thunderbird 1:52.8.0-1 source package in Debian

Changelog

thunderbird (1:52.8.0-1) unstable; urgency=high

  [ intrigeri ]
  * [4656ebf] AppArmor: update profile from upstream
    (Closes: #882048, #882122)

  [ Agustin Henze ]
  * [840cbc8] apparmor: allow access to @{HOME}/.gnupg/tofu.db
    (Closes: #894907)

  [ Carsten Schoenert ]
  * [514e9e8] New upstream version 52.8.0
    Fixed CVE issues in upstream version 52.8 (MFSA 2018-13)
    CVE-2018-5183: Backport critical security fixes in Skia
    CVE-2018-5184: Full plaintext recovery in S/MIME via chosen-ciphertext
                   attack (aka Efail)
    CVE-2018-5154: Use-after-free with SVG animations and clip paths
    CVE-2018-5155: Use-after-free with SVG animations and text paths
    CVE-2018-5159: Integer overflow and out-of-bounds write in Skia
    CVE-2018-5161: Hang via malformed headers
    CVE-2018-5162: Encrypted mail leaks plaintext through src attribute
                   (aka Efail)
    CVE-2018-5170: Filename spoofing for external attachments
    CVE-2018-5168: Lightweight themes can be installed without user
                   interaction
    CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion
                   through legacy extension
    CVE-2018-5185: Leaking plaintext through HTML forms (aka Efail)
    CVE-2018-5150: Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8,
                   and Thunderbird 52.8
    (Closes: #898631)
  * [7845229] ICU: don't build the Paragraph Layout library
     Disable the build of the layout library in the internal ICU build as we
     don't need this and can cause build issues.
  * [e0a79fc] debian/control: increase Standards-Version to 4.1.4
     No further changes needed.

 -- Carsten Schoenert <email address hidden>  Thu, 17 May 2018 21:04:15 +0200