Пакет thunderbird: Информация
Default inline alert: Версия в репозитории: 102.11.0-alt0.c9.1
Исходный пакет: thunderbird
Версия: 91.5.0-alt0.c9.1
Собран: 19 января 2022 г. 19:32 в задании #293389
Категория: Сети/Почта
Сообщить об ошибке в пакетеДомашняя страница: https://www.thunderbird.net
Лицензия: MPL-2.0
О пакете: Thunderbird is Mozilla's e-mail client
Описание:
Thunderbird is Mozilla's next generation e-mail client. Thunderbird makes emailing safer, faster and easier than ever before and can also scale to meet the most sophisticated organizational needs. The package contains Lightning - an integrated calendar for Thunderbird.
Список rpm-пакетов, предоставляемых данным srpm-пакетом:
rpm-build-thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-wayland (x86_64, ppc64le, i586, aarch64)
rpm-build-thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-wayland (x86_64, ppc64le, i586, aarch64)
Сопровождающий: Andrey Cherepanov
Список участников:
Andrey Cherepanov
Aleksei Nikiforov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov
Andrey Cherepanov
Aleksei Nikiforov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov
Последнее изменение
12 января 2022 г. Andrey Cherepanov 91.5.0-alt0.c9.1
- Backport new version with security fixes to c9 branch.
12 января 2022 г. Andrey Cherepanov 91.5.0-alt1
- New version. - Security fixes: + CVE-2022-22746 Calling into reportValidity could have lead to fullscreen window spoof + CVE-2022-22743 Browser window spoof using fullscreen mode + CVE-2022-22742 Out-of-bounds memory access when inserting text in edit mode + CVE-2022-22741 Browser window spoof using fullscreen mode + CVE-2022-22740 Use-after-free of ChannelEventQueue::mOwner + CVE-2022-22738 Heap-buffer-overflow in blendGaussianBlur + CVE-2022-22737 Race condition when playing audio files + CVE-2021-4140 Iframe sandbox bypass with XSLT + CVE-2022-22748 Spoofed origin on external protocol launch dialog + CVE-2022-22745 Leaking cross-origin URLs through securitypolicyviolation event + CVE-2022-22744 The 'Copy as curl' feature in DevTools did not fully escape website-controlled data, potentially leading to command injection + CVE-2022-22747 Crash when handling empty pkcs7 sequence + CVE-2022-22739 Missing throttling on external protocol launch dialog + CVE-2022-22751 Memory safety bugs fixed in Thunderbird 91.5
22 декабря 2021 г. Andrey Cherepanov 91.4.1-alt0.c9.1
- Backport new version with security fixes to c9 branch.