Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2026-04-08 17:15:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.21863 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird" Wed Apr 8 17:15:59 2026 rev:384 rq:1345073 version:140.9.1 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2026-03-28 20:16:33.853379647 +0100 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.21863/MozillaThunderbird.changes 2026-04-08 17:16:23.397547873 +0200 @@ -1,0 +2,22 @@ +Sun Apr 5 08:15:17 UTC 2026 - Wolfgang Rosenauer <[email protected]> + +- Mozilla Thunderbird 140.9.1 ESR + MFSA 2026-29 + * CVE-2026-5732 (bmo#2017867) + Incorrect boundary conditions, integer overflow in the + Graphics: Text component + * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252, bmo#2022294, + bmo#2023007, bmo#2023130, bmo#2023191, bmo#2023364, bmo#2023829, + bmo#2024074, bmo#2024417, bmo#2024433, bmo#2024436, bmo#2024437, + bmo#2024453, bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474, + bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402, bmo#2025472, + bmo#2026287, bmo#2026299, bmo#2026305, bmo#2026426) + Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR + 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and + Thunderbird 149.0.2 + * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545, bmo#2023555, + bmo#2023958, bmo#2025422, bmo#2025468, bmo#2025492, bmo#2025505) + Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird + ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 + +------------------------------------------------------------------- Old: ---- l10n-140.9.0esr.tar.xz thunderbird-140.9.0esr.source.tar.xz thunderbird-140.9.0esr.source.tar.xz.asc New: ---- l10n-140.9.1esr.tar.xz thunderbird-140.9.1esr.source.tar.xz thunderbird-140.9.1esr.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.ibN8vp/_old 2026-04-08 17:16:41.862307023 +0200 +++ /var/tmp/diff_new_pack.ibN8vp/_new 2026-04-08 17:16:41.866307188 +0200 @@ -30,8 +30,8 @@ # major 69 # mainver %%major.99 %define major 140 -%define mainver %major.9.0 -%define orig_version 140.9.0 +%define mainver %major.9.1 +%define orig_version 140.9.1 %define orig_suffix esr %define update_channel esr %define source_prefix thunderbird-%{orig_version} ++++++ l10n-140.9.0esr.tar.xz -> l10n-140.9.1esr.tar.xz ++++++ ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.ibN8vp/_old 2026-04-08 17:16:42.138318371 +0200 +++ /var/tmp/diff_new_pack.ibN8vp/_new 2026-04-08 17:16:42.142318535 +0200 @@ -1,11 +1,11 @@ PRODUCT="thunderbird" CHANNEL="esr140" -VERSION="140.9.0" +VERSION="140.9.1" VERSION_SUFFIX="esr" -REV_VERSION="140.8.1" +REV_VERSION="140.9.0" PREV_VERSION_SUFFIX="esr" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr140"; -RELEASE_TAG="8be9f2d3072c225a1e5f153745a18984c2babf8f" -RELEASE_TIMESTAMP="20260320073352" +RELEASE_TAG="427d792f23672fc4adbe9436ce7dddbb2bfb287a" +RELEASE_TIMESTAMP="20260404050724" ++++++ thunderbird-140.9.0esr.source.tar.xz -> thunderbird-140.9.1esr.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-140.9.0esr.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.21863/thunderbird-140.9.1esr.source.tar.xz differ: char 15, line 1
