From ab2bb34d0728d73a3f5449012f95c8b84c13edf75ae06f1fefe5f28c900b241d Mon Sep 17 00:00:00 2001 From: Yoshio_Sato Date: Fri, 26 Sep 2025 17:14:32 +0300 Subject: [PATCH] Update to 140.3.0 ESR --- MozillaThunderbird.changes | 35 ++++++++++++++++++++++++ MozillaThunderbird.spec | 4 +-- l10n-140.2.1esr.tar.xz | 3 -- l10n-140.3.0esr.tar.xz | 3 ++ tar_stamps | 8 +++--- thunderbird-128.9.2esr.source.tar.xz.asc | 16 ----------- thunderbird-140.2.1esr.source.tar.xz | 3 -- thunderbird-140.2.1esr.source.tar.xz.asc | 16 ----------- thunderbird-140.3.0esr.source.tar.xz | 3 ++ thunderbird-140.3.0esr.source.tar.xz.asc | 16 +++++++++++ 10 files changed, 63 insertions(+), 44 deletions(-) delete mode 100644 l10n-140.2.1esr.tar.xz create mode 100644 l10n-140.3.0esr.tar.xz delete mode 100644 thunderbird-128.9.2esr.source.tar.xz.asc delete mode 100644 thunderbird-140.2.1esr.source.tar.xz delete mode 100644 thunderbird-140.2.1esr.source.tar.xz.asc create mode 100644 thunderbird-140.3.0esr.source.tar.xz create mode 100644 thunderbird-140.3.0esr.source.tar.xz.asc diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index d770c40..57d1c2a 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,38 @@ +------------------------------------------------------------------- +Sun Sep 14 06:58:42 UTC 2025 - Wolfgang Rosenauer + +- Mozilla Thunderbird 140.3.0 ESR + * Right-clicking 'List-ID' -> 'Unsubscribe' created double encoded + draft subject + * Thunderbird could crash on startup + * Thunderbird could crash when importing mail + * Opening Website header link in RSS feed incorrectly re-encoded + URL parameters + MFSA 2025-78 (bsc#1249391) + * CVE-2025-10527 (bmo#1984825) + Sandbox escape due to use-after-free in the Graphics: + Canvas2D component + * CVE-2025-10528 (bmo#1986185) + Sandbox escape due to undefined behavior, invalid pointer in + the Graphics: Canvas2D component + * CVE-2025-10529 (bmo#1970490) + Same-origin policy bypass in the Layout component + * CVE-2025-10532 (bmo#1979502) + Incorrect boundary conditions in the JavaScript: GC component + * CVE-2025-10533 (bmo#1980788) + Integer overflow in the SVG component + * CVE-2025-10536 (bmo#1981502) + Information disclosure in the Networking: Cache component + * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280, + bmo#1981283, bmo#1984505, bmo#1985067) + Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird + ESR 140.3, Firefox 143 and Thunderbird 143 + +------------------------------------------------------------------- +Tue Sep 9 10:11:26 UTC 2025 - Lubos Kocman + +- Fix suse_version check for 16.0 + ------------------------------------------------------------------- Mon