From e40e7bf3537a63cc7a5e5a41a9cacaedd1424ec9a2a93035a6b5fb0f26cd0198 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 24 Feb 2021 08:08:21 +0000 Subject: [PATCH] - Mozilla Thunderbird 78.8.0 * various bugfixes MFSA 2021-09 (bsc#1182614) * CVE-2021-23969 (bmo#1542194) Content Security Policy violation report could have contained the destination of a redirect * CVE-2021-23968 (bmo#1687342) Content Security Policy violation report could have contained the destination of a redirect * CVE-2021-23973 (bmo#1690976) MediaError message property could have leaked information about cross-origin resources * CVE-2021-23978 (bmo#786797, bmo#1682928, bmo#1687391, bmo#1687597) Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=578 --- MozillaThunderbird.changes | 19 +++++++++++++++++++ MozillaThunderbird.spec | 4 ++-- l10n-78.7.1.tar.xz | 3 --- l10n-78.8.0.tar.xz | 3 +++ tar_stamps | 8 ++++---- thunderbird-78.7.1.source.tar.xz | 3 --- thunderbird-78.7.1.source.tar.xz.asc | 16 ---------------- thunderbird-78.8.0.source.tar.xz | 3 +++ thunderbird-78.8.0.source.tar.xz.asc | 16 ++++++++++++++++ 9 files changed, 47 insertions(+), 28 deletions(-) delete mode 100644 l10n-78.7.1.tar.xz create mode 100644 l10n-78.8.0.tar.xz delete mode 100644 thunderbird-78.7.1.source.tar.xz delete mode 100644 thunderbird-78.7.1.source.tar.xz.asc create mode 100644 thunderbird-78.8.0.source.tar.xz create mode 100644 thunderbird-78.8.0.source.tar.xz.asc diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes index 1b0a338..5c386ce 100644 --- a/MozillaThunderbird.changes +++ b/MozillaThunderbird.changes @@ -1,3 +1,22 @@ +------------------------------------------------------------------- +Fri Feb 19 21:39:32 UTC 2021 - Wolfgang Rosenauer + +- Mozilla Thunderbird 78.8.0 + * various bugfixes + MFSA 2021-09 (bsc#1182614) + * CVE-2021-23969 (bmo#1542194) + Content Security Policy violation report could have contained + the destination of a redirect + * CVE-2021-23968 (bmo#1687342) + Content Security Policy violation report could have contained + the destination of a redirect + * CVE-2021-23973 (bmo#1690976) + MediaError message property could have leaked information + about cross-origin resources + * CVE-2021-23978 (bmo#786797, bmo#1682928, bmo#1687391, + bmo#1687597) + Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 + ------------------------------------------------------------------- Fri Feb 5 22:23:03 UTC 2021 - Wolfgang Rosenauer diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec index d9d6d7d..3062ef3 100644 --- a/MozillaThunderbird.spec +++ b/MozillaThunderbird.spec @@ -26,8 +26,8 @@ # major 69 # mainver %major.99 %define major 78 -%define mainver %major.7.1 -%define orig_version 78.7.1 +%define mainver %major.8.0 +%define orig_version 78.8.0 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{orig_version} diff --git a/l10n-78.7.1.tar.xz b/l10n-78.7.1.tar.xz deleted file mode 100644 index ab83d16..0000000 --- a/l10n-78.7.1.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5c083f95410c69dd7d2fa4ea2619be0c0d6e33c2e4630431a521aef6a58b79a4 -size 29102224 diff --git a/l10n-78.8.0.tar.xz b/l10n-78.8.0.tar.xz new file mode 100644 index 0000000..563f82e --- /dev/null +++ b/l10n-78.8.