Пакет thunderbird: Информация

Default inline alert: Версия в репозитории: 115.9.0-alt1

Исходный пакет: thunderbird

Версия: 52.8.0-alt1

Собран: 19 мая 2018 г. 22:09 в задании #206663

Категория: Сети/Почта

Сообщить об ошибке в пакете

Gear: https://git.altlinux.org/gears/t/thunderbird.git?a=tree;hb=3e702…

Домашняя страница: https://www.thunderbird.net

Лицензия: MPL/GPL

О пакете: Thunderbird is Mozilla's e-mail client

Описание:

Thunderbird is Mozilla's next generation e-mail client.
Thunderbird makes emailing safer, faster and easier than
ever before and can also scale to meet the most sophisticated
organizational needs.
The package contains Lightning - an integrated calendar for Thunderbird.

Список rpm-пакетов, предоставляемых данным srpm-пакетом:
rpm-build-thunderbird (noarch)
thunderbird (x86_64, i586)
thunderbird-debuginfo (x86_64, i586)
thunderbird-devel (x86_64, i586)
thunderbird-devel-debuginfo (x86_64, i586)
thunderbird-enigmail (x86_64, i586)
thunderbird-google-calendar (x86_64, i586)

Сопровождающий: Andrey Cherepanov

Список участников:
Andrey Cherepanov
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov

Сборочные зависимости:

19 мая 2018 г. Andrey Cherepanov 52.8.0-alt1

- New version (52.8.0).
- Enigmail 2.0.4.
- Fixes:
  + CVE-2018-5183 Backport critical security fixes in Skia
  + CVE-2018-5184 Full plaintext recovery in S/MIME via chosen-ciphertext attack
  + CVE-2018-5154 Use-after-free with SVG animations and clip paths
  + CVE-2018-5155 Use-after-free with SVG animations and text paths
  + CVE-2018-5159 Integer overflow and out-of-bounds write in Skia
  + CVE-2018-5161 Hang via malformed headers
  + CVE-2018-5162 Encrypted mail leaks plaintext through src attribute
  + CVE-2018-5170 Filename spoofing for external attachments
  + CVE-2018-5168 Lightweight themes can be installed without user interaction
  + CVE-2018-5178 Buffer overflow during UTF-8 to Unicode string conversion through legacy extension
  + CVE-2018-5185 Leaking plaintext through HTML forms
  + CVE-2018-5150 Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8, and Thunderbird 52.8
- Build in several threads.

24 марта 2018 г. Andrey Cherepanov 52.7.0-alt1

- New version (52.7.0)
- Fixes:
  + CVE-2018-5127 Buffer overflow manipulating SVG animatedPathSegList
  + CVE-2018-5129 Out-of-bounds write with malformed IPC messages
  + CVE-2018-5144 Integer overflow during Unicode conversion
  + CVE-2018-5146 Out of bounds memory write in libvorbis
  + CVE-2018-5125 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7
  + CVE-2018-5145 Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird 52.7

29 января 2018 г. Andrey Cherepanov 52.6.0-alt1

- New version (52.6.0)
- Fixes:
  + CVE-2018-5095 Integer overflow in Skia library during edge builder allocation
  + CVE-2018-5096 Use-after-free while editing form elements
  + CVE-2018-5097 Use-after-free when source document is manipulated during XSLT
  + CVE-2018-5098 Use-after-free while manipulating form input elements
  + CVE-2018-5099 Use-after-free with widget listener
  + CVE-2018-5102 Use-after-free in HTML media elements
  + CVE-2018-5103 Use-after-free during mouse event handling
  + CVE-2018-5104 Use-after-free during font face manipulation
  + CVE-2018-5117 URL spoofing with right-to-left text aligned left-to-right
  + CVE-2018-5089 Memory safety bugs fixed in Firefox 58, Firefox ESR 52.6, and Thunderbird 52.6

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Версия: v24.5.1