Accepting request 978422 from mozilla:Factory

- Mozilla Thunderbird 91.9.1
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution

OBS-URL: https://build.opensuse.org/request/show/978422
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaThunderbird?expand=0&rev=280

MozillaThunderbird.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Sat May 21 06:36:17 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 91.9.1
+  MFSA 2022-19 (bsc#1199768)
+  * CVE-2022-1802 (bmo#1770137)
+    Prototype pollution in Top-Level Await implementation
+  * CVE-2022-1529 (bmo#1770048)
+    Untrusted input used in JavaScript object indexing, leading
+    to prototype pollution
+
 -------------------------------------------------------------------
 Mon May  2 06:34:51 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
 

MozillaThunderbird.spec

@@ -29,8 +29,8 @@
 # major 69
 # mainver %major.99
 %define major          91
-%define mainver        %major.9.0
-%define orig_version   91.9.0
+%define mainver        %major.9.1
+%define orig_version   91.9.1
 %define orig_suffix    %{nil}
 %define update_channel release
 %define source_prefix  thunderbird-%{orig_version}

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr91"
-VERSION="91.9.0"
+VERSION="91.9.1"
 VERSION_SUFFIX=""
-PREV_VERSION="91.8.1"
+PREV_VERSION="91.9.0"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91"
-RELEASE_TAG="1576ef623c224f5ba915c39a06b519ea977685c0"
-RELEASE_TIMESTAMP="20220427203543"
+RELEASE_TAG="a52d41376d0374e23a0848e42a21454150c4d6a2"
+RELEASE_TIMESTAMP="20220520005021"

thunderbird-91.9.0.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:616e48327c4b0cdd2fd3c6385bfa4d380ba5cc7c52ce6014ae39d389a19fd092
-size 403847916

thunderbird-91.9.0.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmJwNp0ACgkQ6+QekPbx
-L22yTw/9Hg93PeZom6duOGFF1Pw4bRqMH2twz8vEBmIGTOXtx5AFhb0iWwXn3TMl
-lUvT4VFgnAXngwqGpPAnbO0p/zv98cJqzVv88l/TBOyyJApn6PwtTH0SppK7m3Kc
-CnpfNXPOegTyosbnM6U1VjDLDNO57FS8/R+XBlQ/I0T9iNpGBKOgmnkmC8kxK8Ki
-NnoxMW8iAgk8EIs3/YQ2xrodsPVfYKqZOJuCNVzprS0hcwEVnJC2yx5lcXwVQo4V
-mB0/XgIr+wadaqR7eFB7ZdfP47jKKc+t9UtSAQBLLJ8A+kvlcxzCmVpXfUwUkk65
-z7+ZNbDqh1h1Ib05kHpP1ICEbEpxlurbj9+5nDTzaUgySB7F/cGwhnUHF3NPoB2p
-oFZBw16AvuMrYUuwoZ7O0/+b9D08X6DfBSS4Geyk3loCtljfXYnx/WsQnlUVVXey
-cDuCMioQS6tDa7pMM4me7MsMr4m2i3toSI7jh2OfgzuMbX0xMEqW40YxtiAjPcuW
-BPbfQRWqiET68RJoE0BOfGLwIwI/HCoAhsPr5M58GDSpv0yEzHngIqWU6ErW4T0A
-GLyfczzOw8LtyIJ4lJvh+tGMK5mtSYbdVYTc765XViT59TppqcRlrwsr+AbPIqiv
-+h8OcTdUoZSubGcdtZQ3TU7gxBmbigWM/A+6daX/RUbmvIuN2Yo=
-=eoMg
------END PGP SIGNATURE-----

thunderbird-91.9.1.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d598f774c26b60d63bdd35535f88081b7f5897bfce6eb91ba8f9792141c492e6
+size 402851656

thunderbird-91.9.1.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=W9fG
+-----END PGP SIGNATURE-----