-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 12 Apr 2020 07:40:41 +0200 Source: thunderbird Architecture: source Version: 1:68.7.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: thunderbird (1:68.7.0-1) unstable; urgency=medium . * [c0052af] New upstream version 68.7.0 Fixed CVE issues in upstream version 68.7.0 (MFSA 2020-14): CVE-2020-6819: Use-after-free while running the nsDocShell destructor CVE-2020-6820: Use-after-free when handling a ReadableStream CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6822: Out of bounds write in GMPDecodeData when processing large images CVE-2020-6825: Memory safety bugs fixed in Thunderbird 68.7 Checksums-Sha1: e9750cc612fe29d96d2818de6fefcfcbd6879a03 8274 thunderbird_68.7.0-1.dsc e1bcf2060c6d2e3e34041fb40ed15594f531bd06 1045352 thunderbird_68.7.0.orig-lightning-l10n.tar.xz 43b136c7eab0d84b7fc65cf07267bfa865b99864 9836888 thunderbird_68.7.0.orig-thunderbird-l10n.tar.xz be3555bd906ba096a6ae9228da790ef650e41308 357197140 thunderbird_68.7.0.orig.tar.xz e070d0319fa3fe351aacab38e3a3a32bba5640c8 546652 thunderbird_68.7.0-1.debian.tar.xz df9c03e6807df2341b379ef35f3dc98bc2ab172d 35670 thunderbird_68.7.0-1_amd64.buildinfo Checksums-Sha256: abe707d55d0a6cadc2a2aea56317cf9d152f5d69d5d95f654f3da610027bd4f1 8274 thunderbird_68.7.0-1.dsc 9060b8cf0631c59c50cdc2317e293c16f332429d836c2667bc46d98702de47b2 1045352 thunderbird_68.7.0.orig-lightning-l10n.tar.xz d7a4c30b50942f9a80761d792aba5db2d4c35bc8faa659ba6415df5d8cfa3455 9836888 thunderbird_68.7.0.orig-thunderbird-l10n.tar.xz 0c10cd0b3011a16bf445215f88ce42152b985e346e6017a4f8918d21efd1d7af 357197140 thunderbird_68.7.0.orig.tar.xz 8d7d6b11280e3714ae729aba4e0c692a0244d2f4e3b46a6a38429d6d9223af74 546652 thunderbird_68.7.0-1.debian.tar.xz f094dd89571958f0e0da804b48dd668da692f9f17b06486e6d7d1aef3f915c2e 35670 thunderbird_68.7.0-1_amd64.buildinfo Files: d0ce5d9c59f9c01a046748288c0096a7 8274 mail optional thunderbird_68.7.0-1.dsc 0af618598995d2be56e852427a0708a9 1045352 mail optional thunderbird_68.7.0.orig-lightning-l10n.tar.xz 11e06b0c3e0bad3c631547e46655da79 9836888 mail optional thunderbird_68.7.0.orig-thunderbird-l10n.tar.xz 9df8d68993d51291def25508be3bf266 357197140 mail optional thunderbird_68.7.0.orig.tar.xz 758d200a0860954253a44a873f1c578e 546652 mail optional thunderbird_68.7.0-1.debian.tar.xz c9854f57b7bc0d9f7437c7642ca8b935 35670 mail optional thunderbird_68.7.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAl6Svt4ACgkQgwFgFCUd HbD5tBAAhkaCsyZ0ZoNIZHCPkIGsr5NGpk37hVa/FxSuhvEJxDWQAtpy6Ea6EVhB JRSCM4vYvE1N0ez5wtfrfd2mpIoYZfrx1LivzeIE/At3SFbg3W3aUXn7jAYT4Gwg iGYgQOLkrOlT8NVPiLI7h6zG3Zdbt12BZEvqzMgcj2Xdgxzdhxogd2b9/g90o6xT LlOj5BYZubXrX3NB7kGb337hM7jGGmrq44YS6To7zblXuVmCT3rnHX9q0Pne8wXS auqrKaemttI/Xlxg1NlOdKg+8Zd5GaUmuFtuutWbdI3MFiBzGMdFQQJ/UsWBdnKa Qle/at5rVpvoGOJ728X6LG5IgiMSmXlgKPsPmluS9h7LS1Kumgn9zT/GSauast5w gRouUIA1I7r0uHp4X8Mqp/W3Gmpjjtyt46G15cErBfkxCTzKMY3TsBmWDMPj/Kry vgG41PaZ504BGBM3pTuh42q58QWwmn7RNi052I4ZRkWBBjuZ1m+TMB/Vdli7P8RA bazaHisbFthRhhzMclMOhXVSVyUyWSmfCVCvjC7Hck+wRGVoooBLAsED4MRmRTx5 me0DTuLfBlLTVsNPBcv+fnGjav/5ijrIG+ZNkqlTjXzW4VG8PbYzw8oBpcy3tQq2 X4EDGczrmo1YmrO6P19qa9qFJv2TTTqekhs+/wa/glstH6NElF8= =Navb -----END PGP SIGNATURE-----