From 8e5a394a01d57a20fe21d0074fad13e4175d21222155d7e2664ffad65a82691b Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Thu, 1 Dec 2022 21:40:36 +0000 Subject: [PATCH] - Mozilla Thunderbird 102.5.1 MFSA 2022-50 * CVE-2022-45414 (bmo#1788096) Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration to block remote content OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=678 --- MozillaThunderbird.changes | 10 ++++++++++ MozillaThunderbird.spec | 4 ++-- l10n-102.5.0.tar.xz | 3 --- l10n-102.5.1.tar.xz | 3 +++ tar_stamps | 8 ++++---- thunderbird-102.5.0.source.tar.xz | 3 --- thunderbird-102.5.0.source.tar.xz.asc | 16 ---------------- thunderbird-102.5.1.source.tar.xz | 3 +++ thunderbird-102.5.1.source.tar.xz.asc | 16 ++++++++++++++++ 9 files changed, 38 insertions(+), 28 deletions(-) delete mode 100644 l10n-102.5.0.tar.xz create mode 100644 l10n-102.5.1.tar.xz delete mode 100644 thunderbird-102.5.0.source.tar.xz delete mode 100644 thunderbird-102.5.0.source.tar.xz.asc create mode 100644 thunderbird-102.5.1.source.tar.xz create mode 100644 thunderbird-102.5.1.source.tar.xz.asc diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 8aebc70..7874cbd 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Wed Nov 30 20:49:28 UTC 2022 - Wolfgang Rosenauer + +- Mozilla Thunderbird 102.5.1 + MFSA 2022-50 + * CVE-2022-45414 (bmo#1788096) + Quoting from an HTML email with certain tags will trigger network + requests and load remote content, regardless of a configuration + to block remote content + ------------------------------------------------------------------- Sat Nov 12 22:48:04 UTC 2022 - Wolfgang Rosenauer diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index 2f7dc90..d7b4a79 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -29,8 +29,8 @@ # major 69 # mainver %major.99 %define major 102 -%define mainver %major.5.0 -%define orig_version 102.5.0 +%define mainver %major.5.1 +%define orig_version 102.5.1 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{orig_version} diff --git a/l10n-102.5.0.tar.xz b/l10n-102.5.0.tar.xz deleted file mode 100644 index 8774207..0000000 --- a/l10n-102.5.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:70833915edec35916032ca1c8fb3644a4bb0b6a24f329329402642657c3b33d4 -size 29093636 diff --git a/l10n-102.5.1.tar.xz b/l10n-102.5.1.tar.xz new file mode 100644 index 0000000..51e1e8b --- /dev/null +++ b/l10n-102.5.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3a504a022232e24a7b9dba371c9ed4c9e1677121689d213843619ccf6da2724d +size 29115000 diff --git a/tar_stamps b/tar_stamps index e02b49c..cf29f43 100644 --- a/tar_stamps +++ b/tar_stamps @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr102" -VERSION="102.5.0" +VERSION="102.5.1" VERSION_SUFFIX="" -PREV_VERSION="102.4.2" +PREV_VERSION="102.5.0" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102" -RELEASE_TAG="b6e9b5a1d1b53d26cfb7032ef2ff02203ab0486b" -RELEASE_TIMESTAMP="20221115143058" +RELEASE_TAG="bbf216e50e6a8cb4362b2b77feeb8ca4a1d78914" +RELEASE_TIMESTAMP="20221129154640" diff --git a/thunderbird-102.5.0.source.tar.xz b/thunderbird-102.5.0.source.tar.xz deleted file mode 100644 index 9896dba..0000000 --- a/thunderbird-102.5.0.