Sep 8 18:36:27 UTC 2025 - Yoshio Sato diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 0683134..d31fcd0 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -30,8 +30,8 @@ # major 69 # mainver %%major.99 %define major 140 -%define mainver %major.2.1 -%define orig_version 140.2.1 +%define mainver %major.3.0 +%define orig_version 140.3.0 %define orig_suffix esr %define update_channel esr %define source_prefix thunderbird-%{orig_version} diff --git a/l10n-140.2.1esr.tar.xz b/l10n-140.2.1esr.tar.xz deleted file mode 100644 index d488bdb..0000000 --- a/l10n-140.2.1esr.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:57632ca986fc5925a9151958fda8a8217af65e09be821dc33c5da27d7e468906 -size 33352844 diff --git a/l10n-140.3.0esr.tar.xz b/l10n-140.3.0esr.tar.xz new file mode 100644 index 0000000..8650187 --- /dev/null +++ b/l10n-140.3.0esr.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:aaa717e3b9c03fda3f9b9deb48b2de1fea82e3e74619c7b5dee1d8fcb32494b2 +size 33342304 diff --git a/tar_stamps b/tar_stamps index 471d156..2e6d8cf 100644 --- a/tar_stamps +++ b/tar_stamps @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr140" -VERSION="140.2.1" +VERSION="140.3.0" VERSION_SUFFIX="esr" -REV_VERSION="140.2.0" +REV_VERSION="140.2.1" PREV_VERSION_SUFFIX="esr" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr140" -RELEASE_TAG="5df036ddfe367ff4452a4aa6235bb652dca89fa4" -RELEASE_TIMESTAMP="20250828033206" +RELEASE_TAG="34b243658c31506d293b13d67238ccca56c290e0" +RELEASE_TIMESTAMP="20250911182516" diff --git a/thunderbird-128.9.2esr.source.tar.xz.asc b/thunderbird-128.9.2esr.source.tar.xz.asc deleted file mode 100644 index afd1212..0000000 --- a/thunderbird-128.9.2esr.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmf+NL8ACgkQ4207E/PZ -MnQC3xAAnuM8XgSk1ntr6xuPTs0PtiOVn4SsM3i47Cfdi/ZbOye3Gr4FeW2KcHLO -I9jpFZv84lxCAi7IOG01tHIGehmKMBIl+y31oh+ECTxftghtlYtE2FR4s00rAkdt -1n6Vrht/R0HPW1Shi6pf/qK01pOL8OQG1bGvOtJdZWCiQv3BZPGJblOC32d8E5Tg -3nBl2YEO2l01G6J3cNxQRgGnWW2UM8n61Uha/5LKWU/yvv9390Pj1BItziOBD5L4 -52xmQKyGcNUOZ2br7wO4nGf05er2aOFJPyYPuRLpuTd85MMA1yL99gjEoROXqo2o -fxS8se/otNNMujdfFwoyGldg0PJpWCCW54WGTeT7aRVP0+jhC0S/HD+At0NeABhL -a1B74NqP5O/v9KjOQpUNPGBmoCbq/+VqIkfmDZF2D7wTLyVHfGySLi5sTuNjvpNj -Vq1XyGty2hGXMmJ2rHshVCK1MphEwibK4f2P3pBYWblEuN/tcYZaO2KQPh0GlH3I -/UhzV5Iv+6mL2H78qOkBsWwjxHeSCd64UZi0BdemtFjVOXYCXenRC7ywnG/q+xxD -N+jlhAqiMvWyZLVMhPASK+ih8ascUMTOifV48xh6s0WYzzgc810wwUiH5XLl+8Oh -oXmxT2R4wgsq3pw10eDCbjMl8tqOVyfA97y3HmGkO2x89OqyIGk= -=pPx+ ------END PGP SIGNATURE----- diff --git a/thunderbird-140.2.1esr.source.tar.xz b/thunderbird-140.2.1esr.source.tar.xz deleted file mode 100644 index d4c7b6a..0000000 --- a/thunderbird-140.2.1esr.