Accepting request 1250560 from mozilla:Factory

- Mozilla Thunderbird 128.8.0
  * Opening an .EML file in profiles with many folders could take a long time
  * Users with many folders experienced poor performance when resizing
    message panes
  * "Replace" button in compose window was overwritten when the window
    was narrow
  * Export to mobile did not work when "Use default server" was selected
  * "Save Link As" was not working in feed web content
  MFSA 2025-18 (bsc#1237683)
  * CVE-2024-43097 (bmo#1945624)
    Overflow when growing an SkRegion's RunArray
  * CVE-2025-1930 (bmo#1902309)
    AudioIPC StreamData could trigger a use-after-free in the
    Browser process
  * CVE-2025-1931 (bmo#1944126)
    Use-after-free in WebTransportChild
  * CVE-2025-1932 (bmo#1944313)
    Inconsistent comparator in XSLT sorting led to out-of-bounds access
  * CVE-2025-1933 (bmo#1946004)
    JIT corruption of WASM i32 return values on 64-bit CPUs
  * CVE-2025-1934 (bmo#1942881)
    Unexpected GC during RegExp bailout processing
  * CVE-2025-1935 (bmo#1866661)
    Clickjacking the registerProtocolHandler info-bar
  * CVE-2025-1936 (bmo#1940027)
    Adding %00 and a fake extension to a jar: URL  changed the
    interpretation of the contents
  * CVE-2025-1937 (bmo#1938471, bmo#1940716)
    Memory safety bugs fixed in Firefox 136, Thunderbird 136,
    Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8

OBS-URL: https://build.opensuse.org/request/show/1250560
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=356

MozillaThunderbird.changes

@@ -1,3 +1,41 @@
+-------------------------------------------------------------------
+Wed Mar  5 19:54:43 UTC 2025 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 128.8.0
+  * Opening an .EML file in profiles with many folders could take a long time
+  * Users with many folders experienced poor performance when resizing
+    message panes
+  * "Replace" button in compose window was overwritten when the window
+    was narrow
+  * Export to mobile did not work when "Use default server" was selected
+  * "Save Link As" was not working in feed web content
+  MFSA 2025-18 (bsc#1237683)
+  * CVE-2024-43097 (bmo#1945624)
+    Overflow when growing an SkRegion's RunArray
+  * CVE-2025-1930 (bmo#1902309)
+    AudioIPC StreamData could trigger a use-after-free in the
+    Browser process
+  * CVE-2025-1931 (bmo#1944126)
+    Use-after-free in WebTransportChild
+  * CVE-2025-1932 (bmo#1944313)
+    Inconsistent comparator in XSLT sorting led to out-of-bounds access
+  * CVE-2025-1933 (bmo#1946004)
+    JIT corruption of WASM i32 return values on 64-bit CPUs
+  * CVE-2025-1934 (bmo#1942881)
+    Unexpected GC during RegExp bailout processing
+  * CVE-2025-1935 (bmo#1866661)
+    Clickjacking the registerProtocolHandler info-bar
+  * CVE-2025-1936 (bmo#1940027)
+    Adding %00 and a fake extension to a jar: URL  changed the
+    interpretation of the contents
+  * CVE-2025-1937 (bmo#1938471, bmo#1940716)
+    Memory safety bugs fixed in Firefox 136, Thunderbird 136,
+    Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8
+  * CVE-2025-1938 (bmo#1922889, bmo#1935004, bmo#1943586,
+    bmo#1943912, bmo#1948111)
+    Memory safety bugs fixed in Firefox 136, Thunderbird 136,
+    Firefox ESR 128.8, and Thunderbird 128.8
+
 -------------------------------------------------------------------
 Wed Feb 19 08:17:56 UTC 2025 - Wolfgang Rosenauer <wr@rosenauer.org>
 

MozillaThunderbird.spec

@@ -29,8 +29,8 @@
 # major 69
 # mainver %%major.99
 %define major          128
-%define mainver        %major.7.1
+%define mainver        %major.8.0
-%define orig_version   128.7.1
+%define orig_version   128.8.0
 %define orig_suffix    esr
 %define update_channel esr
 %define source_prefix  thunderbird-%{orig_version}

l10n-128.7.1esr.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:411ccf5d02af3237d9bbbb9091d7c84d307812e150cda2a228adcb297431c7cf
-size 30663244

l10n-128.8.0esr.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8761ec9577145de77d4106184668efe82640586b9e30f5ba5d19ab8a81f21339
+size 30713676

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr128"
-VERSION="128.7.1"
+VERSION="128.8.0"
 VERSION_SUFFIX="esr"
-REV_VERSION="128.7.0"
+REV_VERSION="128.7.1"
 PREV_VERSION_SUFFIX="esr"
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr128"
-RELEASE_TAG="165c27a12acb651ed64f594c36ee6369820f722d"
+RELEASE_TAG="a9ae94e74147aed62efe452d5ae6c486d5443300"
-RELEASE_TIMESTAMP="20250213193602"
+RELEASE_TIMESTAMP="20250304221304"

thunderbird-128.7.1esr.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:93f9b754ed68bdfa6bf15c5787c1845441be02b3830c1730b6379cec9b8f275e
-size 679801568

thunderbird-128.7.1esr.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmevc3UACgkQ4207E/PZ
-MnRxABAAjNXb/YqBfmI+oF+Iz2xJiffZ0vEZAIPtvNXMKu9mHynpPA9wQuokTeb5
-WyhRT9oHoVP5nIoomQ6nWALTYppw5WeC6ee+GtbSZHzgIC9mF1exuFH0NIl93VZK
-W675qo6aYhTbichtBWtKpj9Qs2O7uYTbt49EH5+UnhdcSxzxS5GP0aHqWw7P8UBr
-iv7jnJh+Chuy0cnVosaTFNcLsXaSBZaGbSxRE7HtZKwPqzw9Ej9cp5A494+l07h0
-ORRU4bMqsz2Uy6JJDyk8bnuIKbQ3b8hk0ipEEMYzCm6GNRHueDJjkxsLrTAQOUZ7
-DlEPKsps7RKG65mKevaBcNINqm+2ohnnrMyMW6O8V19EzD9ju4LX6G2kW+FC22NL
-mpB2JqDJmgVs4WzshsRk7eVfm+F/q8lLJ6BuQdCRmKFpiZ5BdEq0a30ipALOLeSU
-335ucqLlcADrNsYCn6+cvhxzA23PrEEXQTHMpil/BsI1dvU9v87DkicjJkrdzRFE
-RHelyl4RXCxjTbgNr3+v8NqxiXmaDL5N2XcJK1m9dKvd0Zsk67WYBDV3A6i7lGYh
-zW+9S0LitrVwyFI0x0Poxk4tYtQqQyj8v/dEDQo95I5zEb0ZpGusImVzpq7qfuBv
-tG/mRb6mrAXH4552S1v0T1K2lrhoQOrVgoehpErzb3j7arp7qEw=
-=P4/C
------END PGP SIGNATURE-----

thunderbird-128.8.0esr.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dac8bb727e7fed445d3977093d51832a9d116de078f86cc07081abd8e42b6f43
+size 673614340

thunderbird-128.8.0esr.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=dnKx
+-----END PGP SIGNATURE-----