Package thunderbird: Information
Default inline alert: Version in the repository: 115.9.0-alt1
Source package: thunderbird
Version: 68.5.0-alt1
Build time: Feb 12, 2020, 02:25 PM in the task #245896
Category: Networking/Mail
Report package bugHome page: https://www.thunderbird.net
License: MPL-2.0
Summary: Thunderbird is Mozilla's e-mail client
Description:
Thunderbird is Mozilla's next generation e-mail client. Thunderbird makes emailing safer, faster and easier than ever before and can also scale to meet the most sophisticated organizational needs. The package contains Lightning - an integrated calendar for Thunderbird.
List of rpms provided by this srpm:
rpm-build-thunderbird (noarch)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-enigmail (x86_64, ppc64le, i586, aarch64)
rpm-build-thunderbird (noarch)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-enigmail (x86_64, ppc64le, i586, aarch64)
Maintainer: Andrey Cherepanov
List of contributors:
Andrey Cherepanov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov
Andrey Cherepanov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov
Last changed
Feb. 12, 2020 Andrey Cherepanov 68.5.0-alt1
- New version (68.5.0). - Fixed: + CVE-2020-6793 Out-of-bounds read when processing certain email messages + CVE-2020-6794 Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords + CVE-2020-6795 Crash processing S/MIME messages with multiple signatures + CVE-2020-6797 Extensions granted downloads.open permission could open arbitrary applications on Mac OSX + CVE-2020-6798 Incorrect parsing of template tag could result in JavaScript injection + CVE-2020-6792 Message ID calculcation was based on uninitialized data + CVE-2020-6800 Memory safety bugs fixed in Thunderbird 68.5
Feb. 3, 2020 Andrey Cherepanov 68.4.2-alt1
- New version.
Jan. 11, 2020 Andrey Cherepanov 68.4.1-alt1
- New version (68.4.1). - Fixed: + CVE-2019-17026 IonMonkey type confusion with StoreElementHole and FallibleStoreElement + CVE-2019-17015 Memory corruption in parent process during new content process initialization on Windows + CVE-2019-17016 Bypass of @namespace CSS sanitization during pasting + CVE-2019-17017 Type Confusion in XPCVariant.cpp + CVE-2019-17021 Heap address disclosure in parent process during content process initialization on Windows + CVE-2019-17022 CSS sanitization does not escape HTML tags + CVE-2019-17024 Memory safety bugs fixed in Thunderbird 68.4.1 - Enigmail 2.1.5.