From 423bce97301a7d7f895ab0ec20650c8f3fa6c263b7373f7a1e94103f351fa395 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 14 Jul 2021 16:25:33 +0000 Subject: [PATCH] - Mozilla Thunderbird 78.12.0 MFSA 2021-30 (bsc#1188275) * CVE-2021-29969 (bmo#1682370) IMAP server responses sent by a MITM prior to STARTTLS could be processed * CVE-2021-29970 (bmo#1709976) Use-after-free in accessibility features of a document * CVE-2021-30547 (bmo#1715766) Out of bounds write in ANGLE * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910, bmo#1711576, bmo#1714391) Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=597 --- MozillaThunderbird.changes | 16 ++++++++++++++++ MozillaThunderbird.spec | 4 ++-- l10n-78.11.0.tar.xz => l10n-78.12.0.tar.xz | 0 tar_stamps | 8 ++++---- thunderbird-78.11.0.source.tar.xz | 3 --- thunderbird-78.11.0.source.tar.xz.asc | 16 ---------------- thunderbird-78.12.0.source.tar.xz | 3 +++ thunderbird-78.12.0.source.tar.xz.asc | 16 ++++++++++++++++ 8 files changed, 41 insertions(+), 25 deletions(-) rename l10n-78.11.0.tar.xz => l10n-78.12.0.tar.xz (100%) delete mode 100644 thunderbird-78.11.0.source.tar.xz delete mode 100644 thunderbird-78.11.0.source.tar.xz.asc create mode 100644 thunderbird-78.12.0.source.tar.xz create mode 100644 thunderbird-78.12.0.source.tar.xz.asc diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index f9161d2..dec44c3 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,19 @@ +------------------------------------------------------------------- +Wed Jul 14 06:34:13 UTC 2021 - Wolfgang Rosenauer + +- Mozilla Thunderbird 78.12.0 + MFSA 2021-30 (bsc#1188275) + * CVE-2021-29969 (bmo#1682370) + IMAP server responses sent by a MITM prior to STARTTLS could be + processed + * CVE-2021-29970 (bmo#1709976) + Use-after-free in accessibility features of a document + * CVE-2021-30547 (bmo#1715766) + Out of bounds write in ANGLE + * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910, + bmo#1711576, bmo#1714391) + Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12 + ------------------------------------------------------------------- Sat May 29 08:14:38 UTC 2021 - Wolfgang Rosenauer diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index daa1fee..3e8cc4a 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -26,8 +26,8 @@ # major 69 # mainver %major.99 %define major 78 -%define mainver %major.11.0 -%define orig_version 78.11.0 +%define mainver %major.12.0 +%define orig_version 78.12.0 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{orig_version} diff --git a/l10n-78.11.0.tar.xz b/l10n-78.12.0.tar.xz similarity index 100% rename from l10n-78.11.0.tar.xz rename to l10n-78.12.0.tar.xz diff --git a/tar_stamps b/tar_stamps index d500047..08250a2 100644 --- a/tar_stamps +++ b/tar_stamps @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr78" -VERSION="78.11.0" +VERSION="78.12.0" VERSION_SUFFIX="" -PREV_VERSION="78.10.2" +PREV_VERSION="78.11.0" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78" -RELEASE_TAG="1717d8d5fbd359aab7a4a0a15f4d15c72a7e6afc" -RELEASE_TIMESTAMP="20210528153351" +RELEASE_TAG="6796ff47626a009d169a1e9fd1f307a6c14b7ed5" +RELEASE_TIMESTAMP="20210712120515" diff --git a/thunderbird-78.11.0.source.tar.xz b/thunderbird-78.11.0.source.tar.xz deleted file mode 100644 index 868d79b..0000000 --- a/thunderbird-78.11.0.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:cb5475dd6494c68699aa29f97be2868a455548cabb4c4859e109b1badae7c0fb -size 352417996 diff --git a/thunderbird-78.11.0.source.tar.xz.asc b/thunderbird-78.11.0.source.tar.xz.asc deleted file mode 100644 index a3bfa70..0000000 --- a/thunderbird-78.11.0.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmCxG9EACgkQ6+QekPbx -L20yIQ/+Ik95hn1lNuuD3WGpIABOcpohNkIlcUD1jbmFDWTLMJY7rn4Ip0cgXVi8 -HNIv16r0wRQ9ZdWiodPjtFVKZkSYsb2sHB8W1JJ0m4KrK5Rpxe5eJ4NyfocUGsjS -agWARJw9n0tBhOzw9Cd5JF7Y75br1wKRpVJV5rDXLUIw4Iz/L8ASB6jEZKgB7ktY -eObrioEroYyRPBOTwa6keiHohMAfv0+P46L5OPJuqAoItiwtWqnQPrSk7nf+N21M -rCEp57S1eQh/oWQlS3+Ja1ZHY2YeXyS19vpQbU5xAT/XedeSfXYSun0RY6RmUy+K -WlzjJE2nkv0XEdCikzLoGTLxz/lH/YYzW9gpT1eBzFiVQfgSMmiwqR88rcP/rtLP -hu8HbLfZJ2YFhEwRLoqED+rf8oBzQNi6/DuetDVrnScc89XQ7mJ072D6h3DpUq04 -+FfnFjgmHH36pQixBPZc4KLllTVvg8hfvIuoeikN5FFjhQfKafUckb0wb9EfVv8C -hmrRO7Ca+WLztYqOB8NE4yt78BvYw9SwzWhVksvIvUv29Vdj9eTY38PI/hyaV5wz -KaJy+pgoRfpUVS0w5mNvEPhnM1vQdZT4njGmBTMeuiJxblZp8y+5UgJjjuXtqBKW -HJiEe9UljjaKz7lcSZILrl15/dCc5HMfH6T3ibCmoMendxrOLwQ= -=HjA1 ------END PGP SIGNATURE----- diff --git a/thunderbird-78.12.0.source.tar.xz b/thunderbird-78.12.0.source.tar.xz new file mode 100644 index 0000000..19d6b16 --- /dev/null +++ b/thunderbird-78.12.0.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e2a214cf6b056fb5fde9bcaf9aee9a619bab337f163d99b1cc216d1c44d6f200 +size 355933664 diff --git a/thunderbird-78.12.0.source.tar.xz.asc b/thunderbird-78.12.0.source.tar.xz.asc new file mode 100644 index 0000000..6acd266 --- /dev/null +++ b/thunderbird-78.12.0.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmDsRfkACgkQ6+QekPbx +L20SYQ/9HI72xgpUKE85N4HxJgspCJUhS+BC7GTquifhE2MuXE0zUL+ZBHFUWlUz +g/WsjUd2DhTdTrz7m5C6dEPPf4ztRA1D6vfTeONDpsAmaWUZOT0w1IUVZocFWg9j +Rm4xtP4wGvCWQZVwmV/zhdKbOy3NnI5CZhxONcp5KzXEUzb2+gKI9WMOuHVzzapf +8WzhQh1PgxNMV0Fi43BSwsfi0zrhY0XmOTQnqqJPFYbVy+qLYtYNC2slzQ9hYDp4 +5RyzdJlcU7QWTZQ8Uqq/T0D4lWdFafhxG5x8TLpFLmu/Uy0MhxsnJL3QH5DycPzO +iCIV0m2FcRmfbawtakefNW205yIphRq4nuigHbfNMjk0hg/UIl3aLajn809JwnbT +uKocwqNk3YXgQv7pWl+wPRw1t1x4pbrJgoxupo9aSSDrkr5s2wD+f6GOTa26/5Ap +Y6A4LHV9d2oDHXSXDbfuDIG/46TIt0AXaayV07AneIoq2XIN2IWxWM9CL/dBc5e2 +tBFxlD9fARXTS36Bcm4XhOLAdoGFHENKRkdC/75GfyTJkwWE1/PsM9b2ME4ght70 +I9br+DnzGADzMqcCftSe1xTZc7FRyo5cA6/VBGm2l45xOXdAJBClXBJL5RGFDKcb +t97ftsMDkWrhlTOz5u1N+oWIElsqSlwk2zvpbBU1XSy2mT62flk= +=MQ+0 +-----END PGP SIGNATURE-----