Back to thunderbird PTS page

Accepted thunderbird 1:78.3.1-1 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Sep 2020 09:08:29 +0200
Source: thunderbird
Architecture: source
Version: 1:78.3.1-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
 thunderbird (1:78.3.1-1) unstable; urgency=medium
 .
   [ Carsten Schoenert ]
   * [6bd965f] New upstream version 78.3.1
     Fixed CVE issues in upstream version 78.3.1 (MFSA 2020-44):
     CVE-2020-15677: Download origin spoofing via redirect
     CVE-2020-15676: XSS when pasting attacker-controlled data into a
                     contenteditable element
     CVE-2020-15678: When recursing through layers while scrolling, an iterator
                     may have become invalid, resulting in a potential
                     use-after-free scenario
     CVE-2020-15673: Memory safety bugs fixed in Thunderbird 78.3
   * [8ba13c5] rebuild patch queue from patch-queue branch
     added patches(picked from firefox packaging):
     fixes/Add-missing-bindings-for-mips-in-the-authenticator-crate.patch
     porting-mips/Bug-1642265-MIPS64-Add-branchTestSymbol-and-fallibleUnbox.patch
     porting-mips/Bug-1649655-MIPS-Add-CodeGenerator-visitWasmRegisterResul.patch
     porting/Bug-1666646-Bump-CodeAlignment-to-8-in-MacroAssembler-non.patch
     removed patch(fixed upstream):
     fixes/Bug-1664607-Don-t-try-to-load-what-s-new-page-when-built-.patch
   * [c6d282d] calendar-google-provider*: removing left over cruft
     There are two left over sequencer files from the calendar-google-package,
     not need any more since 1:68.2.2-1
   * [cf37615] d/README.Debian: Update and adding new information
     Some updated information regarding the now included OpenPGP support, also
     updating some grammar for 'Add-on'.
   * [faf225b] thunderbird.NEWS: Add hint about integration of OpenPGP support
     Giving the user a information about the OpenPGP status within Thunderbird
     since the version 78.0.
   * [d6f4f0e] Revert "d/tb.lintian-overrides: ignore warning about none
               versioned breaks"
   * [9e6cbec] d/copyright: update content
Checksums-Sha1:
 c21182bf52875f6c48081c2be256e1f9cb9f32fb 8151 thunderbird_78.3.1-1.dsc
 1c430ed4e2ce670d9a7275c3aab42aa74d9a8306 11811548 thunderbird_78.3.1.orig-thunderbird-l10n.tar.xz
 6c4fd0ed58f09f1d5c5dd2728353651e5e01bc9f 372217932 thunderbird_78.3.1.orig.tar.xz
 0abfa070f9535962fb979833652ff8d387e829e3 701908 thunderbird_78.3.1-1.debian.tar.xz
 5a54667ae308a500f8b0c8ab1503c5e4fab9d878 35412 thunderbird_78.3.1-1_amd64.buildinfo
Checksums-Sha256:
 04ffe2e618bc5cad838d99bf5fb9855308b5f6195989b0a8bc0855d958e90006 8151 thunderbird_78.3.1-1.dsc
 79e7d8a9f94eb83cedfadaff1c6b5798f5f01cc2fe8484b9cd0ff68c08bb0fa9 11811548 thunderbird_78.3.1.orig-thunderbird-l10n.tar.xz
 4a8dac2fd9e3492b27c4a0b14413431940498801c66a86ba4872623fd4b4918f 372217932 thunderbird_78.3.1.orig.tar.xz
 6c369095d563b14cd16a8841ef625a6b483be8c02879cb16fe9a7ae1eac0f1e9 701908 thunderbird_78.3.1-1.debian.tar.xz
 4308204e19b53c9f29162af572425700834156b4597ec9405293be8ffaeebb32 35412 thunderbird_78.3.1-1_amd64.buildinfo
Files:
 8609c3a71fe42176ddc59fc40b050cfa 8151 mail optional thunderbird_78.3.1-1.dsc
 30fadcdadbd456a72c0d1864db481d23 11811548 mail optional thunderbird_78.3.1.orig-thunderbird-l10n.tar.xz
 a396109139a6ebe398444e7221bf2cc5 372217932 mail optional thunderbird_78.3.1.orig.tar.xz
 3804d15f4a89e12178703c9605d956a9 701908 mail optional thunderbird_78.3.1-1.debian.tar.xz
 8c40d253ac6bbc9131c248a9b92ec8da 35412 mail optional thunderbird_78.3.1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=VsEi
-----END PGP SIGNATURE-----