Accepting request 999347 from mozilla:Factory

- Mozilla Thunderbird 102.2.0
  * https://www.thunderbird.net/en-US/thunderbird/102.2.0/releasenotes/
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159, bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- disabled automatic usage of wayland because of known issues
  using MOZ_ENABLE_WAYLAND=1 in environment would still enable it
  (boo#1202606)

OBS-URL: https://build.opensuse.org/request/show/999347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=286
This commit is contained in:
Dominique Leuenberger 2022-08-27 09:48:04 +00:00 committed by Git OBS Bridge
commit 080375fd1c
10 changed files with 51 additions and 29 deletions

View File

@ -1,3 +1,25 @@
-------------------------------------------------------------------
Fri Aug 19 18:24:06 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
- Mozilla Thunderbird 102.2.0
* https://www.thunderbird.net/en-US/thunderbird/102.2.0/releasenotes/
MFSA 2022-36 (bsc#1202645)
* CVE-2022-38472 (bmo#1769155)
Address bar spoofing via XSLT error handling
* CVE-2022-38473 (bmo#1771685)
Cross-origin XSLT Documents would have inherited the parent's
permissions
* CVE-2022-38476 (bmo#1760998)
Data race and potential use-after-free in PK11_ChangePW
* CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159, bmo#1773363)
Memory safety bugs fixed in Thunderbird 102.2
* CVE-2022-38478 (bmo#1770630, bmo#1776658)
Memory safety bugs fixed in Thunderbird 102.2, and
Thunderbird 91.13
- disabled automatic usage of wayland because of known issues
using MOZ_ENABLE_WAYLAND=1 in environment would still enable it
(boo#1202606)
-------------------------------------------------------------------
Sun Aug 14 08:03:00 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>

View File

@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
%define mainver %major.1.2
%define orig_version 102.1.2
%define mainver %major.2.0
%define orig_version 102.2.0
%define orig_suffix %{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:020ac360ef62cf58780bef0b85ef0af9fb205e6999adbd8d42e253ea4f1ded1c
size 29341192

3
l10n-102.2.0.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:6233333f16c7487a93c430638ec4d4f704cb8dc4b0db1901cf88d2aaa501ffe8
size 29350268

View File

@ -89,7 +89,7 @@ WAYLAND_SUPPORTED=%WAYLAND_SUPPORTED
# $XDG_SESSION_TYPE should contain either x11 or wayland
if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ] && [ -z "$MOZ_ENABLE_WAYLAND" ]; then
export MOZ_ENABLE_WAYLAND=1
export MOZ_ENABLE_WAYLAND=0
fi
##

View File

@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
VERSION="102.1.2"
VERSION="102.2.0"
VERSION_SUFFIX=""
PREV_VERSION="102.1.1"
PREV_VERSION="102.1.2"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102"
RELEASE_TAG="866a7981895be684f4462051ad717cb48cd228e4"
RELEASE_TIMESTAMP="20220808204007"
RELEASE_TAG="89ba701459beaaffd4216e142b9502b8ee460159"
RELEASE_TIMESTAMP="20220822195114"

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:00acfe3d8fd534a3734602ba7bd377297fa4e09a9ebe0f7c69f455a596334903
size 505593480

View File

@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmLxnCIACgkQ6+QekPbx
L23m9BAAsK0GkZGbybtJIVO2lbx/bHJn0d+sSlHbscGxWkPSdgG022EumMk7+ghc
Wh3xlzFJyFa7C5uA6g2RtO57HLLbJzvKsdUhyddxpPfW9REpPoac9jgQnNqWRovH
D9a9e+ZvQKa9P1qW01BHLPmKA69vyqz0T3dreExea/aW6LCHs5YgUL7l2ZL0m83Z
rGPwM4VIt5XJozCWNDijqFbHmXZN3Tfc8oI6HnuwB7hPZ1zJ/mzRbn6BckRQAnr8
v6hEVEZS6hYXGwBzzzl411ChrQnw+uLUydPMFB0+FQbJQm0fXYgsQnM0CnJAv3JI
0AF3CrpepBa0ZCjN8rFYqhbNrhb0BF1InIDRqQRpQpqs4AHTHO1kLWYzvGoiVjgC
hbtdli7/09ht8sIoP2pK4qBChIGH8ElLIpfjtX7Tb0gBoPmXHWU+85UvfPem8ON+
xZ2FRJhLwT6l1XEdwWch6uD1p6jxYqIn/lZ8PSkDw7/UafTHlDh/5WsvYee857ys
UEy+RA6ohN5Ah7qvBx9HrjTWeR5R1blglQj/tgDhDEb7TA6I0nnqLENq3qPf10sf
LhRK6JFYlhGlbH/okr493/Y3XvsElAAHeSkduhsaqgTn4WV/tLLdBAAPe7tKno/+
XBqJTzW/TssVaOK/awGnvQvDQcjna4lsu7iJXTI8BaSLebnTtfM=
=IIqA
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:39cded4efd28d63c8f2bb4d46250b624aad29bd47b49eae85eff5a4746180e6c
size 500331516

View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=2BJ5
-----END PGP SIGNATURE-----