From b44fdf6e1e0adfb78b4527cc70cc4465d1e7047ee7ed370691841f6d8a3db165 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Tue, 11 Feb 2020 20:44:27 +0000 Subject: [PATCH] - Mozilla Thunderbird 68.5.0 New * Support for Client Identity IMAP/SMTP Service Extension * Support for OAuth 2.0 authentication for POP3 accounts Fixes * Status area goes blank during account setup * Calendar: Could not remove color for default categories * Calendar: Prevent calendar component loading multiple times * Calendar: Today pane did not retain width between sessions MFSA 2020-07 (bsc#1163368) * CVE-2020-6793 (bmo#1608539) Out-of-bounds read when processing certain email messages * CVE-2020-6794 (bmo#1606619) Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords * CVE-2020-6795 (bmo#1611105) Crash processing S/MIME messages with multiple signatures * CVE-2020-6797 (bmo#1596668) (Mac OSX only) Extensions granted downloads.open permission could open arbitrary applications on Mac OSX * CVE-2020-6798 (bmo#1602944) Incorrect parsing of template tag could result in JavaScript injection * CVE-2020-6792 (bmo#1609607) Message ID calculcation was based on uninitialized data * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851, bmo#1608580,bmo#1608785,bmo#1605777) Memory safety bugs fixed in Thunderbird 68.5 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=520 --- MozillaThunderbird.changes | 31 ++++++++++++++++++++++++++++ MozillaThunderbird.spec | 6 +++--- l10n-68.4.2.tar.xz | 3 --- l10n-68.5.0.tar.xz | 3 +++ tar_stamps | 8 +++---- thunderbird-68.4.2.source.tar.xz | 3 --- thunderbird-68.4.2.source.tar.xz.asc | 16 -------------- thunderbird-68.5.0.source.tar.xz | 3 +++ thunderbird-68.5.0.source.tar.xz.asc | 16 ++++++++++++++ 9 files changed, 60 insertions(+), 29 deletions(-) delete mode 100644 l10n-68.4.2.tar.xz create mode 100644 l10n-68.5.0.tar.xz delete mode 100644 thunderbird-68.4.2.source.tar.xz delete mode 100644 thunderbird-68.4.2.source.tar.xz.asc create mode 100644 thunderbird-68.5.0.source.tar.xz create mode 100644 thunderbird-68.5.0.source.tar.xz.asc diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 9f89d5f..49e2f2d 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,34 @@ +------------------------------------------------------------------- +Mon Feb 10 21:55:19 UTC 2020 - Wolfgang Rosenauer + +- Mozilla Thunderbird 68.5.0 + New + * Support for Client Identity IMAP/SMTP Service Extension + * Support for OAuth 2.0 authentication for POP3 accounts + Fixes + * Status area goes blank during account setup + * Calendar: Could not remove color for default categories + * Calendar: Prevent calendar component loading multiple times + * Calendar: Today pane did not retain width between sessions + MFSA 2020-07 (bsc#1163368) + * CVE-2020-6793 (bmo#1608539) + Out-of-bounds read when processing certain email messages + * CVE-2020-6794 (bmo#1606619) + Setting a master password post-Thunderbird 52 does not delete + unencrypted previously stored passwords + * CVE-2020-6795 (bmo#1611105) + Crash processing S/MIME messages with multiple signatures + * CVE-2020-6797 (bmo#1596668) (Mac OSX only) + Extensions granted downloads.open permission could open arbitrary + applications on Mac OSX + * CVE-2020-6798 (bmo#1602944) + Incorrect parsing of template tag could result in JavaScript injection + * CVE-2020-6792 (bmo#1609607) + Message ID calculcation was based on uninitialized data + * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851, + bmo#1608580,bmo#1608785,bmo#1605777) + Memory safety bugs fixed in Thunderbird 68.5 + ------------------------------------------------------------------- Tue Jan 28 08:26:02 UTC 2020 - Stasiek Michalski diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 99a84cf..983269f 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -2,7 +2,7 @@ # spec file for package MozillaThunderbird # # Copyright (c) 2020 SUSE LLC -# 2006-2019 Wolfgang Rosenauer +# 2006-2020 Wolfgang Rosenauer # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -26,8 +26,8 @@ # major 69 # mainver %major.99 %define major 68 -%define mainver %major.4.2 -%define orig_version 68.4.2 +%define mainver %major.5.0 +%define orig_version 68.5.0 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{mainver} diff --git a/l10n-68.4.2.tar.xz b/l10n-68.4.2.tar.xz deleted file mode 100644 index cc407d1..0000000 --- a/l10n-68.4.2.