-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jan 2024 16:56:31 +0100 Source: thunderbird Architecture: source Version: 1:115.7.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: thunderbird (1:115.7.0-1) unstable; urgency=medium . * [6e0c26c] New upstream version 115.7.0 Fixed CVE issues in upstream version 115.7 (MFSA 2024-04): CVE-2024-0741: Out of bounds write in ANGLE CVE-2024-0742: Failure to update user input timestamp CVE-2024-0746: Crash when listing printers on Linux CVE-2024-0747: Bypass of Content Security Policy when directive unsafe-inline was set CVE-2024-0749: Phishing site popup could show local origin in address bar CVE-2024-0750: Potential permissions request bypass via clickjacking CVE-2024-0751: Privilege escalation through devtools CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 Checksums-Sha1: ae0def80a0485c63f1d2ff7c19df677b8b4dfd3f 8463 thunderbird_115.7.0-1.dsc d9d554788e52f04062ad3c9c81c8ecafbbe1d7a8 12969940 thunderbird_115.7.0.orig-thunderbird-l10n.tar.xz 43e2554c78ab7d2c23381d0d785f887c907409f4 554913208 thunderbird_115.7.0.orig.tar.xz 4e28f888b19db61a5c87f4000c0c9706d85baff2 544348 thunderbird_115.7.0-1.debian.tar.xz 510b260efaa5f5278b26198810a23b0336b03c07 40457 thunderbird_115.7.0-1_amd64.buildinfo Checksums-Sha256: a65e27bfc14b21770ac2e422a84759470d30c21482d4529e3c95642fdfc4556d 8463 thunderbird_115.7.0-1.dsc 6fc43cefff29fa160b6371c513a909a38584581c1562974cb32c589da486d7cd 12969940 thunderbird_115.7.0.orig-thunderbird-l10n.tar.xz aff5d7e7d3d0388cc95e38c5ccde2301c85d974cc1db770ed1d82308819d187e 554913208 thunderbird_115.7.0.orig.tar.xz d92a9d42bc27fa8601ec66249ad15066c1072e40c101472831b5a2031caa0a3d 544348 thunderbird_115.7.0-1.debian.tar.xz 948d5f00bd0e1bd8e8dd5a0e30e27a4d46d284187d08d7d908a36bd38f14e660 40457 thunderbird_115.7.0-1_amd64.buildinfo Files: fd2e1cb7beff1bfa7ceb23570213323e 8463 mail optional thunderbird_115.7.0-1.dsc 9abe0c7e0fcc73b15db24f546964e362 12969940 mail optional thunderbird_115.7.0.orig-thunderbird-l10n.tar.xz 1e725b431241cd8c52c132b313c0db87 554913208 mail optional thunderbird_115.7.0.orig.tar.xz 07f43bc9f65454a5388e93dba2b63e5d 544348 mail optional thunderbird_115.7.0-1.debian.tar.xz dbd322598a9687bc5edc709e7f8e1356 40457 mail optional thunderbird_115.7.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmWv504ACgkQgwFgFCUd HbCGdA/+OJx4JBAHGngYEPkttnmqWDNy/nWdaVzb4pa+m9gSsW2mSLMvQb9XtY1d 7IO6aoY1NHDYbdk36mFoUzwViYDZ8HEUQBXGeEiGICNgVaGhOFuipDpZX2N9vEVN 4sRUW3SZbUc9vU2n64kym+1nLGCkTnbp4sPSFAqixAiwOU4IJXPVANNCKU2xTP/h 3HXbIVTqwQT1PbW7c1VfK6OKvtrnwaCg6GatmE1stUOa3+ER60flpOPLfm/WvcXE TxPxJMqLgHhEvtWEj1OCgZCXADfweG0mU0OeQ4kQOxEr7PWG+zrRl+iFt/GaeNnT 725+FRSXQUayIKijh9pchgEQ1gO6qyFmT/vmTmhrJznBzmrDv5AhOPTbDJfUFQa0 w8n5S5TptAr2gbz68zxKpBPlKZkxnCFDbO9Jj29A8o5HoVlDf+VKGGuCOnQH3XbX mJb4x1hHI6y5ndSC7KgP5CodHUlFOFl3DW82JnjtkNXjN6JqCihuM1HsXbC/oDCl V0V6sSVCNNvZN7DPh1TDdCw2q6HyJ5rDo5sOYOSg/KqVkhk7YTqBJmBsiNJ53g7s PwoEXjeNWgJqk5gvdK8joxL5a3n8QQEb2tGUuSmtrw+o4366lzP4mHD80iVEJZ1u YiKIxY1hKDCsfULwwTNZLcdyhfzTG6S1IY4N7LNcscGIcMpVzf0= =7lSs -----END PGP SIGNATURE-----