-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 05 Jun 2020 20:29:35 +0200 Source: thunderbird Architecture: source Version: 1:68.9.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Closes: 960465 Changes: thunderbird (1:68.9.0-1) unstable; urgency=medium . [ intrigeri ] * [fd13825] AppArmor: update profile from upstream at commit 860d2d9 (Closes: #960465) . [ Carsten Schoenert ] * [c310c40] New upstream version 68.9.0 Fixed CVE issues in upstream version 68.9.0 (MFSA 2020-22): CVE-2020-12399: Timing attack on DSA signatures in NSS library CVE-2020-12405: Use-after-free in SharedWorkerService CVE-2020-12406: JavaScript Type confusion with NativeTypes CVE-2020-12410: Memory safety bugs fixed in Thunderbird 68.9.0 CVE-2020-12398: Security downgrade with IMAP STARTTLS leads to information leakage Checksums-Sha1: 800a6637e9dae590315aaa043cba7f6b2acf15d9 8310 thunderbird_68.9.0-1.dsc c9e415a13e14dc86a24d528a70221780c3997748 1030016 thunderbird_68.9.0.orig-lightning-l10n.tar.xz ce3af96b51fec98584ebeef4135ba41c94d80732 10012652 thunderbird_68.9.0.orig-thunderbird-l10n.tar.xz c3dca46932529b99242ef26119b07717a2afeb64 354899736 thunderbird_68.9.0.orig.tar.xz b359d7d7b1b52dea28549b0d668b2aee879e3024 547012 thunderbird_68.9.0-1.debian.tar.xz 5b15e3e15864f3539ab4b2313098207af851777c 35389 thunderbird_68.9.0-1_amd64.buildinfo Checksums-Sha256: df113191eebcca570a4e51851efbc973e38c2dc6819bcdd0f48b7350c60fffaa 8310 thunderbird_68.9.0-1.dsc 5aebf93aae21975c63220a9930d3d378ef651a488f51fce099bbab29b726413a 1030016 thunderbird_68.9.0.orig-lightning-l10n.tar.xz 7d4628a0175a13bc1c6f0469b6824cdff9b410a5410257ffdfd844250906d750 10012652 thunderbird_68.9.0.orig-thunderbird-l10n.tar.xz 9f898c066f8854b1a914cd4196448163b46c7072df3dad55f4784d6b5a19807f 354899736 thunderbird_68.9.0.orig.tar.xz 52925d066189fa56df8da7675280116825f963e5914834fe597b3e7d5f80c822 547012 thunderbird_68.9.0-1.debian.tar.xz 24f5ca99024344dbb05909df9b68e18eff61144489433ea624ec2e435de8b116 35389 thunderbird_68.9.0-1_amd64.buildinfo Files: 4f49ad01af47fb91c4d8423109043a50 8310 mail optional thunderbird_68.9.0-1.dsc dfd9bba62829d537bd48e3d174aad871 1030016 mail optional thunderbird_68.9.0.orig-lightning-l10n.tar.xz 5afabd03d7fb0165f1cc1bbb546e16b9 10012652 mail optional thunderbird_68.9.0.orig-thunderbird-l10n.tar.xz 8f6cb172cbd96bc9c9975967bd915b6e 354899736 mail optional thunderbird_68.9.0.orig.tar.xz 00cfd9a343a8e2eb148705bf5d0320bb 547012 mail optional thunderbird_68.9.0-1.debian.tar.xz 97ac6a91f0905c10d25f44890d5f52c9 35389 mail optional thunderbird_68.9.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJMBAEBCgA2FiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAl7brScYHGMuc2Nob2Vu ZXJ0QHQtb25saW5lLmRlAAoJEIMBYBQlHR2wWccP/3rdMpd1X5skX9PGSL2vA/kO wDyC/lCYYtgkxtHJcpeZIorIW2/ERGYFebZfJujve0wNBXeyhAJnGnFNnBeUf8XY Gam2fIDnFjDr+ootxicQxzbFVIFSV4TPLWywCJKLtkwfj2gSTt1jh+hVZdJlB6iv W98dJR/R7tcTyoH4N4VN+Vnf6n1LidZ6ssfdmckOpZOJoBJ0GwxAuSRdvX6zeR2X 9iy0pp59Qk6RVb8Lyq+iRiUjHieCheaNBhL6T83qj61VugOg8E7AQxHsa+FzvX1a sbMStbzW4N6BiPtiBFSv064ppM9//wSxdHdTQ6axCLrer1GNkoDuMx9DOxOleSXn noNpDxzRL0hAy0bCcmFVXY0Je+RQ+JX9/yrdZSl9a6kxZ7PC71/8Ren4Uyfo09d4 El65XQGG9JDEnunEizGHcG3nlHa3PzcYbN2WY+TVFVzVXYIgf+uuZXiP4nqCpjf+ jf28b6GEcPCAH/eUM0n31pSzGN2OEeedRAK5IePbZ/RBeoUhHZrckhWRKauWVh+Y k47KXcusMgkZ5g/mBJ77QMvEB7m+HRrS9J3nlsB5EdywbQBMgHC0/3i7sSiUVXoD 3lKuHRyh0YHxPmZx/xQrRkOjt2Is7nfsA0i/9rRA5eSnzLlW7nkLaD2LEhIKzwsJ OkdIpYSBQcY8OkjdIWB3 =uonH -----END PGP SIGNATURE-----