+ * CVE-2022-31741 (bmo#1767590)
+Uninitialized variable leads to invalid memory read
+ * CVE-2022-1834 (bmo#1767816)
+Braille space character caused incorrect sender email to be
+shown for a digitally signed email
+ * CVE-2022-31742 (bmo#1730434)
+Querying a WebAuthn token with a large number of
+allowCredential entries may have leaked cross-origin
+information
+ * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
+bmo#1767365, bmo#1768559, bmo#1768734)
+Memory safety bugs fixed in Thunderbird 91.10
+
+---
Old:
l10n-91.9.1.tar.xz
thunderbird-91.9.1.source.tar.xz
thunderbird-91.9.1.source.tar.xz.asc
New:
l10n-91.10.0.tar.xz
thunderbird-91.10.0.source.tar.xz
thunderbird-91.10.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.UYunBg/_old 2022-06-01 17:34:52.946756428 +0200
+++ /var/tmp/diff_new_pack.UYunBg/_new 2022-06-01 17:34:52.950756433 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.9.1
-%define orig_version 91.9.1
+%define mainver%major.10.0
+%define orig_version 91.10.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -105,7 +105,7 @@
BuildRequires: libXcomposite-devel
BuildRequires: libcurl-devel
BuildRequires: mozilla-nspr-devel >= 4.32
-BuildRequires: mozilla-nss-devel >= 3.68
+BuildRequires: mozilla-nss-devel >= 3.68.4
BuildRequires: nasm >= 2.14
BuildRequires: nodejs >= 10.22.1
%if 0%{?sle_version} >= 12 && 0%{?sle_version} < 15
++ l10n-91.9.1.tar.xz -> l10n-91.10.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.UYunBg/_old 2022-06-01 17:34:53.170756694 +0200
+++ /var/tmp/diff_new_pack.UYunBg/_new 2022-06-01 17:34:53.174756698 +0200
@@ -1,8 +1,8 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.9.1"
+VERSION="91.10.0"
VERSION_SUFFIX=""
-PREV_VERSION="91.9.0"
+PREV_VERSION="91.9.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
++ thunderbird-91.9.1.source.tar.xz -> thunderbird-91.10.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.9.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1548/thunderbird-91.10.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-05-23 15:51:30
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2254 (New)
Package is "MozillaThunderbird"
Mon May 23 15:51:30 2022 rev:280 rq:978422 version:91.9.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-05-06 18:58:28.469299845 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2254/MozillaThunderbird.changes
2022-05-23 15:51:32.158634521 +0200
@@ -1,0 +2,11 @@
+Sat May 21 06:36:17 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.9.1
+ MFSA 2022-19 (bsc#1199768)
+ * CVE-2022-1802 (bmo#1770137)
+Prototype pollution in Top-Level Await implementation
+ * CVE-2022-1529 (bmo#1770048)
+Untrusted input used in JavaScript object indexing, leading
+to prototype pollution
+
+---
Old:
l10n-91.9.0.tar.xz
thunderbird-91.9.0.source.tar.xz
thunderbird-91.9.0.source.tar.xz.asc
New:
l10n-91.9.1.tar.xz
thunderbird-91.9.1.source.tar.xz
thunderbird-91.9.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.DADe6R/_old 2022-05-23 15:51:39.202641160 +0200
+++ /var/tmp/diff_new_pack.DADe6R/_new 2022-05-23 15:51:39.210641167 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.9.0
-%define orig_version 91.9.0
+%define mainver%major.9.1
+%define orig_version 91.9.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.9.0.tar.xz -> l10n-91.9.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.DADe6R/_old 2022-05-23 15:51:39.438641382 +0200
+++ /var/tmp/diff_new_pack.DADe6R/_new 2022-05-23 15:51:39.442641387 +0200
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.9.0"
+VERSION="91.9.1"
VERSION_SUFFIX=""
-PREV_VERSION="91.8.1"
+PREV_VERSION="91.9.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="1576ef623c224f5ba915c39a06b519ea977685c0"
-RELEASE_TIMESTAMP="20220427203543"
+RELEASE_TAG="a52d41376d0374e23a0848e42a21454150c4d6a2"
+RELEASE_TIMESTAMP="20220520005021"
++ thunderbird-91.9.0.source.tar.xz -> thunderbird-91.9.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.9.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2254/thunderbird-91.9.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-04-22 21:52:46
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1538 (New)
Package is "MozillaThunderbird"
Fri Apr 22 21:52:46 2022 rev:278 rq:970866 version:91.8.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-04-14 17:23:36.555133217 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1538/MozillaThunderbird.changes
2022-04-22 21:53:10.830732586 +0200
@@ -1,0 +2,14 @@
+Sat Apr 16 11:36:34 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.8.1
+ * CLIENTID extension to SMTP was not supported by smtp-js#
+ * Additional SMTP errors now propagated to user
+ * OpenPGP was not able to use some previously supported key types
+ * OpenPGP Key Manager did not always display correct information
+after importing additional IDs
+ * Duplicate new mail notifications could be displayed when
+server-side filters were in use
+ * Cancelling an SMTP password entry resulted in multiple failure
+dialogs being displayed
+
+---
@@ -6,0 +21,11 @@
+Sat Apr 2 17:39:15 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.8.0
+ * Google accounts using password authentication will be migrated
+to OAuth2.
+ * bugfixes
+https://www.thunderbird.net/en-US/thunderbird/91.8.0/releasenotes
+ MFSA 2022- (bsc#1197903)
+- update create-tar.sh
+
+---
Old:
l10n-91.7.0.tar.xz
thunderbird-91.7.0.source.tar.xz
thunderbird-91.7.0.source.tar.xz.asc
New:
l10n-91.8.1.tar.xz
thunderbird-91.8.1.source.tar.xz
thunderbird-91.8.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.GdLRpz/_old 2022-04-22 21:53:20.358743443 +0200
+++ /var/tmp/diff_new_pack.GdLRpz/_new 2022-04-22 21:53:20.370743457 +0200
@@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.7.0
-%define orig_version 91.7.0
+%define mainver%major.8.1
+%define orig_version 91.8.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ create-tar.sh ++
--- /var/tmp/diff_new_pack.GdLRpz/_old 2022-04-22 21:53:20.482743584 +0200
+++ /var/tmp/diff_new_pack.GdLRpz/_new 2022-04-22 21:53:20.486743589 +0200
@@ -37,6 +37,7 @@
fi
SOURCE_TARBALL="$PRODUCT-$VERSION$VERSION_SUFFIX.source.tar.xz"
+PREV_SOURCE_TARBALL="$PRODUCT-$PREV_VERSION$PREV_VERSION_SUFFIX.source.tar.xz"
FTP_URL="https://ftp.mozilla.org/pub/$PRODUCT/releases/$VERSION$VERSION_SUFFIX/source;
FTP_CANDIDATES_BASE_URL="https://ftp.mozilla.org/pub/$PRODUCT/candidates;
# Make first letter of PRODCUT upper case
@@ -145,22 +146,48 @@
fi
}
-function locales_parse() {
+function locales_parse_file() {
+ FILE="$1"
+ cat "$FILE" | python -c "import json; import sys; \
+ print('\n'.join(['{} {}'.format(key, value['revision']) \
+for key, value in sorted(json.load(sys.stdin).items())]));"
+}
+
+function locales_parse_url() {
URL="$1"
curl -s "$URL" | python -c "import json; import sys; \
print('\n'.join(['{} {}'.format(key, value['changeset']) \
for key, value in
sorted(json.load(sys.stdin)['locales'].items())]));"
}
+function extract_locales_file() {
+# still need to extract the locale information from the archive
+echo "extract locale changesets"
+tar -xf $SOURCE_TARBALL $LOCALE_FILE
+}
+
function locales_unchanged() {
BUILD_ID="$1"
PREV_BUILD_ID=$(get_build_number "$PREV_VERSION$PREV_VERSION_SUFFIX")
# If no json-file for one of the versions can be found, we say "they changed"
prev_url=$(locales_get "$PREV_VERSION$PREV_VERSION_SUFFIX" "$PREV_BUILD_ID")
|| return 1
- curr_url=$(locales_get "$VERSION$VERSION_SUFFIX" "$BUILD_ID") ||
return 1
+ prev_content=$(locales_parse_url "$prev_url") || exit 1
- prev_content=$(locales_parse "$prev_url") || exit 1
- curr_content=$(locales_parse "$curr_url") || exit 1
+ curr_url=$(locales_get "$VERSION$VERSION_SUFFIX" "$BUILD_ID")
+ if [ $? -ne 0 ]; then
+# We did not find a locales file upstream on the servers
+if [ -e $SOURCE_TARBALL ]; then
+# We can find out what the locales are, by extracting the json-file
from the tar-ball
+# instead of getting it from the server
+extract_locales_file || return 1
+
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2022-04-14 17:23:29 Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1941 (New) Package is "MozillaThunderbird" Thu Apr 14 17:23:29 2022 rev:277 rq:969350 version:91.7.0 Changes: --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2022-03-28 17:00:44.760984440 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1941/MozillaThunderbird.changes 2022-04-14 17:23:36.555133217 +0200 @@ -1,0 +2,5 @@ +Tue Apr 12 07:30:18 UTC 2022 - Martin Li??ka + +- Set memory limits for DWZ to 4x. + +--- Other differences: -- ++ MozillaThunderbird.spec ++ --- /var/tmp/diff_new_pack.w42hJ0/_old 2022-04-14 17:23:40.007137251 +0200 +++ /var/tmp/diff_new_pack.w42hJ0/_new 2022-04-14 17:23:40.011137256 +0200 @@ -17,6 +17,9 @@ # +%define _dwz_low_mem_die_limit 4000 +%define _dwz_max_die_limit 2 + # changed with every update # orig_version vs. mainver: To have beta-builds # FF70beta3 would be released as FF69.99
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2022-03-28 16:59:57 Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1900 (New) Package is "MozillaThunderbird" Mon Mar 28 16:59:57 2022 rev:276 rq:964779 version:91.7.0 Changes: --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2022-03-13 20:24:32.111610745 +0100 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1900/MozillaThunderbird.changes 2022-03-28 17:00:44.760984440 +0200 @@ -1,0 +2,5 @@ +Thu Mar 17 14:39:51 UTC 2022 - Dirk M??ller + +- skip slow workers, this is a tough build job + +--- Other differences: -- ++ _constraints ++ --- /var/tmp/diff_new_pack.0vCOy1/_old 2022-03-28 17:00:47.392988016 +0200 +++ /var/tmp/diff_new_pack.0vCOy1/_new 2022-03-28 17:00:47.396988021 +0200 @@ -8,6 +8,7 @@ 9 + SLOW_CPU armv6l
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-03-13 20:24:29
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25692 (New)
Package is "MozillaThunderbird"
Sun Mar 13 20:24:29 2022 rev:275 rq:960657 version:91.7.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-02-18 23:02:40.049414133 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25692/MozillaThunderbird.changes
2022-03-13 20:24:32.111610745 +0100
@@ -1,0 +2,35 @@
+Sun Mar 6 13:02:02 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.7.0
+ * Thunderbird will use the first occurrence of headers that should
+only appear once
+ * Auto-complete incorrectly changed a pasted email address to the
+primary address of a contact
+ * Attachments with filename extensions that were not registered in
+MIME types could not be opened
+ * Copy/Cut/Paste actions not working in Thunderbird Preferences
+ * Improved screen reader support of displayed message headers
+ MFSA 2022-12 (bsc#1196900)
+ * CVE-2022-26383 (bmo#1742421)
+Browser window spoof using fullscreen mode
+ * CVE-2022-26384 (bmo#1744352)
+iframe allow-scripts sandbox bypass
+ * CVE-2022-26387 (bmo#1752979)
+Time-of-check time-of-use bug when verifying add-on signatures
+ * CVE-2022-26381 (bmo#1736243)
+Use-after-free in text reflows
+ * CVE-2022-26386 (bmo#1752396)
+Temporary files downloaded to /tmp and accessible by other
+local users
+
+---
+Sun Mar 6 12:49:36 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.6.2
+ MFSA 2022-09
+ * CVE-2022-26485 (bmo#1758062)
+Use-after-free in XSLT parameter processing
+ * CVE-2022-26486 (bmo#1758070)
+Use-after-free in WebGPU IPC Framework
+
+---
Old:
l10n-91.6.1.tar.xz
thunderbird-91.6.1.source.tar.xz
thunderbird-91.6.1.source.tar.xz.asc
New:
l10n-91.7.0.tar.xz
thunderbird-91.7.0.source.tar.xz
thunderbird-91.7.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.O1E5XN/_old 2022-03-13 20:24:40.827620997 +0100
+++ /var/tmp/diff_new_pack.O1E5XN/_new 2022-03-13 20:24:40.831621002 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.6.1
-%define orig_version 91.6.1
+%define mainver%major.7.0
+%define orig_version 91.7.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.6.1.tar.xz -> l10n-91.7.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.6.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25692/l10n-91.7.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.O1E5XN/_old 2022-03-13 20:24:41.079621293 +0100
+++ /var/tmp/diff_new_pack.O1E5XN/_new 2022-03-13 20:24:41.079621293 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.6.1"
+VERSION="91.7.0"
VERSION_SUFFIX=""
-PREV_VERSION="91.6.0"
+PREV_VERSION="91.6.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="ead04f72567a3f690d9ad5218a7e5e2d264cb067"
-RELEASE_TIMESTAMP="20220214162907"
+RELEASE_TAG="c936367e9d73e790fc2e6aa16a64ec6d55ab0379"
+RELEASE_TIMESTAMP="20220302151026"
++ thunderbird-91.6.1.source.tar.xz -> thunderbird-91.7.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.6.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25692/thunderbird-91.7.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-02-18 23:02:38
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1958 (New)
Package is "MozillaThunderbird"
Fri Feb 18 23:02:38 2022 rev:274 rq:955596 version:91.6.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-02-13 19:50:59.894205587 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1958/MozillaThunderbird.changes
2022-02-18 23:02:40.049414133 +0100
@@ -1,0 +2,12 @@
+Tue Feb 15 09:13:06 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.6.1
+ * generated views of meeting invitations are now expanded by default
+ * Emails were not downloading at startup under some conditions
+ * Port numbers were not shown in "Confirm Security Exception"
+dialog for CalDAV connections
+ MFSA 2022-07 (bsc#1196072)
+ * CVE-2022-0566 (bmo#1753094)
+Crafted email could trigger an out-of-bounds write
+
+---
Old:
l10n-91.6.0.tar.xz
thunderbird-91.6.0.source.tar.xz
thunderbird-91.6.0.source.tar.xz.asc
New:
l10n-91.6.1.tar.xz
thunderbird-91.6.1.source.tar.xz
thunderbird-91.6.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.8Zet8s/_old 2022-02-18 23:02:47.377413561 +0100
+++ /var/tmp/diff_new_pack.8Zet8s/_new 2022-02-18 23:02:47.381413561 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.6.0
-%define orig_version 91.6.0
+%define mainver%major.6.1
+%define orig_version 91.6.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.6.0.tar.xz -> l10n-91.6.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.6.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1958/l10n-91.6.1.tar.xz
differ: char 27, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.8Zet8s/_old 2022-02-18 23:02:47.577413545 +0100
+++ /var/tmp/diff_new_pack.8Zet8s/_new 2022-02-18 23:02:47.581413545 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.6.0"
+VERSION="91.6.1"
VERSION_SUFFIX=""
-PREV_VERSION="91.5.1"
+PREV_VERSION="91.6.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="676bfbddd4b3ed77f818b6b07d9d8a79c61be4da"
-RELEASE_TIMESTAMP="20220204195633"
+RELEASE_TAG="ead04f72567a3f690d9ad5218a7e5e2d264cb067"
+RELEASE_TIMESTAMP="20220214162907"
++ thunderbird-91.6.0.source.tar.xz -> thunderbird-91.6.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.6.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1958/thunderbird-91.6.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-02-13 19:50:37
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1956 (New)
Package is "MozillaThunderbird"
Sun Feb 13 19:50:37 2022 rev:273 rq:953831 version:91.6.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-01-29 21:01:06.171069032 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1956/MozillaThunderbird.changes
2022-02-13 19:50:59.894205587 +0100
@@ -1,0 +2,39 @@
