-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 27 Aug 2020 21:23:55 +0200 Source: thunderbird Architecture: source Version: 1:68.12.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: thunderbird (1:68.12.0-1) unstable; urgency=medium . * [103cab7] New upstream version 68.12.0 Fixed CVE issues in upstream version 68.11.0 (MFSA 2020-35): CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege CVE-2020-15664: Attacker-induced prompt for extension installation CVE-2020-15669: Use-After-Free when aborting an operation Checksums-Sha1: b1e6a4577b99bba28bec3e4a7e0755a9dc57d813 8222 thunderbird_68.12.0-1.dsc 488850108bbd634c5d57dd8388b1d8646e27ec4b 1045344 thunderbird_68.12.0.orig-lightning-l10n.tar.xz ce5f2938a710b6434ef99c66cb218a85f8589859 9836212 thunderbird_68.12.0.orig-thunderbird-l10n.tar.xz 4988f8582383666e2496f55f5b5a0a80bc7b9e0c 357527100 thunderbird_68.12.0.orig.tar.xz 9f902db994e331db11ae07ffbd2243fd63926ef4 548540 thunderbird_68.12.0-1.debian.tar.xz d9925ae3243697008b7072e1080de3f78979d89b 34702 thunderbird_68.12.0-1_amd64.buildinfo Checksums-Sha256: 39a0232eceb2e00451a8468a29be40d4a31bc4cc9221668b67376a7cd661c511 8222 thunderbird_68.12.0-1.dsc af49b71d2111b4bfbad2a226880ef2d5d2b2a781b6b7976d1d5367a0844a40fb 1045344 thunderbird_68.12.0.orig-lightning-l10n.tar.xz ca518dc97ff44714468c95b2cc10ebd6a4feb679df581d36ded2167c5547f536 9836212 thunderbird_68.12.0.orig-thunderbird-l10n.tar.xz 799df03fbc972a295d67eb2477a2125bf0b3aa5b60680053d48ae01b95cc49aa 357527100 thunderbird_68.12.0.orig.tar.xz 9b50eada2f7e5036401278fbee88575383d05146bc0ae267ea8cabc665e10cc3 548540 thunderbird_68.12.0-1.debian.tar.xz c2e2e65ce5403bb34711b5a17c90c92cfbdac47174060c94818909b2ff9c966d 34702 thunderbird_68.12.0-1_amd64.buildinfo Files: 5af7cef5f1146f5c934f9af1d0dd7b9b 8222 mail optional thunderbird_68.12.0-1.dsc 1ff55f5976bffbc4a1aeaa8ae520a1ac 1045344 mail optional thunderbird_68.12.0.orig-lightning-l10n.tar.xz b70b645d4a2327e6b3c4d7a5360b941e 9836212 mail optional thunderbird_68.12.0.orig-thunderbird-l10n.tar.xz 94d0add08a7dacd01fcb8659c71bf087 357527100 mail optional thunderbird_68.12.0.orig.tar.xz 365416e1f5f81d4a66d028426854a5e8 548540 mail optional thunderbird_68.12.0-1.debian.tar.xz a44c7ec9c48e6860d9d10d6305532656 34702 mail optional thunderbird_68.12.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAl9I7RUACgkQgwFgFCUd HbCA1Q/+PY1BnWdgbjfJabmzLlhDHUtmjYfscDCYSSylPxHnkocdFSOIrDZ6oYcF jsi3TWwavT75aOSydKaRRsuT35Fifdq2YIeCcbo9uKQZAnFw0fBHCGnQnDgDLbsO f4s2o1lGYmtjJjcGDO7ZFO74EbK0jIIFV6vH2+jMmGFUtGeHYNAZPvxr3joG8GxN 17ZhiVBOZjkxZLGzN5veuSc3eNmDpzJr1KAMkIw4X3/nt85NSyDP4XcxXW1Y5iJN HKQAPohzGdpJf9ODQ49cbLLhaq46XjHMwWaEYGJUsQqeg4FA3eNMwPZQXwj8v4jv xe6Bq0cHI/wslEDEBKVZoTBfY9QwclPRDohKzwh+6h9FZy8HbYVoGhcwuORJLgv5 3kw1+UHK/yJOv2ZFQE5L8gloU1azIJDvIMPy3MVwC+rP4V1bi7ssl4wwhUe7e7Mi JBS2wMTH1paFDYUrS5g/WK2vanDsm9A8Mn78yfr09M+3M9+dUIcudv+6a8roa4Ub yOePQtBI0Sx2x7D5m5O1oaVDuQuySB+AO9FZUfcJrEjf0x2UTLLF7m1u+Pl6nqt8 4ORRLYQHwHbN39ls3o+OxiW3en0O1BaGyuMV9UdDJ2eodq3E792R+Kq/hDA9q0Ck gr0Dg7M/0pHy2MEwc6Ps4b/cOMCNn2r7qD/XBHfpU4IZ6pSRH0g= =/FOW -----END PGP SIGNATURE-----