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3231b22532e01367bdbafd6a000bbf45201c8df5e942af2e0b60072bc741fd19 -size 28482584 diff --git a/l10n-68.5.0.tar.xz b/l10n-68.5.0.tar.xz new file mode 100644 index 0000000..65f68c0 --- /dev/null +++ b/l10n-68.5.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a6f99cc36d8d3cbf7b09264dcf5bfa07ed034a1d5be9c382135fe0b2b40015b7 +size 28513256 diff --git a/tar_stamps b/tar_stamps index ddf29e7..8a07d23 100644 --- a/tar_stamps +++ b/tar_stamps @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr68" -VERSION="68.4.2" +VERSION="68.5.0" VERSION_SUFFIX="" -PREV_VERSION="68.4.1" +PREV_VERSION="68.4.2" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68" -RELEASE_TAG="c53f9f02d2a8a29c85eee8e1ef555f4a0c91a1e9" -RELEASE_TIMESTAMP="20200123140255" +RELEASE_TAG="c25a4ce1e7569bddaafbdbc8ff09de82d852303a" +RELEASE_TIMESTAMP="20200210021033" diff --git a/thunderbird-68.4.2.source.tar.xz b/thunderbird-68.4.2.source.tar.xz deleted file mode 100644 index 2d531c4..0000000 --- a/thunderbird-68.4.2.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:af56ca8629f352be1a8ca627af97b8c1bef0ebde10bcb583d12e6f03377512fc -size 330801416 diff --git a/thunderbird-68.4.2.source.tar.xz.asc b/thunderbird-68.4.2.source.tar.xz.asc deleted file mode 100644 index d6069e0..0000000 --- a/thunderbird-68.4.2.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl4prlMACgkQ8aZmj7t9 -Vy6K3g/+KiQ4DxIZwvaktxHqPlqZzC7eYVc7bPkcYUk+vOfyeRKl6H6uqYNGHpf4 -sZKdEGcoT3uVC5z08SMtZwr2MWGDqKIm3cAR9vTHYwzpbet/5vFrkZrryxiRG/Cs -HBzD0s9ud+qwrSYV2/sk32+Ft3GLw0GBR8dQxVM0n+kV0/9c76XN4lk4vr+4IN5X -ptuP5wzQQDZnC0CwMRVK7Gso8B+NtolCJwYmbuWayMuGGAV2jYuwSofD/99ESTdE -XDwGF9aCjpShUvhHwIO4fQ2R4h/khLwN1OCdTqGI65HOzewT3i73HdKpl6+MEE0G -MTIr3tk0F176P+RslHpkz3UiDgOu/NOES9GLTt+Ml3b6vLHSLNazyZnsTu5je9Er -Ad7+S2pKrBEUL6aecR46HXvVEpCj5vxkty3cDL1Kl5C1Q50Gu2JSNahScEHy9mqO -hAU9K5vDRRLorEGXo7SWRqJvW+1yjrr0rsw46cPyCmavIAHUWQrbr5nEW5dyvYOB -Oc+ZZqd8GByENiRac8f6mxJGuTgCAULmzpcGuprxtl3uv04AZzLpEr6XNulRPbOj -CFD15F2lfaBscoBp4LKJhrbtS3uJikeRC/nuzCWbFkgAYSzT0VIcXLHg1iIgiNbd -vvAJzBwnIi5uKrPbpwKyrJpPGgXwtSANvYW4WftvX+xAKmKoFUA= -=cp08 ------END PGP SIGNATURE----- diff --git a/thunderbird-68.5.0.source.tar.xz b/thunderbird-68.5.0.source.tar.xz new file mode 100644 index 0000000..1830470 --- /dev/null +++ b/thunderbird-68.5.0.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8b2c02a08c7f6e20e141461710dcd442426fd875c44d39d9b369eb82d965026d +size 331328840 diff --git a/thunderbird-68.5.0.source.tar.xz.asc b/thunderbird-68.5.0.source.tar.xz.asc new file mode 100644 index 0000000..b6c6b4d --- /dev/null +++ b/thunderbird-68.5.0.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl5BGJgACgkQ8aZmj7t9 +Vy40uQ//WyoIWHRofidun8Wn28iieFu/wI6791yr+aWMNnjzrdJJk2mK67nUVLJh +4coZ1moTVMGiBCnZ/sLXxi9sA5ywGxEGeTbKDBzIGosMlexCWvqkFUOuEl7qSh4U +bPanDYFOpwiNQ648CtSYuuOfpb+BCorY9gZGXGJUz7VEWbQs0EOk7Y45h9vLrT9D +Q3kMESli5Xg+JjSjdEwzxFUvsf+tzvXlKyFBWCDn+Kv1D7j+EkmieUknBV2pCeqP +OkG4JiEY7dRB4p5pLX2mWe9e566WzAZTJNc8LKn7j7J3BjbUEH0tv/InYHQx1Rhu +urOMGoQ2JjkNJRf6ihSeMj9WqbonqLljAHihuis/ORkVcjSjLdUUBFex+XyXjsXG +3fNGdW3hImEdb4d6RMP/iUOCv+HAuUe6MzfxV+XGtfLCD89bCb5oV0rB77h27bwZ +hvr7D7bzydsCF4sD2XGFugt3Xh1Llt80GlNdc6IiqEV3sqKJBFYq7TxJFKQjOoW8 +59pvmUTxJiZgvcwprmPsBbFdDy2vGThX35g8fZkKqf8U3ukrF7v5+Q5VeDAOYEhY +JVeOPEEOhOoI79XdmAKdEtrGlYGBDvKkdn/KuwQF/jWqDjJ1fiZ3d0UGWsPRPWfK +hz3thIYeVkyNmDQrCSma/N4IJBKq3tdkDFaow98stQuekcV2OBc= +=qJ0M +-----END PGP SIGNATURE-----