Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2024-10-30 18:05:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2020 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird" Wed Oct 30 18:05:09 2024 rev:345 rq:1219576 version:128.4.0 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2024-10-23 21:11:49.594567818 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2020/MozillaThunderbird.changes 2024-10-30 18:05:11.229245371 +0100 @@ -1,0 +2,33 @@ +Wed Oct 30 13:51:30 UTC 2024 - Wolfgang Rosenauer <w...@rosenauer.org> + +- Mozilla Thunderbird 128.4.0 + * Export Thunderbird account settings to Thunderbird Mobile via QRCode + Bugfixes: + * Unable to send an unencrypted response to an OpenPGP encrypted message + MFSA 2024-58 (bsc#1231879) + * CVE-2024-10458 (bmo#1921733) + Permission leak via embed or object elements + * CVE-2024-10459 (bmo#1919087) + Use-after-free in layout with accessibility + * CVE-2024-10460 (bmo#1912537) + Confusing display of origin for external protocol handler prompt + * CVE-2024-10461 (bmo#1914521) + XSS due to Content-Disposition being ignored in + multipart/x-mixed-replace response + * CVE-2024-10462 (bmo#1920423) + Origin of permission prompt could be spoofed by long URL + * CVE-2024-10463 (bmo#1920800) + Cross origin video frame leak + * CVE-2024-10464 (bmo#1913000) + History interface could have been used to cause a Denial of + Service condition in the browser + * CVE-2024-10465 (bmo#1918853) + Clipboard "paste" button persisted across tabs + * CVE-2024-10466 (bmo#1924154) + DOM push subscription message could hang Firefox + * CVE-2024-10467 (bmo#1829029, bmo#1888538, bmo#1900394, bmo#1904059, + bmo#1917742, bmo#1919809, bmo#1923706) + Memory safety bugs fixed in Firefox 132, Thunderbird 132, + Firefox ESR 128.4, and Thunderbird 128.4 + +------------------------------------------------------------------- Old: ---- l10n-128.3.3esr.tar.xz thunderbird-128.3.3esr.source.tar.xz thunderbird-128.3.3esr.source.tar.xz.asc New: ---- l10n-128.4.0esr.tar.xz thunderbird-128.4.0esr.source.tar.xz thunderbird-128.4.0esr.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.tDEmzK/_old 2024-10-30 18:05:36.162284246 +0100 +++ /var/tmp/diff_new_pack.tDEmzK/_new 2024-10-30 18:05:36.166284413 +0100 @@ -29,8 +29,8 @@ # major 69 # mainver %%major.99 %define major 128 -%define mainver %major.3.3 -%define orig_version 128.3.3 +%define mainver %major.4.0 +%define orig_version 128.4.0 %define orig_suffix esr %define update_channel esr %define source_prefix thunderbird-%{orig_version} ++++++ l10n-128.3.3esr.tar.xz -> l10n-128.4.0esr.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-128.3.3esr.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2020/l10n-128.4.0esr.tar.xz differ: char 15, line 1 ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.tDEmzK/_old 2024-10-30 18:05:36.346291913 +0100 +++ /var/tmp/diff_new_pack.tDEmzK/_new 2024-10-30 18:05:36.346291913 +0100 @@ -1,11 +1,11 @@ PRODUCT="thunderbird" CHANNEL="esr128" -VERSION="128.3.3" +VERSION="128.4.0" VERSION_SUFFIX="esr" -PREV_VERSION="128.3.2" +PREV_VERSION="128.3.3" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr128" -RELEASE_TAG="7791b5d54344169bb5e9c35f93868b18e40a4b5f" -RELEASE_TIMESTAMP="20241021172958" +RELEASE_TAG="6c9a5fd8ba8d5956ce0cca04af0bb8f14c4c0f03" +RELEASE_TIMESTAMP="20241025175304" ++++++ thunderbird-128.3.3esr.source.tar.xz -> thunderbird-128.4.0esr.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-128.3.3esr.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2020/thunderbird-128.4.0esr.source.tar.xz differ: char 15, line 1