Пакет thunderbird: Информация

Default inline alert: Версия в репозитории: 115.9.0-alt1

Исходный пакет: thunderbird

Версия: 102.3.1-alt1

Последняя версия по данным Repology

Собран: 10 октября 2022 г. 9:10 в задании #308145

Категория: Сети/Почта

Сообщить об ошибке в пакете

Gear: https://git.altlinux.org/gears/t/thunderbird.git?a=tree;hb=ca9d9…

Домашняя страница: https://www.thunderbird.net

Лицензия: MPL-2.0

О пакете: Thunderbird is Mozilla's e-mail client

Описание:

Thunderbird is Mozilla's next generation e-mail client. Thunderbird makes
emailing safer, faster and easier than ever before and can also scale to meet
the most sophisticated organizational needs.

The package contains Lightning - an integrated calendar for Thunderbird.

Список rpm-пакетов, предоставляемых данным srpm-пакетом:
rpm-build-thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-wayland (x86_64, ppc64le, i586, aarch64)

Сопровождающий: Andrey Cherepanov

Список участников:
Pavel Vasenkov
Andrey Cherepanov
Aleksei Nikiforov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov

Права:
Pavel Vasenkov
Andrey Cherepanov
@everybody

Сборочные зависимости:

10 октября 2022 г. Pavel Vasenkov 102.3.1-alt1

- New version.
- Security fixes:
  + CVE-2022-39249 Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators
  + CVE-2022-39250 Matrix SDK bundled with Thunderbird vulnerable to a device verification attack
  + CVE-2022-39251 Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack
  + CVE-2022-39236 Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue

9 октября 2022 г. Pavel Vasenkov 102.3.0-alt1

- New version.
- Security fixes:
  + CVE-2022-3266 Out of bounds read when decoding H264
  + CVE-2022-40959 Bypassing FeaturePolicy restrictions on transient pages
  + CVE-2022-40960 Data-race when parsing non-UTF-8 URLs in threads
  + CVE-2022-40958 Bypassing Secure Context restriction for cookies with __Host and __Secure prefix
  + CVE-2022-40956 Content-Security-Policy base-uri bypass
  + CVE-2022-40957 Incoherent instruction cache when building WASM on ARM64
  + CVE-2022-3155 Attachment files saved to disk on macOS could be executed without warning
  + CVE-2022-40962 Memory safety bugs fixed in Thunderbird 102.3

6 сентября 2022 г. Pavel Vasenkov 102.2.1-alt1

- New version.
- Security fixes:
  + CVE-2022-3033 Leaking of sensitive information when composing a response to an HTML email with a META refresh tag
  + CVE-2022-3032 Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked
  + CVE-2022-3034 An iframe element in an HTML email could trigger a network request
  + CVE-2022-36059 Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Версия: v24.5.3