-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 19 Apr 2021 20:00:32 +0200 Source: thunderbird Architecture: source Version: 1:78.10.0-1 Distribution: unstable Urgency: medium Maintainer: Carsten Schoenert <c.schoen...@t-online.de> Changed-By: Carsten Schoenert <c.schoen...@t-online.de> Changes: thunderbird (1:78.10.0-1) unstable; urgency=medium . * [f38d78f] New upstream version 78.10.0 Fixed CVE issues in upstream version 78.10 (MFSA 2021-15): CVE-2021-23994: Out of bound write due to lazy initialization CVE-2021-23995: Use-after-free in Responsive Design Mode CVE-2021-23998: Secure Lock icon could have been spoofed CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage CVE-2021-23999: Blob URLs may have been granted additional privileges CVE-2021-24002: Arbitrary FTP command execution on FTP servers using an encoded URL CVE-2021-29945: Incorrect size computation in WebAssembly JIT could lead to null-reads (This issue only affected x86-32 platforms.) CVE-2021-29946: Port blocking could be bypassed CVE-2021-29948: Race condition when reading from disk while verifying signatures Checksums-Sha1: adbea0eb0e2d81401e2e67b738dca1ad6b207062 8161 thunderbird_78.10.0-1.dsc 26bbdd4630687f56709fa8827e3d98239ebaaf5e 11808804 thunderbird_78.10.0.orig-thunderbird-l10n.tar.xz bd73d9bf4bc8cdd8e3a866664bb1a1a8c738a83f 372411512 thunderbird_78.10.0.orig.tar.xz ed7463c4f69ccb1a815afc884bb5ac38042f3676 706340 thunderbird_78.10.0-1.debian.tar.xz a11ddcfbdf533d093a9d4da3ea8ad3cfacf4409f 35704 thunderbird_78.10.0-1_amd64.buildinfo Checksums-Sha256: c26cf14e70e6616c7ef1ea5615f1de9e4934754129c5955839ff22f6d2f20a12 8161 thunderbird_78.10.0-1.dsc 5f4aeb198e3fa085e3106cc19749ac2784eb64962e6c96c5b4ab3821018680dc 11808804 thunderbird_78.10.0.orig-thunderbird-l10n.tar.xz de5f38e9723ed96038844a2a8a9799a3e388e6f181e7fe2f0f73b0c7c346bb73 372411512 thunderbird_78.10.0.orig.tar.xz 66880d6d5d4b9333753f7908eac0bd64c6a6ebf0388ecc95740892c362859998 706340 thunderbird_78.10.0-1.debian.tar.xz efc054da3c26208840f59e860e77efb65102df93d0f1bed7c8d5cc1a91dcb0bc 35704 thunderbird_78.10.0-1_amd64.buildinfo Files: 618dd21ea1e6822ab6ba9a82b2a8f4d0 8161 mail optional thunderbird_78.10.0-1.dsc 82218978e8b29abcfcf7c567d55bb9ad 11808804 mail optional thunderbird_78.10.0.orig-thunderbird-l10n.tar.xz 91cd0171031ec56fb37dc4e43098e53b 372411512 mail optional thunderbird_78.10.0.orig.tar.xz f736e66fe493f8af97167b5a98fdb7d8 706340 mail optional thunderbird_78.10.0-1.debian.tar.xz 68976f0623db1ed73bffa248eb82a063 35704 mail optional thunderbird_78.10.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmB/ARwACgkQgwFgFCUd HbAhYQ/9Fb0JgApIHcs3BxY4MaDYjC62EtNlqtJcHe2GJx0IfhOZuMXJSRkHKH7m 5eEbE0H3fvnhFALlId1MaYRFw1szVxIb3biy7ivdseFsYxaWXAkskgbNr6kKfj1H DYZaAQwVtbFYPfb/cZvBO7ymWxd3xF8fvTTA5Nf3DfB5mxUNMZVx7VYqkmYC9sTp D4cxErazKAUFw1Ef18P/cg9Ke+nq52VGfcFKMWpic95V9oA8AV19FDpoCxK3vyje KV1wmT1TdhdQ16kj2nRq/xktmXwKPHk2x7y6XhD/ny+EmsDfbQhYuj3JfkKVVnq1 CA2LlnxM/g4Rz23OynrAZEG8CPViIhimlUOxeBWRyqqNRUmLD9yHcgz9vQxejGxk /umZ43lwqBYK3h7+cKTVo59MpSydXntf9slCurQjQUmBemmipQD4z3OWpDFP588S 2L9FNfgfHVIGiYOaEh5Js6VIRbp4KGwr/m4rY3FuHJQupDJqEClDxtk/lBzuRvA3 TlHkilj35HhM1aBc8HlCw/CSMPuIq24eLn7NZM+9UW9KIUSBjgogr086nSvZ3+XL 91HKa3HH/FAy2Z56JMGa3UNQUYdI8qevkOblFGaKhPJUnSEbKK4FU2BSLGANQE3c L/+AnPpoD6p+bAL86PQldB1NPP5sf9y9y7ijPtxha4taGja9Jx0= =ovSz -----END PGP SIGNATURE-----