MozillaThunderbird.changes

@@ -1,3 +1,38 @@
+-------------------------------------------------------------------
+Sun Sep 14 06:58:42 UTC 2025 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 140.3.0 ESR
+  * Right-clicking 'List-ID' -> 'Unsubscribe' created double encoded
+    draft subject
+  * Thunderbird could crash on startup
+  * Thunderbird could crash when importing mail
+  * Opening Website header link in RSS feed incorrectly re-encoded
+    URL parameters
+  MFSA 2025-78 (bsc#1249391)
+  * CVE-2025-10527 (bmo#1984825)
+    Sandbox escape due to use-after-free in the Graphics:
+    Canvas2D component
+  * CVE-2025-10528 (bmo#1986185)
+    Sandbox escape due to undefined behavior, invalid pointer in
+    the Graphics: Canvas2D component
+  * CVE-2025-10529 (bmo#1970490)
+    Same-origin policy bypass in the Layout component
+  * CVE-2025-10532 (bmo#1979502)
+    Incorrect boundary conditions in the JavaScript: GC component
+  * CVE-2025-10533 (bmo#1980788)
+    Integer overflow in the SVG component
+  * CVE-2025-10536 (bmo#1981502)
+    Information disclosure in the Networking: Cache component
+  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
+    bmo#1981283, bmo#1984505, bmo#1985067)
+    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
+    ESR 140.3, Firefox 143 and Thunderbird 143
+
+-------------------------------------------------------------------
+Tue Sep  9 10:11:26 UTC 2025 - Lubos Kocman <lubos.kocman@suse.com>
+
+- Fix suse_version check for 16.0
+
 -------------------------------------------------------------------
 Mon Sep  8 18:36:27 UTC 2025 - Yoshio Sato <vasua.ukraine@gmail.com>
 

MozillaThunderbird.spec

@@ -30,8 +30,8 @@
 # major 69
 # mainver %%major.99
 %define major          140
-%define mainver        %major.2.1
-%define orig_version   140.2.1
+%define mainver        %major.3.0
+%define orig_version   140.3.0
 %define orig_suffix    esr
 %define update_channel esr
 %define source_prefix  thunderbird-%{orig_version}

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr140"
-VERSION="140.2.1"
+VERSION="140.3.0"
 VERSION_SUFFIX="esr"
-REV_VERSION="140.2.0"
+REV_VERSION="140.2.1"
 PREV_VERSION_SUFFIX="esr"
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr140"
-RELEASE_TAG="5df036ddfe367ff4452a4aa6235bb652dca89fa4"
-RELEASE_TIMESTAMP="20250828033206"
+RELEASE_TAG="34b243658c31506d293b13d67238ccca56c290e0"
+RELEASE_TIMESTAMP="20250911182516"

thunderbird-128.9.2esr.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmf+NL8ACgkQ4207E/PZ
-MnQC3xAAnuM8XgSk1ntr6xuPTs0PtiOVn4SsM3i47Cfdi/ZbOye3Gr4FeW2KcHLO
-I9jpFZv84lxCAi7IOG01tHIGehmKMBIl+y31oh+ECTxftghtlYtE2FR4s00rAkdt
-1n6Vrht/R0HPW1Shi6pf/qK01pOL8OQG1bGvOtJdZWCiQv3BZPGJblOC32d8E5Tg
-3nBl2YEO2l01G6J3cNxQRgGnWW2UM8n61Uha/5LKWU/yvv9390Pj1BItziOBD5L4
-52xmQKyGcNUOZ2br7wO4nGf05er2aOFJPyYPuRLpuTd85MMA1yL99gjEoROXqo2o
-fxS8se/otNNMujdfFwoyGldg0PJpWCCW54WGTeT7aRVP0+jhC0S/HD+At0NeABhL
-a1B74NqP5O/v9KjOQpUNPGBmoCbq/+VqIkfmDZF2D7wTLyVHfGySLi5sTuNjvpNj
-Vq1XyGty2hGXMmJ2rHshVCK1MphEwibK4f2P3pBYWblEuN/tcYZaO2KQPh0GlH3I
-/UhzV5Iv+6mL2H78qOkBsWwjxHeSCd64UZi0BdemtFjVOXYCXenRC7ywnG/q+xxD
-N+jlhAqiMvWyZLVMhPASK+ih8ascUMTOifV48xh6s0WYzzgc810wwUiH5XLl+8Oh
-oXmxT2R4wgsq3pw10eDCbjMl8tqOVyfA97y3HmGkO2x89OqyIGk=
-=pPx+
------END PGP SIGNATURE-----

thunderbird-140.2.1esr.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEECb7tY/NGKi3/qzuHXstkl8GiAlYFAmiwoE8ACgkQXstkl8Gi
-Albrdw/+ISm+ZXWaYsUYoKttRuqLZ/B10w6BIKOVQjiDCyfFkQWq6S3lXLEEGVy9
-kRVo/fJiD61dihUmn1a5hKtfuUoWbIsWH1Uglg00HzkeWpzJEf3+fdQtrLm/HyFV
-/0gXXrjbvq5J7PU5z9zANijEniB/qYtQfUCH7vjOXJQyIoouxMQNlloE6djVk+77
-7m5qdgqyp5z8UsD5bvemKwfWwsGIPF/4tYflJKxZBzYgM4n21rbJyq/JLTEgtR++
-mthiYvLcPHI1aAZYBEd1VucQMyBR+Ge5jwdME1BGBCNzL34964EiFOvVy3kTHcjL
-7QdIPV0mYibmGJv45AzoU9waNHVNY0xDml0EFvOv6rOwknL5ru/Hxjhma6gQGA3c
-1+IHeCxtr994TAOkLjVrxI2hIgHmGtrKaP8+bdtsdXb0ULn+WzL6VRrq0jcZDvu2
-zhDTY7tsi2T66rxqcrTjWJTsz3XFeV3wgIhGimXTCmIixB/Jwt5PcWPBNEjINWNF
-QHWPr2ArzIFuD6hvM9oPvr9F4UMtBdRueFvQ6iuk8XJ+DDkBAnQyS2P3yStFhvVD
-ciA5brtcViG24m0N4SWhxA/vJMsnnACOUJsXZZsYu3t8m8Fr12iDETpK0Tc4RJGp
-8+Xdc0/12msj5Qt6vTrHwbyx2kY9xwyJ8xoBn4gmg/y+YExxgww=
-=vZjJ
------END PGP SIGNATURE-----

thunderbird-140.3.0esr.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=R/Vh
+-----END PGP SIGNATURE-----