Accepted thunderbird 1:115.5.0-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted thunderbird 1:115.5.0-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Thu, 23 Nov 2023 12:36:49 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: thunderbird_115.5.0-1_source.changes
- Debian-source: thunderbird
- Debian-suite: unstable
- Debian-version: 1:115.5.0-1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=hDGoex5dUuxJlG0GSyKULCRx7mRZXfWWCdKfd4R/AQ0=; b=Q9gHxD+ky4depm1XIAFQoijLtj AmwDiq0Q7u2CTKKgMlC3z8Ks9jyBRhnHEbD1DemIwdscSBg9+TEPfsnatObRoLHLBCN8qbZ2RH7j9 qFFyYV5VCi2QKw2On6h2Ig2mLPJ1R+Rm+jAZw/r/3MtoqtKDUjqPPAuupHgp43aQgmPdT6KZsfUfW jM1ndiTFLb9XDBAxiqMH1NCiRcJDyfNmqh3dSNoQEp3xL6arbGCu6yyX3gLQeiTuhvRZq9hy/q5ai whZhLTa+pAOT6GOgYQn1dfX9E72O2XwEuPrWOJEU5mIdczuI+tuqe75C/yU+qpIQRNlB32PvIFLUi oy0hkkqg==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1r68wr-006aOx-CZ@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 22 Nov 2023 21:50:16 +0000
Source: thunderbird
Architecture: source
Version: 1:115.5.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
thunderbird (1:115.5.0-1) unstable; urgency=medium
.
[ intrigeri ]
* [a6be3ab] AppArmor: update profile from upstream at commit
9d3fa88cdab512e45f6fd80f067337f200d356bc
.
[ Carsten Schoenert ]
* [ed61fd6] New upstream version 115.5.0
Fixed CVE issues in upstream version 115.5 (MFSA 2023-52):
CVE-2023-6204: Out-of-bound memory access in WebGL2 blitFramebuffer
CVE-2023-6205: Use-after-free in MessagePort::Entangled
CVE-2023-6206: Clickjacking permission prompts using the fullscreen
transition
CVE-2023-6207: Use-after-free in ReadableByteStreamQueueEntry::Buffer
CVE-2023-6208: Using Selection API would copy contents into X11 primary
selection.
CVE-2023-6209: Incorrect parsing of relative URLs starting with "///"
CVE-2023-6212: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
and Thunderbird 115.5
Checksums-Sha1:
3ce10c41428858d85be10795ba979110ca7e6cad 8519 thunderbird_115.5.0-1.dsc
7e445a73bf2a5a8fc725a62cded3d536a67a20da 12646548 thunderbird_115.5.0.orig-thunderbird-l10n.tar.xz
ec1e6017c49afb0fa77f991a967bda9028f14e5a 555325124 thunderbird_115.5.0.orig.tar.xz
c415d176a0e63009fa9d6b1cd6abf25353fddef2 543768 thunderbird_115.5.0-1.debian.tar.xz
68775d40b2ff83bcd5f8b0ef92fefb160100dec8 40395 thunderbird_115.5.0-1_amd64.buildinfo
Checksums-Sha256:
d5da6c4eec3e7d0b1b185683d626f5347ab206e8929b3c49642f3df2b9d19df6 8519 thunderbird_115.5.0-1.dsc
783fa0648045426aa88e718e6132e42089cfba5514a43fa724a9d86ebcb5896d 12646548 thunderbird_115.5.0.orig-thunderbird-l10n.tar.xz
8dc263dec40f572b010b93d39f1a3785066ef04aa04c426feee98a25704bd92a 555325124 thunderbird_115.5.0.orig.tar.xz
99f8bc9399127a35a657cf9795426563bb9ad78f59e602845a283e8929d6f66a 543768 thunderbird_115.5.0-1.debian.tar.xz
30087fa41264d1a29e30add33ba2f06fe04c2a835b635b07b91e027f42e053c7 40395 thunderbird_115.5.0-1_amd64.buildinfo
Files:
bf37bfca91d443740020d605c7be9caa 8519 mail optional thunderbird_115.5.0-1.dsc
4fdad5d616553a55e0fac849e5e6104d 12646548 mail optional thunderbird_115.5.0.orig-thunderbird-l10n.tar.xz
28106ec00293fe5dfe87a469fa885b43 555325124 mail optional thunderbird_115.5.0.orig.tar.xz
c229aa4a076bf360eb4afb0e36f394f6 543768 mail optional thunderbird_115.5.0-1.debian.tar.xz
2bda6fac92e1ff249bee444a618d49ae 40395 mail optional thunderbird_115.5.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=fgOl
-----END PGP SIGNATURE-----