Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package MozillaThunderbird for openSUSE:Factory checked in at 2022-09-02 21:56:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaThunderbird (Old) and /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaThunderbird" Fri Sep 2 21:56:12 2022 rev:287 rq:1000596 version:102.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaThunderbird/MozillaThunderbird.changes 2022-08-27 11:48:07.857590551 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/MozillaThunderbird.changes 2022-09-02 21:56:20.988268437 +0200 @@ -1,0 +2,18 @@ +Thu Sep 1 06:48:28 UTC 2022 - Wolfgang Rosenauer <w...@rosenauer.org> + +- Mozilla Thunderbird 102.2.1 + MFSA 2022-38 (bsc#1203007) + * CVE-2022-3033 (bmo#1784838) + Leaking of sensitive information when composing a response to + an HTML email with a META refresh tag + * CVE-2022-3032 (bmo#1783831) + Remote content specified in an HTML document that was nested + inside an iframe's srcdoc attribute was not blocked + * CVE-2022-3034 (bmo#1745751) + An iframe element in an HTML email could trigger a network + request + * CVE-2022-36059 (bmo#1787741) + Matrix SDK bundled with Thunderbird vulnerable to denial-of- + service attack + +------------------------------------------------------------------- Old: ---- l10n-102.2.0.tar.xz thunderbird-102.2.0.source.tar.xz thunderbird-102.2.0.source.tar.xz.asc New: ---- l10n-102.2.1.tar.xz thunderbird-102.2.1.source.tar.xz thunderbird-102.2.1.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaThunderbird.spec ++++++ --- /var/tmp/diff_new_pack.QZ2yZn/_old 2022-09-02 21:56:37.280307866 +0200 +++ /var/tmp/diff_new_pack.QZ2yZn/_new 2022-09-02 21:56:37.284307875 +0200 @@ -29,8 +29,8 @@ # major 69 # mainver %major.99 %define major 102 -%define mainver %major.2.0 -%define orig_version 102.2.0 +%define mainver %major.2.1 +%define orig_version 102.2.1 %define orig_suffix %{nil} %define update_channel release %define source_prefix thunderbird-%{orig_version} ++++++ l10n-102.2.0.tar.xz -> l10n-102.2.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/l10n-102.2.0.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/l10n-102.2.1.tar.xz differ: char 27, line 1 ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.QZ2yZn/_old 2022-09-02 21:56:37.496308388 +0200 +++ /var/tmp/diff_new_pack.QZ2yZn/_new 2022-09-02 21:56:37.504308408 +0200 @@ -1,11 +1,11 @@ PRODUCT="thunderbird" CHANNEL="esr102" -VERSION="102.2.0" +VERSION="102.2.1" VERSION_SUFFIX="" -PREV_VERSION="102.1.2" +PREV_VERSION="102.2.0" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr102" -RELEASE_TAG="89ba701459beaaffd4216e142b9502b8ee460159" -RELEASE_TIMESTAMP="20220822195114" +RELEASE_TAG="b606061ac37965c6fa7b2f3c1c3d1f849d4f404c" +RELEASE_TIMESTAMP="20220831174222" ++++++ thunderbird-102.2.0.source.tar.xz -> thunderbird-102.2.1.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaThunderbird/thunderbird-102.2.0.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaThunderbird.new.2083/thunderbird-102.2.1.source.tar.xz differ: char 15, line 1