-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 13 Feb 2020 17:58:44 +0100
Source: thunderbird
Architecture: source
Version: 1:68.5.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoen...@t-online.de>
Changed-By: Carsten Schoenert <c.schoen...@t-online.de>
Closes: 891848
Changes:
thunderbird (1:68.5.0-1) unstable; urgency=medium
.
* [d79bf82] New upstream version 68.5.0
Fixed CVE issues in upstream version 68.5.0 (MFSA 2020-07):
CVE-2020-6793: Out-of-bounds read when processing certain email messages
CVE-2020-6794: Setting a master password post-Thunderbird 52 does not
delete unencrypted previously stored passwords
CVE-2020-6795: Crash processing S/MIME messages with multiple signatures
CVE-2020-6798: Incorrect parsing of template tag could result in
JavaScript injection
CVE-2020-6792: Message ID calculcation was based on uninitialized data
CVE-2020-6800: Memory safety bugs fixed in Thunderbird 68.5
(Closes: #891848)
* [0884df6] d/control: increase Standards-Version to 4.5.0
No further changes needed.
Checksums-Sha1:
cb02e312b4eb21b0d2cd726f0be89707c587139b 8274 thunderbird_68.5.0-1.dsc
d84216801b143a2142e8729d93c7b6a25413a985 1045392
thunderbird_68.5.0.orig-lightning-l10n.tar.xz
3c10b45cb61a22ca3cda03f67ed617b163d501a9 9836388
thunderbird_68.5.0.orig-thunderbird-l10n.tar.xz
1d64670eff30bf3feb9789b7ddc05605182a150b 356343476
thunderbird_68.5.0.orig.tar.xz
8e984fe3413d1b82cc302bab2802b995c454c323 546236
thunderbird_68.5.0-1.debian.tar.xz
e682140707ef3ed683b526730bd97e8f62e2b1a6 35461
thunderbird_68.5.0-1_amd64.buildinfo
Checksums-Sha256:
11a2f9a01542fb411df884b2e36f48675f4dca97324a6e5028e72d926c56e7c8 8274
thunderbird_68.5.0-1.dsc
e64a89c5db7d13ec2d1aa75de0beba838129e857da1cb19102ece67e64e87334 1045392
thunderbird_68.5.0.orig-lightning-l10n.tar.xz
0ec0039950493c96bf05f5c429e85055830acd278ecf193ccf1174e75de6943c 9836388
thunderbird_68.5.0.orig-thunderbird-l10n.tar.xz
85f41e9422596df594002c8c1de2211303fbe07ffabd132b2f06723b1d100d4b 356343476
thunderbird_68.5.0.orig.tar.xz
242bd54e43a54cb291ff49f2a393e7c4bc6fdd6950a76a2680abee586e79e83d 546236
thunderbird_68.5.0-1.debian.tar.xz
7ac3a8b4cbfc026bd92ede40da38209f3c7ba507c785bd3e4f6fe15d068110b3 35461
thunderbird_68.5.0-1_amd64.buildinfo
Files:
a68eeb4b44f5f72663cbe0ede9f92afe 8274 mail optional thunderbird_68.5.0-1.dsc
5dfde1fbebc4c3921e1882dde76c4ee3 1045392 mail optional
thunderbird_68.5.0.orig-lightning-l10n.tar.xz
59ade4736f2068f44377663e45b618f9 9836388 mail optional
thunderbird_68.5.0.orig-thunderbird-l10n.tar.xz
02cc6ee328c52c6b2ff262a3fe21e8ba 356343476 mail optional
thunderbird_68.5.0.orig.tar.xz
519239487bbe59f2965abc7ee8c837fe 546236 mail optional
thunderbird_68.5.0-1.debian.tar.xz
3447cda83f34f21b4cbe7a6d7b25f7a1 35461 mail optional
thunderbird_68.5.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=pDNo
-----END PGP SIGNATURE-----
