-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 05 Dec 2019 10:03:22 +0100 Source: thunderbird Architecture: source Version: 1:68.3.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Closes: 944295 Changes: thunderbird (1:68.3.0-1) unstable; urgency=medium . * [fe289ec] /u/b/thunderbird: export variable DICPATH before start (Closes: #944295) * [a9a48c6] New upstream version 68.3.0 Fixed CVE issues in upstream version 68.3 (MFSA 2019-38): CVE-2019-17008: Use-after-free in worker destruction CVE-2019-13722: Stack corruption due to incorrect number of arguments in WebRTC code CVE-2019-11745: Out of bounds write in NSS when encrypting with a block cipher CVE-2019-17009: Updater temporary files accessible to unprivileged processes CVE-2019-17010: Use-after-free when performing device orientation checks CVE-2019-17005: Buffer overflow in plain text serializer CVE-2019-17011: Use-after-free when retrieving a document in antitracking CVE-2019-17012: Memory safety bugs fixed in Firefox 71, Firefox ESR 68.3, and Thunderbird 68.3 * [fb23473] d/control: increase B-D version on NSS to 3.44.3 * [6f59938] Breaks: adding more non compatible packaged AddOns Checksums-Sha1: 33fb9e2ddc200a1078e220ca0dee34ceb9677e02 8310 thunderbird_68.3.0-1.dsc 4c0fcdfa0bb327c236a22548ab7a00808d3e6eb0 1008744 thunderbird_68.3.0.orig-lightning-l10n.tar.xz dcd75b0166a6f31690c2ebf89167e682f63c6400 10011308 thunderbird_68.3.0.orig-thunderbird-l10n.tar.xz 5855aa923ce331e5948ace7fe6b3be61cf002642 354485852 thunderbird_68.3.0.orig.tar.xz 9c0adcb345c6b1c2c0469e4813aec69f3891d151 542336 thunderbird_68.3.0-1.debian.tar.xz b497049e9ac14f70ed3b49b13b7b46caf6987a1b 35585 thunderbird_68.3.0-1_amd64.buildinfo Checksums-Sha256: 977cdcb521dd393a1cf4ecd2c9c47303d05543efa64f268cf18705bdd064502d 8310 thunderbird_68.3.0-1.dsc 9933372f71314457c0b67c5456e5c2493abca4e0f1728c15e7dbe1b0832dd7f8 1008744 thunderbird_68.3.0.orig-lightning-l10n.tar.xz 42c1ae5adfe13c9142a3c50fde791cae4d1bfc1cc120450668c16275fe6739c3 10011308 thunderbird_68.3.0.orig-thunderbird-l10n.tar.xz 7e44652351115cc53b344940d11c5da6c0d29bfe12e34fc50bebe1a8c69c8310 354485852 thunderbird_68.3.0.orig.tar.xz e407cd3857cf9e461e5c7149376ea0ac53b0f2cca319d969cd00b9f22825cb01 542336 thunderbird_68.3.0-1.debian.tar.xz 171ff0c6b21f740813712362bed0cbdc62cb170a2d90d78eaf93e37cdc1ed3c4 35585 thunderbird_68.3.0-1_amd64.buildinfo Files: f5109e20ca2795384b8f71d0964b5c78 8310 mail optional thunderbird_68.3.0-1.dsc 8a24992de5bf9e48d16fb80f62a2baa1 1008744 mail optional thunderbird_68.3.0.orig-lightning-l10n.tar.xz e0a2d36d1bf97365bf91592a9e718fb7 10011308 mail optional thunderbird_68.3.0.orig-thunderbird-l10n.tar.xz abe4c911ff179c5c15c2d449a0bc1272 354485852 mail optional thunderbird_68.3.0.orig.tar.xz f7211ce5ae5b22c45e3ed735f1f23b6c 542336 mail optional thunderbird_68.3.0-1.debian.tar.xz e5cdb28b8bc290052d94c587ed51c825 35585 mail optional thunderbird_68.3.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJMBAEBCgA2FiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAl3qj4sYHGMuc2Nob2Vu ZXJ0QHQtb25saW5lLmRlAAoJEIMBYBQlHR2wwU8P/0KWfeuysViB7Txq0N5C+P5x gVSzojaNdPQRSkkvXnX08Edip4TXv6OVcFmLQ4zUjbgPHlG9HlIDZ7c7/5Bx8Jc9 kWrX4i7DlIYjWmaxsU4ZrcaJUCo0PJ4rmVx+ASxV5ufDzih9vxqPvtrlZq43G6rh wXqQBAtjG5Ee9T/wCB8dS4mSrtnb6OJunvpIbz9c6//wpLfIN09N4pt6I/yMudaP a2qY6zMkjcoPO1g3Ei1G0L4OHtmZX7H/1NqDJacCdfmjtwPfLqP/tIVP0IJG+RPo vhkyKzKFC64m2HvhJ6vAFJrpW0Y0SLIfJ0M+Sedd5g1JIvVXZVvNjxUGlag/WrJ/ vhpekyL8vXXMIVtCwc0cwjyl2he8IYqrislfhxjWX1ybAItUBSWIlCq/bM9o9gA+ pn+w/yU6O3SNNDE86/i4eDzT77xNcU258VhLPhIp4XruYNvVKhQiMjKErnd+p4Do zfqcjeYUHTGICUlpwh1dsDrDQ3ftLw88o6jbRBAC1o/+2/19JOSTbVlrMg0VgjQc AmTKKfl/iW2lK0AJ9gRPWNsPjfkKofRCXExi8Xf06c6Vkp1G3zyLwrZEHasMQRg9 qAveKZkwckk78Nn+bnERf/mFxQw8Pb9WFe5ZhYXKW6T7hRZyb6CsMUw4txoytEc5 Kin7ZtHKJM7RWSxy+jyU =TjPL -----END PGP SIGNATURE-----
