-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 14 Jun 2024 13:26:00 +0200 Source: thunderbird Architecture: source Version: 1:115.12.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Closes: 1071824 Changes: thunderbird (1:115.12.0-1) unstable; urgency=medium . * [3d303c4] d/c-u-t.py: Ignore one more version * [2e7f143] New upstream version 115.12.0 Fixed CVE issues in upstream version 115.12 (MFSA 2024-28): CVE-2024-5702: Use-after-free in networking CVE-2024-5688: Use-after-free in JavaScript object transplant CVE-2024-5690: External protocol handlers leaked by timing attack CVE-2024-5691: Sandboxed iframes were able to bypass sandbox restrictions to open a new window CVE-2024-5692: Bypass of file name restrictions during saving CVE-2024-5693: Cross-Origin Image leak via Offscreen Canvas CVE-2024-5696: Memory Corruption in Text Fragments CVE-2024-5700: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 * [9afc3a0] d/logo/thunderbird: Update PNG files from newer SVG (Closes: #1071824) * [a92c8d1] d/thunderbird.install: Install the newer correct SVG graphic Checksums-Sha1: c9f9c2cc13535a3b6cc662839ceb3bc351519a42 8473 thunderbird_115.12.0-1.dsc c51094c65457c893285b74b8b8fe8911471202ff 13171580 thunderbird_115.12.0.orig-thunderbird-l10n.tar.xz 4ed88eec1ed0991bdf9fcdda63eb5d12c92eaf4b 558108552 thunderbird_115.12.0.orig.tar.xz 5aa90b14e3e4b1cebcab16571ea5841dca6bb898 549388 thunderbird_115.12.0-1.debian.tar.xz 498b0f13a633b26e8d0a59847250412723a030e6 40804 thunderbird_115.12.0-1_amd64.buildinfo Checksums-Sha256: 44321918e6849488865452f561ab81eb113cc873bb1ea5dd66f5119b524ece3e 8473 thunderbird_115.12.0-1.dsc db659a59aab84b8254c281dd11eee265bc512e87580fc82769cac3562a807b38 13171580 thunderbird_115.12.0.orig-thunderbird-l10n.tar.xz 4c8e00e08cfff59a5390c5d5f0cf06f446ce88d8ac9f025d9520d0f3e18d49b7 558108552 thunderbird_115.12.0.orig.tar.xz e89c8610eada1747d0d01e7e27ff8a33d43492566b70e69bb6e3d2dd88999646 549388 thunderbird_115.12.0-1.debian.tar.xz 8a473fc478e7479afe94a81d0e5b6be950835d56d11b92bfb93288fc30154336 40804 thunderbird_115.12.0-1_amd64.buildinfo Files: fdb6feac5d8ed78ffc8d7df3df56849b 8473 mail optional thunderbird_115.12.0-1.dsc 3da77cb525ecefec286180443a8ce7ff 13171580 mail optional thunderbird_115.12.0.orig-thunderbird-l10n.tar.xz 4c4f76e274b988b74e14fa2fde6054f9 558108552 mail optional thunderbird_115.12.0.orig.tar.xz 8ff9214234ca15403c2115092afe0552 549388 mail optional thunderbird_115.12.0-1.debian.tar.xz e034716b3eed69c60ab189b6313c76a7 40804 mail optional thunderbird_115.12.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmZsL+cACgkQgwFgFCUd HbA2rhAAoeoxtlQqepogXvhMfPR+4tYzVycLwNbQKE2J35TjSyx7g36nK8dw7QI5 rhyG+z+E6kWhzIa0jTT0OaqvC2/UuiVq12KmceIylkYO8+aBk9dNx2fdZ0R99+FW zk0GjABG+w+fYsGE08mh1CyaMTm3ApQqHDuKEb0bKZHDOKKZU+bj0QMlGkM/A3gy sV9rt2djA2Lyy8ugm+cc2jKjS3gkNn2lWFZXpBEBS87UO6ABGP5egyhkuIKAtxnv 7PyqYeLve4py4xZqqMsk8lJ3HZTyZfbuvFTiuennTgVnN11Q140CdejSIWnwwoNX 4IIT+b+zv3tv2VGieV7gKoCA5AD0vIUkpHrg0eIR/FHHOpBbd686pgEUThTvne0M Rg7/NLe8LQKdonm34IcZ0qqE6/ZTJGooQV0urqjXvaVp+hzjn3qawU090butB1YG l2U60tRzljz2ZNdOmqSUmy+EXJUxkiJkwWDn12yeUM4P/TPo1A8JqNdshjIv9Xo7 Ds3UWGrAak4CJzu/Y7WpbkfYc7bsXpU6rTM24jKIPqWIfGH7onJAl+ITs7HfnDqA XL7YSwz41VlfiUBtWfk9iiZK1v99l/WcWV+TyMYfAGZPSKMiE2CzKm4mLZRFUl92 0Y9gtWirqQrsMM2uIJoIdAY/aZNsfXkwm2ZAHa2l6EqjbGnBCQ4= =495P -----END PGP SIGNATURE-----
