-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Sep 2020 09:08:29 +0200 Source: thunderbird Architecture: source Version: 1:78.3.1-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: thunderbird (1:78.3.1-1) unstable; urgency=medium . [ Carsten Schoenert ] * [6bd965f] New upstream version 78.3.1 Fixed CVE issues in upstream version 78.3.1 (MFSA 2020-44): CVE-2020-15677: Download origin spoofing via redirect CVE-2020-15676: XSS when pasting attacker-controlled data into a contenteditable element CVE-2020-15678: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario CVE-2020-15673: Memory safety bugs fixed in Thunderbird 78.3 * [8ba13c5] rebuild patch queue from patch-queue branch added patches(picked from firefox packaging): fixes/Add-missing-bindings-for-mips-in-the-authenticator-crate.patch porting-mips/Bug-1642265-MIPS64-Add-branchTestSymbol-and-fallibleUnbox.patch porting-mips/Bug-1649655-MIPS-Add-CodeGenerator-visitWasmRegisterResul.patch porting/Bug-1666646-Bump-CodeAlignment-to-8-in-MacroAssembler-non.patch removed patch(fixed upstream): fixes/Bug-1664607-Don-t-try-to-load-what-s-new-page-when-built-.patch * [c6d282d] calendar-google-provider*: removing left over cruft There are two left over sequencer files from the calendar-google-package, not need any more since 1:68.2.2-1 * [cf37615] d/README.Debian: Update and adding new information Some updated information regarding the now included OpenPGP support, also updating some grammar for 'Add-on'. * [faf225b] thunderbird.NEWS: Add hint about integration of OpenPGP support Giving the user a information about the OpenPGP status within Thunderbird since the version 78.0. * [d6f4f0e] Revert "d/tb.lintian-overrides: ignore warning about none versioned breaks" * [9e6cbec] d/copyright: update content Checksums-Sha1: c21182bf52875f6c48081c2be256e1f9cb9f32fb 8151 thunderbird_78.3.1-1.dsc 1c430ed4e2ce670d9a7275c3aab42aa74d9a8306 11811548 thunderbird_78.3.1.orig-thunderbird-l10n.tar.xz 6c4fd0ed58f09f1d5c5dd2728353651e5e01bc9f 372217932 thunderbird_78.3.1.orig.tar.xz 0abfa070f9535962fb979833652ff8d387e829e3 701908 thunderbird_78.3.1-1.debian.tar.xz 5a54667ae308a500f8b0c8ab1503c5e4fab9d878 35412 thunderbird_78.3.1-1_amd64.buildinfo Checksums-Sha256: 04ffe2e618bc5cad838d99bf5fb9855308b5f6195989b0a8bc0855d958e90006 8151 thunderbird_78.3.1-1.dsc 79e7d8a9f94eb83cedfadaff1c6b5798f5f01cc2fe8484b9cd0ff68c08bb0fa9 11811548 thunderbird_78.3.1.orig-thunderbird-l10n.tar.xz 4a8dac2fd9e3492b27c4a0b14413431940498801c66a86ba4872623fd4b4918f 372217932 thunderbird_78.3.1.orig.tar.xz 6c369095d563b14cd16a8841ef625a6b483be8c02879cb16fe9a7ae1eac0f1e9 701908 thunderbird_78.3.1-1.debian.tar.xz 4308204e19b53c9f29162af572425700834156b4597ec9405293be8ffaeebb32 35412 thunderbird_78.3.1-1_amd64.buildinfo Files: 8609c3a71fe42176ddc59fc40b050cfa 8151 mail optional thunderbird_78.3.1-1.dsc 30fadcdadbd456a72c0d1864db481d23 11811548 mail optional thunderbird_78.3.1.orig-thunderbird-l10n.tar.xz a396109139a6ebe398444e7221bf2cc5 372217932 mail optional thunderbird_78.3.1.orig.tar.xz 3804d15f4a89e12178703c9605d956a9 701908 mail optional thunderbird_78.3.1-1.debian.tar.xz 8c40d253ac6bbc9131c248a9b92ec8da 35412 mail optional thunderbird_78.3.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAl9w4EAACgkQgwFgFCUd HbAWcA//YNz37M+Z+MAu9AztdARUMCguuxRN7SJ0RBp+8Tk/xHZfUKrFUe6tVg6I 3SxJpQxF/UdAr2kBlRvebwnv9BmmpIrUGfwDFiyUPTdRP6GRgEH+PGcKqTPSIIYq J1Fou/W19t4NhLyWsT+PAdjJoQxSG24+8lnZlkz6C3oOzt7FyFp4xzhxJGHnrMFS zjc7BkVpISxTpRL2HRReo9mTnsOXlnGc7Je7Bpb8WTb2nPQQYKEhsMwdvBxmU5jT /isfiKamw2YSNcqCIC+Kg9i+BScZhJh2OEpBE2WyenAPGUd+Uj36MkTvUsYlrfbB Z8G4tLAogys0AOxJ0JrVvfa6pqeMy75QN0EUE+Rtd9VeOp2EsrFHvfI60vasbocZ oQrQZy0TX77gUbI8fHbVIxTojW6i8jPAZe/PznO8t/AXGJVpO1CQTbeHZvj/5lfU wnMzGESOh5jBX4MhLO6wNpKuohJHOhHEEfmJQHf4TyuyXUkXCTvvAN3efpJ5xcDI BlygBOR9Jru6bUejmu6njrd//9/4k/8Xtw5+HdjGt3Tp32ouV5fGtvMIpqWtHq0G QmT+TbX+GCaTeY/NX3P4YC43YtUTqXNrRTi7aWg/oocFBSCEhhpFuiE56Vbi4i0V 3CFuNAws+zt1W2RFaHP4yifoIx6LDjyewx4PQ+lrLlqBA/CkWhE= =VsEi -----END PGP SIGNATURE-----