-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 Mar 2019 18:22:51 +0100 Source: thunderbird Architecture: source Version: 1:60.6.1-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoen...@t-online.de> Changed-By: Carsten Schoenert <c.schoen...@t-online.de> Changes: thunderbird (1:60.6.1-1) unstable; urgency=medium . [ intrigeri ] * [2013645] d/rules: drop useless usage of dpkg-parsechangelog . [ Carsten Schoenert ] * [daf1252] New upstream version 60.6.1 Fixed CVE issues in upstream version 60.6.0 (MFSA 2019-11) CVE-2019-9790: Use-after-free when removing in-use DOM elements CVE-2019-9791: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey CVE-2019-9792: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script CVE-2019-9793: Improper bounds checks when Spectre mitigations are disabled CVE-2019-9794: Command line arguments not discarded during execution CVE-2019-9795: Type-confusion in IonMonkey JIT compiler CVE-2019-9796: Use-after-free with SMIL animation controller CVE-2018-18506: Proxy Auto-Configuration file can define localhost access to be proxied CVE-2019-9788: Memory safety bugs fixed in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6 Fixed CVE issues in upstream version 60.6.1 (MFSA 2019-12) CVE-2019-9810: IonMonkey MArraySlice has incorrect alias information CVE-2019-9813: Ionmonkey type confusion with __proto__ mutations * [f88a505] rebuild patch queue from patch-queue branch added patch: fixes/Bug-1526744-find-dupes.py-Calculate-md5-by-chunk.patch Checksums-Sha1: 1fc35ec0bd4c446ff0df04bc5554c45b1e51b5f6 12183 thunderbird_60.6.1-1.dsc 7b18eb9010c814284a74470c6c72763bd12c6303 955488 thunderbird_60.6.1.orig-lightning-l10n.tar.xz 9c8eb7f40cbd27b834c0730552c694d3983c0fda 9264912 thunderbird_60.6.1.orig-thunderbird-l10n.tar.xz e093ee314fe17cbf63fc319139979266fa5ab78e 286932072 thunderbird_60.6.1.orig.tar.xz a8968a0c833c958fb79af9943dd296a75c0805f0 554080 thunderbird_60.6.1-1.debian.tar.xz 4a787f51af047e3ee92cfb162e99ef21379cf504 51475 thunderbird_60.6.1-1_amd64.buildinfo Checksums-Sha256: 8f297319289ad97d31d7ccc4b979bb310620d707498b0f12475fdda241dada6d 12183 thunderbird_60.6.1-1.dsc 595a50fa2969079ad9a63c2d2a2095c7165c0e31ddf8f1cb0b80fab6bc8e1c5f 955488 thunderbird_60.6.1.orig-lightning-l10n.tar.xz faff03b13d78839f146aa7110de5fdf1d1a6cccdada10592c6fd8d652124a501 9264912 thunderbird_60.6.1.orig-thunderbird-l10n.tar.xz ec253e62410ab19e956fd0c3d617370b1341cb4851a36388410e6373797a4a7e 286932072 thunderbird_60.6.1.orig.tar.xz e973cb021eabc025b69b920e32be5991c569be9ed008faba3556f5f899503017 554080 thunderbird_60.6.1-1.debian.tar.xz e3545d092b786c1e1fffbbb6758b0dd48738b84e443ec9caab0f9e8932b4f5b3 51475 thunderbird_60.6.1-1_amd64.buildinfo Files: bb2f0c95475c4483ccf67fc6a212c2de 12183 mail optional thunderbird_60.6.1-1.dsc 8f8ddddcba74810e15128c40c9b031a7 955488 mail optional thunderbird_60.6.1.orig-lightning-l10n.tar.xz c12bb663f2c25f2cfb99cd91bbfa2043 9264912 mail optional thunderbird_60.6.1.orig-thunderbird-l10n.tar.xz fc6689b817c785c700ff735873655884 286932072 mail optional thunderbird_60.6.1.orig.tar.xz df8fdeaff8e69048a859277871489ffc 554080 mail optional thunderbird_60.6.1-1.debian.tar.xz 57c7fbce5ddb88c9ab11e27e1091b24b 51475 mail optional thunderbird_60.6.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAlybxHYACgkQgwFgFCUd HbAYGA/8DPig/94QVPC9NhCOI/RlBsRHtiMMTH/rXRuu0XsJI9v6ty/G4V0P0VYL /tPVttAXeXQw8aTPciBYnmOXCFVHXIL3fwO9ru0kSxpKziMjvdBEl77uvv5FNmPc EV9epFgMerlRU7mxGBD3N6IdEuc4H+XEtTceElKhFDHXhFfdsnJKG2VcfxySq1wU tnEcgkkxobA8sVc1OTrL42FRxcm2wdtqKTn/o4fMBQGKWKoNqUDFoS2E2kMTWe5o mQuSwO9UpXspf1lxu7+tNK8hglk+CTn7Uh/taQiSCaGHGkcqDrL8LAcQvnyJ6I5X +EZABYie2eKYNLeSyqOSj67LXdP+2zLU1ubvytH3rPmo4YamDwAmjJmK+GCHk1E6 k8touJZpwAZZknAcVtW1VyVO1B9ul2quzCheMY3X4KKzGK7qj0cXNSB2b1LrF6GC Lb+mQU65K1BLpu9CY2nJbAekwis8h/LO7u6qqNzoeOOQwWcj6SgB2kFSlhohInfk s3DBj/tqnP8b/CQ7svUiSEEok8GMYiNfOb6fHOkcC7lNsCt6dQUKQRyZUeCCFBfF bQ1+ZfS0NEwaSsQ3EMBmDAiwZ8GZWUeyhFh2ikrGYFl5nXjDCVV4fhkEJD0FWBVc +9ub3ZerJBzDnnSs8AFEmpQy7SC+vthilpIyAIRFg6M8/U3Tg0E= =fuXw -----END PGP SIGNATURE-----