-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Dec 2022 19:40:57 +0100 Source: thunderbird Architecture: source Version: 1:102.6.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: thunderbird (1:102.6.0-1) unstable; urgency=medium . [ Paul Gevers ] * [6bbbd94] tests: thunderbird no longer builds on armel and armhf, so let's not fail while trying to test there * [d9e09a0] tests: help.sh is really a very superficial test, so let's mark it as such . [ Carsten Schoenert ] * [43b90d6] New upstream version 102.6.0 Fixed CVE issues in upstream version 102.6 (MFSA 2022-53): CVE-2022-46880: Use-after-free in WebGL CVE-2022-46872: Arbitrary file read from a compromised content process CVE-2022-46881: Memory corruption in WebGL CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions CVE-2022-46882: Use-after-free in WebGL CVE-2022-46878: Memory safety bugs fixed in Thunderbird 102.6 * [745c1a3] Rebuild patch queue from patch-queue branch Removed patches (included upstream): fixes/Bug-1773070-Rename-remove-some-eventState-s-variables.-r-.patch fixes/Bug-1782988-Avoid-build-bustage-when-building-against-gli.patch fixes/Bug-1782988-Fix-use-of-arc4random_buf-use-in-ping.cpp.-r-.patch * [1e74214] d/control: Increase buid dep on libnss3-dev to 3.79.2 Checksums-Sha1: 5df418585829886abbb8c79a552ee175e815d0ad 8496 thunderbird_102.6.0-1.dsc 8419938cc36f62ebc08f6a2926c37dfa77d37320 12286616 thunderbird_102.6.0.orig-thunderbird-l10n.tar.xz cb8e889389029238d5f114bffee01b1f207b96df 519038840 thunderbird_102.6.0.orig.tar.xz 51210382e58ec8479eeee3248cf69411a92655b8 546280 thunderbird_102.6.0-1.debian.tar.xz 0d52e95477a08069c28d97be18a71a8830d69d97 39309 thunderbird_102.6.0-1_amd64.buildinfo Checksums-Sha256: db228c40e5c0366a9d5ca7bc886e797b02d7c438bedc4b68eff15bd8a4aaf5cb 8496 thunderbird_102.6.0-1.dsc b04ceb4128897795bf2b2266bc794b3ab4229c3ddb6471ca81ca58915329a18f 12286616 thunderbird_102.6.0.orig-thunderbird-l10n.tar.xz d2b3b1e5f4edc255cebe596f2eef3093ab8f3bb22148c8ab1d4016c637d985c5 519038840 thunderbird_102.6.0.orig.tar.xz e9373c106599ff16324609afa72d0ae65e4f46efe87ad67fef8409f2d8353047 546280 thunderbird_102.6.0-1.debian.tar.xz 19d8e6f8a76ed274f7e688405ff11e7e59c1700d38608fd3625984d06d9f1d99 39309 thunderbird_102.6.0-1_amd64.buildinfo Files: 117ef1341123c1f8b9bb89ba9a67e352 8496 mail optional thunderbird_102.6.0-1.dsc 233d275ca0cbb4244293ef54958aa27f 12286616 mail optional thunderbird_102.6.0.orig-thunderbird-l10n.tar.xz d248f7dea30baf7d67c2f7db63a6de0f 519038840 mail optional thunderbird_102.6.0.orig.tar.xz 28a680dea766e7416549debff5c7fcac 546280 mail optional thunderbird_102.6.0-1.debian.tar.xz ca417048c81a630b9ec1915014010f28 39309 mail optional thunderbird_102.6.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmOYzQcACgkQgwFgFCUd HbD/Qw//SxCRl4xOuyGHK7W2IRsoLBH4HcXQ6Evoyko/bnGZKJr1nhjQDP19FSJZ YfOZrfBKP3rJL/orqZICRoKXsEl4vG3alG0SI5GCRGAS+lxUzToY4qBED0AtUwyD uOzKYHMHF4b1CGwyaJWyG5dWs7pQKXg2EhxxGPm5YO0swc8rBTZFnflLYQ8/ZQ8l c4r0r2jAN7C3I/ZKr9zcu1hQwbiTx2WL/0zGISnKaLfZywsPL+9Gtyg0mFGeOObs SWBKLbHWDIDdQuI7FLs6fQwblyJ4dniEdMMiQ3SofjSiX3asIXBlBpgO7SZ5bCOs 9eGhzT8T3a0uY1o5fUC12KzMJ4grlKtAWhomq9mAGHjaFMCxt4DwvJFNhKYKl6lX cQEQBpJKnxdBNi9zTksBuQ5F6wqECoZcHI5xYTtsB5bEh8HeOILZvtFAXjlEEG19 bdYtNCjosgS/nBI7GQ1bHyYyojZtnWNp4dfKjJ7mxQp1s751RhHx4vCDB6N9d59f HXVUTwSyLecT14jvPTv7ukShxm9Me7Xmf0VTR3uoty+rQP3bWa6hevuxycBHa0IS kg8D1L2CZGyOzyFfCTysruP8dJmfKBuP2YeCUJfUR5aJHybOIqOB3DLETd23bXTJ hP3z73GnNaN3xaLd0S//59TAw3tRXcQEVk+o43EMAfg63ifMVXU= =TY5l -----END PGP SIGNATURE-----