-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 01 Sep 2022 07:52:16 +0200 Source: thunderbird Architecture: source Version: 1:102.2.1-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: thunderbird (1:102.2.1-1) unstable; urgency=medium . * [e1d0f74] New upstream version 102.2.1 Fixed CVE issues in upstream version 102. (MFSA 2022-38): CVE-2022-3033: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag CVE-2022-3032: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked CVE-2022-3034: An iframe element in an HTML email could trigger a network request CVE-2022-36059: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack Checksums-Sha1: 2ee34e4c127f5a5a34ebd76c51b8bcfcdec180b9 8494 thunderbird_102.2.1-1.dsc bb5eb0b0b2de85117604fbe4fc2cdbbeef6c7db1 12223176 thunderbird_102.2.1.orig-thunderbird-l10n.tar.xz ec9ee4f9b24593c7fe42c47ab43108852d88c61f 522437272 thunderbird_102.2.1.orig.tar.xz e6d59c46cb56dd5c4fa9410ff2413d0faecc5b06 545708 thunderbird_102.2.1-1.debian.tar.xz a1a91162b1edab69ab17b09387885e1e0a3cf125 37061 thunderbird_102.2.1-1_amd64.buildinfo Checksums-Sha256: 4902e56fb4ea64211a239f716b71b9d077dd79336fa6cb4a9735019815450c87 8494 thunderbird_102.2.1-1.dsc cdd7eb25eb2c657cf4d1ec6f8e083138034590ae454af095b3d9a6810706475c 12223176 thunderbird_102.2.1.orig-thunderbird-l10n.tar.xz 5805bc12a154a8356682bb0c7d69a107a3af9e842b03b73195ab937d8aaa3ca2 522437272 thunderbird_102.2.1.orig.tar.xz d3d38895204ea6acb39bf44e5b0c164c56a3e3163f66bac35d37a107a5918f84 545708 thunderbird_102.2.1-1.debian.tar.xz 4dbecae03f5f340b058a68619722699e07b644a6112cd2b3c8eff36f810346d8 37061 thunderbird_102.2.1-1_amd64.buildinfo Files: efc5a3619c75c2f1627c68ae4200a5e6 8494 mail optional thunderbird_102.2.1-1.dsc 3180dfb5ccd4a6229fc17107dbfb481f 12223176 mail optional thunderbird_102.2.1.orig-thunderbird-l10n.tar.xz 68790a2731184c5818c8a98b8298acb9 522437272 mail optional thunderbird_102.2.1.orig.tar.xz dcb32ae2e9f64a802b8d340031a79d87 545708 mail optional thunderbird_102.2.1-1.debian.tar.xz 10f22544bf1bd60751b832b1d94857cb 37061 mail optional thunderbird_102.2.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmMQZtEACgkQgwFgFCUd HbBjfg/+IBOuRaE10ne7LsKmbCBIkueO7pOsA9xMJQkqLECdNo8i5+0NsF7TYZGz HRehZR72C7/cowI6ldOR4a7/bPHpAonicqfSXQNJVDkmakyPQ+Jx0FrJtQNT6FCS bBpD2DYmuUt3hkRuImX2AXIkUwmutKkoss2VmuAhXyRLiQxgFCIVoxVYRYp8J10B ZU7w0DSeT4GU/nUKm1No3pf9meQU9PCJPN5nLETbo1cYdOAVDFIGBBx01S/Dsrpk cB6KZOigfFPHPxuMbjnx6wvUpDOxHbNmxQrz9pvXICPBAvvac7bjgYdqOANMmDke uiX+LEFRcnIT+sP6I2z0mKb356KgZd1fCoWWUSNcV/gvGdsD/NNHvl9fEAB5nNYl BQODuAX8AdMcXbIImkC+4/uFJRkTiZDohP19XqcXNCpZb4DjMNT7eGceZxcbQAwl qPczkMVZZZb42SYo+kIhw8ATDDdXFp3G5N43LJDm/cejIIqOaeJDTOKcHezzN2sp j4cWepAa7dEsNzSF2hGedWuis5b36OBGHG1vhQ1Y/+E5/GMQQJMUXelvrUoEkaqq XPq/QVkUuPN9Ch+UeltVeosiCW4Dd6ZzcBbEwu0Zf5VPNY03AXLaApC1ZAZhBVBu aR38W8qK1b2d6NKvJ3PjRT1Wy/jHYaNUKs4AyjpkaDmWxizznkc= =yLfe -----END PGP SIGNATURE-----