Hello community,
here is the log from the commit of package MozillaThunderbird for
openSUSE:Leap:15.2 checked in at 2020-04-21 19:06:43
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2/MozillaThunderbird (Old)
and /work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.2738 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird"
Tue Apr 21 19:06:43 2020 rev:50 rq:795336 version:68.7.0
Changes:
--------
--- /work/SRC/openSUSE:Leap:15.2/MozillaThunderbird/MozillaThunderbird.changes
2020-03-23 07:13:13.806474626 +0100
+++
/work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.2738/MozillaThunderbird.changes
2020-04-21 19:08:10.360068209 +0200
@@ -1,0 +2,45 @@
+Tue Apr 14 07:32:13 UTC 2020 - Martin Sirringhaus <[email protected]>
+
+- Mozilla Thunderbird 68.7.0
+ * new: MailExtensions: Raw message source available to
+ MailExtensions (bmo#1525274)
+ * changed: MailExtensions: messages.update function extended to
+ mark messages as junk or not junk (bmo#1598332)
+ * changed: MailExtensions: browser.compose.begin functions no
+ longer expand mailing lists (bmo#1612480)
+ * fixed: Various improvements to account setup when connecting
+ to an Exchange server (bmo#1598861)
+ * fixed: Thread collapsed when opening news message in a new
+ window (bmo#1526765)
+ * fixed: Addons not automatically updated to compatible version
+ after upgrade from Thunderbird 60 (bmo#1574183)
+ * fixed: Updating addons did not prompt when requesting new
+ permissions (bmo#1620861)
+ * fixed: Extra recipients panel not keyboard-accessible
+ (bmo#1612717)
+ * fixed: Accessibility: Status bar was not detected by
+ screenreaders (bmo#1621287)
+ * fixed: MailExtensions: messages.query by folder name did not
+ require accountsRead permission (bmo#1625793)
+ * fixed: Calendar: Invitations with embedded null bytes did not
+ always decode correctly (bmo#1623896)
+ * fixed: Calendar: Cancelled events didn't show with a line-
+ through (bmo#1621210)
+ * fixed: Various security fixes
+ MFSA 2020-14 (bsc#1168874)
+ In general, these flaws cannot be exploited through email in
+ Thunderbird because scripting is disabled when reading mail, but
+ are potentially risks in browser or browser-like contexts.
+ * CVE-2020-6819 (bmo#1620818, bsc#1168630)
+ Use-after-free while running the nsDocShell destructor
+ * CVE-2020-6820 (bmo#1626728, bsc#1168630)
+ Use-after-free when handling a ReadableStream
+ * CVE-2020-6821 (bmo#1625404, bsc#1168874)
+ Uninitialized memory could be read when using the WebGL
+ copyTexSubImage method
+ * CVE-2020-6822 (bmo#1544181, bsc#1168874)
+ Out of bounds write in GMPDecodeData when processing large images
+ * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
+ Memory safety bugs fixed in Thunderbird 68.7.0
+
+-------------------------------------------------------------------
Old:
----
l10n-68.6.0.tar.xz
thunderbird-68.6.0.source.tar.xz
thunderbird-68.6.0.source.tar.xz.asc
New:
----
l10n-68.7.0.tar.xz
thunderbird-68.7.0.source.tar.xz
thunderbird-68.7.0.source.tar.xz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ MozillaThunderbird.spec ++++++
--- /var/tmp/diff_new_pack.wjoSJ1/_old 2020-04-21 19:08:22.644093217 +0200
+++ /var/tmp/diff_new_pack.wjoSJ1/_new 2020-04-21 19:08:22.644093217 +0200
@@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 68
-%define mainver %major.6.0
-%define orig_version 68.6.0
+%define mainver %major.7.0
+%define orig_version 68.7.0
%define orig_suffix %{nil}
%define update_channel release
%define source_prefix thunderbird-%{mainver}
@@ -80,7 +80,7 @@
BuildRequires: libnotify-devel
BuildRequires: memory-constraints
BuildRequires: mozilla-nspr-devel >= 4.21
-BuildRequires: mozilla-nss-devel >= 3.44.1
+BuildRequires: mozilla-nss-devel >= 3.44.3
BuildRequires: nasm >= 2.13
BuildRequires: nodejs8 >= 8.11
BuildRequires: python-devel
++++++ l10n-68.6.0.tar.xz -> l10n-68.7.0.tar.xz ++++++
/work/SRC/openSUSE:Leap:15.2/MozillaThunderbird/l10n-68.6.0.tar.xz
/work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.2738/l10n-68.7.0.tar.xz
differ: char 15, line 1
++++++ tar_stamps ++++++
--- /var/tmp/diff_new_pack.wjoSJ1/_old 2020-04-21 19:08:22.848093632 +0200
+++ /var/tmp/diff_new_pack.wjoSJ1/_new 2020-04-21 19:08:22.852093640 +0200
@@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr68"
-VERSION="68.6.0"
+VERSION="68.7.0"
VERSION_SUFFIX=""
-PREV_VERSION="68.5.0"
+PREV_VERSION="68.6.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68"
-RELEASE_TAG="5b1af38dba8628ef5ff2c395dc62fb10d52aa012"
-RELEASE_TIMESTAMP="20200310192757"
+RELEASE_TAG="f7099fd16d6f5dff22154eab3161674142501739"
+RELEASE_TIMESTAMP="20200407160932"
++++++ thunderbird-68.6.0.source.tar.xz -> thunderbird-68.7.0.source.tar.xz
++++++
/work/SRC/openSUSE:Leap:15.2/MozillaThunderbird/thunderbird-68.6.0.source.tar.xz
/work/SRC/openSUSE:Leap:15.2/.MozillaThunderbird.new.2738/thunderbird-68.7.0.source.tar.xz
differ: char 15, line 1