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f9327d6e0542b9eefcf6e1866139a471a9500336e3e66ace0cf47445406b8cba +size 29155800 diff --git a/tar_stamps b/tar_stamps index 7ec2bcd..9c6074e 100644 --- a/tar_stamps +++ b/tar_stamps @@ -1,10 +1,10 @@ PRODUCT="thunderbird" CHANNEL="esr78" -VERSION="78.7.1" +VERSION="78.8.0" VERSION_SUFFIX="" -PREV_VERSION="78.7.0" +PREV_VERSION="78.7.1" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr78" -RELEASE_TAG="1ef5b612ee43c806752ca215b142a9733210f3cc" -RELEASE_TIMESTAMP="20210203182138" +RELEASE_TAG="d801a94f25867ca5f2f3488c4700532351987999" +RELEASE_TIMESTAMP="20210217204255" diff --git a/thunderbird-78.7.1.source.tar.xz b/thunderbird-78.7.1.source.tar.xz deleted file mode 100644 index 4e4a08a..0000000 --- a/thunderbird-78.7.1.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0ccc5a54fb2548489c9579f677cb4ff3c191b1d1fcf33bef6b1cf6eb704e385a -size 361610852 diff --git a/thunderbird-78.7.1.source.tar.xz.asc b/thunderbird-78.7.1.source.tar.xz.asc deleted file mode 100644 index be91460..0000000 --- a/thunderbird-78.7.1.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAmAbEQsACgkQ8aZmj7t9 -Vy6JWBAAlmkKSTBrB0Pivr7KpkUhytVv8DFFxtN5zv3c99cTv71Q9hQretL22PF3 -swVJG/QhIWSvu0HHR3ZgA3srlELoPRcaVIagrNUkeDd2FTUD1xivdYDsndF2wwnN -PHk66Gmrs52i99Nry7dyLZZkYp1OcyDCoCkWv8ZVutl7SatcxQUJGWM8m6BD1Wyj -r5Rcql2AUjb8QKkInCkMWKyEKjFZxg32cHMa8adVqPReSQMSo5xdjTPkRqnEP1+V -RAvwVwBgRSJK6iRu0VZyQfvoJI1AEfLmkP7DI1ZbP6ZUzPdZLfjdIpbkIQvJHhF/ -5k+9F9VmlyK52V62gtphFucwiaHn32Hj1u1wAjkqW5HZHE2aRumA/Os665aaxbNk -IYmS24hhUZ0scqkEcQ/783FOFoQpX064tZ7oaqaXpBZt8nvV40pllDL66BSKekVQ -lp2RJHIySNdORUKOzlJyNqkI0LdruD7z1wfV+mX20HjfiiVASmo8KtD5nnWkEyjA -BT44RJG5SDTfwR1jMSrCZ6uZRs3wkLeQRR6aIdH9bgEID+kUyIRGkIQmCqJUmPMX -q4gVZgcQyJQgreI7Z6Qcok04RLUK846j24dyzLueX5cjYFYYEWrj5ct9lhq6n+Nu -vomNwsV6E+31V3QgFSHt1X2XFgG1dKyoHxb689sW3nDb76uSHSY= -=5GFN ------END PGP SIGNATURE----- diff --git a/thunderbird-78.8.0.source.tar.xz b/thunderbird-78.8.0.source.tar.xz new file mode 100644 index 0000000..2d1c0da --- /dev/null +++ b/thunderbird-78.8.0.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3f36fa5ffc85888eaf77afb5cdd51bdadce841b7ae0744f5f5cd147ef4975a9d +size 353232724 diff --git a/thunderbird-78.8.0.source.tar.xz.asc b/thunderbird-78.8.0.source.tar.xz.asc new file mode 100644 index 0000000..9823dc9 --- /dev/null +++ b/thunderbird-78.8.0.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAmAtmg8ACgkQ8aZmj7t9 +Vy6agA//RiAPRwzZdQ10L5YSyGCV/NroDK34MVgM2Juf0qGHObRZttH7PsGcgCAL +3UbEzV5vpJyKi9QvQXswIdGf4i+ju5PIu8G7i1jbZUeaHAAJcs2r/FfxaoqyaWsB +elnUq2LjBRCXIn7Dw1VpujSNNAtJZ5CqKxximQsqpVpMB36a/5gTPl/C6azkglqG +ekfT8ObCuyXKyVXBpA7070kiZ+m/TpMEgwO/bcqlsZVpD6DKs+uIVql4NPLFMbmn +jGrTU9TNX5TphcQYFd8ZiX0maJAdRFavbDUipS8gWfAYbZcEVR5RrZ73TXrXYGd3 +0yQ6Ovk0gmGpEYum8ItcMpbvTgOD2ldf8QXoTaoFgW5ZUEPiItMwWaX5SR3GmoSf +TB7kdDA0SfTPt7nMEVBm6Dpur+OQZhcI6KQqtei7yN21SxTyAFGuh0fZkJKV8h/4 +oI54fMiukg0NJOi9evG7Xxb7TxWVdLQR8rv239u3Y7RAkeBFqk5s89ronEekW0MB +66XXGoY+MsLXaN9CInkD8gQYTZdoEGtt45fV1fvSNP5weIrNgiQICxbjO3CJiLq7 +nDWdjn6pJ0LbA+M/hn864dtY9V5wF2bx5e9pXm6o4Ob7YmksI7u09gMlqsVcfqaW +EjKIGU2BMY2y+wD6WgkT2l8zGw3L9SjgV6HoEUsHj16VX3o7GmQ= +=Bc3g +-----END PGP SIGNATURE-----