-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 07 Aug 2024 18:44:31 +0200 Source: thunderbird Binary: thunderbird thunderbird-dbgsym Architecture: arm64 Version: 1:115.14.0-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Carsten Schoenert Description: thunderbird - mail/news client with RSS, chat and integrated spam filter suppor Changes: thunderbird (1:115.14.0-1~deb12u1) bookworm-security; urgency=medium . * [d608c75] New upstream version 115.14.0 Fixed CVE issues in upstream version 115.1 (MFSA 2024-38): CVE-2024-7519: Out of bounds memory access in graphics shared memory handling CVE-2024-7521: Incomplete WebAssembly exception handing CVE-2024-7522: Out of bounds read in editor component CVE-2024-7525: Missing permission check when creating a StreamFilter CVE-2024-7526: Uninitialized memory used by WebGL CVE-2024-7527: Use-after-free in JavaScript garbage collection CVE-2024-7529: Document content could partially obscure security prompts Checksums-Sha1: 07f4d039b99e7d2710fe100bca5de216b4965f74 422632632 thunderbird-dbgsym_115.14.0-1~deb12u1_arm64.deb 3a6d8b9f4d5a9555858f052220695542087635d3 20440 thunderbird_115.14.0-1~deb12u1_arm64-buildd.buildinfo 6eb0105ae6fb9c4f0962bc4e4b6fb40d992404da 51547244 thunderbird_115.14.0-1~deb12u1_arm64.deb Checksums-Sha256: 9ca643cc5be474ff9224b0579168fad5be3150fcd211184ec9fd2446523261df 422632632 thunderbird-dbgsym_115.14.0-1~deb12u1_arm64.deb 40f315bdbb9a15d3cf1eee2b505a5f79c550fd469960fc79dbbc00de16d1faa2 20440 thunderbird_115.14.0-1~deb12u1_arm64-buildd.buildinfo 047c00c40d50946ee1be7a993dae2e7573af0117d4fa11520b4e8bab9119020a 51547244 thunderbird_115.14.0-1~deb12u1_arm64.deb Files: f42b313955662713002acd03b7270c4b 422632632 debug optional thunderbird-dbgsym_115.14.0-1~deb12u1_arm64.deb c868cb1a448b575601afe503ed2ba0d2 20440 mail optional thunderbird_115.14.0-1~deb12u1_arm64-buildd.buildinfo 9ac27b5d383d939165f95f34a1aca16c 51547244 mail optional thunderbird_115.14.0-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0+FegZ3qs8CHnZkx+XaKpT5fkBIFAma06wsACgkQ+XaKpT5f kBIbnw//YbVRAWtb279MEgUcU68/E4WUwgeEaINdCmiC6/0YklCRV/8uXjth/5s3 /jSoLb0KxUegOBs/ahdziBxwHocYUqF17SB797UpG0GZFVTNl5ZHoqaGvEvOxsg3 PVa/OfTVqIiZTpFMTJVUP8dazxcMhfgQBW6Ru2AICmgylVTx5m3Z/jVaYZlUzHn1 CtIKzMlp5pb+i/lj0zFhMFt/aj8HWqqxvmGoim/IgIIVaSphjNJnm4iY0T0pRUin eSBTjPMAw24Dik8BTO3DM2+LZ1bt7w0VD8J64J8vH9cFT3v0Acxn2ZAincSR/jxu riQ9OUYkarao5+sJmSsFmhEijnwyWTge2IxJi7ePxQXdr+RIWwspC3Az8z0JnLMd 5bGFigWNeRcCfketHPBBDMJRVwsHgi/tNNJegAHoxpk7V3khJDY2sarRyeqV3mYL yJFLwSvxhSAB9h3mKi6JM1vINJbZ9QbXjgQeimPZVzKmefwz9HX0nonXW6gIaRii MMzKYtKqMELXWu6BftFIHNBwjexHVoqe55kciTnNyfzHT8U82jxVOHzJLrODtSIs QYhgTPkZHNRZsmGZX0i0yuaZUZM/D8poha1+IbBC9eSst094uJwNH5oPad9vpMaY V2rCBpvvMXcz1bARsyo5Q86rIrZ0OkdGA98kXPZFWtCq6EV56N0= =5q5h -----END PGP SIGNATURE-----