1
0
MozillaThunderbird/thunderbird-78.7.0.source.tar.xz.asc
Wolfgang Rosenauer fa9e13d8e7 - Mozilla Thunderbird 78.7.0
MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7

- MozillaThunderbird.spec: Don't abuse BUILDROOT during %build as newer
  rpm versions in TW remove everything there as the first action
  of %install

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=574
2021-01-26 21:46:33 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAmAPlFUACgkQ8aZmj7t9
Vy6c+BAAkA9+Dr4VwW2dKtQN7K30zuJncy2WKJN7RYyvOLsk2m252HKQ3W9eB3gi
9v9LEFRwLi4vqb7+tB4FziNe4vmfmG3GEOthvHps/wH0RHcKivT2nr77bcJirWgM
VJP9pDCCui7D5bKOz7nTXM/fWqzek8VJ729ta5mclIpiJ+J+LHO4VXPdxchdmcW2
6cktZxBUkb8lSJixO12wdjBLMwROK0xGS8qijamX7x2rD8fMRW1sh9rVdG5KDzNO
ko3i7gkjx3k03RgjIwzIvTti39lUb2pyh67BatB3oFAr4g7Z1jGQcUJjnUQRq3qI
eavYaQA2y0hpJkPlfCIPpQ1MTPGsexScFzhl3w0guQB88hZd2M4L1mkQhIohV2SY
iRZ/rys+CSTiLDV2ONAgF/uiIiLN6xHM4x2QWsJ/jjRkhl+OM6fxBFEHxtuZ5vJs
0ASjwSiALE48Y7ejW/8cWwOvU/Xfgpet3x2qNiA2yqmHISOFfhtmMGcKyiGQq50d
1qQ8CeBMSNthQNZdQ/752pHt5qTsX1K9LtNLGMlw14mVKBqk9RZGEkAdXcMGoLS6
eJpJajXIhKvCbwxVwK4Iknnkr/E8zWCq9WwDFyLxVVmc/p+3r4lP00YaCqbUbZZY
qJvYppMzRl/ksWAguEi0TluB1cjmOT/hhkBmVwsNsUdXb/QTdmY=
=un1E
-----END PGP SIGNATURE-----