-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Sep 2024 19:23:34 +0200 Source: thunderbird Binary: thunderbird thunderbird-dbgsym Architecture: i386 Version: 1:115.15.0-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Carsten Schoenert Description: thunderbird - mail/news client with RSS, chat and integrated spam filter suppor Changes: thunderbird (1:115.15.0-1~deb12u1) bookworm-security; urgency=medium . * [912dd3c] New upstream version 115.15.0 Fixed CVE issues in upstream version 115.15 (MFSA 2024-44): CVE-2024-8381: Type confusion when looking up a property name in a "with" block CVE-2024-8382: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran CVE-2024-8383: Thunderbird did not ask before openings news: links in an external application CVE-2024-8384: Garbage collection could mis-color cross-compartment objects in OOM conditions * [1b87bc9] d/changelog: Fix version number (connected to MFSA 2024-38) Checksums-Sha1: ac11eff983aefebb9f80ffad16d519c7529f2ffe 7521880 thunderbird-dbgsym_115.15.0-1~deb12u1_i386.deb 5025c6a9212858d7f409fbb49f587f0c594e873d 20351 thunderbird_115.15.0-1~deb12u1_i386-buildd.buildinfo 30d27de39c539ef51923096941d7ade31993e934 60513996 thunderbird_115.15.0-1~deb12u1_i386.deb Checksums-Sha256: 37d055612cf34e6e4a590630dba5adaada30bfaf2919bcb5a1e2a4f15a9951d5 7521880 thunderbird-dbgsym_115.15.0-1~deb12u1_i386.deb d1c445a9fb1498fbb2761bc854ee8e6e8bfc13875254a771694875a149302fd1 20351 thunderbird_115.15.0-1~deb12u1_i386-buildd.buildinfo e834dba4a8027431f03d1811c51425f5d6cfc49963e4a778e3e0b68ee742de74 60513996 thunderbird_115.15.0-1~deb12u1_i386.deb Files: 5b377e978f272f0949014f8c61b6a932 7521880 debug optional thunderbird-dbgsym_115.15.0-1~deb12u1_i386.deb a4d4f73da3c3f9e1f30f7043ec8a7435 20351 mail optional thunderbird_115.15.0-1~deb12u1_i386-buildd.buildinfo e309197d8d8342065ee4c62b796e1307 60513996 mail optional thunderbird_115.15.0-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgdRoRGwEM09wlaMzOni7ZmUpKEcFAmbcWLgACgkQOni7ZmUp KEdumg//T4mC2ORn8XlLpLdyfKB4QSjfaCqPSIi6BfR9LpStNaxlz4ENKV7mMj6n mLjFasqk8qb3Gjm0dlzxBYVHYllBvNXYQ+hJ+PA3WFEeCRn+ZjgKz8ph4/zpOUlE lCeF1bT47UUIIr9grYtLjSJ3b9G/+URLgIryIWzd6AFJDWp8IfZds6lJ6W7aHb5O TNqBdZoY2TT3LVXjvdr8m8L63HMHX24BieH//Hra1M5D0g8whhy9ml+vhuQl5fgW SISZzL/6w2PHuG5wvDs3KNhkTxWSXj6rVHuppgzDN/GQk/CZlNoVzWu8jMgKRL+6 QpRiPwcv1pTWUlu4KdcTWVFG0pCt5q2zoY96zTzomNN3OtOSsQQceskTgaK6Fvow tLnn226KVLoqW0wtEw35yjIjkK3Fe4FUoaA910sEY7Us4K8yP+i8TP3HQ/xlilq/ vkcUT1mqM0FfpxWsM343OZGmTigXzABy0V98owoJhNMOXE9dSIVPEqC6WQa9qVGA +8vweN7rnf+BItEfhl+6ozYS7rjN+u0L6bNm/wyueR6BO3m5cEsmH7uMQy2lJad9 xu1S4FTALlMvybRB9TmubHiVircgqupqhy/1NcjfgGcWCpUoitttOcMpl1bY2PvL Urd2Vc1L4btDY6hOoVTsk3m3oMQeHkHCcVsXeW2LX6yx6Q8WPG8= =7y0r -----END PGP SIGNATURE-----