pool/MozillaThunderbird
SHA256
4
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Accepting request 787142 from mozilla:Factory

Browse Source 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/787142
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=228
This commit is contained in:
Dominique Leuenberger 2020-03-24 21:31:06 +00:00 committed by Git OBS Bridge
commit 15eff75ea5
9 changed files with 54 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
MozillaThunderbird.changes
View File

@ -1,3 +1,28 @@
-------------------------------------------------------------------
Sat Mar 14 13:16:23 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
- Mozilla Thunderbird 68.6.0
MFSA 2020-10 (bsc#1166238)
* CVE-2020-6805 (bmo#1610880)
Use-after-free when removing data about origins
* CVE-2020-6806 (bmo#1612308)
BodyStream::OnInputStreamReady was missing protections against
state confusion
* CVE-2020-6807 (bmo#1614971)
Use-after-free in cubeb during stream destruction
* CVE-2020-6811 (bmo#1607742)
Devtools' 'Copy as cURL' feature did not fully escape
website-controlled data, potentially leading to command injection
* CVE-2019-20503 (bmo#1613765)
Out of bounds reads in sctp_load_addresses_from_init
* CVE-2020-6812 (bmo#1616661)
The names of AirPods with personally identifiable information
were exposed to websites with camera or microphone permission
* CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256, bmo#1612636,
bmo#1614339)
Memory safety bugs fixed in Thunderbird 68.6
- requires NSS >= 3.44.3
-------------------------------------------------------------------
Mon Feb 10 21:55:19 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>

6
MozillaThunderbird.spec
View File

@ -26,8 +26,8 @@
# major 69
# mainver %major.99
%define major 68
%define mainver %major.5.0
%define orig_version 68.5.0
%define mainver %major.6.0
%define orig_version 68.6.0
%define orig_suffix %{nil}
%define update_channel release
%define source_prefix thunderbird-%{mainver}
@ -77,7 +77,7 @@ BuildRequires: libidl-devel
BuildRequires: libnotify-devel
BuildRequires: memory-constraints
BuildRequires: mozilla-nspr-devel >= 4.21
BuildRequires: mozilla-nss-devel >= 3.44.1
BuildRequires: mozilla-nss-devel >= 3.44.3
BuildRequires: nasm >= 2.13
BuildRequires: nodejs8 >= 8.11
BuildRequires: python-devel

3
l10n-68.5.0.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a6f99cc36d8d3cbf7b09264dcf5bfa07ed034a1d5be9c382135fe0b2b40015b7
size 28513256

3
l10n-68.6.0.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:8be406890885e5af55a044919e2502db2e877882870b95baeec0d06562d9f50a
size 28509340

8
tar_stamps
View File

@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr68"
VERSION="68.5.0"
VERSION="68.6.0"
VERSION_SUFFIX=""
PREV_VERSION="68.4.2"
PREV_VERSION="68.5.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68"
RELEASE_TAG="c25a4ce1e7569bddaafbdbc8ff09de82d852303a"
RELEASE_TIMESTAMP="20200210021033"
RELEASE_TAG="5b1af38dba8628ef5ff2c395dc62fb10d52aa012"
RELEASE_TIMESTAMP="20200310192757"

3
thunderbird-68.5.0.source.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:8b2c02a08c7f6e20e141461710dcd442426fd875c44d39d9b369eb82d965026d
size 331328840

16
thunderbird-68.5.0.source.tar.xz.asc
View File

@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=qJ0M
-----END PGP SIGNATURE-----

3
thunderbird-68.6.0.source.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:4e3b8fdcfae12e7d49232a9c324e82d47ed94b371031f31baf69b2f7c2fb5b51
size 339643212

16
thunderbird-68.6.0.source.tar.xz.asc Normal file
View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=m6Zj
-----END PGP SIGNATURE-----