From 9e317f39067ee594c874596524c6714f6af30181c25f05eadea5e10e2b81c6c7 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 24 Mar 2021 21:31:27 +0000 Subject: [PATCH] - Mozilla Thunderbird 78.9.0 * bugfixes: https://www.thunderbird.net/en-US/thunderbird/78.9.0/releasenotes MFSA 2021-12 (boo#1183942) * CVE-2021-23981 (bmo#1692832) Texture upload into an unbound backing buffer resulted in an out-of-bound read * MOZ-2021-0002 (bmo#1691547) Angle graphics library out of date * CVE-2021-23982 (bmo#1677046) Internal network hosts could have been probed by a malicious webpage * CVE-2021-23984 (bmo#1693664) Malicious extensions could have spoofed popup information * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169, bmo#1690718) Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9 - cleaned up and fixed mozilla.sh.in for wayland (boo#1177542) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=582 --- MozillaThunderbird.changes | 21 +++++++++++++++++++++ MozillaThunderbird.spec | 11 ++++------- l10n-78.8.1.tar.xz | 3 --- l10n-78.9.0.tar.xz | 3 +++ mozilla.sh.in | 25 +------------------------ tar_stamps | 8 ++++---- thunderbird-78.8.1.source.tar.xz | 3 --- thunderbird-78.8.1.source.tar.xz.asc | 16 ---------------- thunderbird-78.9.0.source.tar.xz | 3 +++ thunderbird-78.9.0.source.tar.xz.asc | 16 ++++++++++++++++ 10 files changed, 52 insertions(+), 57 deletions(-) delete mode 100644 l10n-78.8.1.tar.xz create mode 100644 l10n-78.9.0.tar.xz delete mode 100644 thunderbird-78.8.1.source.tar.xz delete mode 100644 thunderbird-78.8.1.source.tar.xz.asc create mode 100644 thunderbird-78.9.0.source.tar.xz create mode 100644 thunderbird-78.9.0.source.tar.xz.asc diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index bbf208c..724c5bb 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,24 @@ +------------------------------------------------------------------- +Sat Mar 20 09:20:00 UTC 2021 - Wolfgang Rosenauer + +- Mozilla Thunderbird 78.9.0 + * bugfixes: + https://www.thunderbird.net/en-US/thunderbird/78.9.0/releasenotes + MFSA 2021-12 (boo#1183942) + * CVE-2021-23981 (bmo#1692832) + Texture upload into an unbound backing buffer resulted in an + out-of-bound read + * MOZ-2021-0002 (bmo#1691547) + Angle graphics library out of date + * CVE-2021-23982 (bmo#1677046) + Internal network hosts could have been probed by a malicious + webpage + * CVE-2021-23984 (bmo#1693664) + Malicious extensions could have spoofed popup information + * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169, bmo#1690718) + Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9 +- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542) + ------------------------------------------------------------------- Sun Mar 7 09:27:49 UTC 2021 - Wolfgang Rosenauer diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 5764b91..2c93bee 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -26,8 +26,8 @@ # major 69 # mainver %major.99 %define major 78 -%define mainver %major.8.1 -%define orig_version 78.8.1 +%define mainver %major.9.0 +%define orig_version 