Accepted thunderbird 1:91.3.0-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 03 Nov 2021 18:14:09 +0100
Source: thunderbird
Architecture: source
Version: 1:91.3.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
thunderbird (1:91.3.0-1) unstable; urgency=medium
.
* [1d3e0b1] Revert "Rebuild patch queue from patch-queue branch"
The patch for fixing the broken build on i386 breaks other architectures,
so reverting for now.
* [66755b4] New upstream version 91.3.0
Fixed CVE issues in upstream version 91.3 (MFSA 2021-50):
CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets
CVE-2021-38504: Use-after-free in file picker dialog
CVE-2021-38506: Thunderbird could be coaxed into going into fullscreen
mode without notification or warning
CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass
the Same-Origin-Policy on services hosted on other ports
MOZ-2021-0008: Use-after-free in HTTP2 Session object (no CVE assigned yet)
CVE-2021-38508: Permission Prompt could be overlaid, resulting in user
confusion and potential spoofing
CVE-2021-38509: Javascript alert box could have been spoofed onto an
arbitrary domain
MOZ-2021-0007: Memory safety bugs fixed in Thunderbird ESR 91.3 (no CVE
assigned yet)
Checksums-Sha1:
65ec1ff3a6a8f79ff4a59b2bcb6d2e94fb1477fc 8422 thunderbird_91.3.0-1.dsc
e5cc6c28ec17b9bd5983fe4ed8e6ada0f2334629 11967912 thunderbird_91.3.0.orig-thunderbird-l10n.tar.xz
5c41c8dc591f31292787888b9f40ac793e614d10 428635420 thunderbird_91.3.0.orig.tar.xz
9f9574f0fb3fcd7e0d9207fd2fdc8526b05ab294 540576 thunderbird_91.3.0-1.debian.tar.xz
ef85edadae3b36f6e59557247408d00c154d2961 36598 thunderbird_91.3.0-1_amd64.buildinfo
Checksums-Sha256:
dc02b1550d2f7fae5fdc227f8336bde3a89c3c968fcd152d900c1d031c5214c3 8422 thunderbird_91.3.0-1.dsc
c456aac9e564e03af2ada3fb6aee459ac57eaa2e52366b118014f42fd826d3d4 11967912 thunderbird_91.3.0.orig-thunderbird-l10n.tar.xz
422a44ad7a77a71b1963437de306265b1d98b7d58ab81f8407588e20d18d37c9 428635420 thunderbird_91.3.0.orig.tar.xz
61cc20f3040e2e823516df9fbbed0ded4afae0c7df1c167397801cbae2b74364 540576 thunderbird_91.3.0-1.debian.tar.xz
6c6371dd332df8ae7aeb60999591d637272de42aa7d32dc794c49173154bcfc8 36598 thunderbird_91.3.0-1_amd64.buildinfo
Files:
eefc0507fdafb9d9c08c6a0a5492434d 8422 mail optional thunderbird_91.3.0-1.dsc
fad0a3f9b22fdd3ad4472b7b498f558c 11967912 mail optional thunderbird_91.3.0.orig-thunderbird-l10n.tar.xz
48cf38ccf170acedab6da468ea79218e 428635420 mail optional thunderbird_91.3.0.orig.tar.xz
2d84d051db2156ee751b5e590a7b1714 540576 mail optional thunderbird_91.3.0-1.debian.tar.xz
05961a12d242edf13b69ccb09ad80921 36598 mail optional thunderbird_91.3.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=sZvE
-----END PGP SIGNATURE-----