-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 17 Apr 2023 21:32:45 +0200
Source: thunderbird
Architecture: source
Version: 1:102.10.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoen...@t-online.de>
Changed-By: Carsten Schoenert <c.schoen...@t-online.de>
Changes:
thunderbird (1:102.10.0-1) unstable; urgency=medium
.
* [8afefce] New upstream version 102.10.0
Fixed CVE issues in upstream version 102.10 (MFSA 2023-15):
CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass
CVE-2023-29533: Fullscreen notification obscured
CVE-2023-1999: Double-free in libwebp
CVE-2023-29535: Potential Memory Corruption following Garbage Collector
compaction
CVE-2023-29536: Invalid free from JavaScript code
CVE-2023-0547: Revocation status of S/Mime recipient certificates was
not checked
CVE-2023-29479: Hang when processing certain OpenPGP messages
CVE-2023-29539: Content-Disposition filename truncation leads to
Reflected File Download
CVE-2023-29541: Files with malicious extensions could have been
downloaded unsafely on Linux
CVE-2023-29542: Bypass of file download extension restrictions
CVE-2023-1945: Memory Corruption in Safe Browsing Code
CVE-2023-29548: Incorrect optimization result on ARM64
CVE-2023-29550: Memory safety bugs fixed in Thunderbird 102.10
Checksums-Sha1:
3b946f1f5f4111c15e1c6188bfab9fed31f946ad 8506 thunderbird_102.10.0-1.dsc
6472ae898d1040e8c9abed3717fd30e20fb868d6 12635036
thunderbird_102.10.0.orig-thunderbird-l10n.tar.xz
ed56c4aa06a778f7f5937444a3307242249a54de 523701244
thunderbird_102.10.0.orig.tar.xz
5f7a88bc423b774deb21a18d9d46ca86e5f6a6b6 547360
thunderbird_102.10.0-1.debian.tar.xz
eeea148de0c1d242dd6a58a96c392c46ced74a30 40084
thunderbird_102.10.0-1_amd64.buildinfo
Checksums-Sha256:
330b52f0637f5cf68edaffe4945dbca1563dc8251f20aa667fe3bae299df0e3f 8506
thunderbird_102.10.0-1.dsc
62ba598b795a0ae9d96b0f627a6f862b60115f75a133e51c310085b5011e6e3d 12635036
thunderbird_102.10.0.orig-thunderbird-l10n.tar.xz
52f4191b34eaa20b9c24d035895b8ca85812d52981096d6fe8efc5f794754c06 523701244
thunderbird_102.10.0.orig.tar.xz
a8a6236b49de6de80187a590a2affe6dd221df3ba6a2008b7f3c1165f861f579 547360
thunderbird_102.10.0-1.debian.tar.xz
6c7509418787914ce9a187af38a4454e09a41ce106ad9cb52e5c0c73f7493c5c 40084
thunderbird_102.10.0-1_amd64.buildinfo
Files:
9d1b2401eee24b053df97b606624fad0 8506 mail optional thunderbird_102.10.0-1.dsc
5c16ee8737c959c50cba5be868d1f14c 12635036 mail optional
thunderbird_102.10.0.orig-thunderbird-l10n.tar.xz
eddf2fef2ebc1d31a2c3e5aed20ceb52 523701244 mail optional
thunderbird_102.10.0.orig.tar.xz
7362cc2509d0c30cb30ac5235855e1ed 547360 mail optional
thunderbird_102.10.0-1.debian.tar.xz
f0a2f44454ef2043bc810c51803ba746 40084 mail optional
thunderbird_102.10.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=X9sU
-----END PGP SIGNATURE-----
