Accepting request 1091941 from home:AndreasStieger:branches:mozilla:Factory

Mozilla Thunderbird 102.12.0 bsc#1211922

OBS-URL: https://build.opensuse.org/request/show/1091941
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=705

MozillaThunderbird.changes

@@ -1,11 +1,41 @@
+-------------------------------------------------------------------
+Sun Jun  4 08:22:58 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 102.12.0:
+  MFSA 2023-21 (bsc#1211922)
+  * CVE-2023-34414 (bmo#1695986)
+    Click-jacking certificate exceptions through rendering lag
+  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
+    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
+    bmo#1830206, bmo#1830795, bmo#1833339)
+    Memory safety bugs fixed in Thunderbird 102.12
+  * fixed: "Searching the directory for recipients certificates"
+    popup could block compose window when "S/MIME reminder" was
+    enabled and using an LDAP address book (bmo#1833651)
+  * fixed: Some elements still used animations with "prefers-
+    reduced-motion" set (bmo#1833353)
+  * fixed: Visual and theme improvements
+    (bmo#1832943,bmo#1832990)
+
 -------------------------------------------------------------------
 Sat May 27 07:46:10 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
 
 - Mozilla Thunderbird 102.11.2
-  * fixed POP3 regressions ins 102.11.1
-  * https://www.thunderbird.net/en-US/thunderbird/102.11.2/releasenotes/
-  Thunderbird 102.11.1
-  * https://www.thunderbird.net/en-US/thunderbird/102.11.1/releasenotes/
+  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
+    with offline mode and TLS certificate overrides
+    (bmo#1801286,bmo#1816596,bmo#1798785)
+- Includes changes from Thunderbird 102.11.1
+  * fixed: POP message retrieval stopped after a network error
+    occurred and connectivity was restored (bmo#1798785)
+  * fixed: Reused SMTP connections sometimes silently
+    disconnected, causing timeouts (bmo#1766382)
+  * fixed: Thunderbird could freeze if saving a sent message to
+    IMAP failed (bmo#1745130)
+  * fixed: Creating OpenPGP keys with no expiration was not
+    possible (bmo#1830094)
+  * fixed: News reader did not always issue GROUP command after
+    authentication with remote server, preventing Thundebird from
+    displaying or refreshing news from the server (bmo#1824377)
 - updated mozilla.keyring
 
 -------------------------------------------------------------------

MozillaThunderbird.spec

@@ -29,8 +29,8 @@
 # major 69
 # mainver %major.99
 %define major          102
-%define mainver        %major.11.2
-%define orig_version   102.11.2
+%define mainver        %major.12.0
+%define orig_version   102.12.0
 %define orig_suffix    %{nil}
 %define update_channel release
 %define source_prefix  thunderbird-%{orig_version}

