-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 14 Dec 2024 11:23:54 +0100 Source: thunderbird Architecture: source Version: 1:128.5.2esr-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Christoph Goehre <chris@sigxcpu.org> Changes: thunderbird (1:128.5.2esr-1) unstable; urgency=medium . * [e106dcb] New upstream version 128.5.2esr Fixed CVE issues in upstream version 128.5.2 (MFSA 2024-69): CVE-2024-50336: matrix-js-sdk has insufficient MXC URI validation which could allow client-side path traversal * [248b546] rebuild patch queue from patch-queue branch added patches: fixes/Fix-python-virtual-environment-sysconfig-path-calculation.patch Checksums-Sha1: 883222bf2c1923cde3db76f6aaea114cbc33ea7d 8475 thunderbird_128.5.2esr-1.dsc 7ea9bce37528bab6a404ce8f8df5a029f48cbb72 13489412 thunderbird_128.5.2esr.orig-thunderbird-l10n.tar.xz ff9cf36ea594c4c7d664ba6c049b9fa839d4fd6f 702500164 thunderbird_128.5.2esr.orig.tar.xz 731f3986b9fbc319538845e8aa4983ee89fa4e8c 548756 thunderbird_128.5.2esr-1.debian.tar.xz 962dae00a17e24b201ec4c81d12e5bfed304b2db 7063 thunderbird_128.5.2esr-1_source.buildinfo Checksums-Sha256: 53a1b516ea8d236f9e2f961d80338c01921caa872dd186a7f6e1e7b43f7a8064 8475 thunderbird_128.5.2esr-1.dsc 0e2757cddefa20649c595532a87e94ba5a60a9a3bac2679c5305caeaa2187620 13489412 thunderbird_128.5.2esr.orig-thunderbird-l10n.tar.xz c1753a1da6eeb78e58a86b69f23c24dd940ad53db6780142116355a8c999f3ec 702500164 thunderbird_128.5.2esr.orig.tar.xz 78d8b9c034ad27b75b901be4ad1f3e490c520741028c747bc0e20b3c477565a0 548756 thunderbird_128.5.2esr-1.debian.tar.xz 5497bb60dd93203a7263d155fd15e30d020888d4989208644bdada84a47b5234 7063 thunderbird_128.5.2esr-1_source.buildinfo Files: 27521c6bb59d4ba7734e8909246c803b 8475 mail optional thunderbird_128.5.2esr-1.dsc cbe9c137c5ae6de52754c55dd6b055f5 13489412 mail optional thunderbird_128.5.2esr.orig-thunderbird-l10n.tar.xz 1082992dabb81fa410b5d6fb5b4ae41c 702500164 mail optional thunderbird_128.5.2esr.orig.tar.xz 0ceb8c9ba407dd7914353bf6133da0c1 548756 mail optional thunderbird_128.5.2esr-1.debian.tar.xz 6e7c6cf0df60fd5ccff4f346bf698c0c 7063 mail optional thunderbird_128.5.2esr-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEi5SBnCVVcKN0tizNJuPIdadEIO8FAmddhtgACgkQJuPIdadE IO8gGQ//YAEiKWcK7Sc7uvujsSAHAHaDapLWiRwlvoeUK6aw3N9BgXjGchGKDvM8 L7cdyPqyOewQbuGyVLpAWSDmuOjjVyfs76ZsF9vdtB00Qg+1VGV/BL1LoJmoGzfC zq76WjYvEBcBqkNX+0Df+Vg4qekfWE8jem2h75e5OV581db0WXJKUVrUNJHLR93n IuYTFsREN2/nK+tDrfSin9Ufy8Oe+dGCvlZVLtojS0ZFAcUlMiTnuZ8XaRScem6l kbmQwvyVzjEumZuFx8J8vwRrQdiskRufJGA6SzenZPaNWZFhD8+iBySM0vGglPXE +H18fKtS647N44o9CDRv9QWBeGeIMgFahxEkJ7grfahy+wcZff+YNze3ApEUbl1N aXzl0zALzISpzMiJiP8+Zv9IZjeVW2OonGlmdIrkg2lN5WcZR9juwaSsjQregftv uHzX/vSflseC630Dzcy8QPhaeKp/IHR+behyVkFF8V0aAo/3XV6ZeAe+ov3fVmvp Sffs+E1jVx/XFhuNFteEIG65GikqbSwbG1E0+5FozFky/myqAuaETFaBM6iriLkp mY50h1wfd8pi3Jtkq/Bx44hAz89Cwp/YICWVniZBQ0Vvccr8hdxoaAcY1hsFUK4E xX83nfB83dd2sOZQ7NuCPbL7dzuEmF5HXTHq/JiL0I8QLfB4QrY= =oMlp -----END PGP SIGNATURE-----