Пакет thunderbird: Информация

Default inline alert: Версия в репозитории: 115.9.0-alt1

Исходный пакет: thunderbird

Версия: 91.3.0-alt1

Последняя версия по данным Repology

Собран: 3 ноября 2021 г. 20:47 в задании #288817

Категория: Сети/Почта

Сообщить об ошибке в пакете

Gear: https://git.altlinux.org/gears/t/thunderbird.git?a=tree;hb=a9f7c…

Домашняя страница: https://www.thunderbird.net

Лицензия: MPL-2.0

О пакете: Thunderbird is Mozilla's e-mail client

Описание:

Thunderbird is Mozilla's next generation e-mail client. Thunderbird makes
emailing safer, faster and easier than ever before and can also scale to meet
the most sophisticated organizational needs.

The package contains Lightning - an integrated calendar for Thunderbird.

Список rpm-пакетов, предоставляемых данным srpm-пакетом:
rpm-build-thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-wayland (x86_64, ppc64le, i586, aarch64)

Сопровождающий: Andrey Cherepanov

Список участников:
Andrey Cherepanov
Aleksei Nikiforov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov

Права:
Pavel Vasenkov
Andrey Cherepanov
@everybody

Сборочные зависимости:

3 ноября 2021 г. Andrey Cherepanov 91.3.0-alt1

- New version.
- Security fixes:
  + CVE-2021-38503 iframe sandbox rules did not apply to XSLT stylesheets
  + CVE-2021-38504 Use-after-free in file picker dialog
  + CVE-2021-38505 Windows 10 Cloud Clipboard may have recorded sensitive user data
  + CVE-2021-38506 Thunderbird could be coaxed into going into fullscreen mode without notification or warning
  + CVE-2021-38507 Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports
  + CVE-2021-38508 Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
  + CVE-2021-38509 Javascript alert box could have been spoofed onto an arbitrary domain
  + CVE-2021-38510 Download Protections were bypassed by .inetloc files on Mac OS
- Disable telemetry by default.

22 октября 2021 г. Andrey Cherepanov 91.2.1-alt1

- New version.
- Security fixes:
  + CVE-2021-38502 Downgrade attack on SMTP STARTTLS connections
  + CVE-2021-38496 Use-after-free in MessageTask
  + CVE-2021-38497 Validation message could have been overlaid on another origin
  + CVE-2021-38498 Use-after-free of nsLanguageAtomService object
  + CVE-2021-32810 Data race in crossbeam-deque
  + CVE-2021-38500 Memory safety bugs fixed in Thunderbird 91.2
  + CVE-2021-38501 Memory safety bugs fixed in Thunderbird 91.2

6 октября 2021 г. Andrey Cherepanov 91.2.0-alt1

- New version.

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Версия: v24.5.1