-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 11 Sep 2019 17:54:10 +0200
Source: thunderbird
Architecture: source
Version: 1:60.9.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoen...@t-online.de>
Changed-By: Carsten Schoenert <c.schoen...@t-online.de>
Changes:
thunderbird (1:60.9.0-1) unstable; urgency=medium
.
* [5f7ba31] New upstream version 60.9.0
Fixed CVE issues in upstream version 60.8.0 (MFSA 2019-29)
CVE-2019-11746: Use-after-free while manipulating video
CVE-2019-11744: XSS by breaking out of title and textarea elements using
innerHTML
CVE-2019-11742: Same-origin policy violation with SVG filters and canvas
to steal cross-origin images
CVE-2019-11752: Use-after-free while extracting a key value in IndexedDB
CVE-2019-11743: Cross-origin access to unload event attributes
CVE-2019-11740: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
Firefox ESR 60.9, and Thunderbird 60.9
Checksums-Sha1:
b424e87e71150fe539855e0115ee8fd65002a8db 12197 thunderbird_60.9.0-1.dsc
30371e2cc5d1d09aad73658b800765cfe706a9c7 955432
thunderbird_60.9.0.orig-lightning-l10n.tar.xz
9bf7716b4f71c59b29adff6d7825f79b61713570 9265476
thunderbird_60.9.0.orig-thunderbird-l10n.tar.xz
17212b0dc0155e294663bb640f84858dbc88b158 286753784
thunderbird_60.9.0.orig.tar.xz
3b38a964ce9307e7ca60d5aff00d4ae8d9d12f15 555392
thunderbird_60.9.0-1.debian.tar.xz
26471c7ff0d0e93e1bac8023a89c6c6744d37307 52008
thunderbird_60.9.0-1_amd64.buildinfo
Checksums-Sha256:
295b60fd28f19d6e3098d7a12a62c5cdd4078cc379099f7947de230e1b09f1e2 12197
thunderbird_60.9.0-1.dsc
cc318a5332d94fcb956ec8ecc343457f66c850595dcc7535ac9d1dbd8702eefe 955432
thunderbird_60.9.0.orig-lightning-l10n.tar.xz
88ad94d156c52f3dec14f5fc0b052006a25091f915a55233afacd92bb215dd1f 9265476
thunderbird_60.9.0.orig-thunderbird-l10n.tar.xz
4a7625cafda87961d75901982e7e72f56555b74561308875543c76ce543b577d 286753784
thunderbird_60.9.0.orig.tar.xz
73a91912f9495f33645eebaad92e5afc99270b97ae7720bcc04b7c31f00e02b6 555392
thunderbird_60.9.0-1.debian.tar.xz
82b34cd07222568e0ada6064b43664b6dc901449eae07c4c7a7713f76af6e657 52008
thunderbird_60.9.0-1_amd64.buildinfo
Files:
28b672d8c817f9e6ba3653394909120f 12197 mail optional thunderbird_60.9.0-1.dsc
f2dddf657068e461f3c478c54734ab5e 955432 mail optional
thunderbird_60.9.0.orig-lightning-l10n.tar.xz
dc5bd18ba70428a208ded91a8b84a186 9265476 mail optional
thunderbird_60.9.0.orig-thunderbird-l10n.tar.xz
9c66e73475aaf55f05edda4a7231f737 286753784 mail optional
thunderbird_60.9.0.orig.tar.xz
838a8e3c71a599ca5ec2c4730a2a6dda 555392 mail optional
thunderbird_60.9.0-1.debian.tar.xz
784a29bd46c07e047b472ae12a096cb3 52008 mail optional
thunderbird_60.9.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=oIg6
-----END PGP SIGNATURE-----
