Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2024-11-27 22:11:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28523 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird" Wed Nov 27 22:11:26 2024 rev:349 rq:1226643 version:128.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2024-11-20 17:01:06.691632400 +0100 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28523/MozillaThunderbird.changes 2024-11-27 22:13:33.782047878 +0100 @@ -1,0 +2,41 @@ +Tue Nov 26 10:15:25 UTC 2024 - Wolfgang Rosenauer <w...@rosenauer.org> + +- Mozilla Thunderbird 128.5.0 + * IMAP could crash when reading cached messages + * Enabling "Show Folder Size" on Maildir profile could render + Thunderbird unusable + * Messages corrupted by folder compaction were only fixed by user + intervention + * Reading a message from past the end of an mbox file did not + cause an error + * View -> Folders had duplicate F access keys + * Add-ons adding columns to the message list could fail and cause + display issue + * "Empty trash on exit" and "Expunge inbox on exit" did not + always work + * Selecting a display option in View -> Tasks did not apply in + the Task interface + MFSA 2024-68 (bsc#1233695) + * CVE-2024-11691 (bmo#1914707, bmo#1924184) + Memory corruption in Apple GPU drivers + * CVE-2024-11692 (bmo#1909535) + Select list elements could be shown over another site + * CVE-2024-11693 (bmo#1921458) + Download Protections were bypassed by .library-ms files on Windows + * CVE-2024-11694 (bmo#1924167) + CSP Bypass and XSS Exposure via Web Compatibility Shims + * CVE-2024-11695 (bmo#1925496) + URL Bar Spoofing via Manipulated Punycode and Whitespace Characters + * CVE-2024-11696 (bmo#1929600) + Unhandled Exception in Add-on Signature Verification + * CVE-2024-11697 (bmo#1842187) + Improper Keypress Handling in Executable File Confirmation Dialog + * CVE-2024-11698 (bmo#1916152) + Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS + * CVE-2024-11699 (bmo#1880582, bmo#1929911) + Memory safety bugs fixed in Firefox 133, Thunderbird 133, + Firefox ESR 128.5, and Thunderbird 128.5 +- appid is thunderbird-esr currently; use the matching desktop + file name (boo#1233650) + +------------------------------------------------------------------- Old: ---- l10n-128.4.4esr.tar.xz thunderbird-128.4.4esr.source.tar.xz thunderbird-128.4.4esr.source.tar.xz.asc New: ---- l10n-128.5.0esr.tar.xz thunderbird-128.5.0esr.source.tar.xz thunderbird-128.5.0esr.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.9hgxsj/_old 2024-11-27 22:14:15.939812216 +0100 +++ /var/tmp/diff_new_pack.9hgxsj/_new 2024-11-27 22:14:15.947812551 +0100 @@ -29,9 +29,10 @@ # major 69 # mainver %%major.99 %define major 128 -%define mainver %major.4.4 -%define orig_version 128.4.4 -%define orig_suffix esr +%define mainver %major.5.0 +%define orig_version 128.5.0 +%define esr_suffix esr +%define orig_suffix %{nil} %define update_channel esr %define source_prefix thunderbird-%{orig_version} @@ -69,7 +70,8 @@ %define appname Thunderbird %define progdir %{_prefix}/%_lib/%{progname} %define gnome_dir %{_prefix} -%define desktop_file_name %{progname} +#%define desktop_file_name %{progname} +%define desktop_file_name %["%esr_suffix" == "esr" ? "%{progname}-esr" : "%{progname}"] %define __provides_exclude ^lib.*\\.so.*$ %define __requires_exclude ^(libmoz.*|liblgpllibs.*|libxul.*|libgk.*|libldap.*|libldif.*|libprldap.*|librnp.*)$ %define localize 1 @@ -178,20 +180,20 @@ Group: Productivity/Networking/Email/Clients URL: https://www.thunderbird.net/ %if !%{with only_print_mozconfig} -Source: http://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/source/%{srcname}-%{orig_version}%{orig_suffix}.source.tar.xz +Source: http://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}%{esr_suffix}/source/%{srcname}-%{orig_version}%{orig_suffix}%{esr_suffix}.source.tar.xz Source1: thunderbird.desktop Source2: thunderbird-rpmlintrc Source3: mozilla.sh.in Source4: tar_stamps Source6: suse-default-prefs.js %if %{localize} -Source7: l10n-%{orig_version}%{orig_suffix}.tar.xz +Source7: l10n-%{orig_version}%{orig_suffix}%{esr_suffix}.tar.xz %endif Source9: thunderbird.appdata.xml Source13: spellcheck.js Source14: https://github.com/openSUSE/firefox-scripts/raw/913fab1a196e2a0623b5c554598bfde3b4b49e29/create-tar.sh -Source20: https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/source/%{srcname}-%{orig_version}%{orig_suffix}.source.tar.xz.asc -Source21: https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/KEY#/mozilla.keyring +Source20: https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}%{esr_suffix}/source/%{srcname}-%{orig_version}%{orig_suffix}%{esr_suffix}.source.tar.xz.asc +Source21: https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}%{esr_suffix}/KEY#/mozilla.keyring # Gecko/Toolkit Patch1: mozilla-nongnome-proxies.patch Patch3: mozilla-ntlm-full-path.patch ++++++ l10n-128.4.4esr.tar.xz -> l10n-128.5.0esr.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-128.4.4esr.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28523/l10n-128.5.0esr.tar.xz differ: char 15, line 1 ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.9hgxsj/_old 2024-11-27 22:14:17.247866959 +0100 +++ /var/tmp/diff_new_pack.9hgxsj/_new 2024-11-27 22:14:17.275868131 +0100 @@ -1,11 +1,11 @@ PRODUCT="thunderbird" CHANNEL="esr128" -VERSION="128.4.4" +VERSION="128.5.0" VERSION_SUFFIX="esr" -PREV_VERSION="128.4.3" +REV_VERSION="128.4.4" PREV_VERSION_SUFFIX="esr" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr128" -RELEASE_TAG="e963642f77edeb0a8a39ffdca4c7f2dee69f0b78" -RELEASE_TIMESTAMP="20241118214310" +RELEASE_TAG="5aa787475f1ff704f48d561dd2ba209b092f8336" +RELEASE_TIMESTAMP="20241125170630" ++++++ thunderbird-128.4.4esr.source.tar.xz -> thunderbird-128.5.0esr.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-128.4.4esr.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.28523/thunderbird-128.5.0esr.source.tar.xz differ: char 15, line 1