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:c9e4b98f72db3e9084dc7abe5f0ccf09bfc3e2f327706371dba4c2ee0a14c29b -size 766037104 diff --git a/thunderbird-140.2.1esr.source.tar.xz.asc b/thunderbird-140.2.1esr.source.tar.xz.asc deleted file mode 100644 index 1f5d5af..0000000 --- a/thunderbird-140.2.1esr.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEECb7tY/NGKi3/qzuHXstkl8GiAlYFAmiwoE8ACgkQXstkl8Gi -Albrdw/+ISm+ZXWaYsUYoKttRuqLZ/B10w6BIKOVQjiDCyfFkQWq6S3lXLEEGVy9 -kRVo/fJiD61dihUmn1a5hKtfuUoWbIsWH1Uglg00HzkeWpzJEf3+fdQtrLm/HyFV -/0gXXrjbvq5J7PU5z9zANijEniB/qYtQfUCH7vjOXJQyIoouxMQNlloE6djVk+77 -7m5qdgqyp5z8UsD5bvemKwfWwsGIPF/4tYflJKxZBzYgM4n21rbJyq/JLTEgtR++ -mthiYvLcPHI1aAZYBEd1VucQMyBR+Ge5jwdME1BGBCNzL34964EiFOvVy3kTHcjL -7QdIPV0mYibmGJv45AzoU9waNHVNY0xDml0EFvOv6rOwknL5ru/Hxjhma6gQGA3c -1+IHeCxtr994TAOkLjVrxI2hIgHmGtrKaP8+bdtsdXb0ULn+WzL6VRrq0jcZDvu2 -zhDTY7tsi2T66rxqcrTjWJTsz3XFeV3wgIhGimXTCmIixB/Jwt5PcWPBNEjINWNF -QHWPr2ArzIFuD6hvM9oPvr9F4UMtBdRueFvQ6iuk8XJ+DDkBAnQyS2P3yStFhvVD -ciA5brtcViG24m0N4SWhxA/vJMsnnACOUJsXZZsYu3t8m8Fr12iDETpK0Tc4RJGp -8+Xdc0/12msj5Qt6vTrHwbyx2kY9xwyJ8xoBn4gmg/y+YExxgww= -=vZjJ ------END PGP SIGNATURE----- diff --git a/thunderbird-140.3.0esr.source.tar.xz b/thunderbird-140.3.0esr.source.tar.xz new file mode 100644 index 0000000..2eb5270 --- /dev/null +++ b/thunderbird-140.3.0esr.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b538c6cde261e06e37e9cedb854c392ab7850aa220f5007c876357b6546418ae +size 755800156 diff --git a/thunderbird-140.3.0esr.source.tar.xz.asc b/thunderbird-140.3.0esr.source.tar.xz.asc new file mode 100644 index 0000000..43a97d2 --- /dev/null +++ b/thunderbird-140.3.0esr.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEECb7tY/NGKi3/qzuHXstkl8GiAlYFAmjDU+UACgkQXstkl8Gi +AlaRzhAAilg8h5t2o0FZJpVfAc3jaNW9//GFwpnoFu6QB0IEi/QP+SYphSrLmxnS +pjHxhdZ4SHKkcl7EawHmhbW54TuncnUBTRqOhGu+AosUVgrdImVTRaF3mQWh8v94 +G3XsRIPl7T8hd85bACS6HItMhTy7rFsJSiUQZ7C+tXLn0QsL3WNOzx4pmTSEZj56 +ywuctRC6GXTxdw8AZcDG6624RkDTdNq0ISw7Ge24kckpUiGaM/bS455l+Tol72Jy +7+uKywIBWCwumQsTjRf6DeEik543atrNBLb2BAJOCU/HetR5sOcoL+hPUsJU2VNq +53w3Yx991nC0cioeccYEjaxh2ejzaOeRMtuqyxz7OjtBtGu+KUuJahW9kmR/0xBX +1Jof/mT3C2JZZuKj5soaxkGvOL3IWJJ69e2DHW45D6Di/TS9yGgqsy8npuVCZJGA +dfo6/YVivEtQIcwZKqjUQqRAmQ5AMy6hD4fgmK7gw3LqQdig8MwDxkGGLxNRHhah +9NB8sLvG2j1qPUZLBM9Ky5yXXvBuziGpb2llrnK3xr7N2fM6f9d6eTchDt9kG6ly +aSYoSUd/vRYb4XXvr5ESkUDDJRGTmVwEexM/USPOlFg+iPSvmxJ6Rj+R/d3ruhOK +a0qg/ZdGiQmkpD0OXwhOOfTGXZLuI7Qtg6s6NUUQmmGPBJvoLjM= +=R/Vh +-----END PGP SIGNATURE----- -- 2.51.1