thunderbird 1:52.5.2-1 source package in Debian
Changelog
thunderbird (1:52.5.2-1) unstable; urgency=high
[ intrigeri ]
* [b791221] AppArmor: support new thunderbird executable path
(Closes: #883561, #884217)
[ Carsten Schoenert ]
* [1f46308] New upstream version 52.5.2
Fixed CVE issues in upstream version 52.5 (MFSA 2017-30)
CVE-2017-7829: Mailsploit part 1: From address with encoded null character
is cut off in message header display
CVE-2017-7846: JavaScript Execution via RSS in mailbox:// origin
CVE-2017-7847: Local path string can be leaked from RSS feed
CVE-2017-7848: RSS Feed vulnerable to new line Injection
* [0dd21b9] d/thunderbird.postinst: reload AA profile on updates
* [8c57218] don't disable AA profile on package updates
As people want to re-enable the AA profile a update of
thunderbird doesn't have to disable this again.
(Closes: #884191)
-- Carsten Schoenert <email address hidden> Sun, 24 Dec 2017 11:30:09 +0100
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| thunderbird_52.5.2-1.dsc | 12.2 KiB | 13cad8940f83b74698f2f0aa69587e23a75ee72cd7972406475c6a0b2b1a300b |
| thunderbird_52.5.2.orig-lightning-l10n.tar.xz | 859.5 KiB | 47832f0fbcf2a5bcebb65531a9d2ae141668969551f0bf82eafa0b9c5f099e40 |
| thunderbird_52.5.2.orig-thunderbird-l10n.tar.xz | 8.7 MiB | bc5666c77552c7fdac9a5006d9a8237e995696e9760e0372ec9975968acced68 |
| thunderbird_52.5.2.orig.tar.xz | 226.3 MiB | ed13716c3e9bf32ffc9e2bf3ba6e927b03798b9e75fc675e614334fe54f98566 |
| thunderbird_52.5.2-1.debian.tar.xz | 387.0 KiB | 1b08eb87df977df97d8789e7ce01820179d6faf696540be1649e6ec4bd0437d8 |
No changes file available.
