Package thunderbird: Information

Default inline alert: Version in the repository: 115.9.0-alt1

Source package: thunderbird

Version: 78.5.1-alt1

Latest version according to Repology

Build time: Dec 3, 2020, 02:51 PM in the task #262794

Category: Networking/Mail

Report package bug

Gear: https://git.altlinux.org/gears/t/thunderbird.git?a=tree;hb=43db0…

Home page: https://www.thunderbird.net

License: MPL-2.0

Summary: Thunderbird is Mozilla's e-mail client

Description:

Thunderbird is Mozilla's next generation e-mail client.
Thunderbird makes emailing safer, faster and easier than
ever before and can also scale to meet the most sophisticated
organizational needs.
The package contains Lightning - an integrated calendar for Thunderbird.

List of rpms provided by this srpm:
rpm-build-thunderbird (noarch)
thunderbird (x86_64, ppc64le, i586, armh, aarch64)
thunderbird-wayland (noarch)

Maintainer: Andrey Cherepanov

List of contributors:
Andrey Cherepanov
Aleksei Nikiforov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov

ACL:
Pavel Vasenkov
Andrey Cherepanov
@everybody

Build dependencies:

Dec. 2, 2020 Andrey Cherepanov 78.5.1-alt1

- New version (78.5.1).
- Security fixes:
  + CVE-2020-26970 Stack overflow due to incorrect parsing of SMTP server response codes

Nov. 19, 2020 Andrey Cherepanov 78.5.0-alt1

- New version (78.5.0).
- Fixes:
  + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
  + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls
  + CVE-2020-26953 Fullscreen could be enabled without displaying the security UI
  + CVE-2020-26956 XSS through paste (manual and clipboard API)
  + CVE-2020-26958 Requests intercepted through ServiceWorkers lacked MIME type restrictions
  + CVE-2020-26959 Use-after-free in WebRequestService
  + CVE-2020-26960 Potential use-after-free in uses of nsTArray
  + CVE-2020-15999 Heap buffer overflow in freetype
  + CVE-2020-26961 DoH did not filter IPv4 mapped IP Addresses
  + CVE-2020-26965 Software keyboards may have remembered typed passwords
  + CVE-2020-26966 Single-word search queries were also broadcast to local network
  + CVE-2020-26968 Memory safety bugs fixed in Thunderbird 78.5
- Fix guess timezone for calendar (ALT #38081).

Nov. 12, 2020 Andrey Cherepanov 78.4.3-alt1

- New version (78.4.3).

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Version: v24.4.2