Accepting request 906332 from mozilla:Factory

- Mozilla Thunderbird 78.12.0
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could be
    processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12

OBS-URL: https://build.opensuse.org/request/show/906332
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=257

MozillaThunderbird.changes

@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Wed Jul 14 06:34:13 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 78.12.0
+  MFSA 2021-30 (bsc#1188275)
+  * CVE-2021-29969 (bmo#1682370)
+    IMAP server responses sent by a MITM prior to STARTTLS could be
+    processed
+  * CVE-2021-29970 (bmo#1709976)
+    Use-after-free in accessibility features of a document
+  * CVE-2021-30547 (bmo#1715766)
+    Out of bounds write in ANGLE
+  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
+    bmo#1711576, bmo#1714391)
+    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
+
 -------------------------------------------------------------------
 Sat May 29 08:14:38 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
 

MozillaThunderbird.spec

@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major          78
-%define mainver        %major.11.0
+%define mainver        %major.12.0
-%define orig_version   78.11.0
+%define orig_version   78.12.0
 %define orig_suffix    %{nil}
 %define update_channel release
 %define source_prefix  thunderbird-%{orig_version}

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr78"
-VERSION="78.11.0"
+VERSION="78.12.0"
 VERSION_SUFFIX=""
-PREV_VERSION="78.10.2"
+PREV_VERSION="78.11.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78"
-RELEASE_TAG="1717d8d5fbd359aab7a4a0a15f4d15c72a7e6afc"
+RELEASE_TAG="6796ff47626a009d169a1e9fd1f307a6c14b7ed5"
-RELEASE_TIMESTAMP="20210528153351"
+RELEASE_TIMESTAMP="20210712120515"

thunderbird-78.11.0.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:cb5475dd6494c68699aa29f97be2868a455548cabb4c4859e109b1badae7c0fb
-size 352417996

thunderbird-78.11.0.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmCxG9EACgkQ6+QekPbx
-L20yIQ/+Ik95hn1lNuuD3WGpIABOcpohNkIlcUD1jbmFDWTLMJY7rn4Ip0cgXVi8
-HNIv16r0wRQ9ZdWiodPjtFVKZkSYsb2sHB8W1JJ0m4KrK5Rpxe5eJ4NyfocUGsjS
-agWARJw9n0tBhOzw9Cd5JF7Y75br1wKRpVJV5rDXLUIw4Iz/L8ASB6jEZKgB7ktY
-eObrioEroYyRPBOTwa6keiHohMAfv0+P46L5OPJuqAoItiwtWqnQPrSk7nf+N21M
-rCEp57S1eQh/oWQlS3+Ja1ZHY2YeXyS19vpQbU5xAT/XedeSfXYSun0RY6RmUy+K
-WlzjJE2nkv0XEdCikzLoGTLxz/lH/YYzW9gpT1eBzFiVQfgSMmiwqR88rcP/rtLP
-hu8HbLfZJ2YFhEwRLoqED+rf8oBzQNi6/DuetDVrnScc89XQ7mJ072D6h3DpUq04
-+FfnFjgmHH36pQixBPZc4KLllTVvg8hfvIuoeikN5FFjhQfKafUckb0wb9EfVv8C
-hmrRO7Ca+WLztYqOB8NE4yt78BvYw9SwzWhVksvIvUv29Vdj9eTY38PI/hyaV5wz
-KaJy+pgoRfpUVS0w5mNvEPhnM1vQdZT4njGmBTMeuiJxblZp8y+5UgJjjuXtqBKW
-HJiEe9UljjaKz7lcSZILrl15/dCc5HMfH6T3ibCmoMendxrOLwQ=
-=HjA1
------END PGP SIGNATURE-----

thunderbird-78.12.0.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e2a214cf6b056fb5fde9bcaf9aee9a619bab337f163d99b1cc216d1c44d6f200
+size 355933664

thunderbird-78.12.0.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=MQ+0
+-----END PGP SIGNATURE-----