+Sat Feb 5 14:11:31 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.6.0
+ * TB will now offer to send large forwarded attachments via FileLink
+ * Partially signed unencrypted messages displayed an incorrect
+"parrtially encrypted" notification
+ * Attachments filenames were not sanitized before saving to disk
+ * In the attachment bar, the "Import OpenPGP Key" item displayed
+for public keys displayed an error and did not import the key
+ * "Open with" attachment dialog did not have a selected radio
+button option
+ MFSA 2022-06 (bsc#1195682)
+ * CVE-2022-22753 (bmo#1732435)
+Privilege Escalation to SYSTEM on Windows via Maintenance
+Service
+ * CVE-2022-22754 (bmo#1750565)
+Extensions could have bypassed permission confirmation during
+update
+ * CVE-2022-22756 (bmo#1317873)
+Drag and dropping an image could have resulted in the dropped
+object being an executable
+ * CVE-2022-22759 (bmo#1739957)
+Sandboxed iframes could have executed script if the parent
+appended elements
+ * CVE-2022-22760 (bmo#1740985, bmo#1748503)
+Cross-Origin responses could be distinguished between script
+and non-script content-types
+ * CVE-2022-22761 (bmo#1745566)
+frame-ancestors Content Security Policy directive was not
+enforced for framed extension pages
+ * CVE-2022-22763 (bmo#1740534)
+Script Execution during invalid object state
+ * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
+bmo#1748210, bmo#1748279)
+Memory safety bugs fixed in Thunderbird 91.6
+- do not use ccache by default
+- removed obsolete mozilla-bmo1745560.patch
+
+---
Old:
l10n-91.5.1.tar.xz
mozilla-bmo1745560.patch
thunderbird-91.5.1.source.tar.xz
thunderbird-91.5.1.source.tar.xz.asc
New:
l10n-91.6.0.tar.xz
thunderbird-91.6.0.source.tar.xz
thunderbird-91.6.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.0sjZOu/_old 2022-02-13 19:51:11.522236564 +0100
+++ /var/tmp/diff_new_pack.0sjZOu/_new 2022-02-13 19:51:11.534236596 +0100
@@ -2,7 +2,7 @@
# spec file
#
# Copyright (c) 2022 SUSE LLC
-# 2006-2021 Wolfgang Rosenauer
+# 2006-2022 Wolfgang Rosenauer
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.5.1
-%define orig_version 91.5.1
+%define mainver%major.6.0
+%define orig_version 91.6.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -38,9 +38,6 @@
# upstream default is clang (to use gcc for large parts set to 0)
%define clang_build0
-# PIE, full relro
-%define build_hardened 1
-
%bcond_with only_print_mozconfig
%bcond_without mozilla_tb_kde4
@@ -48,7 +45,7 @@
%bcond_without mozilla_tb_optimize_for_size
# define if ccache should be used or not
-%define useccache 1
+%define useccache 0
# Firefox only supports i686
%ifarch %ix86
@@ -207,7 +204,6 @@
Patch29:mozilla-silence-no-return-type.patch
Patch30:mozilla-bmo531915.patch
Patch31:mozilla-bmo1724679.patch
-Patch32:mozilla-bmo1745560.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -310,7 +306,6 @@
%patch29 -p1
%patch30 -p1
%patch31 -p1
-%patch32 -p1
%endif
%build
@@ -366,9 +361,7 @@
# Limit RAM usage during link
export LDFLAGS="${LDFLAGS} -Wl,--no-keep-memory -Wl,--reduce-memory-overheads"
%endif
-%if 0%{?build_hardened}
export LDFLAGS="${LDFLAGS} -fPIC -Wl,-z,relro,-z,now"
-%endif
%ifarch ppc64 ppc64le
%if 0%{?clang_build} == 0
export CFLAGS="$CFLAGS -mminimal-toc"
@@ -530,9 +523,10 @@
>> %{_tmppath}/translations.$_l10ntarget
' -- {}
%endif
-
+%if 0%{useccache} != 0
ccache -s
%endif
+%endif
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-01-29 21:01:01
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1898 (New)
Package is "MozillaThunderbird"
Sat Jan 29 21:01:01 2022 rev:272 rq:949349 version:91.5.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2022-01-13 00:22:52.787952237 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1898/MozillaThunderbird.changes
2022-01-29 21:01:06.171069032 +0100
@@ -1,0 +2,16 @@
+Sat Jan 22 09:57:59 UTC 2022 - Manfred Hollstein
+
+- Mozilla Thunderbird 91.5.1
+ * JS LDAP implementation did not support self-signed SSL certificates
+ * After saving a draft and subsequently sending a FileLink email,
+the original file was removed from disk
+ * Chat OTR encryption did not work
+ * OTR verification bar was not removed after completing verification
+ * Various theme improvements
+
+---
+Thu Jan 20 13:10:00 UTC 2022 - Martin Li??ka
+
+- Enable -fimplicit-constexpr for GCC 12+.
+
+---
Old:
l10n-91.5.0.tar.xz
thunderbird-91.5.0.source.tar.xz
thunderbird-91.5.0.source.tar.xz.asc
New:
l10n-91.5.1.tar.xz
thunderbird-91.5.1.source.tar.xz
thunderbird-91.5.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.WHTw0G/_old 2022-01-29 21:01:26.302933686 +0100
+++ /var/tmp/diff_new_pack.WHTw0G/_new 2022-01-29 21:01:26.306933659 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.5.0
-%define orig_version 91.5.0
+%define mainver%major.5.1
+%define orig_version 91.5.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -357,6 +357,9 @@
%if 0%{?clang_build} == 0
export CC=gcc
export CXX=g++
+%if 0%{?gcc_version:%{gcc_version}} >= 12
+export CFLAGS="$CFLAGS -fimplicit-constexpr"
+%endif
%endif
%endif
%ifarch %arm %ix86
++ l10n-91.5.0.tar.xz -> l10n-91.5.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.5.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1898/l10n-91.5.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.WHTw0G/_old 2022-01-29 21:01:26.594931723 +0100
+++ /var/tmp/diff_new_pack.WHTw0G/_new 2022-01-29 21:01:26.598931697 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.5.0"
+VERSION="91.5.1"
VERSION_SUFFIX=""
-PREV_VERSION="91.4.1"
+PREV_VERSION="91.5.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="bcd2aab51cd0889d506d29455210d65602b97430"
-RELEASE_TIMESTAMP="20220106182030"
+RELEASE_TAG="46a4af6b62978ae76a41fcf57bc3309c4d9bb22e"
+RELEASE_TIMESTAMP="20220120011414"
++ thunderbird-91.5.0.source.tar.xz -> thunderbird-91.5.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.5.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1898/thunderbird-91.5.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2022-01-13 00:22:14
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1892 (New)
Package is "MozillaThunderbird"
Thu Jan 13 00:22:14 2022 rev:271 rq:945701 version:91.5.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-12-30 15:55:40.99697 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1892/MozillaThunderbird.changes
2022-01-13 00:22:52.787952237 +0100
@@ -1,0 +2,39 @@
+Fri Jan 7 16:13:57 UTC 2022 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.5.0
+ https://www.thunderbird.net/en-US/thunderbird/91.5.0/releasenotes
+ MFSA 2022-03 (bsc#1194547)
+ * CVE-2022-22746 (bmo#1735071)
+Calling into reportValidity could have lead to fullscreen
+window spoof
+ * CVE-2022-22743 (bmo#1739220)
+Browser window spoof using fullscreen mode
+ * CVE-2022-22742 (bmo#1739923)
+Out-of-bounds memory access when inserting text in edit mode
+ * CVE-2022-22741 (bmo#1740389)
+Browser window spoof using fullscreen mode
+ * CVE-2022-22740 (bmo#1742334)
+Use-after-free of ChannelEventQueue::mOwner
+ * CVE-2022-22738 (bmo#1742382)
+Heap-buffer-overflow in blendGaussianBlur
+ * CVE-2022-22737 (bmo#1745874)
+Race condition when playing audio files
+ * CVE-2021-4140 (bmo#1746720)
+Iframe sandbox bypass with XSLT
+ * CVE-2022-22748 (bmo#1705211)
+Spoofed origin on external protocol launch dialog
+ * CVE-2022-22745 (bmo#1735856)
+Leaking cross-origin URLs through securitypolicyviolation event
+ * CVE-2022-22744 (bmo#1737252)
+The 'Copy as curl' feature in DevTools did not fully escape
+website-controlled data, potentially leading to command injection
+ * CVE-2022-22747 (bmo#1735028)
+Crash when handling empty pkcs7 sequence
+ * CVE-2022-22739 (bmo#1744158)
+Missing throttling on external protocol launch dialog
+ * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
+bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869, bmo#1743221,
+bmo#1743515, bmo#1745373, bmo#1746011)
+Memory safety bugs fixed in Thunderbird 91.5
+
+---
Old:
l10n-91.4.1.tar.xz
thunderbird-91.4.1.source.tar.xz
thunderbird-91.4.1.source.tar.xz.asc
New:
l10n-91.5.0.tar.xz
thunderbird-91.5.0.source.tar.xz
thunderbird-91.5.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.GXZvpo/_old 2022-01-13 00:23:01.939958825 +0100
+++ /var/tmp/diff_new_pack.GXZvpo/_new 2022-01-13 00:23:01.951958833 +0100
@@ -1,7 +1,7 @@
#
# spec file
#
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
# 2006-2021 Wolfgang Rosenauer
#
# All modifications and additions to the file contributed by third parties
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.4.1
-%define orig_version 91.4.1
+%define mainver%major.5.0
+%define orig_version 91.5.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.4.1.tar.xz -> l10n-91.5.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.4.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1892/l10n-91.5.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.GXZvpo/_old 2022-01-13 00:23:02.147958974 +0100
+++ /var/tmp/diff_new_pack.GXZvpo/_new 2022-01-13 00:23:02.147958974 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.4.1"
+VERSION="91.5.0"
VERSION_SUFFIX=""
-PREV_VERSION="91.4.0"
+PREV_VERSION="91.4.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="11529576c3a7d89514771d1e0f5fa116eef29b81"
-RELEASE_TIMESTAMP="20211216022855"
+RELEASE_TAG="bcd2aab51cd0889d506d29455210d65602b97430"
+RELEASE_TIMESTAMP="20220106182030"
++ thunderbird-91.4.1.source.tar.xz -> thunderbird-91.5.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.4.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1892/thunderbird-91.5.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-12-30 15:55:28
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1896 (New)
Package is "MozillaThunderbird"
Thu Dec 30 15:55:28 2021 rev:270 rq:943034 version:91.4.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-12-22 20:17:47.423839282 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1896/MozillaThunderbird.changes
2021-12-30 15:55:40.99697 +0100
@@ -1,0 +2,5 @@
+Tue Dec 28 20:20:30 UTC 2021 - Bj??rn Lie
+
+- Add mozilla-bmo1745560.patch: Fix build against wayland 1.20.
+
+---
New:
mozilla-bmo1745560.patch
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.nNTbU1/_old 2021-12-30 15:55:43.384668538 +0100
+++ /var/tmp/diff_new_pack.nNTbU1/_new 2021-12-30 15:55:43.388668541 +0100
@@ -207,6 +207,7 @@
Patch29:mozilla-silence-no-return-type.patch
Patch30:mozilla-bmo531915.patch
Patch31:mozilla-bmo1724679.patch
+Patch32:mozilla-bmo1745560.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -309,6 +310,7 @@
%patch29 -p1
%patch30 -p1
%patch31 -p1
+%patch32 -p1
%endif
%build
++ mozilla-bmo1745560.patch ++
diff --git a/widget/gtk/mozwayland/mozwayland.c
b/widget/gtk/mozwayland/mozwayland.c
--- a/widget/gtk/mozwayland/mozwayland.c
+++ b/widget/gtk/mozwayland/mozwayland.c
@@ -200,3 +200,10 @@
MOZ_EXPORT void wl_list_insert_list(struct wl_list* list,
struct wl_list* other) {}
+
+MOZ_EXPORT struct wl_proxy* wl_proxy_marshal_flags(
+struct wl_proxy* proxy, uint32_t opcode,
+const struct wl_interface* interface, uint32_t version, uint32_t flags,
+...) {
+ return NULL;
+}
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-12-22 20:17:42
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2520 (New)
Package is "MozillaThunderbird"
Wed Dec 22 20:17:42 2021 rev:269 rq:941707 version:91.4.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-12-12 00:57:04.318562230 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2520/MozillaThunderbird.changes
2021-12-22 20:17:47.423839282 +0100
@@ -1,0 +2,15 @@
+Fri Dec 17 14:19:48 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.4.1
+ * several fixes as outlined here
+https://www.thunderbird.net/en-US/thunderbird/91.4.1/releasenotes/
+ MFSA 2021-55 (bsc#1193845)
+ * CVE-2021-4126 (bmo#1732310)
+OpenPGP signature status doesn't consider additional message
+content
+ * CVE-2021-44538 (bmo#1744056)
+Matrix chat library libolm bundled with Thunderbird
+vulnerable to a buffer overflow
+- updated _constraints
+
+---
Old:
l10n-91.4.0.tar.xz
thunderbird-91.4.0.source.tar.xz
thunderbird-91.4.0.source.tar.xz.asc
New:
l10n-91.4.1.tar.xz
thunderbird-91.4.1.source.tar.xz
thunderbird-91.4.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.mva6Ns/_old 2021-12-22 20:17:58.227844346 +0100
+++ /var/tmp/diff_new_pack.mva6Ns/_new 2021-12-22 20:17:58.235844350 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.4.0
-%define orig_version 91.4.0
+%define mainver%major.4.1
+%define orig_version 91.4.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ _constraints ++
--- /var/tmp/diff_new_pack.mva6Ns/_old 2021-12-22 20:17:58.307844383 +0100
+++ /var/tmp/diff_new_pack.mva6Ns/_new 2021-12-22 20:17:58.311844385 +0100
@@ -28,17 +28,31 @@
-12
+16
+ ppc64
+ ppc64le
+
+
+
+11
+
+
+2500
+
+
+
+
+
x86_64
-16
+18
++ l10n-91.4.0.tar.xz -> l10n-91.4.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.4.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2520/l10n-91.4.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.mva6Ns/_old 2021-12-22 20:17:58.483844466 +0100
+++ /var/tmp/diff_new_pack.mva6Ns/_new 2021-12-22 20:17:58.491844470 +0100
@@ -1,11 +1,11 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.4.0"
+VERSION="91.4.1"
VERSION_SUFFIX=""
-PREV_VERSION="91.3.2"
+PREV_VERSION="91.4.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="ab6dfcf3a37bf53aac1a9d632d45ee51047050bb"
-RELEASE_TIMESTAMP="20211203141721"
+RELEASE_TAG="11529576c3a7d89514771d1e0f5fa116eef29b81"
+RELEASE_TIMESTAMP="20211216022855"
++ thunderbird-91.4.0.source.tar.xz -> thunderbird-91.4.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.4.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2520/thunderbird-91.4.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-12-12 00:56:10
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2520 (New)
Package is "MozillaThunderbird"
Sun Dec 12 00:56:10 2021 rev:268 rq:936365 version:91.4.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-11-23 22:12:02.146587145 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2520/MozillaThunderbird.changes
2021-12-12 00:57:04.318562230 +0100
@@ -1,0 +2,40 @@
+Thu Dec 2 08:55:33 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.4.0
+ * several fixes as outlined here
+https://www.thunderbird.net/en-US/thunderbird/91.4.0/releasenotes
+ MFSA 2021-54 (bsc#1193485)
+ * CVE-2021-43536 (bmo#1730120)
+URL leakage when navigating while executing asynchronous
+function
+ * CVE-2021-43537 (bmo#1738237)
+Heap buffer overflow when using structured clone
+ * CVE-2021-43538 (bmo#1739091)
+Missing fullscreen and pointer lock notification when
+requesting both
+ * CVE-2021-43539 (bmo#1739683)
+GC rooting failure when calling wasm instance methods
+ * CVE-2021-43541 (bmo#1696685)
+External protocol handler parameters were unescaped
+ * CVE-2021-43542 (bmo#1723281)
+XMLHttpRequest error codes could have leaked the existence of
+an external protocol handler
+ * CVE-2021-43543 (bmo#1738418)
+Bypass of CSP sandbox directive when embedding
+ * CVE-2021-43545 (bmo#1720926)
+Denial of Service when using the Location API in a loop
+ * CVE-2021-43546 (bmo#1737751)
+Cursor spoofing could overlay user interface when native
+cursor is zoomed
+ * CVE-2021-43528 (bmo#1742579)
+JavaScript unexpectedly enabled for the composition area
+ * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
+bmo#1737009, bmo#1739372, bmo#1739421)
+Memory safety bugs fixed in Thunderbird 91.4.0
+
+---
+Thu Nov 25 20:25:29 UTC 2021 - Bj??rn Lie
+
+- Drop unused libidl-devel BuildRequires.
