MozillaThunderbird/thunderbird-115.9.0.source.tar.xz.asc
Wolfgang Rosenauer 3ba157ec15 - LLVM18 breaks building Thunderbird on Tumbleweed; add
* mozilla-fix-issues-with-llvm18.patch

- Mozilla Thunderbird 115.9.0
  https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user accidentally
    granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405, bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=751
2024-03-22 07:53:18 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmX0cvkACgkQ4207E/PZ
MnQsig/9ENVeCyVRzE8NJpHqJwBnxztGaqkeOyDxonbKEQ1NTwrvn5hIRdHkWiRz
cYo0SH5Cw7cjOrhAS+fWQdx43RaTRwVNN8nJv6HfxJFL5OSQ/QbHkunVNg0Yq9TE
RYv+D/9IX+Fm48ZNQ5wl5dkCbhg0euFoPSxqZKrvi7U0LJ1uHtle9TOXztn+I0s1
uafbMiuLdNi8r4UIcopYpoMTg0Yt9hbKIdG9tFF/thotT5DJeN3Vrx/rBh2cMZX+
wvwbXdQziVsLGqpQ14dl9vCsZqujoiRG+G4oAo9nngyQZgF+aucEev1vAq7YFbaM
Q3Tc+V8JVpJxk1TYS08CU8Ph1ZuCJOiixCwjTzXo5RqOUrC5zAd29fcQkMqqyGB+
p6nLvXFwlWdroLsROCcMH9MmJzAFDhfUms41AeUvyp+1sUyqpkzJBczBjHOi0DQ6
tmFjgK+Ph8VAct4kIBKI7FRkn5w3e7/Xr670oc/zFo0AunWBktowx5R2LyXqXpmk
hIlYC3n5QhtX08SxqgFsV18rFUrDXBuMssmJbcet7ZETCdFHjKk9CITD5zsi3oQW
mLR+IkZYrzEv4btvJdd8W8o4wUv2VPHCDP7Pxkk1V2/1h8n4+BhaO3E4GNz17odZ
l1h1EkhMUErlApPKhVd2EflF38v7uKhSw2WKTiQpwzZSNk2B00k=
=WHyd
-----END PGP SIGNATURE-----