-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 07 Aug 2024 18:44:31 +0200 Source: thunderbird Binary: thunderbird thunderbird-dbgsym Architecture: s390x Version: 1:115.14.0-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Carsten Schoenert Description: thunderbird - mail/news client with RSS, chat and integrated spam filter suppor Changes: thunderbird (1:115.14.0-1~deb12u1) bookworm-security; urgency=medium . * [d608c75] New upstream version 115.14.0 Fixed CVE issues in upstream version 115.1 (MFSA 2024-38): CVE-2024-7519: Out of bounds memory access in graphics shared memory handling CVE-2024-7521: Incomplete WebAssembly exception handing CVE-2024-7522: Out of bounds read in editor component CVE-2024-7525: Missing permission check when creating a StreamFilter CVE-2024-7526: Uninitialized memory used by WebGL CVE-2024-7527: Use-after-free in JavaScript garbage collection CVE-2024-7529: Document content could partially obscure security prompts Checksums-Sha1: a7c4e778736b40efaa4595b50bd04262ebc2853d 451605368 thunderbird-dbgsym_115.14.0-1~deb12u1_s390x.deb 9382ebb71d0141797b0609f88a8321e2d43305c7 20192 thunderbird_115.14.0-1~deb12u1_s390x-buildd.buildinfo 2ddfb6c91c1265894bdedbcf1dfeba289283e112 57200004 thunderbird_115.14.0-1~deb12u1_s390x.deb Checksums-Sha256: 9319b797daeb12afba7e357e9083bdd9b8446c9de050c3d0ab5b197d9c0ebee0 451605368 thunderbird-dbgsym_115.14.0-1~deb12u1_s390x.deb c6ad7857405d2cea2bee08de353c8d9c8da5a2655ef0254832785b8b6ff31d7a 20192 thunderbird_115.14.0-1~deb12u1_s390x-buildd.buildinfo 8ace6fa42fe2264f7d0dea72b1679f4c61a0c8dc59bee0c842d7307de55c6b2a 57200004 thunderbird_115.14.0-1~deb12u1_s390x.deb Files: 84da3cf928ac053dd4fbf3072b7408a2 451605368 debug optional thunderbird-dbgsym_115.14.0-1~deb12u1_s390x.deb d1a22f5ef3e460fded407f17c04cc7b7 20192 mail optional thunderbird_115.14.0-1~deb12u1_s390x-buildd.buildinfo e1f79d0359661079105337eb172136dc 57200004 mail optional thunderbird_115.14.0-1~deb12u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETdQgQHyJW2hcXsTC6b+AMjGgQHgFAma06BUACgkQ6b+AMjGg QHiWKA//SmRsqLil+nIr+8VUo6T+o2TTSVl5LTksxWAcRTTQpwdv8hAT0RkL7WOF wSTPpvS2ehHVR/erUmmlUowOwqU5EJwQIM0Q74IMwLwCZ+onmMkrMb8g0kTAioGN x5v3zEGREAW1rOplBMw/ag3QspPMrF9jirUa5l4mevaIE2rwfsXg7tZbwbocp/Cr K8L98nPeUTKAjSMm3PWUO+rePHhs5ZsCgJvmOIf6S+nk20RxcHrQgBzYTuVkoLKI b7P6c+LHrbq4cWdijPOI1wzaC0zf+HN9od7sjlQ5EogdUPCmgBtT5A4kwUQ4rlOF cLHHL8IsZhEQObNCGmzbOBWpZ1cNlmWX8z+xPkGZxZWKgw5BVzg4mdi+qwFs5vrb ijJd25WZbgvMbW6I1qstb7g8wjfpiAR47abrTaKNju0etzFAPtPPlKUZwh4voBfh 4T9Gs7y4LL3Og/ipw7GoNe6MYPRnXz6SEduoDRq3AJXX0L5QynEqo7SC2MniDG1l UD8XxLaBNqkW26E6uejA2pwbCdTpJ8SlVWYGn0pv4H36dfhTYZZDXjz/Tf1jmEx4 WqiJEcT7UMlSya0sTD1BTctpxg1L2zKL5bVx9YAFP6wkh6Gb2wXvykGU4e2NbwNF vqN7QA8J9sJzV/Ka0Shrjl8lyXtv7ayplt39hoElvBhUnPlnA0c= =YzjR -----END PGP SIGNATURE-----