Bug 1895368

The following Sources of the specfile are not valid URLs so we cannot automatically build the new version for you.  Please use URLs in your Source declarations if possible.

- thunderbird-langpacks-78.4.1-20201022.tar.xz
- thunderbird-mozconfig
- thunderbird-mozconfig-branded
- thunderbird-redhat-default-prefs.js
- thunderbird.desktop
- thunderbird.sh.in
- thunderbird-symbolic.svg
- thunderbird-wayland.sh.in
- thunderbird-wayland.desktop
- get-calendar-langpacks.sh
- node-stdout-nonblocking-wrapper
- cbindgen-vendor-0.14.3.tar.xz

Latest upstream release: 78.4.2
Current version/release in rawhide: 78.4.0-2.fc34
URL: https://www.thunderbird.net/

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from anitya: https://release-monitoring.org/project/4967/

The following Sources of the specfile are not valid URLs so we cannot automatically build the new version for you.  Please use URLs in your Source declarations if possible.

- thunderbird-langpacks-78.4.2-20201022.tar.xz
- thunderbird-mozconfig
- thunderbird-mozconfig-branded
- thunderbird-redhat-default-prefs.js
- thunderbird.desktop
- thunderbird.sh.in
- thunderbird-symbolic.svg
- thunderbird-wayland.sh.in
- thunderbird-wayland.desktop
- get-calendar-langpacks.sh
- node-stdout-nonblocking-wrapper
- cbindgen-vendor-0.14.3.tar.xz

Can we bump up he priority of this issue as the new version is said to fix a critical vulnerability?
https://www.mozilla.org/en-US/security/advisories/mfsa2020-49/#CVE-2020-26950

Latest upstream release: 78.4.3
Current version/release in rawhide: 78.4.0-3.fc34
URL: https://www.thunderbird.net/

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from anitya: https://release-monitoring.org/project/4967/

An unexpected error occurred while downloading the new package sources; please report this as a bug on the-new-hotness issue tracker.

I tried to compile the version of the master branch directly on Fedora 32 and it worked. I opened a pull request (https://src.fedoraproject.org/rpms/thunderbird/pull-request/9) - not sure however whether this helps a lot as I didn't really do much except demonstrate that it compiles and seems to work for my needs. But the PR with the build on the CI system may reveal some problems or hickups. Maybe the long compile time will trip some timeout limits of the CI system. For reference the compile time on my laptop (i7-7700HQ, 4 cores @ 3.5 GHz) was ~4h.

The F32 build finished successfully: https://koji.fedoraproject.org/koji/taskinfo?taskID=55647406

I also tried to merge back master to the F31 and F33 branches and issued a test build on the CI.

F31: https://koji.fedoraproject.org/koji/taskinfo?taskID=55746920
F33: https://koji.fedoraproject.org/koji/buildinfo?buildID=1642840

F31 fails on the s390x platform, F33 builds successfully on all platforms.
I don't have access to a s390x machine so I cannot try to fix the F31 build problem.

Note, on F31 and F33 I only tested whether it builds, I did not test the functionality of the resulting build, my daily driver runs F32 only.

I do not open pull requests for F31 and F33 as the necessary changes are trivial (merge from master, build).
So far, I think this is all I can do from my end.

Latest upstream release: 78.5.0
Current version/release in rawhide: 78.4.3-1.fc34
URL: https://www.thunderbird.net/

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from anitya: https://release-monitoring.org/project/4967/

An unexpected error occurred while downloading the new package sources; please report this as a bug on the-new-hotness issue tracker.

I opened an issue for this the-new-hotness problem:
https://github.com/fedora-infra/the-new-hotness/issues/311

FEDORA-2020-24bedcb95c has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2020-24bedcb95c

FEDORA-2020-24bedcb95c has been pushed to the Fedora 33 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-24bedcb95c`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-24bedcb95c

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

FEDORA-2020-9493cfc1ac has been pushed to the Fedora 32 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-9493cfc1ac`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-9493cfc1ac

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

FEDORA-2020-24bedcb95c has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.

FEDORA-2020-9493cfc1ac has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.