Accepted thunderbird 1:115.4.1-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted thunderbird 1:115.4.1-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Wed, 25 Oct 2023 21:31:45 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: thunderbird_115.4.1-1_source.changes
- Debian-source: thunderbird
- Debian-suite: unstable
- Debian-version: 1:115.4.1-1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=T/NpKvMtQrmGutHHpD2k5VQyYeVZHhSKKMaVpBSRpxU=; b=WgtqkpAvyqQTFIMXjNwtZfXNJc N7k8LoKGiyvuuWTsu3SVGELAupxbmshXn6wc4wrrenRygHvxpywhBpPFv5QesAdulH+TI60ymDB38 FH8b1NwUvyu7/ffPkj8oCBYtj/IQOfJMqav5fLtbAuiA0F6gt8W50QGScyHLVUJUHTKdPKTxyDDos sDDcc8Ihg/vN8Dvh//N9rrCxPQXP/+gMbgO+mEL7XQ+9K6wf+PyJCRIvDOJekna7pA9UXSzbHDDMV OmDmA2yeijacaF9xKjA82fCKEe7b0IsDFdUNxqgjlGvO0YK3O+QM+oNvdP7iRmbbYYby+0yavhPL/ jWoiNEiQ==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1qvlTd-004QRg-3c@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 25 Oct 2023 21:05:23 +0200
Source: thunderbird
Architecture: source
Version: 1:115.4.1-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
thunderbird (1:115.4.1-1) unstable; urgency=medium
.
* [c51ab77] New upstream version 115.4.1
Fixed CVE issues in upstream version 115.4.1 (MFSA 2023-47):
CVE-2023-5721: Queued up rendering could have allowed websites to
clickjack
CVE-2023-5732: Address bar spoofing via bidirectional characters
CVE-2023-5724: Large WebGL draw could have led to a crash
CVE-2023-5725: WebExtensions could open arbitrary URLs
CVE-2023-5728: Improper object tracking during GC in the JavaScript
engine could have led to a crash.
CVE-2023-5730: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
and Thunderbird 115.4.1
Checksums-Sha1:
3d663fef776cfa18d36e4a51710cdb1e99da9262 8486 thunderbird_115.4.1-1.dsc
84b24fb72f47b523d285d9b31f8cd68ede953d0d 12618252 thunderbird_115.4.1.orig-thunderbird-l10n.tar.xz
ae100d1e6fd4d3834c204cb703aa22bc1072b97d 558461488 thunderbird_115.4.1.orig.tar.xz
cf92390147c7d174a63c72afdc479e024cbdffce 543452 thunderbird_115.4.1-1.debian.tar.xz
3f1f091bd53bdaa84440d6e9be6c1f5d8e072bf4 42301 thunderbird_115.4.1-1_amd64.buildinfo
Checksums-Sha256:
eca075a64bdbf1e0d54b9d9710e2c9bc4e2b1b629f476b3476d49bdcd0775c83 8486 thunderbird_115.4.1-1.dsc
ec56adcfd025188278340c82a33286a413667deced2060b46c02116f85d56d5a 12618252 thunderbird_115.4.1.orig-thunderbird-l10n.tar.xz
3b21dec8f70c3df94990063f39ea028d975fc7f5e9487de7b1a8081d30e6a724 558461488 thunderbird_115.4.1.orig.tar.xz
1f07136b6248cb779539761018f4a2b7f51db97719b96d706b6bbfc9fc87a2b4 543452 thunderbird_115.4.1-1.debian.tar.xz
61510372285e6cbbfc048bf2ea3c5b1eb431083fba2d8d6d8574506a3e3f7e5b 42301 thunderbird_115.4.1-1_amd64.buildinfo
Files:
d7381c096881a4dad758c9bede1f43cc 8486 mail optional thunderbird_115.4.1-1.dsc
80846ac096de2181f615a4c260af4ce8 12618252 mail optional thunderbird_115.4.1.orig-thunderbird-l10n.tar.xz
9deb651d70d93d9b132db60ee6cba88b 558461488 mail optional thunderbird_115.4.1.orig.tar.xz
18e62d12ba1cafcf29c46c17d4c7bf88 543452 mail optional thunderbird_115.4.1-1.debian.tar.xz
7354abe21968d42b917b3c2583cbe50f 42301 mail optional thunderbird_115.4.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=ykxO
-----END PGP SIGNATURE-----