1
0
MozillaThunderbird/thunderbird-115.10.1.source.tar.xz.asc
Wolfgang Rosenauer ecbf912dc5 - Mozilla Thunderbird 115.10.1
https://www.thunderbird.net/en-US/thunderbird/115.10.1/releasenotes/
  * fixed hangup introduced with 115.10.0 (bmo#1891889)

- Mozilla Thunderbird 115.10.0
  https://www.thunderbird.net/en-US/thunderbird/115.10.0/releasenotes/
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on Windows
  * CVE-2024-3302 (bmo#1881183)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=753
2024-04-20 13:14:08 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmYglq8ACgkQ4207E/PZ
MnS2uw/+LCitQpgV8z9PKgg4nqFg3X3aPrG5BbRfyxIayhZ7JOq+rINDU0VPo2wo
YNPuqXt3LaQUGYpKlVyQITelgwvd5dNOvaYMKDS4tqXIUZgs2wu5/5M1knlI/s6v
MGX9vOVbTna7/29RKAIffcKYvgYn6YpzYUvPJMJou6j1iFBjBG9hd8WRFUXFOR29
LpPtnu4h5hxrkFHzr+wMBlloYbtbtJmLJw1uxpTkwv7uAF15PyeHdyDg7QpEnaQ+
9T5bo/9ZLodINZcLynLGiw+zeelGOwjEsyc/GRXPLuMpyePemGf/Ouc4tC/8b1XS
RmTTO2HCEVcp9Q2eooU4KerJFrVAF3a2+4jHcQl7Hls82+iJqrMrEaJ4+cOMWKaS
Hfwx6P64E0Uzo2uuHdnywVdLR7DHQoAgHsOnhs3sg9DJC+oUNyQuj5nO+difxYVA
OzX+WUONAPsQG7j8O9lLrQZmh48pRbQ1QhE2HRPfLx49Gxb5bxDq7D56XCvxJm6T
gEBwAp2pFAS6WTKQxcDx0Hw8ich7Nkfv2pvRdCwArf+s7QZj/YcKOZ7l8oRKnpIc
pY3oAA/kpwRoBuegK82jtQupqOKo2ELoR6PUZoRXKIIuzIwfxMJlEVOw6PPs8zAW
WX8KhVHtQh8lgIKYxzDgA672IA5jHCqgtD5Nu8j8rYzn1E8TpGQ=
=2+Hu
-----END PGP SIGNATURE-----