Package thunderbird: Information
Default inline alert: Version in the repository: 102.11.0-alt0.c9.1
Source package: thunderbird
Version: 68.7.0-alt2
Build time: Apr 14, 2020, 10:00 PM in the task #249804
Category: Networking/Mail
Report package bugHome page: https://www.thunderbird.net
License: MPL-2.0
Summary: Thunderbird is Mozilla's e-mail client
Description:
Thunderbird is Mozilla's next generation e-mail client. Thunderbird makes emailing safer, faster and easier than ever before and can also scale to meet the most sophisticated organizational needs. The package contains Lightning - an integrated calendar for Thunderbird.
List of rpms provided by this srpm:
rpm-build-thunderbird (noarch)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-enigmail (x86_64, ppc64le, i586, aarch64)
rpm-build-thunderbird (noarch)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-enigmail (x86_64, ppc64le, i586, aarch64)
Maintainer: Andrey Cherepanov
List of contributors:
Andrey Cherepanov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov
Andrey Cherepanov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov
Last changed
April 12, 2020 Andrey Cherepanov 68.7.0-alt2
- Add security fixes information to changelog.
April 8, 2020 Andrey Cherepanov 68.7.0-alt1
- New version (68.7.0). - Fixes: + CVE-2020-6819 Use-after-free while running the nsDocShell destructor + CVE-2020-6820 Use-after-free when handling a ReadableStream + CVE-2020-6821 Uninitialized memory could be read when using the WebGL copyTexSubImage method + CVE-2020-6822 Out of bounds write in GMPDecodeData when processing large images + CVE-2020-6825 Memory safety bugs fixed in Thunderbird 68.7.0 - Enigmail 2.1.6.
March 14, 2020 Andrey Cherepanov 68.6.0-alt1
- New version (68.6.0). - Fixed: + CVE-2020-6805 Use-after-free when removing data about origins + CVE-2020-6806 BodyStream::OnInputStreamReady was missing protections against state confusion + CVE-2020-6807 Use-after-free in cubeb during stream destruction + CVE-2020-6811 Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection + CVE-2019-20503 Out of bounds reads in sctp_load_addresses_from_init + CVE-2020-6812 The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission + CVE-2020-6814 Memory safety bugs fixed in Thunderbird 68.6