Accepted thunderbird 1:115.6.0-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 19 Dec 2023 20:24:02 +0100
Source: thunderbird
Architecture: source
Version: 1:115.6.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Closes: 1058737
Changes:
thunderbird (1:115.6.0-1) unstable; urgency=medium
.
* [aea3623] New upstream version 115.6.0
Fixed CVE issues in upstream version 115. (MFSA 2023-55):
CVE-2023-50762: Truncated signed text was shown with a valid OpenPGP
signature
CVE-2023-50761: S/MIME signature accepted despite mismatching message
date
CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced
method with Mesa VM driver
CVE-2023-6857: Symlinks may resolve to smaller than expected buffers
CVE-2023-6858: Heap buffer overflow in nsTextFragment
CVE-2023-6859: Use-after-free in PR_GetIdentitiesLayer
CVE-2023-6860: Potential sandbox escape due to VideoBridge lack
of texture validation
CVE-2023-6861: Heap buffer overflow affected nsWindow::PickerOpen(void)
in headless mode
CVE-2023-6862: Use-after-free in nsDNSService
CVE-2023-6863: Undefined behavior in ShutdownObserver()
CVE-2023-6864: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
and Thunderbird 115.6
* [6ecaa01] d/control: Remove B-D on libiw-dev
(Closes: #1058737)
Checksums-Sha1:
66f59c8169c489e9c8c91f757a1c2a3d0781040a 8463 thunderbird_115.6.0-1.dsc
76b378ec8a98e9d36279e15898b87814f0b6c346 12674084 thunderbird_115.6.0.orig-thunderbird-l10n.tar.xz
1d238fcbe670472a37016b98d55a17175b03f681 558286952 thunderbird_115.6.0.orig.tar.xz
b7d4b01694dad38fd125029647013193c6d3b764 544156 thunderbird_115.6.0-1.debian.tar.xz
a74d7fc5aee90a3363d74c4d5b9b3fe862f39230 40374 thunderbird_115.6.0-1_amd64.buildinfo
Checksums-Sha256:
013bc3166b083e295997e85fefdc5b5bd67cc3165e956e06a767b17b01bfdc9a 8463 thunderbird_115.6.0-1.dsc
8691e5e31649cecf946d01ab10be1d687451dfe0db20e5391ce9e65a0d77cbc9 12674084 thunderbird_115.6.0.orig-thunderbird-l10n.tar.xz
b9cae13ca724cbb39c685c99f70cd7c18b932c687abecf1a5214f0010c67a85a 558286952 thunderbird_115.6.0.orig.tar.xz
5a4c32a00c012882ff58e1b041de0aae56e8b68b3a1e7e4e430a7620ac88d6a1 544156 thunderbird_115.6.0-1.debian.tar.xz
a68eb10019f1aee7e7d99aac49c9e778e86d8916defe27cf7ed1269fff9b6508 40374 thunderbird_115.6.0-1_amd64.buildinfo
Files:
a453ce7b4d30d09b4c679d08919f8177 8463 mail optional thunderbird_115.6.0-1.dsc
b3fa5c084433cb747f5d08c1b7b21341 12674084 mail optional thunderbird_115.6.0.orig-thunderbird-l10n.tar.xz
f4976df107637e2a646378b282c2084f 558286952 mail optional thunderbird_115.6.0.orig.tar.xz
5fd87fd1f5692116f7c456abd007dd53 544156 mail optional thunderbird_115.6.0-1.debian.tar.xz
67249b017b5757e38307e8d85c03bd8e 40374 mail optional thunderbird_115.6.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=IGPm
-----END PGP SIGNATURE-----
Reply to: