Package thunderbird: Information

Source package: thunderbird
Version: 68.7.0-alt2
Build time:  Apr 14, 2020, 10:00 PM in the task #249804
Category: Networking/Mail
Report package bug
License: MPL-2.0
Summary: Thunderbird is Mozilla's e-mail client
Description: 
Thunderbird is Mozilla's next generation e-mail client.
Thunderbird makes emailing safer, faster and easier than
ever before and can also scale to meet the most sophisticated
organizational needs.
The package contains Lightning - an integrated calendar for Thunderbird.

List of rpms provided by this srpm:
rpm-build-thunderbird (noarch)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-enigmail (x86_64, ppc64le, i586, aarch64)

Maintainer: Andrey Cherepanov


    1. libwireless-devel
    2. libdbus-glib-devel
    3. alternatives
    4. autoconf_2.13
    5. autoconf_2.13
    6. libevent-devel
    7. libstartup-notification-devel
    8. libstdc++-devel
    9. libffi-devel
    10. /proc
    11. libfreetype-devel
    12. browser-plugins-npapi-devel
    13. bzlib-devel
    14. libnotify-devel
    15. lld-devel
    16. llvm7.0-devel
    17. chrpath
    18. rust
    19. clang7.0
    20. clang7.0-devel
    21. rust-cargo
    22. libnspr-devel
    23. makedepend
    24. libnss-devel
    25. libnss-devel-static
    26. gst-plugins1.0-devel
    27. gstreamer1.0-devel
    28. libgio-devel
    29. libopus-devel
    30. mozilla-common-devel
    31. mozldap-devel
    32. libGL-devel
    33. rpm-build-mozilla.org
    34. libX11-devel
    35. libIDL-devel
    36. doxygen
    37. libXScrnSaver-devel
    38. libXcomposite-devel
    39. nasm
    40. libXcursor-devel
    41. libXdamage-devel
    42. libXext-devel
    43. node
    44. libpixman-devel
    45. libXft-devel
    46. libXi-devel
    47. libXt-devel
    48. python-module-distribute
    49. libalsa-devel
    50. fontconfig-devel
    51. unzip
    52. libproxy-devel
    53. python-modules-compiler
    54. libgtk+2-devel
    55. python-modules-json
    56. python-modules-logging
    57. libgtk+3-devel
    58. python-modules-sqlite3
    59. imake
    60. xorg-cf-files
    61. libhunspell-devel
    62. libcairo-devel
    63. gcc-c++
    64. libpulseaudio-devel
    65. libjpeg-devel
    66. yasm
    67. zip
    68. zlib-devel
    69. libcurl-devel
    70. libvpx5-devel

Last changed


April 12, 2020 Andrey Cherepanov 68.7.0-alt2
- Add security fixes information to changelog.
April 8, 2020 Andrey Cherepanov 68.7.0-alt1
- New version (68.7.0).
- Fixes:
  + CVE-2020-6819 Use-after-free while running the nsDocShell destructor
  + CVE-2020-6820 Use-after-free when handling a ReadableStream
  + CVE-2020-6821 Uninitialized memory could be read when using the WebGL copyTexSubImage method
  + CVE-2020-6822 Out of bounds write in GMPDecodeData when processing large images
  + CVE-2020-6825 Memory safety bugs fixed in Thunderbird 68.7.0
- Enigmail 2.1.6.
March 14, 2020 Andrey Cherepanov 68.6.0-alt1
- New version (68.6.0).
- Fixed:
  + CVE-2020-6805 Use-after-free when removing data about origins
  + CVE-2020-6806 BodyStream::OnInputStreamReady was missing protections against state confusion
  + CVE-2020-6807 Use-after-free in cubeb during stream destruction
  + CVE-2020-6811 Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection
  + CVE-2019-20503 Out of bounds reads in sctp_load_addresses_from_init
  + CVE-2020-6812 The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission
  + CVE-2020-6814 Memory safety bugs fixed in Thunderbird 68.6