+
+---
@@ -6,0 +47,2 @@
+ * OpenPGP: Botan updated to 2.18.2; addresses CVE-2021-40529
+boo#1189244
Old:
l10n-91.3.2.tar.xz
thunderbird-91.3.2.source.tar.xz
thunderbird-91.3.2.source.tar.xz.asc
New:
l10n-91.4.0.tar.xz
thunderbird-91.4.0.source.tar.xz
thunderbird-91.4.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.mvQOL1/_old 2021-12-12 00:57:11.146566919 +0100
+++ /var/tmp/diff_new_pack.mvQOL1/_new 2021-12-12 00:57:11.150566921 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.3.2
-%define orig_version 91.3.2
+%define mainver%major.4.0
+%define orig_version 91.4.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -104,7 +104,6 @@
%endif
BuildRequires: libXcomposite-devel
BuildRequires: libcurl-devel
-BuildRequires: libidl-devel
BuildRequires: mozilla-nspr-devel >= 4.32
BuildRequires: mozilla-nss-devel >= 3.68
BuildRequires: nasm >= 2.14
++ l10n-91.3.2.tar.xz -> l10n-91.4.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.3.2.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2520/l10n-91.4.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.mvQOL1/_old 2021-12-12 00:57:11.318567037 +0100
+++ /var/tmp/diff_new_pack.mvQOL1/_new 2021-12-12 00:57:11.318567037 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.3.2"
+VERSION="91.4.0"
VERSION_SUFFIX=""
-PREV_VERSION="91.3.1"
+PREV_VERSION="91.3.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="c35def313c0c2bd0341e3e058f862f02390269c4"
-RELEASE_TIMESTAMP="2027150618"
+RELEASE_TAG="ab6dfcf3a37bf53aac1a9d632d45ee51047050bb"
+RELEASE_TIMESTAMP="20211203141721"
++ thunderbird-91.3.2.source.tar.xz -> thunderbird-91.4.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.3.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2520/thunderbird-91.4.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-11-23 22:09:58
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1895 (New)
Package is "MozillaThunderbird"
Tue Nov 23 22:09:58 2021 rev:267 rq:932690 version:91.3.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-11-06 18:13:50.700753959 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1895/MozillaThunderbird.changes
2021-11-23 22:12:02.146587145 +0100
@@ -1,0 +2,23 @@
+Sat Nov 20 18:57:39 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.3.2
+ * Date selection in Calendar print settings widget changed to use
+mini calendar widget
+ * Bugfixes as outlined in release notes
+https://www.thunderbird.net/en-US/thunderbird/91.3.2/releasenotes/
+
+---
+Sat Nov 13 11:52:30 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.3.1
+ * OpenPGP public keys will no longer count as an attachment in
+the message list
+ * Adding a search engine via URL now supported
+ * FileLink messages' template updated; Thunderbird advertisement
+removed
+ * After an update, Thunderbird will now check installed addons
+for updates
+ * Bugfixes as outlined in release notes
+https://www.thunderbird.net/en-US/thunderbird/91.3.1/releasenotes/
+
+---
Old:
l10n-91.3.0.tar.xz
thunderbird-91.3.0.source.tar.xz
thunderbird-91.3.0.source.tar.xz.asc
New:
l10n-91.3.2.tar.xz
thunderbird-91.3.2.source.tar.xz
thunderbird-91.3.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.RaLQOY/_old 2021-11-23 22:12:22.106521131 +0100
+++ /var/tmp/diff_new_pack.RaLQOY/_new 2021-11-23 22:12:22.110521119 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.3.0
-%define orig_version 91.3.0
+%define mainver%major.3.2
+%define orig_version 91.3.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.3.0.tar.xz -> l10n-91.3.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.3.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1895/l10n-91.3.2.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.RaLQOY/_old 2021-11-23 22:12:22.474519915 +0100
+++ /var/tmp/diff_new_pack.RaLQOY/_new 2021-11-23 22:12:22.474519915 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.3.0"
+VERSION="91.3.2"
VERSION_SUFFIX=""
-PREV_VERSION="91.2.1"
+PREV_VERSION="91.3.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="bea1eb4e98a3aa0624fcf83d4ddb32855e9563f8"
-RELEASE_TIMESTAMP="20211101223011"
+RELEASE_TAG="c35def313c0c2bd0341e3e058f862f02390269c4"
+RELEASE_TIMESTAMP="2027150618"
++ thunderbird-91.3.0.source.tar.xz -> thunderbird-91.3.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.3.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1895/thunderbird-91.3.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-11-06 18:13:26
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1890 (New)
Package is "MozillaThunderbird"
Sat Nov 6 18:13:26 2021 rev:266 rq:929062 version:91.3.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-10-26 20:13:38.826008327 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1890/MozillaThunderbird.changes
2021-11-06 18:13:50.700753959 +0100
@@ -1,0 +2,34 @@
+Sun Oct 31 17:49:23 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.3.0
+ * several fixes as outlined here
+https://www.thunderbird.net/en-US/thunderbird/91.3.0/releasenotes/
+ MFSA 2021-50 (bsc#1192250)
+ * CVE-2021-38503 (bmo#1729517)
+iframe sandbox rules did not apply to XSLT stylesheets
+ * CVE-2021-38504 (bmo#1730156)
+Use-after-free in file picker dialog
+ * CVE-2021-38505 (bmo#1730194)
+Windows 10 Cloud Clipboard may have recorded sensitive user data
+ * CVE-2021-38506 (bmo#1730750)
+Thunderbird could be coaxed into going into fullscreen mode
+without notification or warning
+ * CVE-2021-38507 (bmo#1730935)
+Opportunistic Encryption in HTTP2 could be used to bypass the
+Same-Origin-Policy on services hosted on other ports
+ * MOZ-2021-0008 (bmo#1667102)
+Use-after-free in HTTP2 Session object
+ * CVE-2021-38508 (bmo#1366818)
+Permission Prompt could be overlaid, resulting in user
+confusion and potential spoofing
+ * CVE-2021-38509 (bmo#1718571)
+Javascript alert box could have been spoofed onto an
+arbitrary domain
+ * CVE-2021-38510 (bmo#1731779)
+Download Protections were bypassed by .inetloc files on Mac OS
+ * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
+bmo#1735152)
+Memory safety bugs fixed in Thunderbird ESR 91.3
+- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
+
+---
Old:
l10n-91.2.1.tar.xz
thunderbird-91.2.1.source.tar.xz
thunderbird-91.2.1.source.tar.xz.asc
New:
l10n-91.3.0.tar.xz
thunderbird-91.3.0.source.tar.xz
thunderbird-91.3.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.aMwsBF/_old 2021-11-06 18:14:04.404761138 +0100
+++ /var/tmp/diff_new_pack.aMwsBF/_new 2021-11-06 18:14:04.408761140 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.2.1
-%define orig_version 91.2.1
+%define mainver%major.3.0
+%define orig_version 91.3.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -134,7 +134,6 @@
%else
BuildRequires: clang-devel >= 5
%endif
-BuildRequires: pkgconfig(gdk-x11-2.0)
BuildRequires: pkgconfig(glib-2.0) >= 2.22
BuildRequires: pkgconfig(gobject-2.0)
BuildRequires: pkgconfig(gtk+-3.0) >= 3.14.0
++ l10n-91.2.1.tar.xz -> l10n-91.3.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.2.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1890/l10n-91.3.0.tar.xz
differ: char 26, line 1
++ mozilla-sandbox-fips.patch ++
--- /var/tmp/diff_new_pack.aMwsBF/_old 2021-11-06 18:14:04.536761207 +0100
+++ /var/tmp/diff_new_pack.aMwsBF/_new 2021-11-06 18:14:04.536761207 +0100
@@ -7,7 +7,7 @@
diff --git a/security/sandbox/linux/Sandbox.cpp
b/security/sandbox/linux/Sandbox.cpp
--- a/security/sandbox/linux/Sandbox.cpp
+++ b/security/sandbox/linux/Sandbox.cpp
-@@ -647,16 +647,17 @@ void SetMediaPluginSandbox(const char* a
+@@ -650,16 +650,17 @@ void SetMediaPluginSandbox(const char* a
SANDBOX_LOG_ERROR("failed to open plugin file %s: %s", aFilePath,
strerror(errno));
MOZ_CRASH("failed while trying to open the plugin file ");
@@ -15,8 +15,8 @@
auto files = new SandboxOpenedFiles();
files->Add(std::move(plugin));
- files->Add("/dev/urandom", true);
-+ files->Add("/dev/random", true);
+ files->Add("/dev/urandom", SandboxOpenedFile::Dup::YES);
++ files->Add("/dev/random", SandboxOpenedFile::Dup::YES);
files->Add("/etc/ld.so.cache"); // Needed for NSS in clearkey.
files->Add("/sys/devices/system/cpu/cpu0/tsc_freq_khz");
files->Add("/sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq");
@@ -28,7 +28,7 @@
diff --git a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
---
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-10-26 20:13:32
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1890 (New)
Package is "MozillaThunderbird"
Tue Oct 26 20:13:32 2021 rev:265 rq:927299 version:91.2.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-10-12 21:49:38.075895879 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1890/MozillaThunderbird.changes
2021-10-26 20:13:38.826008327 +0200
@@ -1,0 +2,25 @@
+Fri Oct 22 21:27:02 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.2.1
+ * Preference added to disable automatic pausing RSS feed updates
+after a fetch failure
+ * several bugfixes as outlined in release notes
+https://www.thunderbird.net/en-US/thunderbird/91.2.1/releasenotes/
+
+---
+Fri Oct 22 09:16:01 UTC 2021 - Guillaume GARDET
+
+- Increase memory required per threads for aarch64 to avoid OOM
+
+---
+Thu Oct 21 13:23:29 UTC 2021 - Martin Li??ka
+
+- Enable LTO on Tumbleweed.
+
+---
+Fri Oct 15 20:29:41 UTC 2021 - Wolfgang Rosenauer
+
+- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
+ fix some env variables which are enabled for any value
+
+---
Old:
l10n-91.2.0.tar.xz
thunderbird-91.2.0.source.tar.xz
thunderbird-91.2.0.source.tar.xz.asc
New:
l10n-91.2.1.tar.xz
mozilla-bmo1724679.patch
thunderbird-91.2.1.source.tar.xz
thunderbird-91.2.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.FR3SL9/_old 2021-10-26 20:13:50.938014725 +0200
+++ /var/tmp/diff_new_pack.FR3SL9/_new 2021-10-26 20:13:50.938014725 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.2.0
-%define orig_version 91.2.0
+%define mainver%major.2.1
+%define orig_version 91.2.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -208,6 +208,7 @@
Patch28:mozilla-libavcodec58_91.patch
Patch29:mozilla-silence-no-return-type.patch
Patch30:mozilla-bmo531915.patch
+Patch31:mozilla-bmo1724679.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -309,6 +310,7 @@
%patch28 -p1
%patch29 -p1
%patch30 -p1
+%patch31 -p1
%endif
%build
@@ -390,7 +392,7 @@
echo ""
cat << EOF
%else
-%ifarch ppc64 ppc64le
+%ifarch aarch64 ppc64 ppc64le
%limit_build -m 2500
%else
%limit_build -m 2000
@@ -459,7 +461,7 @@
%endif
%ifarch x86_64
# LTO needs newer toolchain stack only (at least GCC 8.2.1 (r268506)
-%if 0%{?suse_version} > 1500 && 0%{?suse_version} < 1550
+%if 0%{?suse_version} > 1500
ac_add_options --enable-lto
%if 0%{?do_profiling}
ac_add_options MOZ_PGO=1
++ l10n-91.2.0.tar.xz -> l10n-91.2.1.tar.xz ++
++ mozilla-bmo1724679.patch ++
diff --git a/toolkit/components/remote/nsRemoteService.cpp
b/toolkit/components/remote/nsRemoteService.cpp
--- a/toolkit/components/remote/nsRemoteService.cpp
+++ b/toolkit/components/remote/nsRemoteService.cpp
@@ -107,7 +107,8 @@
bool useX11Remote = mozilla::widget::GdkIsX11Display();
# if defined(MOZ_ENABLE_DBUS)
- if (!useX11Remote || getenv(DBUS_REMOTE_ENV)) {
+ const char* dbusRemoteEnv = getenv(DBUS_REMOTE_ENV);
+ if (!useX11Remote || (dbusRemoteEnv && *dbusRemoteEnv == '1')) {
client = MakeUnique();
}
# endif
diff --git a/toolkit/xre/nsAppRunner.cpp b/toolkit/xre/nsAppRunner.cpp
--- a/toolkit/xre/nsAppRunner.cpp
+++ b/toolkit/xre/nsAppRunner.cpp
@@ -4125,7 +4125,7 @@
const char* x11Display = PR_GetEnv("DISPLAY");
// MOZ_ENABLE_WAYLAND is our primary Wayland on/off switch.
