-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 16 Oct 2021 08:27:55 +0200 Source: thunderbird Architecture: source Version: 1:91.2.0-1 Distribution: experimental Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Closes: 973042 Changes: thunderbird (1:91.2.0-1) experimental; urgency=medium . * [3c88844] New upstream version 91.2.0 Fixed CVE issues in upstream version 91.2 (MFSA 2021-47): CVE-2021-38502: Downgrade attack on SMTP STARTTLS connections CVE-2021-38496: Use-after-free in MessageTask CVE-2021-38497: Validation message could have been overlaid on another origin CVE-2021-38498: Use-after-free of nsLanguageAtomService object CVE-2021-32810: Data race in crossbeam-deque CVE-2021-38500: Memory safety bugs fixed in Thunderbird 91.2 CVE-2021-38501: Memory safety bugs fixed in Thunderbird 91.2 (Closes: #973042) Checksums-Sha1: 0b5d2398d3359dced9ae37cbadccb3e6ad5cf1ba 8463 thunderbird_91.2.0-1.dsc 399e0bc4e36bcaff345462e12b61b99b8f660825 11937768 thunderbird_91.2.0.orig-thunderbird-l10n.tar.xz 9c7fcdbfd29d8414faf145517606735bb64a9869 429056356 thunderbird_91.2.0.orig.tar.xz 39ac1ed62a16d63e57cbf51e51875128ffde71a3 537868 thunderbird_91.2.0-1.debian.tar.xz e20ad4f2a9f5c5d75bac3546778656083530d25c 36458 thunderbird_91.2.0-1_amd64.buildinfo Checksums-Sha256: f9f00c0734df1e28760e6fa0302156a751a7fb67ea69cc3eeca8b21ea3662625 8463 thunderbird_91.2.0-1.dsc 7e31e448ac8ec4c263c870978d94fefa7f4a9dbd82eac93369cdc707c5332b4c 11937768 thunderbird_91.2.0.orig-thunderbird-l10n.tar.xz bc9c4040811de3f5acf118cdbfe7dd104f42417d31bfa10274bef2def3799c72 429056356 thunderbird_91.2.0.orig.tar.xz cb41665b14db009f1f9186c5c45936c92f84fb9f81797cc2335cc4c8460e07a9 537868 thunderbird_91.2.0-1.debian.tar.xz 52f6062c421e14fe7636c3dac9fd337358c5ccb94ea69098a21dd99c5c08b5bc 36458 thunderbird_91.2.0-1_amd64.buildinfo Files: 9201952eb9f1f15165dc3927d5d9dc91 8463 mail optional thunderbird_91.2.0-1.dsc aeb6393049794f773b26ed7f81c27a65 11937768 mail optional thunderbird_91.2.0.orig-thunderbird-l10n.tar.xz 38085d25cc576862e30ea9de8182508b 429056356 mail optional thunderbird_91.2.0.orig.tar.xz bd8edcf602e1cc96946eb91778c5a9fe 537868 mail optional thunderbird_91.2.0-1.debian.tar.xz 5bb5daaf666f07b118307d50265e3bfd 36458 mail optional thunderbird_91.2.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmFqfDwACgkQgwFgFCUd HbAOBQ//RuKJKcUJLgrbWURQAxU2pLVeiKbpABIpGOwXMMwbMQnuXSScDzgaB29+ wb9I0GWecx1ej8JCvCjDYI/2Q4Zglq4pRr2Tv/9Fop+pi3TMgyIKFm9dKFVSPVTp hfgyrcNBZQiHERB6+5IAPKiCc7SBAEesI/jYli3+FVt1dugZnbWF+8S98KA0RU3B XuGAHC/7I/uLt/I1Y/9trAVWPBLWa2c0fBALKy2Ka9CynAtImw2OkSfENtPUnqig XJ83QfJY1sFXbYeUY2zKmAEGfUObcGzlvA5nKl6hGzr3pxWZyTnK03LYVmj4Tqjx A8QqKcv6Vc5P8yzWwDZ665AMZZKD9PpyiQy3ytI1GdSgdHe4q6TnZ9alTQ9N5Chd UoMni7GreimkKFubdkYQghv05a98B+OEppIZZp+daANOVykx6y21XB0iYWelif3u C39loKeJU6j0ZJh4rmUTs47j86Wu5xM2BShuwOhK+ycPuVjsmCqOm41ch5GfSFud V4rmMFAhgz4DJU+I9YaQto7lBLtz+KHOBn0Fymz7kc5wRv5FejbK8LGc6RJWTyWy mubRvsVxKcSpjTih56bc4bnSREgQ+kOFvSdof/OGFN4otw8bQ8rimnwCEKIurn5x 4OzO8RMVPMknAKpH93jw26oKhH2rPGbgooX4jpxXqI0MWZ903YE= =cdsF -----END PGP SIGNATURE-----