-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 19 Mar 2024 16:55:17 +0100
Source: thunderbird
Architecture: source
Version: 1:115.9.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
thunderbird (1:115.9.0-1) unstable; urgency=medium
.
* [c122f7d] New upstream version 115.9.0
Fixed CVE issues in upstream version 115.9 (MFSA 2024-14):
CVE-2024-0743: Crash in NSS TLS method
CVE-2024-2607: JIT code failed to save return registers on Armv7-A
CVE-2024-2608: Integer overflow could have led to out of bounds write
CVE-2024-2616: Improve handling of out-of-memory conditions in ICU
CVE-2023-5388: NSS susceptible to timing attack against RSA decryption
CVE-2024-2610: Improper handling of html and body tags enabled CSP nonce
leakage
CVE-2024-2611: Clickjacking vulnerability could have led to a user
accidentally granting permissions
CVE-2024-2612: Self referencing object could have potentially led to a
use-after-free
CVE-2024-2614: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
and Thunderbird 115.9
Checksums-Sha1:
aee63f814d9cabb8471455b7a6c342e6545b4338 8463 thunderbird_115.9.0-1.dsc
306f806fdb666f39b1175d29e82eda242c4899a0 12981956 thunderbird_115.9.0.orig-thunderbird-l10n.tar.xz
1905b4b4e0c64acf30f928797a13470f78107ef3 553421108 thunderbird_115.9.0.orig.tar.xz
472c067beb632c405e01fd1a366988c47d450ee7 544736 thunderbird_115.9.0-1.debian.tar.xz
753232b1c8caac106ae5f48ee34ced20a0cdd792 40683 thunderbird_115.9.0-1_amd64.buildinfo
Checksums-Sha256:
6b4dda82ffff8e7e02ceb2c428fb1cd5ebd150c2d124e8e9e91cc031f15195a1 8463 thunderbird_115.9.0-1.dsc
4db02487e476356e9c546ce5a4c84aaba8f55fda8bc6cce0dd2ef990bab81681 12981956 thunderbird_115.9.0.orig-thunderbird-l10n.tar.xz
66bfd12a3c267ebb29ab482ebe3c982b4e763ad2836be1cb7ce752428265a547 553421108 thunderbird_115.9.0.orig.tar.xz
ec7752ce31e0697fbdb15185867671de898c84ea60fcd81ce06c16cfff5b2c6f 544736 thunderbird_115.9.0-1.debian.tar.xz
168a06ce4a7b62aa2980071ef351c75319fcc18741870e1811706397d617fb76 40683 thunderbird_115.9.0-1_amd64.buildinfo
Files:
42ecd722ff49fde0e86694493ee4a0a0 8463 mail optional thunderbird_115.9.0-1.dsc
97697deb6731fd49fbcdedcd17448015 12981956 mail optional thunderbird_115.9.0.orig-thunderbird-l10n.tar.xz
ee988c29071ad31e17c80fa86b2dc5a2 553421108 mail optional thunderbird_115.9.0.orig.tar.xz
869c8fb019dd1bc142a7baf88183a8e9 544736 mail optional thunderbird_115.9.0-1.debian.tar.xz
1ad19df68755a3a3e30ec663d044c781 40683 mail optional thunderbird_115.9.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=jE8O
-----END PGP SIGNATURE-----
Attachment:
pgpeyuZArBQnr.pgp
Description: PGP signature