diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 4916a3d..fba22d0 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,11 +1,41 @@ +------------------------------------------------------------------- +Sun Jun 4 08:22:58 UTC 2023 - Wolfgang Rosenauer + +- Mozilla Thunderbird 102.12.0: + MFSA 2023-21 (bsc#1211922) + * CVE-2023-34414 (bmo#1695986) + Click-jacking certificate exceptions through rendering lag + * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875, + bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190, + bmo#1830206, bmo#1830795, bmo#1833339) + Memory safety bugs fixed in Thunderbird 102.12 + * fixed: "Searching the directory for recipients certificates" + popup could block compose window when "S/MIME reminder" was + enabled and using an LDAP address book (bmo#1833651) + * fixed: Some elements still used animations with "prefers- + reduced-motion" set (bmo#1833353) + * fixed: Visual and theme improvements + (bmo#1832943,bmo#1832990) + ------------------------------------------------------------------- Sat May 27 07:46:10 UTC 2023 - Wolfgang Rosenauer - Mozilla Thunderbird 102.11.2 - * fixed POP3 regressions ins 102.11.1 - * https://www.thunderbird.net/en-US/thunderbird/102.11.2/releasenotes/ - Thunderbird 102.11.1 - * https://www.thunderbird.net/en-US/thunderbird/102.11.1/releasenotes/ + * fixed: Thunderbird 102.11.1 contained POP3 client regressions + with offline mode and TLS certificate overrides + (bmo#1801286,bmo#1816596,bmo#1798785) +- Includes changes from Thunderbird 102.11.1 + * fixed: POP message retrieval stopped after a network error + occurred and connectivity was restored (bmo#1798785) + * fixed: Reused SMTP connections sometimes silently + disconnected, causing timeouts (bmo#1766382) + * fixed: Thunderbird could freeze if saving a sent message to + IMAP failed (bmo#1745130) + * fixed: Creating OpenPGP keys with no expiration was not + possible (bmo#1830094) + * fixed: News reader did not always issue GROUP command after + authentication with remote server, preventing Thundebird from + displaying or refreshing news from the server (bmo#1824377) - updated mozilla.keyring ------------------------------------------------------------------- diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index ceab88d..7f03b17 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -29,8 +29,8 @@ # major 69 # mainver %major.99 %define major 102 -%define mainver %major.11.2 -%define orig_version 102.11.2 +%define mainver %major.12.0 +%define orig_version 102.12.0 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{orig_version} diff --git a/l10n-102.11.2.tar.xz b/l10n-102.12.0.tar.xz similarity index 100% rename from l10n-102.11.2.tar.xz rename to l10n-102.12.0.tar.xz diff --git a/mozilla-llvm16.patch b/mozilla-llvm16.patch index dbbe79e..a0525e5 100644 --- a/mozilla-llvm16.patch +++ b/mozilla-llvm16.patch @@ -14,44 +14,6 @@ Closes #2316 Co-Authored-by: Patrick Walton -From c03b37697a1e117995ea76203e5c0ce7d6696c4e Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?Emilio=20Cobos=20=C3=81lvarez?= -Date: Wed, 9 Nov 2022 13:33:19 +0100 -Subject: [PATCH] ir: Don't crash with built-in unexposed types from libclang. - -This fixes #2325. - -The issue is that `__bf16` is not exposed at all by libclang, which -causes us to crash. It's a bit of a shame libclang doesn't expose it but -there's no rust equivalent I think, so this should be ok for now. - -Unfortunately no test because the header crashes older clang versions. - -diff --git a/Cargo.lock b/Cargo.lock -index 163674ec5d..28456ee0ba 100644 ---- a/Cargo.lock -+++ b/Cargo.lock -@@ -394,8 +394,6 @@ dependencies = [ - [[package]] - name = "bindgen" - version = "0.56.0" --source = "registry+https://github.com/rust-lang/crates.io-index" --checksum = "2da379dbebc0b76ef63ca68d8fc6e71c0f13e59432e0987e508c1820e6ab5239" - dependencies = [ - "bitflags", - "cexpr", -diff --git a/Cargo.toml b/Cargo.toml -index