- Mozilla Thunderbird 78.9.0

* bugfixes:
    https://www.thunderbird.net/en-US/thunderbird/78.9.0/releasenotes
  MFSA 2021-12 (boo#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169, bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=582

MozillaThunderbird.changes

@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Sat Mar 20 09:20:00 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 78.9.0
+  * bugfixes:
+    https://www.thunderbird.net/en-US/thunderbird/78.9.0/releasenotes
+  MFSA 2021-12 (boo#1183942)
+  * CVE-2021-23981 (bmo#1692832)
+    Texture upload into an unbound backing buffer resulted in an
+    out-of-bound read
+  * MOZ-2021-0002 (bmo#1691547)
+    Angle graphics library out of date
+  * CVE-2021-23982 (bmo#1677046)
+    Internal network hosts could have been probed by a malicious
+    webpage
+  * CVE-2021-23984 (bmo#1693664)
+    Malicious extensions could have spoofed popup information
+  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169, bmo#1690718)
+    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9
+- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)
+
 -------------------------------------------------------------------
 Sun Mar  7 09:27:49 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
 

MozillaThunderbird.spec

@@ -26,8 +26,8 @@
 # major 69
 # mainver %major.99
 %define major          78
-%define mainver        %major.8.1
-%define orig_version   78.8.1
+%define mainver        %major.9.0
+%define orig_version   78.9.0
 %define orig_suffix    %{nil}
 %define update_channel release
 %define source_prefix  thunderbird-%{orig_version}
@@ -62,13 +62,11 @@
 %define localize 1
 %define crashreporter 0
 %if 0%{?sle_version} > 150100
-# pipewire and wayland is too old on Leap <=15.1
+# pipewire is too old on Leap <=15.1
 # Activate only on everything newer
 %define with_pipewire0_3 1
-%define wayland_supported 1
 %else
 %define with_pipewire0_3 0
-%define wayland_supported 0
 %endif
 
 Name:           %{pkgname}
@@ -401,7 +399,7 @@ ac_add_options --libdir=%{_libdir}
 ac_add_options --includedir=%{_includedir}
 ac_add_options --enable-application=comm/mail
 ac_add_options --enable-release
-%if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
+%if 0%{?sle_version} < 150200
 ac_add_options --enable-default-toolkit=cairo-gtk3
 %else
 ac_add_options --enable-default-toolkit=cairo-gtk3-wayland
@@ -557,7 +555,6 @@ mkdir --parents %{buildroot}%{_bindir}/
 sed "s:%%PREFIX:%{_prefix}:g
 s:%%PROGDIR:%{progdir}:g
 s:%%APPNAME:%{progname}:g
-s:%%WAYLAND_SUPPORTED:%{wayland_supported}:g
 s:%%PROFILE:.thunderbird:g" \
   %{SOURCE3} > %{buildroot}%{progdir}/%{progname}.sh
 chmod 755 %{buildroot}%{progdir}/%{progname}.sh

l10n-78.8.1.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0e1d378e67872ea57aee1226a33a9de3ad67350df4a25ef89c1664d4ff2d01b9
-size 29096328

l10n-78.9.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:668c8a0192f6860291b21a0677ec7fd760d93880c6a7d1648d55f43b407d0ade
+size 29063968

mozilla.sh.in

@@ -70,15 +70,6 @@ else
   export MOZ_APP_LAUNCHER="/usr/bin/$MOZ_APPNAME"
 fi
 
-mozilla_lib=`file $MOZ_PROGRAM`
-LIB=lib
-echo $mozilla_lib | grep -q -E 'ELF.64-bit.*(x86-64|S/390|PowerPC)' && LIB=lib64
-
-BROWSER_PLUGIN_DIR=/usr/$LIB/browser-plugins
-if [ ! -d $BROWSER_PLUGIN_DIR ]; then
-  BROWSER_PLUGIN_DIR=/opt/netscape/plugins
-fi
-
 MOZILLA_FIVE_HOME="$MOZ_DIST_LIB"
 export MOZILLA_FIVE_HOME
 LD_LIBRARY_PATH=$MOZ_DIST_LIB${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}
@@ -90,26 +81,12 @@ export LIBXCB_ALLOW_SLOPPY_LOCK=1
 # disable Gnome crash dialog (doesn't make sense anyway)
 export GNOME_DISABLE_CRASH_DIALOG=1
 
