Accepted thunderbird 1:60.6.1-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 27 Mar 2019 18:22:51 +0100
Source: thunderbird
Architecture: source
Version: 1:60.6.1-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
thunderbird (1:60.6.1-1) unstable; urgency=medium
.
[ intrigeri ]
* [2013645] d/rules: drop useless usage of dpkg-parsechangelog
.
[ Carsten Schoenert ]
* [daf1252] New upstream version 60.6.1
Fixed CVE issues in upstream version 60.6.0 (MFSA 2019-11)
CVE-2019-9790: Use-after-free when removing in-use DOM elements
CVE-2019-9791: Type inference is incorrect for constructors entered
through on-stack replacement with IonMonkey
CVE-2019-9792: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
CVE-2019-9793: Improper bounds checks when Spectre mitigations are disabled
CVE-2019-9794: Command line arguments not discarded during execution
CVE-2019-9795: Type-confusion in IonMonkey JIT compiler
CVE-2019-9796: Use-after-free with SMIL animation controller
CVE-2018-18506: Proxy Auto-Configuration file can define localhost access
to be proxied
CVE-2019-9788: Memory safety bugs fixed in Firefox 66, Firefox ESR 60.6,
and Thunderbird 60.6
Fixed CVE issues in upstream version 60.6.1 (MFSA 2019-12)
CVE-2019-9810: IonMonkey MArraySlice has incorrect alias information
CVE-2019-9813: Ionmonkey type confusion with __proto__ mutations
* [f88a505] rebuild patch queue from patch-queue branch
added patch:
fixes/Bug-1526744-find-dupes.py-Calculate-md5-by-chunk.patch
Checksums-Sha1:
1fc35ec0bd4c446ff0df04bc5554c45b1e51b5f6 12183 thunderbird_60.6.1-1.dsc
7b18eb9010c814284a74470c6c72763bd12c6303 955488 thunderbird_60.6.1.orig-lightning-l10n.tar.xz
9c8eb7f40cbd27b834c0730552c694d3983c0fda 9264912 thunderbird_60.6.1.orig-thunderbird-l10n.tar.xz
e093ee314fe17cbf63fc319139979266fa5ab78e 286932072 thunderbird_60.6.1.orig.tar.xz
a8968a0c833c958fb79af9943dd296a75c0805f0 554080 thunderbird_60.6.1-1.debian.tar.xz
4a787f51af047e3ee92cfb162e99ef21379cf504 51475 thunderbird_60.6.1-1_amd64.buildinfo
Checksums-Sha256:
8f297319289ad97d31d7ccc4b979bb310620d707498b0f12475fdda241dada6d 12183 thunderbird_60.6.1-1.dsc
595a50fa2969079ad9a63c2d2a2095c7165c0e31ddf8f1cb0b80fab6bc8e1c5f 955488 thunderbird_60.6.1.orig-lightning-l10n.tar.xz
faff03b13d78839f146aa7110de5fdf1d1a6cccdada10592c6fd8d652124a501 9264912 thunderbird_60.6.1.orig-thunderbird-l10n.tar.xz
ec253e62410ab19e956fd0c3d617370b1341cb4851a36388410e6373797a4a7e 286932072 thunderbird_60.6.1.orig.tar.xz
e973cb021eabc025b69b920e32be5991c569be9ed008faba3556f5f899503017 554080 thunderbird_60.6.1-1.debian.tar.xz
e3545d092b786c1e1fffbbb6758b0dd48738b84e443ec9caab0f9e8932b4f5b3 51475 thunderbird_60.6.1-1_amd64.buildinfo
Files:
bb2f0c95475c4483ccf67fc6a212c2de 12183 mail optional thunderbird_60.6.1-1.dsc
8f8ddddcba74810e15128c40c9b031a7 955488 mail optional thunderbird_60.6.1.orig-lightning-l10n.tar.xz
c12bb663f2c25f2cfb99cd91bbfa2043 9264912 mail optional thunderbird_60.6.1.orig-thunderbird-l10n.tar.xz
fc6689b817c785c700ff735873655884 286932072 mail optional thunderbird_60.6.1.orig.tar.xz
df8fdeaff8e69048a859277871489ffc 554080 mail optional thunderbird_60.6.1-1.debian.tar.xz
57c7fbce5ddb88c9ab11e27e1091b24b 51475 mail optional thunderbird_60.6.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=fuXw
-----END PGP SIGNATURE-----