mozilla-llvm16.patch

@@ -14,44 +14,6 @@ Closes #2316
 
 Co-Authored-by: Patrick Walton <pcwalton@fb.com>
 
-From c03b37697a1e117995ea76203e5c0ce7d6696c4e Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Emilio=20Cobos=20=C3=81lvarez?= <emilio@crisal.io>
-Date: Wed, 9 Nov 2022 13:33:19 +0100
-Subject: [PATCH] ir: Don't crash with built-in unexposed types from libclang.
-
-This fixes #2325.
-
-The issue is that `__bf16` is not exposed at all by libclang, which
-causes us to crash. It's a bit of a shame libclang doesn't expose it but
-there's no rust equivalent I think, so this should be ok for now.
-
-Unfortunately no test because the header crashes older clang versions.
-
-diff --git a/Cargo.lock b/Cargo.lock
-index 163674ec5d..28456ee0ba 100644
---- a/Cargo.lock
-+++ b/Cargo.lock
-@@ -394,8 +394,6 @@ dependencies = [
- [[package]]
- name = "bindgen"
- version = "0.56.0"
--source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "2da379dbebc0b76ef63ca68d8fc6e71c0f13e59432e0987e508c1820e6ab5239"
- dependencies = [
-  "bitflags",
-  "cexpr",
-diff --git a/Cargo.toml b/Cargo.toml
-index d918adae95..dddd1298f7 100644
---- a/Cargo.toml
-+++ b/Cargo.toml
-@@ -117,6 +117,7 @@ packed_simd = { package = "packed_simd_2", git = "https://github.com/hsivonen/pa
- midir = { git = "https://github.com/mozilla/midir.git", rev = "4c11f0ffb5d6a10de4aff40a7b81218b33b94e6f" }
- minidump_writer_linux = { git = "https://github.com/rust-minidump/minidump-writer.git", rev = "75ada456c92a429704691a85e1cb42fef8cafc0d" }
- glslopt = { path = "third_party/rust/glslopt/" }
-+bindgen = { path = "third_party/rust/bindgen/" }
- 
- # Patch mio 0.6 to use winapi 0.3 and miow 0.3, getting rid of winapi 0.2.
- # There is not going to be new version of mio 0.6, mio now being >= 0.7.11.
 diff --git a/third_party/rust/bindgen/src/clang.rs b/third_party/rust/bindgen/src/clang.rs
 index 488660c434..ef74ac08c2 100644
 --- a/third_party/rust/bindgen/src/clang.rs

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr102"
-VERSION="102.11.2"
+VERSION="102.12.0"
 VERSION_SUFFIX=""
-PREV_VERSION="102.11.0"
+PREV_VERSION="102.11.2"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102"
-RELEASE_TAG="c406f857789ca8a8943b895f4cadfc61921860ab"
-RELEASE_TIMESTAMP="20230526152851"
+RELEASE_TAG="9d42734e12597ccdb59fee178bf369d8c328dcad"
+RELEASE_TIMESTAMP="20230604001933"

thunderbird-102.11.2.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d9265b0b853eeedbd953230090fcdf96c5483857f128cb18fc304cf18cd93191
-size 503416640

thunderbird-102.11.2.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmRxAukACgkQ4207E/PZ
-MnSJBA/+JH3dj/e+2HHPNU4hdlyuzc2Daedp1VkYygud4ey1cPDT2LYxQgvDYGYF
-N1Es2GAqWT57AuRJg25FCqOZQDwjx2wzLOSxSxnorhlgbcCSISAqmYoo8s0WbyNs
-urx3syNKBQURG9GHdLKoJe0FgM7LYUlMucThpLDbmHMI4uRIPG7bGLzkn8lnUyaa
-vm5g+15c7zCQIRJzSaiUbxfHIO3P/38W15owjE09izbOsX4dNHeStUNO4erreapo
-SvP+h5M6Pr4TJxZsfQZRbr7WwcOPxLjYSWO7SMJvrXjenXv8j2aaHUmOEv2ViBW8
-uEouyyf2xy+WgLEhwCBtAwULYczj+gukxii3K+aVKvVQiCEs7JbwlFIGcmwDW+QB
-7ponnRBxUFY77c+o/853DKbKFDymRJewydKa5Jst8WJiy5INpCR+2+ANYjcbk8Ed
-V4nfNCRbA1r4X/mX1r4Pp4hmEvLUf03N6xgMiFqbIXWRoduhBNzNfMHrpfDRhjJf
-tiH+Y3DN/Pg9RmwPE1rhHq78e0W0Is7pMkf56dyqEP81ioznAShMgSj0Y2uZMu+E
-J9Ttnji6iPgJsQ0iziSxPwY7d1HLXs93kigmxxPURU7Jp2asOcuHcwCYyCXDOXix
-9/IV0Yw56tW/tK2GisYivYRNLOjJ3voZgsg47+iujAvjtZO4Nk0=
-=1m1O
------END PGP SIGNATURE-----

thunderbird-102.12.0.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5aa776b75dd47e77303185033c2c443a425488d28ced5c6e29e5bd64e7ac5afe
+size 502135796

thunderbird-102.12.0.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=gM5a
+-----END PGP SIGNATURE-----