-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 Jul 2022 19:23:20 +0200 Source: thunderbird Architecture: source Version: 1:91.12.0-1~deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Carsten Schoenert <c.schoen...@t-online.de> Changed-By: Carsten Schoenert <c.schoen...@t-online.de> Closes: 1014004 Changes: thunderbird (1:91.12.0-1~deb11u1) bullseye-security; urgency=medium . * [f7c7e7d] New upstream version 91.12.0 Fixed CVE issues in upstream version 91.12 (MFSA 2022-31): CVE-2022-36319: Mouse Position spoofing with CSS transforms CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters (Closes: #1014004) Checksums-Sha1: 67a9f8eb31cc3436adca0728f785d51f238b9721 8437 thunderbird_91.12.0-1~deb11u1.dsc af286ab0d6919e81d1284684fbf959baec14f020 12310488 thunderbird_91.12.0.orig-thunderbird-l10n.tar.xz a9df20b434d91376857206a7c91dcd82c93d8877 427093264 thunderbird_91.12.0.orig.tar.xz f568cef84b2b4b0a180b4a11d1e6cd924ff58427 546648 thunderbird_91.12.0-1~deb11u1.debian.tar.xz Checksums-Sha256: 681f226419723323443cb569ec6e4f5f795be04b16de0a42e515a49d917aaaa4 8437 thunderbird_91.12.0-1~deb11u1.dsc 8df6bb9912c6cc7070b2a6e48c83c90a90d97cd51185cb493aac54dc86ba652d 12310488 thunderbird_91.12.0.orig-thunderbird-l10n.tar.xz 1581fd9a73e48be62e705073a2b545b4de001534bc37d539452dd5de08f91544 427093264 thunderbird_91.12.0.orig.tar.xz 71f9d8c3b0e567924dddbaa1f5b09d92bcbb7319a4fda91cd37f57eaf4a136f3 546648 thunderbird_91.12.0-1~deb11u1.debian.tar.xz Files: 75db92f517490a6c0481aea29954df5f 8437 mail optional thunderbird_91.12.0-1~deb11u1.dsc 488143e18b198303c9132e3adda68070 12310488 mail optional thunderbird_91.12.0.orig-thunderbird-l10n.tar.xz 30cf990a49bafaa4bbedece16fcc6ee3 427093264 mail optional thunderbird_91.12.0.orig.tar.xz ee508c5b42f44a6a2e16a6bf9c2d66d3 546648 mail optional thunderbird_91.12.0-1~deb11u1.debian.tar.xz
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmLk7hAACgkQgwFgFCUd HbDTzQ/+NoS1AenlSG+BdlenvnW0Xb1z3kDlWiL+43eWCWgBUf12Oqr6bY59MDbz zwi4bQ6YvHRjvv7lFuAuI5kw3E3Qpo8zrPq3uDB8+kX7S0zd6ZsKFVXii63cgCIa OeivXr3CdIOg9SjRR0QUDipkWSo1ifQpFfeKGGMYTfv1efAsvxgUDNIfkO404ySA 8h4ul3RY5qMNIh0nmQW1b6OOqcWwhh2ak/q2Uule1VVINXyvg8+AIQpX6W5cWLcQ Xb89ocIq6YRGOVdhqwqKB8I9EQzlUEXVE1D+ZxOXkAIEu08pX5hZkKm8Bum1m3OR Ip4i+kj8BMURCe4O1CuZ75iKUGxQjgB46VaF2b5ugbxSDa2iBpRnLrax++QieXnC 5De+vSNwcPdItVMegwxLX8xKFdescvdsW+O6rwSyxqfsK+vFbmD83DCCknPybaWC ZQr4cARjwOGrerRuLCfzexcLLR+x/AYyQAbn+elxgVGxZw/vrppeWEijl1xAxRUR yitbSTtY36FslnYiunlPoFAFihc4oGeP+W6Smdds+XGVr8wPk0/XgiuY2xiNiM/v ddSAjldgfZRV2Skcp9b898q2Dc1vPMdO9RDIDrIw14A3mx+mA5rU+kx7+hvWjooP 5L/OjFaANfjtUp8UGuj+GVaqHGzFSHGP7VtIbtIIEYJxT/bsUJw= =VETE -----END PGP SIGNATURE-----