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:bdf8c4882e951939950b3c8aec26b15414c61c02560804f1940070f4b945d38c -size 506950192 diff --git a/thunderbird-102.5.0.source.tar.xz.asc b/thunderbird-102.5.0.source.tar.xz.asc deleted file mode 100644 index 4c5f3b9..0000000 --- a/thunderbird-102.5.0.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmNzwLkACgkQ6+QekPbx -L232KRAAidSZRWeQpQ5g9s/IABUtpfYGHfw+gRBx5mWtHq69HaD9cMxTtfh+Us9P -pGjXVWuzI+QYyrw5StmXqhHhgNwodAm1LSTc0VXu3elbszvwsetwj9P5vZEI5zOz -Pl5PnJC4nVewP1hHc+m1xjz5fuLkWFyB9Xl25zrL1f1NsPYa6V3g9yGZ3x7dKmBx -OPi24qNiN3R4ph5pj9t1A1+WnqygIT2NoeyFj7ScDDcXFepA2Z1qsVAj2eITR/qe -jgNoxHuPJ4BWVbv+vtdRZkdaU57RFbVEDG5hquWzPVtWaDQh2Ux+DYtcsTthlqW+ -6D6np1C1TY89iaNBcKozxr9HKqE7Q+3UVnk+y69ZqQBBrgpTXp+KM8N/JA2aRlko -wAh2tNFM0EOd8uRdSy7QinWfBqppYLV+lMuqoXUcuZZD60F63dmGXbry0m/WBqs+ -MRJmh2uNoHYtOzjZjHM3fJW+Upg1arLf16qwUfPb0ZJ7bchhTtzFoydBETQHMnQ1 -ax+EvDPPurw9jEJAM1gH5o/I+62hBFUvEy/ThBQkCmMUzcSnQpzr+iklaqGeO7lG -FPEf8fjGFPyRn3u6ZLbZxiKJFwXKm7OtHT7l4sXvsWIp9kUr/XEWUeTLOjpMSg7K -5KQBKFQL4PYDP4QY/vJ863QQzMY50phOxAWEJF+jrVzf9gYibS4= -=WxnT ------END PGP SIGNATURE----- diff --git a/thunderbird-102.5.1.source.tar.xz b/thunderbird-102.5.1.source.tar.xz new file mode 100644 index 0000000..7dd9dda --- /dev/null +++ b/thunderbird-102.5.1.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d8de843fffcd10b23c348c5726bff7215c983220ab9e63a5eb7e25aa33901528 +size 509550884 diff --git a/thunderbird-102.5.1.source.tar.xz.asc b/thunderbird-102.5.1.source.tar.xz.asc new file mode 100644 index 0000000..487c254 --- /dev/null +++ b/thunderbird-102.5.1.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmOGQ1QACgkQ6+QekPbx +L21k3RAAodADilQf37+PPu3LWF4xyPgpwfnPct27TsZF2+8hDDgkxBLFfKVHhjmD +w2KWN+rwTxhCtwZ8KUZUjCR2BJoyJh/oYuMDrCSdmRey+SzAr1vwqWi2CqJmJ4gO +8zDyixKgnrkkG1XLEVzIbPOCaudI/VLSfPgjN7ILOoHaUQnFjoVc6SLlU8qWJ7MB +UBrq7oPeu+lpDEYJGbq0ugULCi+Z2iRp9TTqreqlSdxRfF2IntmCjg+oSzUS8UuZ +7zUhuxXsB9WB9z3aK96v20mCXlgZCRMbM9sfEtxG3/YgMLdsWbIpxwu3F/LW1Yoe +hQ2VT0LK6RqTdjsgpXFDy/4PGNEnSjROYJG4Ao2eEzJDbkj34JA/8ZZqhUGcinUT +r/WBmTjHv3Jh9ysG7JxXE45+RAXFORMrnJbUZyggIV3wx1CLzU47JTL29rehFCwC +0KkBM1L5tvaRJAzXVjWMBHEyrUPolE7oNktZcCWPtj2GwllEJJ5/hUDXeRa75HfH +oe1Xi3G3ZiCrZ5KEN04/JeBkK1NRP68P21MwheVjp/yi18QK6aOupn3svYneyCVr +yOQ9l9xcg6a/7UbtCFiHWf3shrByeqzm5H37ZCen8vcYqkmGk3NNxpYYAWM59E3k +igzi6+hH7sUo3m5ROCWXBBJbeMmD1L+CSrOZkl62OBY1EWxxPd4= +=E0W0 +-----END PGP SIGNATURE-----