-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 Apr 2022 20:08:25 +0200 Source: thunderbird Architecture: source Version: 1:91.8.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: thunderbird (1:91.8.0-1) unstable; urgency=medium . * [06619c5] New upstream version 91.8.0 Fixed CVE issues in upstream version 91.8 (MFSA 2022-15): CVE-2022-1097: Use-after-free in NSSToken objects CVE-2022-28281: Out of bounds write due to unexpected WebAuthN Extensions CVE-2022-1197: OpenPGP revocation information was ignored CVE-2022-1196: Use-after-free after VR Process destruction CVE-2022-28282: Use-after-free in DocumentL10n::TranslateDocument CVE-2022-28285: Incorrect AliasSet used in JIT Codegen CVE-2022-28286: iframe contents could be rendered outside the border CVE-2022-24713: Denial of Service via complex regular expressions CVE-2022-28289: Memory safety bugs fixed in Thunderbird 91.8 Checksums-Sha1: e2dd2bee1905019713ec6929f07510fbd5d0ebb5 8430 thunderbird_91.8.0-1.dsc 03958b9e0bd24034f96019320c67ec7a0219763d 12255076 thunderbird_91.8.0.orig-thunderbird-l10n.tar.xz 8995cbf561b7c05a34487d65f49af126af58c397 426595852 thunderbird_91.8.0.orig.tar.xz 694fee93f3f353b6e47445971d23b862aa783fcc 545104 thunderbird_91.8.0-1.debian.tar.xz 6cdd65e1ef327b14ac1784cd15ce33eee955eef3 36649 thunderbird_91.8.0-1_amd64.buildinfo Checksums-Sha256: af71055a8dd7c83505613f0bf64711632d4ce7160e0f9d65670927543b0c7bfd 8430 thunderbird_91.8.0-1.dsc ae3e90c58c1a8448a12083a3cbaddc67d2f87b1bee1f1cf6938dd9abdf9414e7 12255076 thunderbird_91.8.0.orig-thunderbird-l10n.tar.xz 63f4feb08a44563db61c4d7c9ec98dd79fcfe247bcf968e6f0425daddee18b67 426595852 thunderbird_91.8.0.orig.tar.xz ec2cc980f64d60646646f63943f090487fec49e45c0f90c245f06704224b6266 545104 thunderbird_91.8.0-1.debian.tar.xz 7cc90680fe3994a76ec7361cb906f402a92bac09b0ed89c6a10d21b708f0846a 36649 thunderbird_91.8.0-1_amd64.buildinfo Files: d0d6186ef1d7993f3315c88495bfa5d5 8430 mail optional thunderbird_91.8.0-1.dsc 5d9e1a442aa6d1f0be44a3ef0360fd6c 12255076 mail optional thunderbird_91.8.0.orig-thunderbird-l10n.tar.xz 67b3d5888ee44a8d9ba0c7d08a8f6287 426595852 mail optional thunderbird_91.8.0.orig.tar.xz e96ef2f6349743c8b71e4fd67be8da8f 545104 mail optional thunderbird_91.8.0-1.debian.tar.xz f95fbd27053bf0411d262497668d328f 36649 mail optional thunderbird_91.8.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmJN3qEACgkQgwFgFCUd HbBEGBAAjAxlP1ySzvQ3nDUil0ovOtr+rseZbOTqXplaX5pW1St9ENcoc/XoTbWW /VS/2XE0soHdphBPSRK99dX2VctqC2K0bKFljqp8VVny9Of3nuTwygF+OIBWU85p WG1WEzAH3iOiZXxa3Rteh4AXXncp7JlytiNst7H3teAXyV3C5FHOoFi5f7Lzmg+s Hc44uhXIkReE6BAJIWo8u6Q9GHq4iMpaMzMLGntsXLHtoPHJxHO4XgHrHUaT4qSn oWBBgCc0MsDoTo1jMXVSrcye9cAs4f1Vl3uy4sdntHnKkXNaVKtAE6YeEpZODu29 W96/Ps5/5eVJdKTa6mdQPwE89c+Uesxo5MX6iHxdI+3MiRcidUNxEkY1aPnpCElo 1wU2U0prwm+ydTu+EMAauECWXHk/h/T5hOQ11MjmpeCfu27VPE4MOlSVPN1dTQWE plwW0fpJuGseixjw4lzObDW8/HLTg+S3645T38Qtbbv24VhknT8YJcJppBreEX0l QOAu+Ga9aTNGdSMc18HGj0Ee0TxP/mzQWEXrlbX6lG6CFGbwC+jfqqNVUtai8XBY L51j4BDCRX8vVyozxWpjjoddd1goarh9ibAsX8QlOvwSGieXotMszMuF9scqvf7P x94BbQedq37KIPURB7AVyEtrZLiWMkxbQVPbEpcL8UAZIq2PUHc= =xijP -----END PGP SIGNATURE-----