Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2022-03-13 20:24:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25692 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird" Sun Mar 13 20:24:29 2022 rev:275 rq:960657 version:91.7.0 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2022-02-18 23:02:40.049414133 +0100 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25692/MozillaThunderbird.changes 2022-03-13 20:24:32.111610745 +0100 @@ -1,0 +2,35 @@ +Sun Mar 6 13:02:02 UTC 2022 - Wolfgang Rosenauer <w...@rosenauer.org> + +- Mozilla Thunderbird 91.7.0 + * Thunderbird will use the first occurrence of headers that should + only appear once + * Auto-complete incorrectly changed a pasted email address to the + primary address of a contact + * Attachments with filename extensions that were not registered in + MIME types could not be opened + * Copy/Cut/Paste actions not working in Thunderbird Preferences + * Improved screen reader support of displayed message headers + MFSA 2022-12 (bsc#1196900) + * CVE-2022-26383 (bmo#1742421) + Browser window spoof using fullscreen mode + * CVE-2022-26384 (bmo#1744352) + iframe allow-scripts sandbox bypass + * CVE-2022-26387 (bmo#1752979) + Time-of-check time-of-use bug when verifying add-on signatures + * CVE-2022-26381 (bmo#1736243) + Use-after-free in text reflows + * CVE-2022-26386 (bmo#1752396) + Temporary files downloaded to /tmp and accessible by other + local users + +------------------------------------------------------------------- +Sun Mar 6 12:49:36 UTC 2022 - Wolfgang Rosenauer <w...@rosenauer.org> + +- Mozilla Thunderbird 91.6.2 + MFSA 2022-09 + * CVE-2022-26485 (bmo#1758062) + Use-after-free in XSLT parameter processing + * CVE-2022-26486 (bmo#1758070) + Use-after-free in WebGPU IPC Framework + +------------------------------------------------------------------- Old: ---- l10n-91.6.1.tar.xz thunderbird-91.6.1.source.tar.xz thunderbird-91.6.1.source.tar.xz.asc New: ---- l10n-91.7.0.tar.xz thunderbird-91.7.0.source.tar.xz thunderbird-91.7.0.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.O1E5XN/_old 2022-03-13 20:24:40.827620997 +0100 +++ /var/tmp/diff_new_pack.O1E5XN/_new 2022-03-13 20:24:40.831621002 +0100 @@ -26,8 +26,8 @@ # major 69 # mainver %major.99 %define major 91 -%define mainver %major.6.1 -%define orig_version 91.6.1 +%define mainver %major.7.0 +%define orig_version 91.7.0 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{orig_version} ++++++ l10n-91.6.1.tar.xz -> l10n-91.7.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-91.6.1.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25692/l10n-91.7.0.tar.xz differ: char 26, line 1 ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.O1E5XN/_old 2022-03-13 20:24:41.079621293 +0100 +++ /var/tmp/diff_new_pack.O1E5XN/_new 2022-03-13 20:24:41.079621293 +0100 @@ -1,11 +1,11 @@ PRODUCT="thunderbird" CHANNEL="esr91" -VERSION="91.6.1" +VERSION="91.7.0" VERSION_SUFFIX="" -PREV_VERSION="91.6.0" +PREV_VERSION="91.6.2" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr91" -RELEASE_TAG="ead04f72567a3f690d9ad5218a7e5e2d264cb067" -RELEASE_TIMESTAMP="20220214162907" +RELEASE_TAG="c936367e9d73e790fc2e6aa16a64ec6d55ab0379" +RELEASE_TIMESTAMP="20220302151026" ++++++ thunderbird-91.6.1.source.tar.xz -> thunderbird-91.7.0.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-91.6.1.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.25692/thunderbird-91.7.0.source.tar.xz differ: char 15, line 1