- Mozilla Thunderbird 78.13.0

* removed WeTransfer integration package (not supported by vendor
    any longer)
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=598

MozillaThunderbird.changes

@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Thu Aug  5 15:47:34 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 78.13.0
+  * removed WeTransfer integration package (not supported by vendor
+    any longer)
+  MFSA 2021-35 (bsc#1188891)
+  * CVE-2021-29986 (bmo#1696138)
+    Race condition when resolving DNS names could have led to
+    memory corruption
+  * CVE-2021-29988 (bmo#1717922)
+    Memory corruption as a result of incorrect style treatment
+  * CVE-2021-29984 (bmo#1720031)
+    Incorrect instruction reordering during JIT optimization
+  * CVE-2021-29980 (bmo#1722204)
+    Uninitialized memory in a canvas object could have led to
+    memory corruption
+  * CVE-2021-29985 (bmo#1722083)
+    Use-after-free media channels
+  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
+    bmo#1719998, bmo#1720568)
+    Memory safety bugs fixed in Thunderbird 78.13
+
 -------------------------------------------------------------------
 Wed Jul 14 06:34:13 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
 

MozillaThunderbird.spec

@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major          78
-%define mainver        %major.12.0
-%define orig_version   78.12.0
+%define mainver        %major.13.0
+%define orig_version   78.13.0
 %define orig_suffix    %{nil}
 %define update_channel release
 %define source_prefix  thunderbird-%{orig_version}
@@ -658,7 +658,6 @@ exit 0
 %dir %{progdir}/chrome/
 %{progdir}/chrome/icons/
 %{progdir}/defaults/
-%{progdir}/features/
 %{progdir}/isp/
 %{_datadir}/appdata/
 %{_datadir}/applications/%{desktop_file_name}.desktop

l10n-78.12.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:11b47467ec61040f422143499a10b31b0d8599f30fc09368c8b595ca89b6da93
-size 29109488

l10n-78.13.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7bedbcd970a24ebe34ef36398c901a69d028b6979793b925f613aacae5001d3f
+size 29083700

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr78"
-VERSION="78.12.0"
+VERSION="78.13.0"
 VERSION_SUFFIX=""
-PREV_VERSION="78.11.0"
+PREV_VERSION="78.12.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78"
-RELEASE_TAG="6796ff47626a009d169a1e9fd1f307a6c14b7ed5"
-RELEASE_TIMESTAMP="20210712120515"
+RELEASE_TAG="adcfedf831da719455116546865f9a5faea848a6"
+RELEASE_TIMESTAMP="20210802223056"

thunderbird-78.12.0.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e2a214cf6b056fb5fde9bcaf9aee9a619bab337f163d99b1cc216d1c44d6f200
-size 355933664

thunderbird-78.12.0.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmDsRfkACgkQ6+QekPbx
-L20SYQ/9HI72xgpUKE85N4HxJgspCJUhS+BC7GTquifhE2MuXE0zUL+ZBHFUWlUz
-g/WsjUd2DhTdTrz7m5C6dEPPf4ztRA1D6vfTeONDpsAmaWUZOT0w1IUVZocFWg9j
-Rm4xtP4wGvCWQZVwmV/zhdKbOy3NnI5CZhxONcp5KzXEUzb2+gKI9WMOuHVzzapf
-8WzhQh1PgxNMV0Fi43BSwsfi0zrhY0XmOTQnqqJPFYbVy+qLYtYNC2slzQ9hYDp4
-5RyzdJlcU7QWTZQ8Uqq/T0D4lWdFafhxG5x8TLpFLmu/Uy0MhxsnJL3QH5DycPzO
-iCIV0m2FcRmfbawtakefNW205yIphRq4nuigHbfNMjk0hg/UIl3aLajn809JwnbT
-uKocwqNk3YXgQv7pWl+wPRw1t1x4pbrJgoxupo9aSSDrkr5s2wD+f6GOTa26/5Ap
-Y6A4LHV9d2oDHXSXDbfuDIG/46TIt0AXaayV07AneIoq2XIN2IWxWM9CL/dBc5e2
-tBFxlD9fARXTS36Bcm4XhOLAdoGFHENKRkdC/75GfyTJkwWE1/PsM9b2ME4ght70
-I9br+DnzGADzMqcCftSe1xTZc7FRyo5cA6/VBGm2l45xOXdAJBClXBJL5RGFDKcb
-t97ftsMDkWrhlTOz5u1N+oWIElsqSlwk2zvpbBU1XSy2mT62flk=
-=MQ+0
------END PGP SIGNATURE-----

thunderbird-78.13.0.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b7e4076e5ce561b06ad9cd89005989ed71fd724ce83c4888cf569dc2930d90e9
+size 354497644

thunderbird-78.13.0.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=ZNH3
+-----END PGP SIGNATURE-----