const char* waylandPref = PR_GetEnv("MOZ_ENABLE_WAYLAND");
- bool enableWayland = !x11Display || (waylandPref && *waylandPref);
+ bool enableWayland = !x11Display || (waylandPref && *waylandPref == '1');
if (!enableWayland) {
const char* backendPref = PR_GetEnv("GDK_BACKEND");
enableWayland = (backendPref && strncmp(backendPref, "wayland", 7) == 0);
diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp
--- a/widget/gtk/nsFilePicker.cpp
+++ b/widget/gtk/nsFilePicker.cpp
@@ -616,7 +616,7 @@
if (mUseNativeFileChooser && sGtkNativeDialogShowPtr != nullptr) {
const char*
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-10-12 21:48:29
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443 (New)
Package is "MozillaThunderbird"
Tue Oct 12 21:48:29 2021 rev:264 rq:924567 version:91.2.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-10-05 22:33:35.866842749 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443/MozillaThunderbird.changes
2021-10-12 21:49:38.075895879 +0200
@@ -1,0 +2,34 @@
+Mon Oct 4 19:55:48 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.2.0
+ * Saving a single message as .eml now uses a unique filename
+ * New mail notifications did not properly take subfolders into account
+ * Decrypting binary attachments when using an external GnuPG
+configuration failed
+ * Account name fields in the account manager were not big enough
+for long names
+ * LDAP searches using an extensibleMatch filter returned no results
+ * Read-only CalDAV calendars and CardDAV address books were not detected
+ * Multipart messages containing a calendar invite did not display
+any of the human-readable alternatives
+ * Some calendar days were displayed incorrectly or duplicated
+(eg. two "29th" days of a particular month)
+ * Phantom event was shown at the end of each day in Calendar week view
+ MFSA 2021-46 (bsc#1191332)
+ * CVE-2021-38496 (bmo#1725335)
+Use-after-free in MessageTask
+ * CVE-2021-38497 (bmo#1726621)
+Validation message could have been overlaid on another origin
+ * CVE-2021-38498 (bmo#1729642)
+Use-after-free of nsLanguageAtomService object
+ * CVE-2021-32810 (bmo#1729813,
+https://github.com/crossbeam-
+rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
+Data race in crossbeam-deque
+ * CVE-2021-38500 (bmo#1725854, bmo#1728321)
+Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
+and Firefox ESR 91.2
+ * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
+Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2
+
+---
Old:
l10n-91.1.2.tar.xz
thunderbird-91.1.2.source.tar.xz
thunderbird-91.1.2.source.tar.xz.asc
New:
l10n-91.2.0.tar.xz
thunderbird-91.2.0.source.tar.xz
thunderbird-91.2.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.lCRrQd/_old 2021-10-12 21:49:50.26791 +0200
+++ /var/tmp/diff_new_pack.lCRrQd/_new 2021-10-12 21:49:50.271913339 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.1.2
-%define orig_version 91.1.2
+%define mainver%major.2.0
+%define orig_version 91.2.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.1.2.tar.xz -> l10n-91.2.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.1.2.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443/l10n-91.2.0.tar.xz
differ: char 26, line 1
++ mozilla-silence-no-return-type.patch ++
2282 lines (skipped)
between
/work/SRC/openSUSE:Factory/MozillaThunderbird/mozilla-silence-no-return-type.patch
and
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443/mozilla-silence-no-return-type.patch
++ tar_stamps ++
--- /var/tmp/diff_new_pack.lCRrQd/_old 2021-10-12 21:49:50.507913677 +0200
+++ /var/tmp/diff_new_pack.lCRrQd/_new 2021-10-12 21:49:50.507913677 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.1.2"
+VERSION="91.2.0"
VERSION_SUFFIX=""
-PREV_VERSION="91.1.1"
+PREV_VERSION="91.1.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="f6bebff25dd4b19be993e286d9594fde1b451516"
-RELEASE_TIMESTAMP="20210924213438"
+RELEASE_TAG="70572101c3d1709979b8c3e318b7f5449229a37d"
+RELEASE_TIMESTAMP="20211004152603"
++ thunderbird-91.1.2.source.tar.xz -> thunderbird-91.2.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.1.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443/thunderbird-91.2.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-10-05 22:33:29
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443 (New)
Package is "MozillaThunderbird"
Tue Oct 5 22:33:29 2021 rev:263 rq:922125 version:91.1.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-09-26 21:49:07.482808349 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443/MozillaThunderbird.changes
2021-10-05 22:33:35.866842749 +0200
@@ -1,0 +2,9 @@
+Sun Sep 26 16:01:35 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.1.2
+ * Thunderbird will now warn if an S/MIME encrypted message includes
+BCC recipients
+ * several bugfixes listed on
+https://www.thunderbird.net/en-US/thunderbird/91.1.2/releasenotes/
+
+---
Old:
l10n-91.1.1.tar.xz
thunderbird-91.1.1.source.tar.xz
thunderbird-91.1.1.source.tar.xz.asc
New:
l10n-91.1.2.tar.xz
thunderbird-91.1.2.source.tar.xz
thunderbird-91.1.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.trEITX/_old 2021-10-05 22:33:45.318859196 +0200
+++ /var/tmp/diff_new_pack.trEITX/_new 2021-10-05 22:33:45.322859203 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.1.1
-%define orig_version 91.1.1
+%define mainver%major.1.2
+%define orig_version 91.1.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.1.1.tar.xz -> l10n-91.1.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.1.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443/l10n-91.1.2.tar.xz
differ: char 27, line 1
++ mozilla.sh.in ++
--- /var/tmp/diff_new_pack.trEITX/_old 2021-10-05 22:33:45.478859475 +0200
+++ /var/tmp/diff_new_pack.trEITX/_new 2021-10-05 22:33:45.482859481 +0200
@@ -88,7 +88,7 @@
WAYLAND_SUPPORTED=%WAYLAND_SUPPORTED
# $XDG_SESSION_TYPE should contain either x11 or wayland
-if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ] && [ !
-z "$MOZ_ENABLE_WAYLAND" ]; then
+if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ] && [ -z
"$MOZ_ENABLE_WAYLAND" ]; then
export MOZ_ENABLE_WAYLAND=1
fi
++ tar_stamps ++
--- /var/tmp/diff_new_pack.trEITX/_old 2021-10-05 22:33:45.518859544 +0200
+++ /var/tmp/diff_new_pack.trEITX/_new 2021-10-05 22:33:45.518859544 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.1.1"
+VERSION="91.1.2"
VERSION_SUFFIX=""
-PREV_VERSION="91.1.0"
+PREV_VERSION="91.1.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="ff307e08b1218c8988d09d15d74f1b974a4d45a6"
-RELEASE_TIMESTAMP="20210916142849"
+RELEASE_TAG="f6bebff25dd4b19be993e286d9594fde1b451516"
+RELEASE_TIMESTAMP="20210924213438"
++ thunderbird-91.1.1.source.tar.xz -> thunderbird-91.1.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.1.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2443/thunderbird-91.1.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-09-26 21:48:27
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899 (New)
Package is "MozillaThunderbird"
Sun Sep 26 21:48:27 2021 rev:262 rq:921250 version:91.1.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-09-11 22:24:40.123394783 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/MozillaThunderbird.changes
2021-09-26 21:49:07.482808349 +0200
@@ -1,0 +2,12 @@
+Wed Sep 15 15:37:55 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.1.1
+ * Menu item for disabling subject encryption for a single message added
+ * Printing messages that are not currently displayed is no longer
+supported, including printing multiple messages at once
+ * for bugfixes see
+https://www.thunderbird.net/en-US/thunderbird/91.1.1/releasenotes
+- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
+ if already set before startup
+
+---
Old:
l10n-91.1.0.tar.xz
thunderbird-91.1.0.source.tar.xz
thunderbird-91.1.0.source.tar.xz.asc
New:
l10n-91.1.1.tar.xz
thunderbird-91.1.1.source.tar.xz
thunderbird-91.1.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.cLSCsd/_old 2021-09-26 21:49:16.398819209 +0200
+++ /var/tmp/diff_new_pack.cLSCsd/_new 2021-09-26 21:49:16.402819215 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.1.0
-%define orig_version 91.1.0
+%define mainver%major.1.1
+%define orig_version 91.1.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.1.0.tar.xz -> l10n-91.1.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.1.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/l10n-91.1.1.tar.xz
differ: char 26, line 1
++ mozilla.sh.in ++
--- /var/tmp/diff_new_pack.cLSCsd/_old 2021-09-26 21:49:16.558819407 +0200
+++ /var/tmp/diff_new_pack.cLSCsd/_new 2021-09-26 21:49:16.562819413 +0200
@@ -88,7 +88,7 @@
WAYLAND_SUPPORTED=%WAYLAND_SUPPORTED
# $XDG_SESSION_TYPE should contain either x11 or wayland
-if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ]; then
+if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ] && [ !
-z "$MOZ_ENABLE_WAYLAND" ]; then
export MOZ_ENABLE_WAYLAND=1
fi
++ tar_stamps ++
--- /var/tmp/diff_new_pack.cLSCsd/_old 2021-09-26 21:49:16.606819467 +0200
+++ /var/tmp/diff_new_pack.cLSCsd/_new 2021-09-26 21:49:16.606819467 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.1.0"
+VERSION="91.1.1"
VERSION_SUFFIX=""
-PREV_VERSION="91.0.3"
+PREV_VERSION="91.1.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="f134c939baab6193527545e8f40229aee95d5abf"
-RELEASE_TIMESTAMP="20210902035758"
+RELEASE_TAG="ff307e08b1218c8988d09d15d74f1b974a4d45a6"
+RELEASE_TIMESTAMP="20210916142849"
++ thunderbird-91.1.0.source.tar.xz -> thunderbird-91.1.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.1.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/thunderbird-91.1.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-09-11 22:24:23
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899 (New)
Package is "MozillaThunderbird"
Sat Sep 11 22:24:23 2021 rev:261 rq:917701 version:91.1.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-09-03 21:26:08.674175046 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/MozillaThunderbird.changes
2021-09-11 22:24:40.123394783 +0200
@@ -1,0 +2,19 @@
+Thu Sep 2 07:03:59 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.1.0
+ * Thunderbird registered Accessibility Handlers using same GUIDs
+as Firefox, causing performance issues for NVDA users
+ * Focus lost when reordering accounts by keyboard in the Account Manager
+ * Account setup did not use provider display name for setting up
+calendars
+ * Various theme and UX fixes
+ MFSA 2021-41 (bsc#1190269)
+ * CVE-2021-38492 (bmo#1721107)
+Navigating to `mk:` URL scheme could load Internet Explorer
+ * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
+bmo#1724107)
+Memory safety bugs fixed in Thunderbird 91.1
+- (re-)added mozilla-silence-no-return-type.patch
+- add mozilla-bmo531915.patch to fix build for i586
+
+---
Old:
l10n-91.0.3.tar.xz
thunderbird-91.0.3.source.tar.xz
thunderbird-91.0.3.source.tar.xz.asc
New:
l10n-91.1.0.tar.xz
mozilla-bmo531915.patch
mozilla-silence-no-return-type.patch
thunderbird-91.1.0.source.tar.xz
thunderbird-91.1.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.hV7VzM/_old 2021-09-11 22:24:49.155403687 +0200
+++ /var/tmp/diff_new_pack.hV7VzM/_new 2021-09-11 22:24:49.159403690 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.0.3
-%define orig_version 91.0.3
+%define mainver%major.1.0
+%define orig_version 91.1.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -36,7 +36,7 @@
%define do_profiling 0
# upstream default is clang (to use gcc for large parts set to 0)
-%define clang_build1
+%define clang_build0
# PIE, full relro
%define build_hardened 1
@@ -206,6 +206,8 @@
Patch26:mozilla-bmo1626236.patch
Patch27:mozilla-s390x-skia-gradient.patch
Patch28:mozilla-libavcodec58_91.patch
+Patch29:mozilla-silence-no-return-type.patch
+Patch30:mozilla-bmo531915.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@@ -288,7 +290,7 @@
%patch4 -p1
%patch6 -p1
%patch7 -p1
-%patch8 -p1
+#%patch8 -p1
%patch9 -p1
%patch11 -p1
%patch13 -p1
@@ -305,6 +307,8 @@
%patch26 -p1
%patch27 -p1
%patch28 -p1
+%patch29 -p1
+%patch30 -p1
%endif
%build
++ l10n-91.0.3.tar.xz -> l10n-91.1.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.0.3.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/l10n-91.1.0.tar.xz
differ: char 25, line 1
++ mozilla-bmo531915.patch ++
# HG changeset patch
# User Wolfgang Rosenauer
# Parent 7332dfc4c47d73f1b88850b7727d33096d68e329
diff --git a/modules/fdlibm/src/math_private.h
b/modules/fdlibm/src/math_private.h
--- a/modules/fdlibm/src/math_private.h
+++ b/modules/fdlibm/src/math_private.h
@@ -25,17 +25,21 @@
#include "mozilla/EndianUtils.h"
/*
* Emulate FreeBSD internal double types.
