diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 4401ef9..1184ef1 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,22 @@ +------------------------------------------------------------------- +Sun Aug 30 11:05:01 UTC 2020 - Wolfgang Rosenauer + +- Mozilla Thunderbird 68.12.0 + MFSA 2020-40 (bsc#1175686) + * CVE-2020-15663 (bmo#1643199) + Downgrade attack on the Mozilla Maintenance Service could have + resulted in escalation of privilege + * CVE-2020-15664 (bmo#1658214) + Attacker-induced prompt for extension installation + * CVE-2020-15669 (bmo#1656957) + Use-After-Free when aborting an operation + +------------------------------------------------------------------- +Fri Aug 28 09:04:11 UTC 2020 - Michel Normand + +- Put back %limit_build macro usage to avoid build error PowerPC + (remove memoryperjob constraint) + ------------------------------------------------------------------- Thu Aug 20 08:57:15 UTC 2020 - Martin Liška diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index d976ce9..1702c68 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -26,8 +26,8 @@ # major 69 # mainver %major.99 %define major 68 -%define mainver %major.11.0 -%define orig_version 68.11.0 +%define mainver %major.12.0 +%define orig_version 68.12.0 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{mainver} @@ -75,6 +75,7 @@ BuildRequires: libXcomposite-devel BuildRequires: libcurl-devel BuildRequires: libidl-devel BuildRequires: libnotify-devel +BuildRequires: memory-constraints BuildRequires: mozilla-nspr-devel >= 4.21 BuildRequires: mozilla-nss-devel >= 3.44.4 BuildRequires: nasm >= 2.13 @@ -326,6 +327,7 @@ echo "export RUSTFLAGS=\"$RUSTFLAGS\"" echo "" cat << EOF %else +%limit_build -m 2000 export MOZ_DEBUG_FLAGS="-pipe" cat << EOF > $MOZCONFIG %endif diff --git a/_constraints b/_constraints index d13700f..1b2d7b1 100644 --- a/_constraints +++ b/_constraints @@ -7,9 +7,6 @@ 9 - - 2000 - diff --git a/l10n-68.11.0.tar.xz b/l10n-68.12.0.tar.xz similarity index 100% rename from l10n-68.11.0.tar.xz rename to l10n-68.12.0.tar.xz diff --git a/tar_stamps b/tar_stamps index b430a32..0f20d70 100644 --- a/tar_stamps +++ b/tar_stamps @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr68" -VERSION="68.11.0" +VERSION="68.12.0" VERSION_SUFFIX="" -PREV_VERSION="68.10.0" +PREV_VERSION="68.11.0" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68" -RELEASE_TAG="a247645d951bcedb356a0d9f273e878a7d4d2180" -RELEASE_TIMESTAMP="20200721201500" +RELEASE_TAG="b41cdff70b185358d9c4c1d4a36cfad15a24f001" +RELEASE_TIMESTAMP="20200820223055" diff --git a/thunderbird-68.11.0.source.tar.xz b/thunderbird-68.11.0.source.tar.xz deleted file mode 100644 index 545d3a4..0000000 --- a/thunderbird-68.11.0.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0d2f403c7aca55ab130b7262ff8afc0254e5c0471db01f1631976df68a6af5f2 -size 337797560 diff --git a/thunderbird-68.11.0.source.tar.xz.asc b/thunderbird-68.11.0.source.tar.xz.asc deleted file mode 100644 index 8d03dd5..0000000 --- a/thunderbird-68.11.0.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl8Ylw4ACgkQ8aZmj7t9 -Vy6kNw//QPPzP/G0VpLOVPe7gz+K82CGzqe+cN3TCIJ88LlTNIMfnGztQi6PIhFk -uofGz4lWz7xkV6r8rinlktoaB+IXFM3biemhAYDu813TKLVdssKLC7rA4/kbWxEH -6dsEoSlH9+FZWtf4Ip4y6mX+Lm7fSXittJ2AD4J85nmoRnJ7GvQVESJzDTMQ0ZSS -Jju0Zh9QtCB84WhaFneLh7nTqwjmhDBPg2GmiG6OViMg36LtNXiekOm8xJE+qhca -crPeH/LGyqscZ9o6h+HY27CN7Oi3HElCMj9/5L5G8k8o/Yzv16K/bdvwJP9Ewdvk -laJ3FRcOGP9uglZWPlXVfjpP/T1Bbl5eElgddU/TqALt+9x2P66qf4UTv4SewcnX -M7ME/FBNYJOamE8NdSsTata0nxlH3VTzn0dGcxU0h0/bHr1+cV1raZZhOqVcdABd -I3O5djrrwYCGvWDfSAC6W1DpL+VEqY1NIKK6PRrFrl4I7qTmspy654QfoaS8dWOB -dLIyKR8tLCYDlO09koRUTo9vdT3Ig1Ggl/7WfklnA60sNByaUBdQmTc84uoGeVst -P5P49cQunInAPHzOiVyGziB36Vya/j22ETaK860t0yn+NYXxVZWdp5Ckeu9QEAJ6 -bVdIA4YAVZt7jhV62oX6fRQa51mGpsPXhDOuCnPGGIhDprn7Pok= -=BZp0 ------END PGP SIGNATURE----- diff --git a/thunderbird-68.12.0.source.tar.xz b/thunderbird-68.12.0.source.tar.xz new file mode 100644 index 0000000..d8705e4 --- /dev/null +++ b/thunderbird-68.12.0.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8cf582d03125df86044626072c0d924d4b7c3e984d9228d62acdf4e9918eec02 +size 331226160 diff --git a/thunderbird-68.12.0.source.tar.xz.asc b/thunderbird-68.12.0.source.tar.xz.asc new file mode 100644 index 0000000..80df0e7 --- /dev/null +++ b/thunderbird-68.12.0.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl9EFJgACgkQ8aZmj7t9 +Vy4iKg/8CyGoVX+9ZUYPKgOPwwhn4+mOnCufZ7ZisMVDSjh3jRyhgQ6pmaSsnwYs +aCeMjjf+hbA9zafXzQMFUTpQn5q3XvsZQ9StwWK+2U1vFN+MVZy3mtvrKm10E2i/ +jZRiimjg87z4aa50YgBoE/UMxN6SjR11Kx++skjxNeXRsdjfq2N3b/0KMvahduLQ +gmqfdMEJjS5SC/DF7wDGMlWIEz+IO7q/V4F7bJftNe5yYwLa2hvfyXZyCvFGT1uv +1QWu5B95/63j+e8QDgHaJ9KQJitPxOIEuqIdj/vQJzIM3EzcH01hirGkG3CGoO2U +pujprKASdp9Gvd8Hsjr8JOkp49mdzTb2/HiRa34Ubju3w4LB3r9ntOTVYZmU8bat +GN84Ks3Ts+NXT6D0MZ36YSiJ64NU5N6jeSPOEXUAwTMlURmumWu1YNAJv+q5n1X+ +XoElCG7pvad3J/9Q06RCST/6sGF7NtNXtTmH9ubhmsu4cE/7eWdBEs9u0j8nRL7L +5A9m+1Pw6nG5cktTb0VQyDgc9/BmebPlCrcicV9MBbE+NNNQSR3W3iaCLrDaBLXO +NG0GQrnDjjyscI+w+elkhmkl0X5qnOfuVkzzsQgmdfgFStS0D2HL8lpBbgyPhNSr +zoaiL2PcdCul7JwX0o0OQQvw6+nrkee+aBRU+onKKAdHAdIH2no= +=lUe0 +-----END PGP SIGNATURE-----