-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 14 Jun 2024 13:26:00 +0200
Source: thunderbird
Architecture: source
Version: 1:115.12.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Closes: 1071824
Changes:
thunderbird (1:115.12.0-1) unstable; urgency=medium
.
* [3d303c4] d/c-u-t.py: Ignore one more version
* [2e7f143] New upstream version 115.12.0
Fixed CVE issues in upstream version 115.12 (MFSA 2024-28):
CVE-2024-5702: Use-after-free in networking
CVE-2024-5688: Use-after-free in JavaScript object transplant
CVE-2024-5690: External protocol handlers leaked by timing attack
CVE-2024-5691: Sandboxed iframes were able to bypass sandbox restrictions
to open a new window
CVE-2024-5692: Bypass of file name restrictions during saving
CVE-2024-5693: Cross-Origin Image leak via Offscreen Canvas
CVE-2024-5696: Memory Corruption in Text Fragments
CVE-2024-5700: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
and Thunderbird 115.12
* [9afc3a0] d/logo/thunderbird: Update PNG files from newer SVG
(Closes: #1071824)
* [a92c8d1] d/thunderbird.install: Install the newer correct SVG graphic
Checksums-Sha1:
c9f9c2cc13535a3b6cc662839ceb3bc351519a42 8473 thunderbird_115.12.0-1.dsc
c51094c65457c893285b74b8b8fe8911471202ff 13171580 thunderbird_115.12.0.orig-thunderbird-l10n.tar.xz
4ed88eec1ed0991bdf9fcdda63eb5d12c92eaf4b 558108552 thunderbird_115.12.0.orig.tar.xz
5aa90b14e3e4b1cebcab16571ea5841dca6bb898 549388 thunderbird_115.12.0-1.debian.tar.xz
498b0f13a633b26e8d0a59847250412723a030e6 40804 thunderbird_115.12.0-1_amd64.buildinfo
Checksums-Sha256:
44321918e6849488865452f561ab81eb113cc873bb1ea5dd66f5119b524ece3e 8473 thunderbird_115.12.0-1.dsc
db659a59aab84b8254c281dd11eee265bc512e87580fc82769cac3562a807b38 13171580 thunderbird_115.12.0.orig-thunderbird-l10n.tar.xz
4c8e00e08cfff59a5390c5d5f0cf06f446ce88d8ac9f025d9520d0f3e18d49b7 558108552 thunderbird_115.12.0.orig.tar.xz
e89c8610eada1747d0d01e7e27ff8a33d43492566b70e69bb6e3d2dd88999646 549388 thunderbird_115.12.0-1.debian.tar.xz
8a473fc478e7479afe94a81d0e5b6be950835d56d11b92bfb93288fc30154336 40804 thunderbird_115.12.0-1_amd64.buildinfo
Files:
fdb6feac5d8ed78ffc8d7df3df56849b 8473 mail optional thunderbird_115.12.0-1.dsc
3da77cb525ecefec286180443a8ce7ff 13171580 mail optional thunderbird_115.12.0.orig-thunderbird-l10n.tar.xz
4c4f76e274b988b74e14fa2fde6054f9 558108552 mail optional thunderbird_115.12.0.orig.tar.xz
8ff9214234ca15403c2115092afe0552 549388 mail optional thunderbird_115.12.0-1.debian.tar.xz
e034716b3eed69c60ab189b6313c76a7 40804 mail optional thunderbird_115.12.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=495P
-----END PGP SIGNATURE-----
Attachment:
pgpBdpxYiWobF.pgp
Description: PGP signature