* Adapted from https://github.com/freebsd/freebsd-src/search?q=__double_t
*/
+#ifdef __i386__
+typedef long double __double_t;
+#else
typedef double __double_t;
+#endif
typedef __double_t double_t;
/*
* The original fdlibm code used statements like:
* n0 = ((*(int*))>>29)^1; * index of high word *
* ix0 = *(n0+(int*)); * high word of x *
* ix1 = *((1-n0)+(int*)); * low word of x *
* to dig two 32 bit words out of the 64 bit IEEE floating point
++ mozilla-silence-no-return-type.patch ++
1246 lines (skipped)
++ tar_stamps ++
--- /var/tmp/diff_new_pack.hV7VzM/_old 2021-09-11 22:24:49.359403888 +0200
+++ /var/tmp/diff_new_pack.hV7VzM/_new 2021-09-11 22:24:49.363403892 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.0.3"
+VERSION="91.1.0"
VERSION_SUFFIX=""
-PREV_VERSION="91.0.2"
+PREV_VERSION="91.0.3"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-09-03 21:25:42
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899 (New)
Package is "MozillaThunderbird"
Fri Sep 3 21:25:42 2021 rev:260 rq:914797 version:91.0.3
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-08-24 10:54:34.412344733 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/MozillaThunderbird.changes
2021-09-03 21:26:08.674175046 +0200
@@ -1,0 +2,44 @@
+Fri Aug 27 21:01:34 UTC 2021 - Andreas Stieger
+
+- Mozilla Thunderbird 91.0.3:
+ * fixed: Folder icons could be overridden by linked favicons in
+HTML messages
+ * fixed: Unified folders showed no messages when underlying
+folders were removed
+ * fixed: Folder pane toolbar did not always persist after
+restarting Thunderbird
+ * fixed: Compose window attachment pane did not close when
+disabling signing of an OpenPGP message
+ * fixed: Using "Reply to List" with some list emails
+incorrectly opened a "no-reply" warning
+ * fixed: Account setup UX issues with Exchange autodiscover
+ * fixed: Account settings did not display non-UTF-8 server
+descriptions correctly
+ * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
+causing some servers to reject mail
+ * fixed: No mouseover pop was displayed with event details for
+non-all-day events in the Today Pane
+ * fixed: Filtering tasks in the Today Pane did not work
+ * fixed: Email based event scheduling displayed the date and
+time in a format unreadable by humans
+
+---
+Fri Aug 27 20:07:49 UTC 2021 - Andreas Stieger
+
+- Mozilla Thunderbird 91.0.2:
+ * new: Tags are now colored in mail filter editor
+ * changed: Context menu items related to OpenPGP and
+attachments are now hidden when not applicable
+ * fixed: Creating a new account with manual setup failed
+ * fixed: Recipient autocomplete always preferred the primary
+email address for a contact
+ * fixed: LDAP performance improvements
+ * fixed: Extensions listed on the Recommended Addons did not
+have a clear way to view details in a browser
+ * fixed: Status checkmark on View > Calendar > Calendar Pane >
+Show Calendar Pane was reversed
+ * fixed: mid: URLs in calendar invites did not open the linked
+mail message
+ * fixed: Various theme and UX fixes
+
+---
Old:
l10n-91.0.1.tar.xz
thunderbird-91.0.1.source.tar.xz
thunderbird-91.0.1.source.tar.xz.asc
New:
l10n-91.0.3.tar.xz
thunderbird-91.0.3.source.tar.xz
thunderbird-91.0.3.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.Fraygx/_old 2021-09-03 21:26:20.270187141 +0200
+++ /var/tmp/diff_new_pack.Fraygx/_new 2021-09-03 21:26:20.294187165 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 91
-%define mainver%major.0.1
-%define orig_version 91.0.1
+%define mainver%major.0.3
+%define orig_version 91.0.3
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-91.0.1.tar.xz -> l10n-91.0.3.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.0.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/l10n-91.0.3.tar.xz
differ: char 25, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.Fraygx/_old 2021-09-03 21:26:20.458187337 +0200
+++ /var/tmp/diff_new_pack.Fraygx/_new 2021-09-03 21:26:20.458187337 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr91"
-VERSION="91.0.1"
+VERSION="91.0.3"
VERSION_SUFFIX=""
-PREV_VERSION="91.0"
+PREV_VERSION="91.0.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91;
-RELEASE_TAG="8c371f7adbc855a95bf2ff35477be78069319573"
-RELEASE_TIMESTAMP="20210816195200"
+RELEASE_TAG="7f37735b4076325b99ea7c7af959f610b27eb0d7"
+RELEASE_TIMESTAMP="20210824180134"
++ thunderbird-91.0.1.source.tar.xz -> thunderbird-91.0.3.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.0.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/thunderbird-91.0.3.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-08-24 10:54:07
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899 (New)
Package is "MozillaThunderbird"
Tue Aug 24 10:54:07 2021 rev:259 rq:913013 version:91.0.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-08-16 10:05:37.875522539 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/MozillaThunderbird.changes
2021-08-24 10:54:34.412344733 +0200
@@ -1,0 +2,31 @@
+Tue Aug 17 07:19:15 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.0.1
+ MFSA 2021-37 (bsc#1189547)
+ * CVE-2021-29991 (bmo#1724896)
+Header Splitting possible with HTTP/3 Responses
+- appdate screenshot URL updated (by mailaen...@opensuse.org)
+
+---
+Sun Aug 15 17:21:46 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 91.0
+ * based on Mozilla's 91 ESR codebase
+ * many new and changed features
+https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
+ * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
+ * Thunderbird now operates in multi-process (e10s) mode by default
+ * New user interface for adding attachments
+ * Enable redirect of messages
+ * CardDAV address book support
+- Removed obsolete patches:
+ * mozilla-bmo1463035.patch
+ * mozilla-ppc-altivec_static_inline.patch
+ * mozilla-pipewire-0-3.patch
+ * mozilla-bmo1554971.patch
+- add mozilla-libavcodec58_91.patch
+- removed obsolete BigEndian ICU build workaround
+- updated build requirements
+- build using clang
+
+---
Old:
l10n-78.13.0.tar.xz
mozilla-bmo1463035.patch
mozilla-bmo1554971.patch
mozilla-pipewire-0-3.patch
mozilla-ppc-altivec_static_inline.patch
thunderbird-78.13.0.source.tar.xz
thunderbird-78.13.0.source.tar.xz.asc
New:
l10n-91.0.1.tar.xz
mozilla-libavcodec58_91.patch
thunderbird-91.0.1.source.tar.xz
thunderbird-91.0.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.DxT3jf/_old 2021-08-24 10:54:45.124330545 +0200
+++ /var/tmp/diff_new_pack.DxT3jf/_new 2021-08-24 10:54:45.124330545 +0200
@@ -25,20 +25,18 @@
# orig_suffix b3
# major 69
# mainver %major.99
-%define major 78
-%define mainver%major.13.0
-%define orig_version 78.13.0
+%define major 91
+%define mainver%major.0.1
+%define orig_version 91.0.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
-%if 0%{?suse_version} > 1500
-# PGO builds do not work in TW currently (bmo#1642410)
+# PGO builds do not work in TW currently (bmo#1680306)
%define do_profiling 0
-%endif
# upstream default is clang (to use gcc for large parts set to 0)
-%define clang_build 0
+%define clang_build1
# PIE, full relro
%define build_hardened 1
@@ -49,6 +47,16 @@
%bcond_withmozilla_tb_valgrind
%bcond_without mozilla_tb_optimize_for_size
+# define if ccache should be used or not
+%define useccache 1
+
+# Firefox only supports i686
+%ifarch %ix86
+ExclusiveArch: i586 i686
+BuildArch: i686
+%{expand:%%global optflags %(echo "%optflags"|sed -e s/i586/i686/) -march=i686
-mtune=generic}
+%endif
+
# general build definitions
%define progname thunderbird
%define pkgname MozillaThunderbird
@@ -82,31 +90,33 @@
%else
BuildRequires: gcc-c++
%endif
-BuildRequires: cargo >= 1.41
+%if 0%{?suse_version} < 1550 && 0%{?sle_version} < 150300
+BuildRequires: cargo >= 1.51
+BuildRequires: rust >= 1.51
+%else
+# Newer sle/leap/tw use parallel versioned rust releases which have
+# a different method for provides that we can use to request a
+# specific version
+BuildRequires: rust+cargo >= 1.51
+%endif
+%if 0%{useccache} != 0
BuildRequires: ccache
+%endif
BuildRequires: libXcomposite-devel
BuildRequires: libcurl-devel
BuildRequires: libidl-devel
-BuildRequires: mozilla-nspr-devel >= 4.25.1
-BuildRequires: mozilla-nss-devel >= 3.53.1
+BuildRequires: mozilla-nspr-devel >= 4.32
+BuildRequires: mozilla-nss-devel >= 3.68
BuildRequires: nasm >= 2.14
-BuildRequires: nodejs >= 10.21.0
-# Leap 15 still requires python2 for BE (ICU creation)
-%if 0%{?suse_version} < 1550
-BuildRequires: python-devel
-BuildRequires: python2-xml
-%endif
+BuildRequires: nodejs >= 10.22.1
%if 0%{?sle_version} >= 12 && 0%{?sle_version} < 15
-# SLE12 exception
BuildRequires:
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-08-16 10:05:36
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899 (New)
Package is "MozillaThunderbird"
Mon Aug 16 10:05:36 2021 rev:258 rq:911495 version:78.13.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-07-17 23:36:31.898019261 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/MozillaThunderbird.changes
2021-08-16 10:05:37.875522539 +0200
@@ -1,0 +2,23 @@
+Thu Aug 5 15:47:34 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.13.0
+ * removed WeTransfer integration package (not supported by vendor
+any longer)
+ MFSA 2021-35 (bsc#1188891)
+ * CVE-2021-29986 (bmo#1696138)
+Race condition when resolving DNS names could have led to
+memory corruption
+ * CVE-2021-29988 (bmo#1717922)
+Memory corruption as a result of incorrect style treatment
+ * CVE-2021-29984 (bmo#1720031)
+Incorrect instruction reordering during JIT optimization
+ * CVE-2021-29980 (bmo#1722204)
+Uninitialized memory in a canvas object could have led to
+memory corruption
+ * CVE-2021-29985 (bmo#1722083)
+Use-after-free media channels
+ * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
+bmo#1719998, bmo#1720568)
+Memory safety bugs fixed in Thunderbird 78.13
+
+---
Old:
l10n-78.12.0.tar.xz
thunderbird-78.12.0.source.tar.xz
thunderbird-78.12.0.source.tar.xz.asc
New:
l10n-78.13.0.tar.xz
thunderbird-78.13.0.source.tar.xz
thunderbird-78.13.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.w9HQPm/_old 2021-08-16 10:05:45.567513334 +0200
+++ /var/tmp/diff_new_pack.w9HQPm/_new 2021-08-16 10:05:45.571513329 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.12.0
-%define orig_version 78.12.0
+%define mainver%major.13.0
+%define orig_version 78.13.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -658,7 +658,6 @@
%dir %{progdir}/chrome/
%{progdir}/chrome/icons/
%{progdir}/defaults/
-%{progdir}/features/
%{progdir}/isp/
%{_datadir}/appdata/
%{_datadir}/applications/%{desktop_file_name}.desktop
++ l10n-78.12.0.tar.xz -> l10n-78.13.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.12.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/l10n-78.13.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.w9HQPm/_old 2021-08-16 10:05:45.767513095 +0200
+++ /var/tmp/diff_new_pack.w9HQPm/_new 2021-08-16 10:05:45.767513095 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.12.0"
+VERSION="78.13.0"
VERSION_SUFFIX=""
-PREV_VERSION="78.11.0"
+PREV_VERSION="78.12.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="6796ff47626a009d169a1e9fd1f307a6c14b7ed5"
-RELEASE_TIMESTAMP="20210712120515"
+RELEASE_TAG="adcfedf831da719455116546865f9a5faea848a6"
+RELEASE_TIMESTAMP="20210802223056"
++ thunderbird-78.12.0.source.tar.xz -> thunderbird-78.13.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.12.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.1899/thunderbird-78.13.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-07-17 23:36:24
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2632 (New)
Package is "MozillaThunderbird"
Sat Jul 17 23:36:24 2021 rev:257 rq:906332 version:78.12.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-06-09 21:51:05.322344976 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2632/MozillaThunderbird.changes
2021-07-17 23:36:31.898019261 +0200
@@ -1,0 +2,16 @@
+Wed Jul 14 06:34:13 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.12.0
+ MFSA 2021-30 (bsc#1188275)
+ * CVE-2021-29969 (bmo#1682370)
+IMAP server responses sent by a MITM prior to STARTTLS could be
+processed
+ * CVE-2021-29970 (bmo#1709976)
+Use-after-free in accessibility features of a document
+ * CVE-2021-30547 (bmo#1715766)
+Out of bounds write in ANGLE
+ * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
+bmo#1711576, bmo#1714391)
+Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
+
+---
Old:
l10n-78.11.0.tar.xz
thunderbird-78.11.0.source.tar.xz
thunderbird-78.11.0.source.tar.xz.asc
New:
l10n-78.12.0.tar.xz
thunderbird-78.12.0.source.tar.xz
thunderbird-78.12.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.yVi2HZ/_old 2021-07-17 23:36:42.433938042 +0200
+++ /var/tmp/diff_new_pack.yVi2HZ/_new 2021-07-17 23:36:42.437938011 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.11.0
-%define orig_version 78.11.0
+%define mainver%major.12.0
+%define orig_version 78.12.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-78.11.0.tar.xz -> l10n-78.12.0.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.yVi2HZ/_old 2021-07-17 23:36:42.673936192 +0200
+++ /var/tmp/diff_new_pack.yVi2HZ/_new 2021-07-17 23:36:42.677936161 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.11.0"
+VERSION="78.12.0"
VERSION_SUFFIX=""
-PREV_VERSION="78.10.2"
+PREV_VERSION="78.11.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="1717d8d5fbd359aab7a4a0a15f4d15c72a7e6afc"
-RELEASE_TIMESTAMP="20210528153351"
+RELEASE_TAG="6796ff47626a009d169a1e9fd1f307a6c14b7ed5"
+RELEASE_TIMESTAMP="20210712120515"
++ thunderbird-78.11.0.source.tar.xz -> thunderbird-78.12.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.11.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2632/thunderbird-78.12.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-06-09 21:51:02
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32437 (New)
Package is "MozillaThunderbird"
Wed Jun 9 21:51:02 2021 rev:256 rq:897289 version:78.11.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-05-20 19:23:56.378221395 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32437/MozillaThunderbird.changes
2021-06-09 21:51:05.322344976 +0200
@@ -1,0 +2,19 @@
+Sat May 29 08:14:38 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.11.0
+ * OpenPGP could not be disabled for an account if a key was
+previously configured
+ * Recipients were unable to decrypt some messages when the sender
+had changed the message encryption from OpenPGP to S/MIME
+ * Contacts moved between CardDAV address books were not synced to
+the new server
+ * CardDAV compatibility fixes for Google Contacts
+ MFSA 2021-26 (bsc#1186696)
+ * CVE-2021-29964 (bmo#1706501)
+Out of bounds-read when parsing a `WM_COPYDATA` message
+ * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
+bmo#1704722, bmo#1706041)
+Memory safety bugs fixed in Thunderbird 78.11
+- renewed expired mozilla.keyring
+
+---
@@ -19 +38 @@
- * CVE-2021-29956 (bmo#1710290)
+ * CVE-2021-29956 (boo#1186199, bmo#1710290)
@@ -22 +41 @@
- * CVE-2021-29957 (bmo#1673241)
+ * CVE-2021-29957 (boo#1186198, bmo#1673241)
Old:
l10n-78.10.2.tar.xz
thunderbird-78.10.2.source.tar.xz
thunderbird-78.10.2.source.tar.xz.asc
New:
l10n-78.11.0.tar.xz
thunderbird-78.11.0.source.tar.xz
thunderbird-78.11.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.1XbcnM/_old 2021-06-09 21:51:11.25836 +0200
+++ /var/tmp/diff_new_pack.1XbcnM/_new 2021-06-09 21:51:11.25836 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.10.2
-%define orig_version 78.10.2
+%define mainver%major.11.0
+%define orig_version 78.11.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-78.10.2.tar.xz -> l10n-78.11.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.10.2.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32437/l10n-78.11.0.tar.xz
differ: char 26, line 1
++ mozilla.keyring ++
659 lines (skipped)
between /work/SRC/openSUSE:Factory/MozillaThunderbird/mozilla.keyring
and
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32437/mozilla.keyring
++ tar_stamps ++
--- /var/tmp/diff_new_pack.1XbcnM/_old 2021-06-09 21:51:11.462355920 +0200
+++ /var/tmp/diff_new_pack.1XbcnM/_new 2021-06-09 21:51:11.462355920 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.10.2"
+VERSION="78.11.0"
VERSION_SUFFIX=""
-PREV_VERSION="78.10.1"
+PREV_VERSION="78.10.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="6657aa43703aaa1de16003c4ab7e92a1cbc6dff8"
-RELEASE_TIMESTAMP="20210513204504"
+RELEASE_TAG="1717d8d5fbd359aab7a4a0a15f4d15c72a7e6afc"
+RELEASE_TIMESTAMP="20210528153351"
++ thunderbird-78.10.2.source.tar.xz -> thunderbird-78.11.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.10.2.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.32437/thunderbird-78.11.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-05-20 19:23:30
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2988 (New)
Package is "MozillaThunderbird"
Thu May 20 19:23:30 2021 rev:255 rq:894215 version:78.10.2
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-05-10 15:38:30.873773294 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2988/MozillaThunderbird.changes
2021-05-20 19:23:56.378221395 +0200
@@ -1,0 +2,25 @@
+Fri May 14 08:58:19 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.10.2
+ * Added support for importing OpenPGP keys without a primary
+secret key
+ * Add-ons manager displays a preferences icon for mail extensions
+that include an options page
+ Fixed
+ * OpenPGP messages with a high compression ratio (over 10x) could
+not be decrypted
+ * Selected OpenPGP key was lost after opening the Key Properties
+dialog in Account Settings
+ * Parsing some OpenPGP user IDs failed
+ * Various improvements to OpenPGP partial encryption reminders
+ * Mail toolbar buttons were too big when displaying both icons
+and text
+ MFSA 2021-22
+ * CVE-2021-29956 (bmo#1710290)
+Thunderbird stored OpenPGP secret keys without master password
+protection
+ * CVE-2021-29957 (bmo#1673241)
+Partial protection of inline OpenPGP message not indicated
+- do not rely on nodejs10 explicitely
+
+---
Old:
l10n-78.10.1.tar.xz
thunderbird-78.10.1.source.tar.xz
thunderbird-78.10.1.source.tar.xz.asc
New:
l10n-78.10.2.tar.xz
thunderbird-78.10.2.source.tar.xz
thunderbird-78.10.2.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.7KYPNd/_old 2021-05-20 19:24:03.602190830 +0200
+++ /var/tmp/diff_new_pack.7KYPNd/_new 2021-05-20 19:24:03.606190813 +0200
@@ -1,5 +1,5 @@
#
-# spec file for package MozillaThunderbird
+# spec file
#
# Copyright (c) 2021 SUSE LLC
# 2006-2021 Wolfgang Rosenauer
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.10.1
-%define orig_version 78.10.1
+%define mainver%major.10.2
+%define orig_version 78.10.2
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -90,7 +90,7 @@
BuildRequires: mozilla-nspr-devel >= 4.25.1
BuildRequires: mozilla-nss-devel >= 3.53.1
BuildRequires: nasm >= 2.14
-BuildRequires: nodejs10 >= 10.21.0
+BuildRequires: nodejs >= 10.21.0
# Leap 15 still requires python2 for BE (ICU creation)
%if 0%{?suse_version} < 1550
BuildRequires: python-devel
++ l10n-78.10.1.tar.xz -> l10n-78.10.2.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.10.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2988/l10n-78.10.2.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.7KYPNd/_old 2021-05-20 19:24:03.814189933 +0200
+++ /var/tmp/diff_new_pack.7KYPNd/_new 2021-05-20 19:24:03.814189933 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.10.1"
+VERSION="78.10.2"
VERSION_SUFFIX=""
-PREV_VERSION="78.10.0"
+PREV_VERSION="78.10.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="14a9afcfb6cc0c466e0d0b8222e85de5b2d8078d"
-RELEASE_TIMESTAMP="20210503211912"
+RELEASE_TAG="6657aa43703aaa1de16003c4ab7e92a1cbc6dff8"
+RELEASE_TIMESTAMP="20210513204504"
++ thunderbird-78.10.1.source.tar.xz -> thunderbird-78.10.2.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.10.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2988/thunderbird-78.10.2.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-05-10 15:36:21
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2988 (New)
Package is "MozillaThunderbird"
Mon May 10 15:36:21 2021 rev:254 rq:891142 version:78.10.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-04-23 17:50:04.778737850 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2988/MozillaThunderbird.changes
2021-05-10 15:38:30.873773294 +0200
@@ -1,0 +2,8 @@
+Tue May 4 15:39:28 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.10.1
+ * Remove the fix for bmo#1689804 introduced in 78.9.0,
+restoring the previous behavior
+ * MFSA 2021-19 (bsc#1185633) does not affect this platform
+
+---
Old:
l10n-78.10.0.tar.xz
thunderbird-78.10.0.source.tar.xz
thunderbird-78.10.0.source.tar.xz.asc
New:
l10n-78.10.1.tar.xz
thunderbird-78.10.1.source.tar.xz
thunderbird-78.10.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.KOQ4mt/_old 2021-05-10 15:38:49.509699568 +0200
+++ /var/tmp/diff_new_pack.KOQ4mt/_new 2021-05-10 15:38:49.513699552 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.10.0
-%define orig_version 78.10.0
+%define mainver%major.10.1
+%define orig_version 78.10.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-78.10.0.tar.xz -> l10n-78.10.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.10.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2988/l10n-78.10.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.KOQ4mt/_old 2021-05-10 15:38:49.713698761 +0200
+++ /var/tmp/diff_new_pack.KOQ4mt/_new 2021-05-10 15:38:49.713698761 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.10.0"
+VERSION="78.10.1"
VERSION_SUFFIX=""
-PREV_VERSION="78.9.1"
+PREV_VERSION="78.10.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="ca53556517b609ca2e9a8b7578a4f4dc1273b32f"
-RELEASE_TIMESTAMP="20210415215055"
+RELEASE_TAG="14a9afcfb6cc0c466e0d0b8222e85de5b2d8078d"
+RELEASE_TIMESTAMP="20210503211912"
++ thunderbird-78.10.0.source.tar.xz -> thunderbird-78.10.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.10.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2988/thunderbird-78.10.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-04-23 17:49:56
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.12324 (New)
Package is "MozillaThunderbird"
Fri Apr 23 17:49:56 2021 rev:253 rq:886906 version:78.10.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-04-15 16:56:48.254616095 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.12324/MozillaThunderbird.changes
2021-04-23 17:50:04.778737850 +0200
@@ -1,0 +2,29 @@
+Sun Apr 18 07:21:01 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.10.0
+ MFSA 2021-14 (bsc#1184960)
+ * CVE-2021-23994 (bmo#1699077)
+Out of bound write due to lazy initialization
+ * CVE-2021-23995 (bmo#1699835)
+Use-after-free in Responsive Design Mode
+ * CVE-2021-23998 (bmo#1667456)
+Secure Lock icon could have been spoofed
+ * CVE-2021-23961 (bmo#1677940)
+More internal network hosts could have been probed by a
+malicious webpage
+ * CVE-2021-23999 (bmo#1691153)
+Blob URLs may have been granted additional privileges
+ * CVE-2021-24002 (bmo#1702374)
+Arbitrary FTP command execution on FTP servers using an
+encoded URL
+ * CVE-2021-29945 (bmo#1700690)
+Incorrect size computation in WebAssembly JIT could lead to
+null-reads
+ * CVE-2021-29946 (bmo#1698503)
+Port blocking could be bypassed
+ * CVE-2021-29948 (bmo#1692899)
+Race condition when reading from disk while verifying
+signatures
+- recommend libotr5
+
+---
Old:
l10n-78.9.1.tar.xz
thunderbird-78.9.1.source.tar.xz
thunderbird-78.9.1.source.tar.xz.asc
New:
l10n-78.10.0.tar.xz
thunderbird-78.10.0.source.tar.xz
thunderbird-78.10.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.KgXFt0/_old 2021-04-23 17:50:11.282749032 +0200
+++ /var/tmp/diff_new_pack.KgXFt0/_new 2021-04-23 17:50:11.286749039 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.9.1
-%define orig_version 78.9.1
+%define mainver%major.10.0
+%define orig_version 78.10.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -212,6 +212,7 @@
%requires_gemozilla-nss
%requires_gelibfreetype6
Recommends: libcanberra0
+Recommends: libotr5
Recommends: libpulse0
Requires(post): desktop-file-utils
Requires(postun):desktop-file-utils
++ l10n-78.9.1.tar.xz -> l10n-78.10.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.9.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.12324/l10n-78.10.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.KgXFt0/_old 2021-04-23 17:50:11.482749376 +0200
+++ /var/tmp/diff_new_pack.KgXFt0/_new 2021-04-23 17:50:11.482749376 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.9.1"
+VERSION="78.10.0"
VERSION_SUFFIX=""
-PREV_VERSION="78.9.0"
+PREV_VERSION="78.9.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="f3f1f4a0e32abbc74dfac8c697044c10d0d25cad"
-RELEASE_TIMESTAMP="20210406220621"
+RELEASE_TAG="ca53556517b609ca2e9a8b7578a4f4dc1273b32f"
+RELEASE_TIMESTAMP="20210415215055"
++ thunderbird-78.9.1.source.tar.xz -> thunderbird-78.10.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.9.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.12324/thunderbird-78.10.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-04-15 16:56:41
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.12324 (New)
Package is "MozillaThunderbird"
Thu Apr 15 16:56:41 2021 rev:252 rq:884316 version:78.9.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-04-06 17:29:52.263129840 +0200
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.12324/MozillaThunderbird.changes
2021-04-15 16:56:48.254616095 +0200
@@ -1,0 +2,19 @@
+Sat Apr 10 11:39:37 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.9.1
+ * Support recipient aliases for OpenPGP encryption
+ * The key and signature parts of the message security popup on a
+received message could not be selected for copy/paste
+ * Various UX and theme improvements
+ MFSA 2021-13
+ * CVE-2021-23991 (bmo#1673240)
+An attacker may use Thunderbird's OpenPGP key refresh mechanism
+to poison an existing key
+ * MOZ-2021-23992 (bmo#1666236)
+A crafted OpenPGP key with an invalid user ID could be used to
+confuse the user
+ * CVE-2021-23993 (bmo#1666360)
+Inability to send encrypted OpenPGP email after importing a
+crafted OpenPGP key
+
+---
Old:
l10n-78.9.0.tar.xz
thunderbird-78.9.0.source.tar.xz
thunderbird-78.9.0.source.tar.xz.asc
New:
l10n-78.9.1.tar.xz
thunderbird-78.9.1.source.tar.xz
thunderbird-78.9.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.H0Kc7W/_old 2021-04-15 16:57:01.774637488 +0200
+++ /var/tmp/diff_new_pack.H0Kc7W/_new 2021-04-15 16:57:01.778637494 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.9.0
-%define orig_version 78.9.0
+%define mainver%major.9.1
+%define orig_version 78.9.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -61,12 +61,13 @@
%define __requires_exclude
^(libmoz.*|liblgpllibs.*|libxul.*|libldap.*|libldif.*|libprldap.*)$
%define localize 1
%define crashreporter 0
-%if 0%{?sle_version} > 150100
-# pipewire is too old on Leap <=15.1
-# Activate only on everything newer
%define with_pipewire0_3 1
-%else
+%define wayland_supported 1
+%if 0%{?sle_version} > 0 && 0%{?sle_version} < 150200
+# pipewire is too old on Leap <=15.1
%define with_pipewire0_3 0
+# Wayland is too old on Leap <=15.1 as well
+%define wayland_supported 0
%endif
Name: %{pkgname}
@@ -399,10 +400,10 @@
ac_add_options --includedir=%{_includedir}
ac_add_options --enable-application=comm/mail
ac_add_options --enable-release
-%if 0%{?sle_version} < 150200
-ac_add_options --enable-default-toolkit=cairo-gtk3
-%else
+%if 0%{wayland_supported}
ac_add_options --enable-default-toolkit=cairo-gtk3-wayland
+%else
+ac_add_options --enable-default-toolkit=cairo-gtk3
%endif
# bmo#1441155 - Disable the generation of Rust debug symbols on Linux32
%ifarch %ix86 %arm
@@ -555,6 +556,7 @@
sed "s:%%PREFIX:%{_prefix}:g
s:%%PROGDIR:%{progdir}:g
s:%%APPNAME:%{progname}:g
+s:%%WAYLAND_SUPPORTED:%{wayland_supported}:g
s:%%PROFILE:.thunderbird:g" \
%{SOURCE3} > %{buildroot}%{progdir}/%{progname}.sh
chmod 755 %{buildroot}%{progdir}/%{progname}.sh
++ l10n-78.9.0.tar.xz -> l10n-78.9.1.tar.xz ++
++ mozilla.sh.in ++
--- /var/tmp/diff_new_pack.H0Kc7W/_old 2021-04-15 16:57:01.974637804 +0200
+++ /var/tmp/diff_new_pack.H0Kc7W/_new 2021-04-15 16:57:01.974637804 +0200
@@ -81,8 +81,12 @@
# disable Gnome crash dialog (doesn't make sense anyway)
export GNOME_DISABLE_CRASH_DIALOG=1
+# Wayland
+# Only supported on newer systems
+WAYLAND_SUPPORTED=%WAYLAND_SUPPORTED
+
# $XDG_SESSION_TYPE should contain either x11 or wayland
-if [ "$XDG_SESSION_TYPE" = "wayland" ]; then
+if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ]; then
export MOZ_ENABLE_WAYLAND=1
fi
++ tar_stamps ++
--- /var/tmp/diff_new_pack.H0Kc7W/_old 2021-04-15 16:57:02.010637861 +0200
+++ /var/tmp/diff_new_pack.H0Kc7W/_new 2021-04-15 16:57:02.014637868 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.9.0"
+VERSION="78.9.1"
VERSION_SUFFIX=""
-PREV_VERSION="78.8.1"
+PREV_VERSION="78.9.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="1a5cd2aa11de609116f258b413afcf113ed72f3a"
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-04-06 17:29:06
