Package thunderbird: Information

Source package: thunderbird

Version: 115.9.0-alt1

Build time: Apr 8, 2024, 05:58 PM in the task #344280

Category: Networking/Mail

Report package bug

Gear: https://git.altlinux.org/gears/t/thunderbird.git?a=tree;hb=09f26…

Home page: https://www.thunderbird.net

License: MPL-2.0

Summary: Thunderbird is Mozilla's e-mail client

Description:

Thunderbird is Mozilla's next generation e-mail client. Thunderbird makes
emailing safer, faster and easier than ever before and can also scale to meet
the most sophisticated organizational needs.

The package contains Lightning - an integrated calendar for Thunderbird.

List of rpms provided by this srpm:
rpm-build-thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-wayland (x86_64, ppc64le, i586, aarch64)

Maintainer: Andrey Cherepanov

List of contributors:
Pavel Vasenkov
Andrey Cherepanov
Grigory Ustinov
Alexey Sheplyakov
Aleksei Nikiforov
Gleb Fotengauer-Malinovskiy
Paul Wolneykien
Anton Farygin
Vladimir Didenko
Alexey Gladkov
Alexey Morozov

Build dependencies:

April 3, 2024 Pavel Vasenkov 115.9.0-alt1

- New version.
- Security fixes:
  + CVE-2024-0743 Crash in NSS TLS method
  + CVE-2024-2605 Windows Error Reporter could be used as a Sandbox escape vector
  + CVE-2024-2607 JIT code failed to save return registers on Armv7-A
  + CVE-2024-2608 Integer overflow could have led to out of bounds write
  + CVE-2024-2616 Improve handling of out-of-memory conditions in ICU
  + CVE-2023-5388 NSS susceptible to timing attack against RSA decryption
  + CVE-2024-2610 Improper handling of html and body tags enabled CSP nonce leakage
  + CVE-2024-2611 Clickjacking vulnerability could have led to a user accidentally granting permissions
  + CVE-2024-2612 Self referencing object could have potentially led to a use-after-free
  + CVE-2024-2614 Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9

March 12, 2024 Pavel Vasenkov 115.8.1-alt1

- New version.
- Security fixes:
  + CVE-2024-1936 Leaking of encrypted email subjects to other conversations

March 11, 2024 Andrey Cherepanov 115.8.0-alt3

- Use maximize icon for mail window too (ALT #49606).

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Version: v24.5.1