-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 16 May 2022 13:51:59 +0200 Source: thunderbird Architecture: source Version: 1:91.9.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: thunderbird (1:91.9.0-1) unstable; urgency=medium . * [88b99d1] New upstream version 91.9.0 Fixed CVE issues in upstream version 91.9 (MFSA 2022-18): CVE-2022-1520: Incorrect security status shown after viewing an attached email CVE-2022-29914: Fullscreen notification bypass using popups CVE-2022-29909: Bypassing permission prompt in nested browsing contexts CVE-2022-29916: Leaking browser history with CSS variables CVE-2022-29911: iframe sandbox bypass CVE-2022-29912: Reader mode bypassed SameSite cookies CVE-2022-29913: Speech Synthesis feature not properly disabled CVE-2022-29917: Memory safety bugs fixed in Thunderbird 91.9 Checksums-Sha1: 8e6a9d9ef7716771805dcbd6aaedd5b745c47a0b 8430 thunderbird_91.9.0-1.dsc 514819601272c2ca1394dcd60c86551852b1e9f2 12254376 thunderbird_91.9.0.orig-thunderbird-l10n.tar.xz 7b7c359baed54b1d3e5714c191ac5573b1ed2bdd 427597964 thunderbird_91.9.0.orig.tar.xz 697b2841157b8ac69f17d5b92fa6500818f8dd60 545272 thunderbird_91.9.0-1.debian.tar.xz d8e0bbb5704d04b9384a983ac197b0b8a1757966 36650 thunderbird_91.9.0-1_amd64.buildinfo Checksums-Sha256: 3fb0b85a6357bc4d53791008b447b01de5b72fe7eed13d78454390a97e98c48e 8430 thunderbird_91.9.0-1.dsc fe1463b6142e30fe97a8a5c3b0fa3cc4b2d9f5a3ba0c60e9f09e21d868aed374 12254376 thunderbird_91.9.0.orig-thunderbird-l10n.tar.xz 69d080d65abec482329e277d7a2fc497bf06e1999450e1e6b73c9f5fe402ff0b 427597964 thunderbird_91.9.0.orig.tar.xz 90140eef80c8b9741ac5459f9bbeefb23cf9a1592fe0f5ef4a1694c27e444a3b 545272 thunderbird_91.9.0-1.debian.tar.xz d2b5d28d9273d5fa47588b791fda43a8cca03611a54a1696f126ecd42eef60e5 36650 thunderbird_91.9.0-1_amd64.buildinfo Files: dc0adca05095e38b86f96dd04ae8d399 8430 mail optional thunderbird_91.9.0-1.dsc b797aac8ff05f0efca174b71a639373b 12254376 mail optional thunderbird_91.9.0.orig-thunderbird-l10n.tar.xz f89d5866ca038e8b61fe1642765ca259 427597964 mail optional thunderbird_91.9.0.orig.tar.xz 3b27b4aa1c68557787333e7d501aa1bf 545272 mail optional thunderbird_91.9.0-1.debian.tar.xz a31b6fd13506738ab2405913a77bfda6 36650 mail optional thunderbird_91.9.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmKCUvwACgkQgwFgFCUd HbBHWw//WdNW8lMD80ySOBkKoRNXczjBgbC2dsx+Vmbcfpw4zadxvxDH3Ods4/0L qyawogYrJg7pyWkkBdi5FUgb0oqZkPpJL33kAkIDfErE7p1NeNld8THnw/DJb6tg SX6hciupqDw5hANvD5Qukeu3Rm7oaaKhXApySIr0K7IFzekiGMyXXOYHJJGCP8uq qp+otG0rj+YwVVWvuZ1Do2PoM2RUfJscadOtuNPSNHEzV3DuxMxf2r/DJPVvlcBO owbMS8Ict0Dd67cBixwaSovkKRWLb1iitTgxGd75dMnLFVo3EM/3dT+kva/gq369 lS3PW+hCk1OkUQkHaaCDshdgVwfHusXWiBlqIwEROtjhcbmTwf/sbdo0jvX1QgSa GLmH5aOuz5ywE9E2Cwl8FpXSIBv5ZCPpk/Yj3nCxZNhcgZ1lW8YVGdfH/Pbtt3xl qpalYGIsPOKrjU5n3I0XNtKoyxxdLTIP6xOfmgh+Uf+28cWw/D9HnG5f/llmaorj AGHflumwjTNfxz489Jf92N5FLXYVFfoDUit0Xf6Xz9sy5HAqchn4/4ZdbY5VrWrG k9yHcPyqfQdbtRWH6WDDERHZM6GtYjRaqsxYGzjjm1FthiFNlbZLROW2bYqd8gVl nJRqZwR71d3ZAERYdtFNTCz95qdnSvWT6elJuxG0kMI9I4k7gwo= =CBJv -----END PGP SIGNATURE-----