Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2020-04-15 19:52:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird" Wed Apr 15 19:52:17 2020 rev:229 rq:793242 version:68.7.0 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2020-03-24 22:31:22.217059992 +0100 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/MozillaThunderbird.changes 2020-04-15 19:52:18.761539958 +0200 @@ -1,0 +2,32 @@ +Thu Apr 9 17:27:50 UTC 2020 - Andreas Stieger <[email protected]> + +- Mozilla Thunderbird 68.7.0 + * Updates to MailExtensions API + * Various improvements to account setup when connecting to an + Exchange server + * Thread collapsed when opening news message in a new window + * Fix Addons not automatically updated to compatible version after + upgrade from Thunderbird 60 + * Updating addons did not prompt when requesting new permissions + * Extra recipients panel not keyboard-accessible + * Accessibility: Status bar was not detected by screenreaders + * Calendar: Invitations with embedded null bytes did not always decode correctly + * Calendar: Cancelled events didn't show with a line-through + * Various security fixes + MFSA 2020-14 + In general, these flaws cannot be exploited through email in + Thunderbird because scripting is disabled when reading mail, but + are potentially risks in browser or browser-like contexts. + * CVE-2020-6819 (bmo#1620818, bsc#1168630) + Use-after-free while running the nsDocShell destructor + * CVE-2020-6820 (bmo#1626728, bsc#1168630) + Use-after-free when handling a ReadableStream + * CVE-2020-6821 (bmo#1625404, bsc#1168874) + Uninitialized memory could be read when using the WebGL + copyTexSubImage method + * CVE-2020-6822 (bmo#1544181, bsc#1168874) + Out of bounds write in GMPDecodeData when processing large images + * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203,bsc#1168874) + Memory safety bugs fixed in Thunderbird 68.7.0 + +------------------------------------------------------------------- Old: ---- l10n-68.6.0.tar.xz thunderbird-68.6.0.source.tar.xz thunderbird-68.6.0.source.tar.xz.asc New: ---- l10n-68.7.0.tar.xz thunderbird-68.7.0.source.tar.xz thunderbird-68.7.0.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.Xi7cZr/_old 2020-04-15 19:52:32.709546247 +0200 +++ /var/tmp/diff_new_pack.Xi7cZr/_new 2020-04-15 19:52:32.709546247 +0200 @@ -26,8 +26,8 @@ # major 69 # mainver %major.99 %define major 68 -%define mainver %major.6.0 -%define orig_version 68.6.0 +%define mainver %major.7.0 +%define orig_version 68.7.0 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{mainver} ++++++ l10n-68.6.0.tar.xz -> l10n-68.7.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-68.6.0.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/l10n-68.7.0.tar.xz differ: char 8, line 1 ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.Xi7cZr/_old 2020-04-15 19:52:32.937546349 +0200 +++ /var/tmp/diff_new_pack.Xi7cZr/_new 2020-04-15 19:52:32.937546349 +0200 @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr68" -VERSION="68.6.0" +VERSION="68.7.0" VERSION_SUFFIX="" -PREV_VERSION="68.5.0" +PREV_VERSION="68.6.0" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68"; -RELEASE_TAG="5b1af38dba8628ef5ff2c395dc62fb10d52aa012" -RELEASE_TIMESTAMP="20200310192757" +RELEASE_TAG="f7099fd16d6f5dff22154eab3161674142501739" +RELEASE_TIMESTAMP="20200407160932" ++++++ thunderbird-68.6.0.source.tar.xz -> thunderbird-68.7.0.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-68.6.0.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2738/thunderbird-68.7.0.source.tar.xz differ: char 15, line 1
