- Mozilla Thunderbird 68.5.0

New
  * Support for Client Identity IMAP/SMTP Service Extension
  * Support for OAuth 2.0 authentication for POP3 accounts
  Fixes
  * Status area goes blank during account setup
  * Calendar: Could not remove color for default categories
  * Calendar: Prevent calendar component loading multiple times
  * Calendar: Today pane did not retain width between sessions
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668) (Mac OSX only)
    Extensions granted downloads.open permission could open arbitrary
    applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851,
    bmo#1608580,bmo#1608785,bmo#1605777)
    Memory safety bugs fixed in Thunderbird 68.5

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=520

MozillaThunderbird.changes

@@ -1,3 +1,34 @@
+-------------------------------------------------------------------
+Mon Feb 10 21:55:19 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 68.5.0
+  New
+  * Support for Client Identity IMAP/SMTP Service Extension
+  * Support for OAuth 2.0 authentication for POP3 accounts
+  Fixes
+  * Status area goes blank during account setup
+  * Calendar: Could not remove color for default categories
+  * Calendar: Prevent calendar component loading multiple times
+  * Calendar: Today pane did not retain width between sessions
+  MFSA 2020-07 (bsc#1163368)
+  * CVE-2020-6793 (bmo#1608539)
+    Out-of-bounds read when processing certain email messages
+  * CVE-2020-6794 (bmo#1606619)
+    Setting a master password post-Thunderbird 52 does not delete
+    unencrypted previously stored passwords
+  * CVE-2020-6795 (bmo#1611105)
+    Crash processing S/MIME messages with multiple signatures
+  * CVE-2020-6797 (bmo#1596668) (Mac OSX only)
+    Extensions granted downloads.open permission could open arbitrary
+    applications on Mac OSX
+  * CVE-2020-6798 (bmo#1602944)
+    Incorrect parsing of template tag could result in JavaScript injection
+  * CVE-2020-6792 (bmo#1609607)
+    Message ID calculcation was based on uninitialized data
+  * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851,
+    bmo#1608580,bmo#1608785,bmo#1605777)
+    Memory safety bugs fixed in Thunderbird 68.5
+
 -------------------------------------------------------------------
 Tue Jan 28 08:26:02 UTC 2020 - Stasiek Michalski <stasiek@michalski.cc>
 

MozillaThunderbird.spec

@@ -2,7 +2,7 @@
 # spec file for package MozillaThunderbird
 #
 # Copyright (c) 2020 SUSE LLC
-#               2006-2019 Wolfgang Rosenauer <wr@rosenauer.org>
+#               2006-2020 Wolfgang Rosenauer <wr@rosenauer.org>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major           68
-%define mainver         %major.4.2
+%define mainver         %major.5.0
-%define orig_version    68.4.2
+%define orig_version    68.5.0
 %define orig_suffix     %{nil}
 %define update_channel  release
 %define source_prefix   thunderbird-%{mainver}

l10n-68.4.2.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3231b22532e01367bdbafd6a000bbf45201c8df5e942af2e0b60072bc741fd19
-size 28482584

l10n-68.5.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a6f99cc36d8d3cbf7b09264dcf5bfa07ed034a1d5be9c382135fe0b2b40015b7
+size 28513256

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr68"
-VERSION="68.4.2"
+VERSION="68.5.0"
 VERSION_SUFFIX=""
-PREV_VERSION="68.4.1"
+PREV_VERSION="68.4.2"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr68"
-RELEASE_TAG="c53f9f02d2a8a29c85eee8e1ef555f4a0c91a1e9"
+RELEASE_TAG="c25a4ce1e7569bddaafbdbc8ff09de82d852303a"
-RELEASE_TIMESTAMP="20200123140255"
+RELEASE_TIMESTAMP="20200210021033"

thunderbird-68.4.2.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:af56ca8629f352be1a8ca627af97b8c1bef0ebde10bcb583d12e6f03377512fc
-size 330801416

thunderbird-68.4.2.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl4prlMACgkQ8aZmj7t9
-Vy6K3g/+KiQ4DxIZwvaktxHqPlqZzC7eYVc7bPkcYUk+vOfyeRKl6H6uqYNGHpf4
-sZKdEGcoT3uVC5z08SMtZwr2MWGDqKIm3cAR9vTHYwzpbet/5vFrkZrryxiRG/Cs
-HBzD0s9ud+qwrSYV2/sk32+Ft3GLw0GBR8dQxVM0n+kV0/9c76XN4lk4vr+4IN5X
-ptuP5wzQQDZnC0CwMRVK7Gso8B+NtolCJwYmbuWayMuGGAV2jYuwSofD/99ESTdE
-XDwGF9aCjpShUvhHwIO4fQ2R4h/khLwN1OCdTqGI65HOzewT3i73HdKpl6+MEE0G
-MTIr3tk0F176P+RslHpkz3UiDgOu/NOES9GLTt+Ml3b6vLHSLNazyZnsTu5je9Er
-Ad7+S2pKrBEUL6aecR46HXvVEpCj5vxkty3cDL1Kl5C1Q50Gu2JSNahScEHy9mqO
-hAU9K5vDRRLorEGXo7SWRqJvW+1yjrr0rsw46cPyCmavIAHUWQrbr5nEW5dyvYOB
-Oc+ZZqd8GByENiRac8f6mxJGuTgCAULmzpcGuprxtl3uv04AZzLpEr6XNulRPbOj
-CFD15F2lfaBscoBp4LKJhrbtS3uJikeRC/nuzCWbFkgAYSzT0VIcXLHg1iIgiNbd
-vvAJzBwnIi5uKrPbpwKyrJpPGgXwtSANvYW4WftvX+xAKmKoFUA=
-=cp08
------END PGP SIGNATURE-----

thunderbird-68.5.0.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8b2c02a08c7f6e20e141461710dcd442426fd875c44d39d9b369eb82d965026d
+size 331328840

thunderbird-68.5.0.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=qJ0M
+-----END PGP SIGNATURE-----