-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 13 Feb 2020 17:58:44 +0100 Source: thunderbird Architecture: source Version: 1:68.5.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoen...@t-online.de> Changed-By: Carsten Schoenert <c.schoen...@t-online.de> Closes: 891848 Changes: thunderbird (1:68.5.0-1) unstable; urgency=medium . * [d79bf82] New upstream version 68.5.0 Fixed CVE issues in upstream version 68.5.0 (MFSA 2020-07): CVE-2020-6793: Out-of-bounds read when processing certain email messages CVE-2020-6794: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords CVE-2020-6795: Crash processing S/MIME messages with multiple signatures CVE-2020-6798: Incorrect parsing of template tag could result in JavaScript injection CVE-2020-6792: Message ID calculcation was based on uninitialized data CVE-2020-6800: Memory safety bugs fixed in Thunderbird 68.5 (Closes: #891848) * [0884df6] d/control: increase Standards-Version to 4.5.0 No further changes needed. Checksums-Sha1: cb02e312b4eb21b0d2cd726f0be89707c587139b 8274 thunderbird_68.5.0-1.dsc d84216801b143a2142e8729d93c7b6a25413a985 1045392 thunderbird_68.5.0.orig-lightning-l10n.tar.xz 3c10b45cb61a22ca3cda03f67ed617b163d501a9 9836388 thunderbird_68.5.0.orig-thunderbird-l10n.tar.xz 1d64670eff30bf3feb9789b7ddc05605182a150b 356343476 thunderbird_68.5.0.orig.tar.xz 8e984fe3413d1b82cc302bab2802b995c454c323 546236 thunderbird_68.5.0-1.debian.tar.xz e682140707ef3ed683b526730bd97e8f62e2b1a6 35461 thunderbird_68.5.0-1_amd64.buildinfo Checksums-Sha256: 11a2f9a01542fb411df884b2e36f48675f4dca97324a6e5028e72d926c56e7c8 8274 thunderbird_68.5.0-1.dsc e64a89c5db7d13ec2d1aa75de0beba838129e857da1cb19102ece67e64e87334 1045392 thunderbird_68.5.0.orig-lightning-l10n.tar.xz 0ec0039950493c96bf05f5c429e85055830acd278ecf193ccf1174e75de6943c 9836388 thunderbird_68.5.0.orig-thunderbird-l10n.tar.xz 85f41e9422596df594002c8c1de2211303fbe07ffabd132b2f06723b1d100d4b 356343476 thunderbird_68.5.0.orig.tar.xz 242bd54e43a54cb291ff49f2a393e7c4bc6fdd6950a76a2680abee586e79e83d 546236 thunderbird_68.5.0-1.debian.tar.xz 7ac3a8b4cbfc026bd92ede40da38209f3c7ba507c785bd3e4f6fe15d068110b3 35461 thunderbird_68.5.0-1_amd64.buildinfo Files: a68eeb4b44f5f72663cbe0ede9f92afe 8274 mail optional thunderbird_68.5.0-1.dsc 5dfde1fbebc4c3921e1882dde76c4ee3 1045392 mail optional thunderbird_68.5.0.orig-lightning-l10n.tar.xz 59ade4736f2068f44377663e45b618f9 9836388 mail optional thunderbird_68.5.0.orig-thunderbird-l10n.tar.xz 02cc6ee328c52c6b2ff262a3fe21e8ba 356343476 mail optional thunderbird_68.5.0.orig.tar.xz 519239487bbe59f2965abc7ee8c837fe 546236 mail optional thunderbird_68.5.0-1.debian.tar.xz 3447cda83f34f21b4cbe7a6d7b25f7a1 35461 mail optional thunderbird_68.5.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAl5FnGsACgkQgwFgFCUd HbCMDA//anUQU4HT8lhETbgPKIBdykJfvqdPv++XEQ+PzExK8nrIEYFHkO1AMVZs uAWviU3uifj2n+/tAT5Bw45x17LjBUfYr4jUxmZ20J/un1i4tz33r0ht3oLhYg6S TAF27xJYl/2EpITXO+5MYN9r7pqBDsdbkvVq6cW1dnPXQnM8yEHyERShxYSs9odt PNKIau1fsFtV/eGS00AY6HOSw0WcngmMlD1Y5MrtDhup1ZswiWo8BT5rhXK6epp1 DyTtBI5SgEdsR6zGaFDx6ZqTBz3EdD0E9/apqkewJAVn3L9kQyAyCXhkH2oM0Bhf tDSOjSoWgwyMus5KD5giut3htot28OA5NKbKUwW3U5CF7bzZhQVi5uWFhVulqRAl Dr3LD9VOuktDLmicqvwaGNJcEgOoCzpyUH83EkV4BEsb71+d26V4MYITRT3NFH2o Qer8TKMCj/69QgfBcuCrT3SvQLThuzKN/NM4m3QEuG5pSF4qXofD6ZoPQk5TDzWn G2J7yyg86m9xCqR8oKZmSZQrhzZufQgpeMRe9J5+fjVWFHkVJQ98TcO9s2jAahoL gfwr9B86P4aCfj5YquYZDlMTcKkIHERU5f7Ab3cjsWa7cY7u2dQ7GXRoav2cDGE/ 8d4FB5NEI3GLAxkehzJFacgOCq6vNIOUSOPSUVh96Xy57wZiq3U= =pDNo -----END PGP SIGNATURE-----