78.9.0 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{orig_version} @@ -62,13 +62,11 @@ %define localize 1 %define crashreporter 0 %if 0%{?sle_version} > 150100 -# pipewire and wayland is too old on Leap <=15.1 +# pipewire is too old on Leap <=15.1 # Activate only on everything newer %define with_pipewire0_3 1 -%define wayland_supported 1 %else %define with_pipewire0_3 0 -%define wayland_supported 0 %endif Name: %{pkgname} @@ -401,7 +399,7 @@ ac_add_options --libdir=%{_libdir} ac_add_options --includedir=%{_includedir} ac_add_options --enable-application=comm/mail ac_add_options --enable-release -%if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000 +%if 0%{?sle_version} < 150200 ac_add_options --enable-default-toolkit=cairo-gtk3 %else ac_add_options --enable-default-toolkit=cairo-gtk3-wayland @@ -557,7 +555,6 @@ mkdir --parents %{buildroot}%{_bindir}/ sed "s:%%PREFIX:%{_prefix}:g s:%%PROGDIR:%{progdir}:g s:%%APPNAME:%{progname}:g -s:%%WAYLAND_SUPPORTED:%{wayland_supported}:g s:%%PROFILE:.thunderbird:g" \ %{SOURCE3} > %{buildroot}%{progdir}/%{progname}.sh chmod 755 %{buildroot}%{progdir}/%{progname}.sh diff --git a/l10n-78.8.1.tar.xz b/l10n-78.8.1.tar.xz deleted file mode 100644 index c995434..0000000 --- a/l10n-78.8.1.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0e1d378e67872ea57aee1226a33a9de3ad67350df4a25ef89c1664d4ff2d01b9 -size 29096328 diff --git a/l10n-78.9.0.tar.xz b/l10n-78.9.0.tar.xz new file mode 100644 index 0000000..d887ce5 --- /dev/null +++ b/l10n-78.9.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:668c8a0192f6860291b21a0677ec7fd760d93880c6a7d1648d55f43b407d0ade +size 29063968 diff --git a/mozilla.sh.in b/mozilla.sh.in index d921bf0..1f3eb00 100644 --- a/mozilla.sh.in +++ b/mozilla.sh.in @@ -70,15 +70,6 @@ else export MOZ_APP_LAUNCHER="/usr/bin/$MOZ_APPNAME" fi -mozilla_lib=`file $MOZ_PROGRAM` -LIB=lib -echo $mozilla_lib | grep -q -E 'ELF.64-bit.*(x86-64|S/390|PowerPC)' && LIB=lib64 - -BROWSER_PLUGIN_DIR=/usr/$LIB/browser-plugins -if [ ! -d $BROWSER_PLUGIN_DIR ]; then - BROWSER_PLUGIN_DIR=/opt/netscape/plugins -fi - MOZILLA_FIVE_HOME="$MOZ_DIST_LIB" export MOZILLA_FIVE_HOME LD_LIBRARY_PATH=$MOZ_DIST_LIB${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH} @@ -90,26 +81,12 @@ export LIBXCB_ALLOW_SLOPPY_LOCK=1 # disable Gnome crash dialog (doesn't make sense anyway) export GNOME_DISABLE_CRASH_DIALOG=1 -# Wayland -# Only supported on newer systems -WAYLAND_SUPPORTED=%WAYLAND_SUPPORTED - # $XDG_SESSION_TYPE should contain either x11 or wayland -if [ $WAYLAND_SUPPORTED -eq 1 ] && [ "$XDG_SESSION_TYPE" = "wayland" ]; then +if [ "$XDG_SESSION_TYPE" = "wayland" ]; then export MOZ_ENABLE_WAYLAND=1 fi ## -if [ -z "$MOZ_PLUGIN_PATH" ]; then - export MOZ_PLUGIN_PATH=$BROWSER_PLUGIN_DIR -else - # make sure that BROWSER_PLUGIN_DIR is in MOZ_PLUGIN_PATH - echo "$MOZ_PLUGIN_PATH" | grep "$BROWSER_PLUGIN_DIR" 2>&1 >/dev/null - _retval=$? - if [ ${_retval} -ne 0 ]; then - export MOZ_PLUGIN_PATH=$MOZ_PLUGIN_PATH:$BROWSER_PLUGIN_DIR - fi -fi moz_debug=0 script_args="" diff --git a/tar_stamps b/tar_stamps index 7420b47..dcb3bb7 100644 --- a/tar_stamps +++ b/tar_stamps @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr78" -VERSION="78.8.1" +VERSION="78.9.0" VERSION_SUFFIX="" -PREV_VERSION="78.8.0" +PREV_VERSION="78.8.1" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78" -RELEASE_TAG="41dfa822c6c0b3cfda385548a394ae42d01249a4" -RELEASE_TIMESTAMP="20210304234616" +RELEASE_TAG="1a5cd2aa11de609116f258b413afcf113ed72f3a" +RELEASE_TIMESTAMP="20210322094744" diff --git a/thunderbird-78.8.1.source.tar.xz b/thunderbird-78.8.1.source.tar.xz deleted file mode 100644 index 1f5f37c..0000000 --- a/thunderbird-78.8.1.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:1a0b9cc1c314fdfdf7aa10246b8c5062385b62df3c9cef2358d1aa657e8a6f0f -size 352875768 diff --git a/thunderbird-78.8.1.source.tar.xz.asc b/thunderbird-78.8.1.source.tar.xz.asc deleted file mode 100644 index 02cebe1..0000000 --- a/thunderbird-78.8.1.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAmBBxaQACgkQ8aZmj7t9 -Vy7YTQ/+O8PnKTr2L/BC3/afD0qzsMm+7jzf3ykCfKxHiEsYIEKcF2aI0qApb+0L -hAKfPUy+wSPb4uxN4SMozcBI9jpzo3ERVVBrLTNVEoTNje3mZl2XiAz0ZNgw4Ro4 -k+Wir7Wv1cRFFF9sMXw5QDBiPguWUkiYg/jxJtm9/GUb5M1mPDagDGeU792OkHQg -LuTFh8I6PFocuLI1xvfxNkqwUB4KOszd7KxOWpuK1pYYyQqUSlQGArVXbe29R7sk -0Gk+YeW9Lk9DXjfKAC38zCagRywlrTF2Cu47ooLFQu1nSiJeqrjWMDxUewN4qXHR -GRKmUvZUWwpsz3vaumfhlT6aQLIXIuTXaKdeAU37L1sNtfMfyYrWq734IOIQR7iH -KzMPfQcNBIcZC/OTxb+QuNX7PRGyqGHFYqlyBGTBocnuZ/TB5GIX/gkJeIFCD+xv -XSQTX/n3kdW+mmY4H411BUvt3utdTBZ2vhP10P0+M1kE+0CePZwS6jkE02Go9wfI -AIeoUQRdw1dfb5flB6tDTKFSD9ntYHLXZ7EnVrKQuBTiNqw1MzupEBLX87Ek4qdU -klOmmNm1pXa+YL+zM9G5GKEJ2fE3WPMl4cxCh/hfg0p0TprNFQF9pRgZpK480Myh -aFSDvnmgR5P82BSw2oAZRaa5eEnyBXwkhDm5y9ljCd8oMeFQqLw= -=dCWz ------END PGP SIGNATURE----- diff --git a/thunderbird-78.9.0.source.tar.xz b/thunderbird-78.9.0.source.tar.xz new file mode 100644 index 0000000..3cc80be --- /dev/null +++ b/thunderbird-78.9.0.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8015a7f78b1644578f398b5ab670637c70890ab2bade35ba321d47d099ed3ac0 +size 353051768 diff --git a/thunderbird-78.9.0.source.tar.xz.asc b/thunderbird-78.9.0.source.tar.xz.asc new file mode 100644 index 0000000..4bd6418 --- /dev/null +++ b/thunderbird-78.9.0.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAmBYvqEACgkQ8aZmj7t9 +Vy4sGQ/+NqKuAV9uNnY6OZsv8eZFRCwjLrpKj5YGnvZec/Qw0sSFuT6kqRbd0AlS +KHm2ptULeF6Hg9dyNGiktQw/wuK7ON45OmKFwSE9HSTTBTCOKPxrGpb6KZNMXmiu +adUuJTe3BokxPduS08fyA+k6lgB5dooNsXr4sAFjOuSbGkcPaDuE9gwnjp21REe9 +3DD7xVIt/NjdqEPJX2uDp6PBfDUvq1cLCLng9bvX5vGW3ang4D17y3ABnZerky8f +873EXhIj1F1WQNROL6ZaRXThLwFLIwSn6z6jLK/uh1x8lNEpT8sQnVZ0wkA1VmHR +lxnAekLbfkUecFg3xfhkSbC8WJO1FVibn8c7qIa8Jw6oQgJaE8Wk/+KMiYpBne0P +v/RGmeexUR1kw2QxWV0FUpPDuCKfA2m0DDBv4lkg9V3PsDo0s2l0bAdLuEJ8HeKW +3E1z5dE6FPwQU5Po1QPZY4A2lU35r26Sm21vRM8MZ9fD0/vqHMUhrjOX5fND1ZU/ +N/KlWUgmmn+00mfbJa5fNivoLaVxtQ94tMmd+cjOkVOBCG/h4cd8kRBh/3Q/7mph +rDXiYz+nB6raJjMS/AZ6N1Np6n6LMxY0dBBZ3ojybRxGFLqARZLplPHNX9UnRJty +7p/XWAKwx4qEIeDzIILaRpj3wb4k4hp3wjS3KO5esTq8aqu/IxA= +=xgdi +-----END PGP SIGNATURE-----