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2401 (New)
Package is "MozillaThunderbird"
Tue Apr 6 17:29:06 2021 rev:251 rq:881213 version:78.9.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-03-12 13:31:44.342192810 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2401/MozillaThunderbird.changes
2021-04-06 17:29:52.263129840 +0200
@@ -1,0 +2,21 @@
+Sat Mar 20 09:20:00 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.9.0
+ * bugfixes:
+https://www.thunderbird.net/en-US/thunderbird/78.9.0/releasenotes
+ MFSA 2021-12 (boo#1183942)
+ * CVE-2021-23981 (bmo#1692832)
+Texture upload into an unbound backing buffer resulted in an
+out-of-bound read
+ * MOZ-2021-0002 (bmo#1691547)
+Angle graphics library out of date
+ * CVE-2021-23982 (bmo#1677046)
+Internal network hosts could have been probed by a malicious
+webpage
+ * CVE-2021-23984 (bmo#1693664)
+Malicious extensions could have spoofed popup information
+ * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169, bmo#1690718)
+Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9
+- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)
+
+---
Old:
l10n-78.8.1.tar.xz
thunderbird-78.8.1.source.tar.xz
thunderbird-78.8.1.source.tar.xz.asc
New:
l10n-78.9.0.tar.xz
thunderbird-78.9.0.source.tar.xz
thunderbird-78.9.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.gK9KgX/_old 2021-04-06 17:30:31.695174436 +0200
+++ /var/tmp/diff_new_pack.gK9KgX/_new 2021-04-06 17:30:31.695174436 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.8.1
-%define orig_version 78.8.1
+%define mainver%major.9.0
+%define orig_version 78.9.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -62,13 +62,11 @@
%define localize 1
%define crashreporter 0
%if 0%{?sle_version} > 150100
-# pipewire and wayland is too old on Leap <=15.1
+# pipewire is too old on Leap <=15.1
# Activate only on everything newer
%define with_pipewire0_3 1
-%define wayland_supported 1
%else
%define with_pipewire0_3 0
-%define wayland_supported 0
%endif
Name: %{pkgname}
@@ -401,7 +399,7 @@
ac_add_options --includedir=%{_includedir}
ac_add_options --enable-application=comm/mail
ac_add_options --enable-release
-%if 0%{?sle_version} >= 12 && 0%{?sle_version} < 15
+%if 0%{?sle_version} < 150200
ac_add_options --enable-default-toolkit=cairo-gtk3
%else
ac_add_options --enable-default-toolkit=cairo-gtk3-wayland
@@ -557,7 +555,6 @@
sed "s:%%PREFIX:%{_prefix}:g
s:%%PROGDIR:%{progdir}:g
s:%%APPNAME:%{progname}:g
-s:%%WAYLAND_SUPPORTED:%{wayland_supported}:g
s:%%PROFILE:.thunderbird:g" \
%{SOURCE3} > %{buildroot}%{progdir}/%{progname}.sh
chmod 755 %{buildroot}%{progdir}/%{progname}.sh
++ l10n-78.8.1.tar.xz -> l10n-78.9.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.8.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2401/l10n-78.9.0.tar.xz
differ: char 26, line 1
++ mozilla.sh.in ++
--- /var/tmp/diff_new_pack.gK9KgX/_old 2021-04-06 17:30:31.931174703 +0200
+++ /var/tmp/diff_new_pack.gK9KgX/_new 2021-04-06 17:30:31.931174703 +0200
@@ -70,15 +70,6 @@
export MOZ_APP_LAUNCHER="/usr/bin/$MOZ_APPNAME"
fi
-mozilla_lib=`file $MOZ_PROGRAM`
-LIB=lib
-echo $mozilla_lib | grep -q -E 'ELF.64-bit.*(x86-64|S/390|PowerPC)' &&
LIB=lib64
-
-BROWSER_PLUGIN_DIR=/usr/$LIB/browser-plugins
-if [ ! -d $BROWSER_PLUGIN_DIR ]; then
- BROWSER_PLUGIN_DIR=/opt/netscape/plugins
-fi
-
MOZILLA_FIVE_HOME="$MOZ_DIST_LIB"
export MOZILLA_FIVE_HOME
LD_LIBRARY_PATH=$MOZ_DIST_LIB${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}
@@ -90,26 +81,12 @@
# disable Gnome crash dialog (doesn't make sense anyway)
export GNOME_DISABLE_CRASH_DIALOG=1
-# Wayland
-# Only supported on newer systems
-WAYLAND_SUPPORTED=%WAYLAND_SUPPORTED
-
# $XDG_SESSION_TYPE should contain either x11 or wayland
-if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ]; then
+if [ "$XDG_SESSION_TYPE" = "wayland" ]; then
export MOZ_ENABLE_WAYLAND=1
fi
##
-if [ -z "$MOZ_PLUGIN_PATH" ]; then
- export MOZ_PLUGIN_PATH=$BROWSER_PLUGIN_DIR
-else
- # make sure that BROWSER_PLUGIN_DIR is in
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-03-12 13:31:28
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2401 (New)
Package is "MozillaThunderbird"
Fri Mar 12 13:31:28 2021 rev:250 rq:878160 version:78.8.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-03-02 12:29:22.423527468 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2401/MozillaThunderbird.changes
2021-03-12 13:31:44.342192810 +0100
@@ -1,0 +2,8 @@
+Sun Mar 7 09:27:49 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.8.1
+ * several bugfixes and improvements
+ * https://www.thunderbird.net/en-US/thunderbird/78.8.1/releasenotes/
+- updated create-tar.sh (bsc#1182357)
+
+---
Old:
l10n-78.8.0.tar.xz
thunderbird-78.8.0.source.tar.xz
thunderbird-78.8.0.source.tar.xz.asc
New:
l10n-78.8.1.tar.xz
thunderbird-78.8.1.source.tar.xz
thunderbird-78.8.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.3EEErB/_old 2021-03-12 13:31:58.126212144 +0100
+++ /var/tmp/diff_new_pack.3EEErB/_new 2021-03-12 13:31:58.130212150 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.8.0
-%define orig_version 78.8.0
+%define mainver%major.8.1
+%define orig_version 78.8.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -172,7 +172,7 @@
Source7:l10n-%{orig_version}%{orig_suffix}.tar.xz
Source9:thunderbird.appdata.xml
Source13: spellcheck.js
-Source14:
https://github.com/openSUSE/firefox-scripts/raw/5e54f4a/create-tar.sh
+Source14:
https://github.com/openSUSE/firefox-scripts/raw/4503820/create-tar.sh
Source20:
https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/source/%{srcname}-%{orig_version}%{orig_suffix}.source.tar.xz.asc
Source21:
https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/KEY#/mozilla.keyring
# Gecko/Toolkit
++ create-tar.sh ++
--- /var/tmp/diff_new_pack.3EEErB/_old 2021-03-12 13:31:58.210212262 +0100
+++ /var/tmp/diff_new_pack.3EEErB/_new 2021-03-12 13:31:58.214212267 +0100
@@ -239,9 +239,9 @@
fi
if [ ! -d $PRODUCT-$VERSION ]; then
echo "cloning new $BRANCH..."
-hg clone http://hg.mozilla.org/$BRANCH $PRODUCT-$VERSION
+hg clone https://hg.mozilla.org/$BRANCH $PRODUCT-$VERSION
if [ "$PRODUCT" = "thunderbird" ]; then
- hg clone http://hg.mozilla.org/releases/comm-$CHANNEL
$PRODUCT-$VERSION/comm
+ hg clone https://hg.mozilla.org/releases/comm-$CHANNEL
$PRODUCT-$VERSION/comm
fi
fi
pushd $PRODUCT-$VERSION || exit 1
@@ -258,7 +258,7 @@
[ "$FF_RELEASE_TAG" == "default" ] || hg update -r $FF_RELEASE_TAG
# get repo and source stamp
REV=$(hg -R . parent --template="{node|short}\n")
- SOURCE_REPO=$(hg showconfig paths.default 2>/dev/null | head -n1 | sed -e
"s/^ssh:/http:/")
+ SOURCE_REPO=$(hg showconfig paths.default 2>/dev/null | head -n1 | sed -e
"s/^ssh:/https:/")
TIMESTAMP=$(date +%Y%m%d%H%M%S)
if [ "$PRODUCT" = "thunderbird" ]; then
@@ -308,7 +308,7 @@
hg pull
popd || exit 1
else
-hg clone "http://hg.mozilla.org/l10n-central/$locale;
"l10n/$locale"
+hg clone "https://hg.mozilla.org/l10n-central/$locale;
"l10n/$locale"
fi
[ "$RELEASE_TAG" == "default" ] || hg -R "l10n/$locale" up -C -r
"$changeset"
;;
++ l10n-78.8.0.tar.xz -> l10n-78.8.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.8.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2401/l10n-78.8.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.3EEErB/_old 2021-03-12 13:31:58.378212497 +0100
+++ /var/tmp/diff_new_pack.3EEErB/_new 2021-03-12 13:31:58.382212503 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.8.0"
+VERSION="78.8.1"
VERSION_SUFFIX=""
-PREV_VERSION="78.7.1"
+PREV_VERSION="78.8.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="d801a94f25867ca5f2f3488c4700532351987999"
-RELEASE_TIMESTAMP="20210217204255"
+RELEASE_TAG="41dfa822c6c0b3cfda385548a394ae42d01249a4"
+RELEASE_TIMESTAMP="20210304234616"
++
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-03-02 12:26:54
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2378 (New)
Package is "MozillaThunderbird"
Tue Mar 2 12:26:54 2021 rev:249 rq:874775 version:78.8.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-02-11 12:48:21.285573383 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2378/MozillaThunderbird.changes
2021-03-02 12:29:22.423527468 +0100
@@ -1,0 +2,19 @@
+Fri Feb 19 21:39:32 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.8.0
+ * various bugfixes
+ MFSA 2021-09 (bsc#1182614)
+ * CVE-2021-23969 (bmo#1542194)
+Content Security Policy violation report could have contained
+the destination of a redirect
+ * CVE-2021-23968 (bmo#1687342)
+Content Security Policy violation report could have contained
+the destination of a redirect
+ * CVE-2021-23973 (bmo#1690976)
+MediaError message property could have leaked information
+about cross-origin resources
+ * CVE-2021-23978 (bmo#786797, bmo#1682928, bmo#1687391,
+bmo#1687597)
+Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
+
+---
Old:
l10n-78.7.1.tar.xz
thunderbird-78.7.1.source.tar.xz
thunderbird-78.7.1.source.tar.xz.asc
New:
l10n-78.8.0.tar.xz
thunderbird-78.8.0.source.tar.xz
thunderbird-78.8.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.56Kdln/_old 2021-03-02 12:30:25.835581024 +0100
+++ /var/tmp/diff_new_pack.56Kdln/_new 2021-03-02 12:30:25.839581027 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.7.1
-%define orig_version 78.7.1
+%define mainver%major.8.0
+%define orig_version 78.8.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-78.7.1.tar.xz -> l10n-78.8.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.7.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2378/l10n-78.8.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.56Kdln/_old 2021-03-02 12:30:26.155581246 +0100
+++ /var/tmp/diff_new_pack.56Kdln/_new 2021-03-02 12:30:26.155581246 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.7.1"
+VERSION="78.8.0"
VERSION_SUFFIX=""
-PREV_VERSION="78.7.0"
+PREV_VERSION="78.7.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="1ef5b612ee43c806752ca215b142a9733210f3cc"
-RELEASE_TIMESTAMP="20210203182138"
+RELEASE_TAG="d801a94f25867ca5f2f3488c4700532351987999"
+RELEASE_TIMESTAMP="20210217204255"
++ thunderbird-78.7.1.source.tar.xz -> thunderbird-78.8.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.7.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2378/thunderbird-78.8.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-02-11 12:47:28
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504 (New)
Package is "MozillaThunderbird"
Thu Feb 11 12:47:28 2021 rev:248 rq:869925 version:78.7.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-01-29 14:56:23.969447809 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504/MozillaThunderbird.changes
2021-02-11 12:48:21.285573383 +0100
@@ -1,0 +2,8 @@
+Fri Feb 5 22:23:03 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.7.1
+ * CardDAV address books now support OAuth2 and Google Contacts
+ * Thunderbird will no longer allow installation of addons that
+use legacy APIs
+
+---
Old:
l10n-78.7.0.tar.xz
thunderbird-78.7.0.source.tar.xz
thunderbird-78.7.0.source.tar.xz.asc
New:
l10n-78.7.1.tar.xz
thunderbird-78.7.1.source.tar.xz
thunderbird-78.7.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.v07v5c/_old 2021-02-11 12:49:01.969632616 +0100
+++ /var/tmp/diff_new_pack.v07v5c/_new 2021-02-11 12:49:01.973632622 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.7.0
-%define orig_version 78.7.0
+%define mainver%major.7.1
+%define orig_version 78.7.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -204,7 +204,10 @@
Patch27:mozilla-s390x-skia-gradient.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
-PreReq: coreutils fileutils textutils /bin/sh
+PreReq: /bin/sh
+PreReq: coreutils
+PreReq: fileutils
+PreReq: textutils
### build options end
%requires_gemozilla-nspr
%requires_gemozilla-nss
@@ -212,7 +215,7 @@
Recommends: libcanberra0
Recommends: libpulse0
Requires(post): desktop-file-utils
-Requires(postun): desktop-file-utils
+Requires(postun):desktop-file-utils
%define libgssapi libgssapi_krb5.so.2
ExcludeArch:armv6l armv6hl
++ l10n-78.7.0.tar.xz -> l10n-78.7.1.tar.xz ++
++ tar_stamps ++
--- /var/tmp/diff_new_pack.v07v5c/_old 2021-02-11 12:49:02.257633036 +0100
+++ /var/tmp/diff_new_pack.v07v5c/_new 2021-02-11 12:49:02.257633036 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.7.0"
+VERSION="78.7.1"
VERSION_SUFFIX=""
-PREV_VERSION="78.6.1"
+PREV_VERSION="78.7.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="d4c4077a3ef9b3221984f2d0b42f1d96c35776e8"
-RELEASE_TIMESTAMP="20210126033722"
+RELEASE_TAG="1ef5b612ee43c806752ca215b142a9733210f3cc"
+RELEASE_TIMESTAMP="20210203182138"
++ thunderbird-78.7.0.source.tar.xz -> thunderbird-78.7.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.7.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504/thunderbird-78.7.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-01-29 14:55:50
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504 (New)
Package is "MozillaThunderbird"
Fri Jan 29 14:55:50 2021 rev:247 rq:867009 version:78.7.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2021-01-18 11:26:49.608481132 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504/MozillaThunderbird.changes
2021-01-29 14:56:23.969447809 +0100
@@ -1,0 +2,32 @@
+Tue Jan 26 07:47:13 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.7.0
+ MFSA 2021-05 (bsc#1181414)
+ * CVE-2021-23953 (bmo#1683940)
+Cross-origin information leakage via redirected PDF requests
+ * CVE-2021-23954 (bmo#1684020)
+Type confusion when using logical assignment operators in
+JavaScript switch statements
+ * CVE-2020-15685 (bmo#1622640)
+IMAP Response Injection when using STARTTLS
+ * CVE-2020-26976 (bmo#1674343)
+HTTPS pages could have been intercepted by a registered
+service worker when they should not have been
+ * CVE-2021-23960 (bmo#1675755)
+Use-after-poison for incorrectly redeclared JavaScript
+variables during GC
+ * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
+bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
+bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
+bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
+bmo#1685260, bmo#1685925)
+Memory safety bugs fixed in Thunderbird 78.7
+
+---
+Sun Jan 24 09:33:04 UTC 2021 - Manfred Hollstein
+
+- MozillaThunderbird.spec: Don't abuse BUILDROOT during %build as newer
+ rpm versions in TW remove everything there as the first action
+ of %install
+
+---
Old:
l10n-78.6.1.tar.xz
thunderbird-78.6.1.source.tar.xz
thunderbird-78.6.1.source.tar.xz.asc
New:
l10n-78.7.0.tar.xz
thunderbird-78.7.0.source.tar.xz
thunderbird-78.7.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.XbibCm/_old 2021-01-29 14:56:38.469469142 +0100
