-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Apr 2025 10:45:34 +0200 Source: thunderbird Architecture: source Version: 1:128.9.0esr-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoenert@t-online.de> Changed-By: Christoph Goehre <chris@sigxcpu.org> Changes: thunderbird (1:128.9.0esr-1) unstable; urgency=medium . * [ccc36f9] New upstream version 128.9.0esr Fixed CVE issues in upstream version 128.9 (MFSA 2025-24): CVE-2025-3028: Use-after-free triggered by XSLTProcessor CVE-2025-3029: URL Bar Spoofing via non-BMP Unicode characters CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 * [c70d0c4] rebuild patch queue from patch-queue branch modified patches: thunderbird-l10n/sl-change-Edit-Uredi-to-CTRL-E.patch * [ba02ce1] d/thunderbird.install: install interesting_serverknobs.json file Checksums-Sha1: b98fa0922986bc5f3fbf82f69b95253ba0407703 8475 thunderbird_128.9.0esr-1.dsc 637aef520852c2be55e19ac4dea622d9df2d668a 13219096 thunderbird_128.9.0esr.orig-thunderbird-l10n.tar.xz cb853c72481515780a3af9cee27768319fe13360 696092692 thunderbird_128.9.0esr.orig.tar.xz d177348de840efa393d5d672c6c3de9f79c93cf2 547928 thunderbird_128.9.0esr-1.debian.tar.xz 240a68f7e7d4ffefa99785e1576b2a01491f5dfe 6429 thunderbird_128.9.0esr-1_source.buildinfo Checksums-Sha256: 55462a3acf6869c369469d9bd3c5b5908774d90db4ee0caf5be106d935f147ab 8475 thunderbird_128.9.0esr-1.dsc 0dc39bc03f0945371586f57bb48144ea74b9c6e4718742b97ae67e5fedfbe966 13219096 thunderbird_128.9.0esr.orig-thunderbird-l10n.tar.xz 5ebcfe5b3afc53560a94e66242adae7f6df78662261fc875258d74692c754cc3 696092692 thunderbird_128.9.0esr.orig.tar.xz 6cef56f1220825f6297927f6dbf3fbe372dfc305ad0eaa7fd49fcf9fc2e5d549 547928 thunderbird_128.9.0esr-1.debian.tar.xz 6e7dbc1fde09681595f72da6e8a7d14c83626157c42787dfd98c4289f46f9f2f 6429 thunderbird_128.9.0esr-1_source.buildinfo Files: e597ae92e8f7a0a133c6a5cfaea563c7 8475 mail optional thunderbird_128.9.0esr-1.dsc ce4afe2e7ffcbf64a8cdf91175b5ad19 13219096 mail optional thunderbird_128.9.0esr.orig-thunderbird-l10n.tar.xz 9aa12d3ae37f78f1f1ab337516de7a00 696092692 mail optional thunderbird_128.9.0esr.orig.tar.xz a1cad38a84ba8522c2afe83c6abcfc4c 547928 mail optional thunderbird_128.9.0esr-1.debian.tar.xz 05087e3b75ca9ce0ae95b8c72814b245 6429 mail optional thunderbird_128.9.0esr-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEi5SBnCVVcKN0tizNJuPIdadEIO8FAmftHI4ACgkQJuPIdadE IO+RMRAAsy77o7ylzYvm2OhnRhXMRbQFXKFwnbxGSNlvgBo6rwyMZ+i44y31RW3s Yn8tsMlJsbMPkHBV2etf8ghZiaAIi6Wll8YyHDrpnHNnuMXzt9OlXg4x9k3cHhsq f8YbfGurbmIUxRCo34s4FZY0POHwG08HDSK7Pr/xUgMqCnbjrfz58X+UhmubjzCl CGuBKboPjkMddR4IirYTabY61BK2kvsHlK6iwfdFUrLlrJP4LF0axcW7y2vaSnhY TimYxCr4iEPO7QA5YkxTTaurNQi6+z4K/rmBn90+gizz5eeq2YlnfArOHotcm5ON q+fXw9tKCePNcZ3H5B5p//vSFkyaeYLRt2JUyxiW2JqYxPNtz8tvxmSUTQnmXQW5 uXMSAijh1WeM9WwyGOOfkgIGiGSj6oNreqaSgb2Dp/NDgScuWTsgrFOgGwI7HP4v kRt4Lyz370Up6OOK6/JQyJc2HeJ4jihNLtDkmL1amHZcbHndDwMQSD5YJ2XWmHJk j3IVCF6SiVAQ7Atl5TP3JzbKGBWGb9J2JrE4YpWKizuKnR6hpp5d/uKI4Ql6A5ef agDTEsSPIYH6Qf9tJyDRn6Tl/EBCngRaNSC5erbQiFiE+whD4C++PUcy7Who95hI OlzogmiM8uRgcgXAcmLY+JfphK8geGVLIPofhI2QiY80KfjNyEQ= =rOHb -----END PGP SIGNATURE-----