-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 28 Aug 2022 17:23:50 +0200 Source: thunderbird Architecture: source Version: 1:102.2.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Closes: 1014748 1017420 Changes: thunderbird (1:102.2.0-1) unstable; urgency=medium . [ Amr Ibrahim ] * [02a3990] thunderbird.desktop: Update StartupWMClass (Closes: #1017420, #1014748) . [ Carsten Schoenert ] * [f7b62a8] d-create-upstream-tarballs.py: Use correct variable * [7194457] New upstream version 102.2.0 Fixed CVE issues in upstream version 102. (MFSA 2022-36): CVE-2022-38472: Address bar spoofing via XSLT error handling CVE-2022-38473: Cross-origin XSLT Documents would have inherited the parent's permissions CVE-2022-38476: Data race and potential use-after-free in PK11_ChangePW CVE-2022-38477: Memory safety bugs fixed in Thunderbird 102.2 CVE-2022-38478: Memory safety bugs fixed in Thunderbird 102.2, and Thunderbird 91.13 Checksums-Sha1: 2f4397b4c452048d7bdac4cbdb5dd308709d2152 8494 thunderbird_102.2.0-1.dsc fbcf54177285b6003e734c6a2ed5c8a25da15ac1 12203456 thunderbird_102.2.0.orig-thunderbird-l10n.tar.xz e7a52eb1de2dc18f6345dd9af3b92b14346cdb90 525127512 thunderbird_102.2.0.orig.tar.xz 7b2830e230b115e247fd38041c3216f22bccc082 545532 thunderbird_102.2.0-1.debian.tar.xz 6a946ceab456d5ddd4abb0955c01302c092a9447 37061 thunderbird_102.2.0-1_amd64.buildinfo Checksums-Sha256: 9a58cc2c4867cedd3e9f1e13ff838ff45ef7558de0d6f5f54bf0de0e0063dcf9 8494 thunderbird_102.2.0-1.dsc 136d549413b51f791dd8485fc8cbec02b1dfa8c17de92eca88a3130fe564cca7 12203456 thunderbird_102.2.0.orig-thunderbird-l10n.tar.xz d5b427fbf8d35555ca71ceb645e440a6233e7f61d7b07eafdbfe54124fbe7534 525127512 thunderbird_102.2.0.orig.tar.xz fa124a4fcff42e741f03c36dc782d3566b9a1470dd380414822111d60a2d9f5a 545532 thunderbird_102.2.0-1.debian.tar.xz e525891422ff5e2d86a2075a56cbe128efdf951ee8c626c2da41b675e50e9a72 37061 thunderbird_102.2.0-1_amd64.buildinfo Files: 1b7ef7487ebcbba34f0fc6625e19130c 8494 mail optional thunderbird_102.2.0-1.dsc 74f7bebeb2f6de64f674965ec10a5053 12203456 mail optional thunderbird_102.2.0.orig-thunderbird-l10n.tar.xz 07e0a9920b915041611e8462aa5de24a 525127512 mail optional thunderbird_102.2.0.orig.tar.xz f0f96176f82f6d1a7cb2ef5ede0d0bf5 545532 mail optional thunderbird_102.2.0-1.debian.tar.xz 173d14bd4ddac8257854b5a8a9873f68 37061 mail optional thunderbird_102.2.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmMLm+wACgkQgwFgFCUd HbBO2A//aXh/iBE1RURjctSa8KSewMskC+XBkTp7YGyC64qE+Ab4U9tP9vAS2KyR gygRRuTWpQkdqvtbp4QLcSNktuyiG5WhLyZ2lJV7jsd8bTicB6R8C49IPLAAQlNR gSnUMwkk31P3PHTE0tQ+U+OVbFJluMN8lQM4oclPzOncSQKvam8JLSUwT5aKkWUO Hewrl8tDeJDXJ386JFR543HwPb2q9G0wEEXlb9D1heg1Fk8KzvNzCBpYSf50cp/u QooBAviKifcJ7IQzzifWHUWHhNTPQR4nkhVbzgX2iCd0pwzQ3YWFoDZusJb2sLWi 8BOijLxvWP2mlENyLRG7v6Jods1qvrXzOAcu3/KYNFKTpTlU2kwPlilwPzHgkuZV 1roRzoHsYAXnVs+5rG4/F5NetYcn6y9uJIuoepRWGd/GjA77jGX2zYbP49uny3T1 rzfS4ptiTWiCr3h4naYIZvoD46sTbpNxWCwjfiTywqRnojMA8qWq900jnGkMnybU tI/ygblqyiD2CfxfINyXPcZG9jIBmviQeLJ0MZdPM43MUaR3Cip81xQHD/9kd/8H E70GZnXXVP+EMRZwmJVwVeyb8/FJhW3uPKxYqSCx0IVWT1etMB3VNiJDTZh29CAY ftUh5fJ+/02zo3QjZgeOFtmYDASnMHHUKnux4EqXOZqIhXPsQ2M= =u3wM -----END PGP SIGNATURE-----