d918adae95..dddd1298f7 100644 ---- a/Cargo.toml -+++ b/Cargo.toml -@@ -117,6 +117,7 @@ packed_simd = { package = "packed_simd_2", git = "https://github.com/hsivonen/pa - midir = { git = "https://github.com/mozilla/midir.git", rev = "4c11f0ffb5d6a10de4aff40a7b81218b33b94e6f" } - minidump_writer_linux = { git = "https://github.com/rust-minidump/minidump-writer.git", rev = "75ada456c92a429704691a85e1cb42fef8cafc0d" } - glslopt = { path = "third_party/rust/glslopt/" } -+bindgen = { path = "third_party/rust/bindgen/" } - - # Patch mio 0.6 to use winapi 0.3 and miow 0.3, getting rid of winapi 0.2. - # There is not going to be new version of mio 0.6, mio now being >= 0.7.11. diff --git a/third_party/rust/bindgen/src/clang.rs b/third_party/rust/bindgen/src/clang.rs index 488660c434..ef74ac08c2 100644 --- a/third_party/rust/bindgen/src/clang.rs diff --git a/tar_stamps b/tar_stamps index c79a8ab..c40cc22 100644 --- a/tar_stamps +++ b/tar_stamps @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr102" -VERSION="102.11.2" +VERSION="102.12.0" VERSION_SUFFIX="" -PREV_VERSION="102.11.0" +PREV_VERSION="102.11.2" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102" -RELEASE_TAG="c406f857789ca8a8943b895f4cadfc61921860ab" -RELEASE_TIMESTAMP="20230526152851" +RELEASE_TAG="9d42734e12597ccdb59fee178bf369d8c328dcad" +RELEASE_TIMESTAMP="20230604001933" diff --git a/thunderbird-102.11.2.source.tar.xz b/thunderbird-102.11.2.source.tar.xz deleted file mode 100644 index c7d844f..0000000 --- a/thunderbird-102.11.2.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d9265b0b853eeedbd953230090fcdf96c5483857f128cb18fc304cf18cd93191 -size 503416640 diff --git a/thunderbird-102.11.2.source.tar.xz.asc b/thunderbird-102.11.2.source.tar.xz.asc deleted file mode 100644 index f115eb6..0000000 --- a/thunderbird-102.11.2.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmRxAukACgkQ4207E/PZ -MnSJBA/+JH3dj/e+2HHPNU4hdlyuzc2Daedp1VkYygud4ey1cPDT2LYxQgvDYGYF -N1Es2GAqWT57AuRJg25FCqOZQDwjx2wzLOSxSxnorhlgbcCSISAqmYoo8s0WbyNs -urx3syNKBQURG9GHdLKoJe0FgM7LYUlMucThpLDbmHMI4uRIPG7bGLzkn8lnUyaa -vm5g+15c7zCQIRJzSaiUbxfHIO3P/38W15owjE09izbOsX4dNHeStUNO4erreapo -SvP+h5M6Pr4TJxZsfQZRbr7WwcOPxLjYSWO7SMJvrXjenXv8j2aaHUmOEv2ViBW8 -uEouyyf2xy+WgLEhwCBtAwULYczj+gukxii3K+aVKvVQiCEs7JbwlFIGcmwDW+QB -7ponnRBxUFY77c+o/853DKbKFDymRJewydKa5Jst8WJiy5INpCR+2+ANYjcbk8Ed -V4nfNCRbA1r4X/mX1r4Pp4hmEvLUf03N6xgMiFqbIXWRoduhBNzNfMHrpfDRhjJf -tiH+Y3DN/Pg9RmwPE1rhHq78e0W0Is7pMkf56dyqEP81ioznAShMgSj0Y2uZMu+E -J9Ttnji6iPgJsQ0iziSxPwY7d1HLXs93kigmxxPURU7Jp2asOcuHcwCYyCXDOXix -9/IV0Yw56tW/tK2GisYivYRNLOjJ3voZgsg47+iujAvjtZO4Nk0= -=1m1O ------END PGP SIGNATURE----- diff --git a/thunderbird-102.12.0.source.tar.xz b/thunderbird-102.12.0.source.tar.xz new file mode 100644 index 0000000..f13c3e7 --- /dev/null +++ b/thunderbird-102.12.0.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5aa776b75dd47e77303185033c2c443a425488d28ced5c6e29e5bd64e7ac5afe +size 502135796 diff --git a/thunderbird-102.12.0.source.tar.xz.asc b/thunderbird-102.12.0.source.tar.xz.asc new file mode 100644 index 0000000..f55cdbe --- /dev/null +++ b/thunderbird-102.12.0.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmR8AegACgkQ4207E/PZ +MnSD7xAAvp3CxpTK2iAxLEajal67crBILNXeVCI7JdaS9WfcRNBEA+94sGhRP9OL +Cq4KQECQl897cOY+Wffgdm3Mdgj+KBgDE/M1zL5GqFYdqQAEN8DaMGqBf/9GCvMQ +iHb32ICUNgtBrEZIIA34wdgjfrFn3Zx+KjzIiygyRL3RhnOmwST/BfMJi+MI67lg +8vsGCEgbHEWDbEKUZkn2wtSiMaWrHYQI4sFlOAlxL15V0GJ6GBiL12utt48rddWT +BHQi1rCRgdJl4HtX5rjLrUGD3Hmy3ZyyV9AxRvlLI7XZyqaxd3RSn6SChRGyJnEQ +7aUql8sh3ccN4pxPakKxFIHQ7Y/39t5oFemlwZwU18FRozhicvSInsPLlDo+VXZH +Xz/4avO/4JSdy/2ss5I3S/idblHh9voX2qlv/PnVoc36onunnb1veP6Jaah2rPNj +WYEZzGKlAD4qU507EHGrq1U8n7lBhZWeCD6Hu5SpcIMeCEmztcw151fegZUus4kg +y9Wv1wah/b1iETAheEMtdd00G7hcvK9YkhKSiZK6CUe7WwXtMNQ9CrvtdULCAdAA +Mwvo17XTRiK8a8L379qBXyUzzUvHsfoBOTjnWZ1NXFJSlsqObnNBFZQ8Z3bBNpSI +V343EP2luGZgaRYACsSZ7/yV/N5gAejPxMUjjKEEZKsmLJTsYkQ= +=gM5a +-----END PGP SIGNATURE-----