pool/MozillaThunderbird
SHA256
4
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

- Mozilla Thunderbird 102.1.0

Browse Source 
* https://www.thunderbird.net/en-US/thunderbird/102.1.0/releasenotes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local <code>.lnk</code> files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- added mozilla-newer-cbindgen.patch to fix build with
  rust-cbindgen >= 0.24 (and also require that for build)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=643
This commit is contained in:
Wolfgang Rosenauer 2022-07-29 12:07:40 +00:00 committed by Git OBS Bridge
parent ebc8727216
commit 982c2db4ff
9 changed files with 64 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
MozillaThunderbird.changes
View File

@ -1,3 +1,21 @@
-------------------------------------------------------------------
Tue Jul 26 09:03:40 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
- Mozilla Thunderbird 102.1.0
* https://www.thunderbird.net/en-US/thunderbird/102.1.0/releasenotes
MFSA 2022-32 (bsc#1201758)
* CVE-2022-36319 (bmo#1737722)
Mouse Position spoofing with CSS transforms
* CVE-2022-36318 (bmo#1771774)
Directory indexes for bundled resources reflected URL parameters
* CVE-2022-36314 (bmo#1773894)
Opening local <code>.lnk</code> files could cause unexpected
network loads
* CVE-2022-2505 (bmo#1769739, bmo#1772824)
Memory safety bugs fixed in Thunderbird 102.1
- added mozilla-newer-cbindgen.patch to fix build with
rust-cbindgen >= 0.24 (and also require that for build)
-------------------------------------------------------------------
Tue Jul 19 07:31:52 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>

8
MozillaThunderbird.spec
View File

@ -29,8 +29,8 @@
# major 69
# mainver %major.99
%define major 102
%define mainver %major.0.3
%define orig_version 102.0.3
%define mainver %major.1.0
%define orig_version 102.1.0
%define orig_suffix %{nil}
%define update_channel release
%define source_prefix thunderbird-%{orig_version}
@ -119,7 +119,7 @@ BuildRequires: python36
BuildRequires: python3 >= 3.5
BuildRequires: python3-devel
%endif
BuildRequires: rust-cbindgen >= 0.23.0
BuildRequires: rust-cbindgen >= 0.24.0
BuildRequires: unzip
BuildRequires: update-desktop-files
BuildRequires: xorg-x11-libXt-devel
@ -206,6 +206,7 @@ Patch19: mozilla-silence-no-return-type.patch
Patch20: mozilla-bmo531915.patch
Patch21: one_swizzle_to_rule_them_all.patch
Patch22: svg-rendering.patch
Patch23: mozilla-newer-cbindgen.patch
%endif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: /bin/sh
@ -294,6 +295,7 @@ fi
%patch20 -p1
%patch21 -p1
%patch22 -p1
%patch23 -p1
%endif
%build

0
l10n-102.0.3.tar.xz → l10n-102.1.0.tar.xz
View File

18
mozilla-newer-cbindgen.patch Normal file
View File

@ -0,0 +1,18 @@
Description: Remove an extra constant definition that is now being generated by newer versions of cbindgen (0.24), and causing build failures because it is defined in several places.
Author: Olivier Tilloy <olivier.tilloy@canonical.com>
Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1773259
Forwarded: not-needed
diff --git a/gfx/webrender_bindings/webrender_ffi.h b/gfx/webrender_bindings/webrender_ffi.h
index b1d67b1..eb79974 100644
--- a/gfx/webrender_bindings/webrender_ffi.h
+++ b/gfx/webrender_bindings/webrender_ffi.h
@@ -73,8 +73,6 @@ struct WrPipelineInfo;
struct WrPipelineIdAndEpoch;
using WrPipelineIdEpochs = nsTArray<WrPipelineIdAndEpoch>;
-const uint64_t ROOT_CLIP_CHAIN = ~0;
-
} // namespace wr
} // namespace mozilla

8
tar_stamps
View File

@ -1,10 +1,10 @@
PRODUCT="thunderbird"
CHANNEL="esr102"
VERSION="102.0.3"
VERSION="102.1.0"
VERSION_SUFFIX=""
PREV_VERSION="102.0.2"
PREV_VERSION="102.0.3"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102"
RELEASE_TAG="608f04d334e72acd89c589b9d341a90c4023dbe5"
RELEASE_TIMESTAMP="20220718182443"
RELEASE_TAG="7fc691fc18b8cddcf185d1b72ebc403e8983ada9"
RELEASE_TIMESTAMP="20220725200630"

3
thunderbird-102.0.3.source.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:9dcdea5d3b0d169f8df2b1542a57afdbdf4640d3a599752343cf1fcf6b2c4be0
size 504782192

16
thunderbird-102.0.3.source.tar.xz.asc
View File

@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=xTV1
-----END PGP SIGNATURE-----

3
thunderbird-102.1.0.source.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:59195f813c9f43ff1c0eb2ac20e14f6f309f7c61c030010fde5010f036fcee74
size 502081292

16
thunderbird-102.1.0.source.tar.xz.asc Normal file
View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=AU7Y
-----END PGP SIGNATURE-----