+++ /var/tmp/diff_new_pack.XbibCm/_new 2021-01-29 14:56:38.473469149 +0100
@@ -2,7 +2,7 @@
# spec file for package MozillaThunderbird
#
# Copyright (c) 2021 SUSE LLC
-# 2006-2020 Wolfgang Rosenauer
+# 2006-2021 Wolfgang Rosenauer
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.6.1
-%define orig_version 78.6.1
+%define mainver%major.7.0
+%define orig_version 78.7.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -477,7 +477,6 @@
# build additional locales
%if %localize
-mkdir -p %{buildroot}%{progdir}/extensions/
truncate -s 0 %{_tmppath}/translations.{common,other}
# langpack-build can not be done in parallel easily (see
https://bugzilla.mozilla.org/show_bug.cgi?id=1660943)
# Therefore, we have to have a separate obj-dir for each language
++ l10n-78.6.1.tar.xz -> l10n-78.7.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.6.1.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504/l10n-78.7.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.XbibCm/_old 2021-01-29 14:56:38.673469443 +0100
+++ /var/tmp/diff_new_pack.XbibCm/_new 2021-01-29 14:56:38.673469443 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.6.1"
+VERSION="78.7.0"
VERSION_SUFFIX=""
-PREV_VERSION="78.6.0"
+PREV_VERSION="78.6.1"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="f99e82f3f3cae6af48006c39fceb3beeabccd6f6"
-RELEASE_TIMESTAMP="20210107201950"
+RELEASE_TAG="d4c4077a3ef9b3221984f2d0b42f1d96c35776e8"
+RELEASE_TIMESTAMP="20210126033722"
++ thunderbird-78.6.1.source.tar.xz -> thunderbird-78.7.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.6.1.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504/thunderbird-78.7.0.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2021-01-18 11:26:40
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504 (New)
Package is "MozillaThunderbird"
Mon Jan 18 11:26:40 2021 rev:246 rq:862980 version:78.6.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-12-24 19:40:45.495171775 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504/MozillaThunderbird.changes
2021-01-18 11:26:49.608481132 +0100
@@ -1,0 +2,9 @@
+Mon Jan 11 16:35:00 UTC 2021 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.6.1
+ MFSA 2021-02 (bsc#1180623)
+ * CVE-2020-16044 (bmo#1683964)
+Use-after-free write when handling a malicious COOKIE-ECHO SCTP
+chunk
+
+---
Old:
l10n-78.6.0.tar.xz
thunderbird-78.6.0.source.tar.xz
thunderbird-78.6.0.source.tar.xz.asc
New:
l10n-78.6.1.tar.xz
thunderbird-78.6.1.source.tar.xz
thunderbird-78.6.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.SXBeDo/_old 2021-01-18 11:27:08.992524790 +0100
+++ /var/tmp/diff_new_pack.SXBeDo/_new 2021-01-18 11:27:08.996524799 +0100
@@ -1,7 +1,7 @@
#
# spec file for package MozillaThunderbird
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
# 2006-2020 Wolfgang Rosenauer
#
# All modifications and additions to the file contributed by third parties
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.6.0
-%define orig_version 78.6.0
+%define mainver%major.6.1
+%define orig_version 78.6.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -477,6 +477,7 @@
# build additional locales
%if %localize
+mkdir -p %{buildroot}%{progdir}/extensions/
truncate -s 0 %{_tmppath}/translations.{common,other}
# langpack-build can not be done in parallel easily (see
https://bugzilla.mozilla.org/show_bug.cgi?id=1660943)
# Therefore, we have to have a separate obj-dir for each language
@@ -495,6 +496,7 @@
ac_add_options --enable-official-branding
EOF
mkdir -p $RPM_BUILD_DIR/langpacks_artifacts/
+
sed -r '/^(ja-JP-mac|en-US|$)/d;s/ .*$//'
$RPM_BUILD_DIR/%{source_prefix}/comm/mail/locales/shipped-locales \
| xargs -n 1 %{?jobs:-P %jobs} -I {} /bin/sh -c '
locale=$1
++ l10n-78.6.0.tar.xz -> l10n-78.6.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.6.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504/l10n-78.6.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.SXBeDo/_old 2021-01-18 11:27:09.220525303 +0100
+++ /var/tmp/diff_new_pack.SXBeDo/_new 2021-01-18 11:27:09.220525303 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.6.0"
+VERSION="78.6.1"
VERSION_SUFFIX=""
-PREV_VERSION="78.5.1"
+PREV_VERSION="78.6.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="18be92a3f0388fe1b69941a50cdbadbf2c95b885"
-RELEASE_TIMESTAMP="20201211152611"
+RELEASE_TAG="f99e82f3f3cae6af48006c39fceb3beeabccd6f6"
+RELEASE_TIMESTAMP="20210107201950"
++ thunderbird-78.6.0.source.tar.xz -> thunderbird-78.6.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.6.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28504/thunderbird-78.6.1.source.tar.xz
differ: char 15, line 1
commit MozillaThunderbird for openSUSE:Factory
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2020-12-04 21:26:18
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5913 (New)
Package is "MozillaThunderbird"
Fri Dec 4 21:26:18 2020 rev:244 rq:852686 version:78.5.1
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-11-23 10:20:51.096709699 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5913/MozillaThunderbird.changes
2020-12-04 21:26:19.965939277 +0100
@@ -1,0 +2,8 @@
+Tue Dec 1 21:34:15 UTC 2020 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.5.1
+ MFSA 2020-53 (bsc#1179530)
+ * CVE-2020-26970 (bmo#1677338)
+Stack overflow due to incorrect parsing of SMTP server response codes
+
+---
Old:
l10n-78.5.0.tar.xz
thunderbird-78.5.0.source.tar.xz
thunderbird-78.5.0.source.tar.xz.asc
New:
l10n-78.5.1.tar.xz
thunderbird-78.5.1.source.tar.xz
thunderbird-78.5.1.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.yahbWt/_old 2020-12-04 21:26:31.021955141 +0100
+++ /var/tmp/diff_new_pack.yahbWt/_new 2020-12-04 21:26:31.025955147 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.5.0
-%define orig_version 78.5.0
+%define mainver%major.5.1
+%define orig_version 78.5.1
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
++ l10n-78.5.0.tar.xz -> l10n-78.5.1.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.5.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5913/l10n-78.5.1.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.yahbWt/_old 2020-12-04 21:26:31.385955663 +0100
+++ /var/tmp/diff_new_pack.yahbWt/_new 2020-12-04 21:26:31.389955669 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.5.0"
+VERSION="78.5.1"
VERSION_SUFFIX=""
-PREV_VERSION="78.4.3"
+PREV_VERSION="78.5.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="92abc26b9c80383e974fb0234f22e06fea793be2"
-RELEASE_TIMESTAMP="20201116161136"
+RELEASE_TAG="7bfb6e5797a4120c798eaa67a9cddd2846badcee"
+RELEASE_TIMESTAMP="20201130232704"
++ thunderbird-78.5.0.source.tar.xz -> thunderbird-78.5.1.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.5.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5913/thunderbird-78.5.1.source.tar.xz
differ: char 15, line 1
___
openSUSE Commits mailing list -- commit@lists.opensuse.org
To unsubscribe, email commit-le...@lists.opensuse.org
List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette
List Archives:
https://lists.opensuse.org/archives/list/commit@lists.opensuse.org
[opensuse-commit] commit MozillaThunderbird for openSUSE:Factory
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2020-11-21 12:40:29
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5913 (New)
Package is "MozillaThunderbird"
Sat Nov 21 12:40:29 2020 rev:243 rq:849310 version:78.5.0
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-11-15 15:21:49.267158054 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5913/MozillaThunderbird.changes
2020-11-23 10:20:51.096709699 +0100
@@ -1,0 +2,38 @@
+Mon Nov 16 20:13:34 UTC 2020 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.5.0
+ MFSA 2020-52 (bsc#1178894)
+ * CVE-2020-26951 (bmo#1667113)
+Parsing mismatches could confuse and bypass security
+sanitizer for chrome privileged code
+ * CVE-2020-16012 (bmo#1642028)
+Variable time processing of cross-origin images during
+drawImage calls
+ * CVE-2020-26953 (bmo#1656741)
+Fullscreen could be enabled without displaying the security
+UI
+ * CVE-2020-26956 (bmo#1666300)
+XSS through paste (manual and clipboard API)
+ * CVE-2020-26958 (bmo#1669355)
+Requests intercepted through ServiceWorkers lacked MIME type
+restrictions
+ * CVE-2020-26959 (bmo#1669466)
+Use-after-free in WebRequestService
+ * CVE-2020-26960 (bmo#1670358)
+Potential use-after-free in uses of nsTArray
+ * CVE-2020-15999 (bmo#1672223)
+Heap buffer overflow in freetype
+ * CVE-2020-26961 (bmo#1672528)
+DoH did not filter IPv4 mapped IP Addresses
+ * CVE-2020-26965 (bmo#1661617)
+Software keyboards may have remembered typed passwords
+ * CVE-2020-26966 (bmo#1663571)
+Single-word search queries were also broadcast to local
+network
+ * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
+bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
+bmo#1671923)
+Memory safety bugs fixed in Thunderbird 78.5
+- removed obsolete mozilla-rust-1.47.patch
+
+---
Old:
l10n-78.4.3.tar.xz
mozilla-rust-1.47.patch
thunderbird-78.4.3.source.tar.xz
thunderbird-78.4.3.source.tar.xz.asc
New:
l10n-78.5.0.tar.xz
thunderbird-78.5.0.source.tar.xz
thunderbird-78.5.0.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.dWWeFe/_old 2020-11-23 10:21:02.028722090 +0100
+++ /var/tmp/diff_new_pack.dWWeFe/_new 2020-11-23 10:21:02.032722095 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.4.3
-%define orig_version 78.4.3
+%define mainver%major.5.0
+%define orig_version 78.5.0
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -202,7 +202,6 @@
Patch25:mozilla-bmo998749.patch
Patch26:mozilla-bmo1626236.patch
Patch27:mozilla-s390x-skia-gradient.patch
-Patch28:mozilla-rust-1.47.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: coreutils fileutils textutils /bin/sh
@@ -303,7 +302,6 @@
%patch25 -p1
%patch26 -p1
%patch27 -p1
-%patch28 -p1
%endif
%build
++ l10n-78.4.3.tar.xz -> l10n-78.5.0.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.4.3.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5913/l10n-78.5.0.tar.xz
differ: char 26, line 1
++ tar_stamps ++
--- /var/tmp/diff_new_pack.dWWeFe/_old 2020-11-23 10:21:02.236722325 +0100
+++ /var/tmp/diff_new_pack.dWWeFe/_new 2020-11-23 10:21:02.236722325 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.4.3"
+VERSION="78.5.0"
VERSION_SUFFIX=""
-PREV_VERSION="78.4.2"
+PREV_VERSION="78.4.3"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="6ee1d79f9e77c90f0f165b9315b5b437a220b665"
-RELEASE_TIMESTAMP="20201110184431"
+RELEASE_TAG="92abc26b9c80383e974fb0234f22e06fea793be2"
+RELEASE_TIMESTAMP="20201116161136"
++ thunderbird-78.4.3.source.tar.xz -> thunderbird-78.5.0.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.4.3.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.5913/thunderbird-78.5.0.source.tar.xz
differ: char 15, line 1
___
openSUSE Commits mailing list -- commit@lists.opensuse.org
To unsubscribe, email commit-le...@lists.opensuse.org
List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette
List Archives:
[opensuse-commit] commit MozillaThunderbird for openSUSE:Factory
Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Factory checked in at 2020-11-15 15:21:12
Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.24930 (New)
Package is "MozillaThunderbird"
Sun Nov 15 15:21:12 2020 rev:242 rq:847757 version:78.4.3
Changes:
--- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes
2020-10-26 16:08:17.546494198 +0100
+++
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.24930/MozillaThunderbird.changes
2020-11-15 15:21:49.267158054 +0100
@@ -1,0 +2,22 @@
+Wed Nov 11 09:04:51 UTC 2020 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.4.3
+ https://www.thunderbird.net/en-US/thunderbird/78.4.3/releasenotes/
+- added mozilla-rust-1.47.patch to fix build with rust 1.47
+
+---
+Mon Nov 9 21:43:37 UTC 2020 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.4.2
+ MFSA 2020-49
+ * CVE-2020-26950 (bmo#1675905)
+Write side effects in MCallGetProperty opcode not accounted for
+
+---
+Thu Nov 5 08:52:51 UTC 2020 - Wolfgang Rosenauer
+
+- Mozilla Thunderbird 78.4.1
+ * Bugfixes and minor features
+https://www.thunderbird.net/en-US/thunderbird/78.4.1/releasenotes/
+
+---
Old:
l10n-78.4.0.tar.xz
thunderbird-78.4.0.source.tar.xz
thunderbird-78.4.0.source.tar.xz.asc
New:
l10n-78.4.3.tar.xz
mozilla-rust-1.47.patch
thunderbird-78.4.3.source.tar.xz
thunderbird-78.4.3.source.tar.xz.asc
Other differences:
--
++ MozillaThunderbird.spec ++
--- /var/tmp/diff_new_pack.oKgIya/_old 2020-11-15 15:22:13.259183624 +0100
+++ /var/tmp/diff_new_pack.oKgIya/_new 2020-11-15 15:22:13.259183624 +0100
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 78
-%define mainver%major.4.0
-%define orig_version 78.4.0
+%define mainver%major.4.3
+%define orig_version 78.4.3
%define orig_suffix%{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@@ -202,6 +202,7 @@
Patch25:mozilla-bmo998749.patch
Patch26:mozilla-bmo1626236.patch
Patch27:mozilla-s390x-skia-gradient.patch
+Patch28:mozilla-rust-1.47.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: coreutils fileutils textutils /bin/sh
@@ -302,6 +303,7 @@
%patch25 -p1
%patch26 -p1
%patch27 -p1
+%patch28 -p1
%endif
%build
++ l10n-78.4.0.tar.xz -> l10n-78.4.3.tar.xz ++
/work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-78.4.0.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.24930/l10n-78.4.3.tar.xz
differ: char 26, line 1
++ mozilla-rust-1.47.patch ++
35276 lines (skipped)
++ tar_stamps ++
--- /var/tmp/diff_new_pack.oKgIya/_old 2020-11-15 15:22:13.467183847 +0100
+++ /var/tmp/diff_new_pack.oKgIya/_new 2020-11-15 15:22:13.467183847 +0100
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr78"
-VERSION="78.4.0"
+VERSION="78.4.3"
VERSION_SUFFIX=""
-PREV_VERSION="78.3.3"
+PREV_VERSION="78.4.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78;
-RELEASE_TAG="d5c3faff83924f56859ea4584eb0610c68a0cafa"
-RELEASE_TIMESTAMP="20201019003438"
+RELEASE_TAG="6ee1d79f9e77c90f0f165b9315b5b437a220b665"
+RELEASE_TIMESTAMP="20201110184431"
++ thunderbird-78.4.0.source.tar.xz -> thunderbird-78.4.3.source.tar.xz
++
/work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-78.4.0.source.tar.xz
/work/SRC/openSUSE:Factory/.MozillaThunderbird.new.24930/thunderbird-78.4.3.source.tar.xz
differ: char 15, line 1
___
openSUSE Commits mailing list -- commit@lists.opensuse.org
To unsubscribe, email commit-le...@lists.opensuse.org
List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette
List Archives:
https://lists.opensuse.org/archives/list/commit@lists.opensuse.org