-# Wayland
-# Only supported on newer systems
-WAYLAND_SUPPORTED=%WAYLAND_SUPPORTED
-
 # $XDG_SESSION_TYPE should contain either x11 or wayland
-if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ]; then
+if [ "$XDG_SESSION_TYPE" = "wayland" ]; then
   export MOZ_ENABLE_WAYLAND=1
 fi
 
 ##
-if [ -z "$MOZ_PLUGIN_PATH" ]; then
-  export MOZ_PLUGIN_PATH=$BROWSER_PLUGIN_DIR
-else
-  # make sure that BROWSER_PLUGIN_DIR is in MOZ_PLUGIN_PATH
-  echo "$MOZ_PLUGIN_PATH" | grep "$BROWSER_PLUGIN_DIR" 2>&1 >/dev/null
-  _retval=$?
-  if [ ${_retval} -ne 0 ]; then
-    export MOZ_PLUGIN_PATH=$MOZ_PLUGIN_PATH:$BROWSER_PLUGIN_DIR
-  fi
-fi
 
 moz_debug=0
 script_args=""

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr78"
-VERSION="78.8.1"
+VERSION="78.9.0"
 VERSION_SUFFIX=""
-PREV_VERSION="78.8.0"
+PREV_VERSION="78.8.1"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78"
-RELEASE_TAG="41dfa822c6c0b3cfda385548a394ae42d01249a4"
-RELEASE_TIMESTAMP="20210304234616"
+RELEASE_TAG="1a5cd2aa11de609116f258b413afcf113ed72f3a"
+RELEASE_TIMESTAMP="20210322094744"

thunderbird-78.8.1.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1a0b9cc1c314fdfdf7aa10246b8c5062385b62df3c9cef2358d1aa657e8a6f0f
-size 352875768

thunderbird-78.8.1.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAmBBxaQACgkQ8aZmj7t9
-Vy7YTQ/+O8PnKTr2L/BC3/afD0qzsMm+7jzf3ykCfKxHiEsYIEKcF2aI0qApb+0L
-hAKfPUy+wSPb4uxN4SMozcBI9jpzo3ERVVBrLTNVEoTNje3mZl2XiAz0ZNgw4Ro4
-k+Wir7Wv1cRFFF9sMXw5QDBiPguWUkiYg/jxJtm9/GUb5M1mPDagDGeU792OkHQg
-LuTFh8I6PFocuLI1xvfxNkqwUB4KOszd7KxOWpuK1pYYyQqUSlQGArVXbe29R7sk
-0Gk+YeW9Lk9DXjfKAC38zCagRywlrTF2Cu47ooLFQu1nSiJeqrjWMDxUewN4qXHR
-GRKmUvZUWwpsz3vaumfhlT6aQLIXIuTXaKdeAU37L1sNtfMfyYrWq734IOIQR7iH
-KzMPfQcNBIcZC/OTxb+QuNX7PRGyqGHFYqlyBGTBocnuZ/TB5GIX/gkJeIFCD+xv
-XSQTX/n3kdW+mmY4H411BUvt3utdTBZ2vhP10P0+M1kE+0CePZwS6jkE02Go9wfI
-AIeoUQRdw1dfb5flB6tDTKFSD9ntYHLXZ7EnVrKQuBTiNqw1MzupEBLX87Ek4qdU
-klOmmNm1pXa+YL+zM9G5GKEJ2fE3WPMl4cxCh/hfg0p0TprNFQF9pRgZpK480Myh
-aFSDvnmgR5P82BSw2oAZRaa5eEnyBXwkhDm5y9ljCd8oMeFQqLw=
-=dCWz
------END PGP SIGNATURE-----

thunderbird-78.9.0.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8015a7f78b1644578f398b5ab670637c70890ab2bade35ba321d47d099ed3ac0
+size 353051768

thunderbird-78.9.0.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=xgdi
+-----END PGP SIGNATURE-----