Opened 6 years ago

Closed 6 years ago

#7457 closed enhancement (fixed)

thunderbird-38.6.0

Reported by: Fernando de Oliveira Owned by: Fernando de Oliveira
Priority: high Milestone: 7.9
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description

Various security fixes

https://ftp.mozilla.org/pub/thunderbird/releases/38.6.0/source/thunderbird-38.6.0.source.tar.bz2

https://ftp.mozilla.org/pub/thunderbird/releases/38.6.0/SHA512SUMS

9f6cb6b7c9b4935603333366a21cbb3e142fbdbded61adea44c39d45327207e1478d268fb721ee914ae1b0e762507f3665e40e1c315bd454fe1d019bd7972a08 source/thunderbird-38.6.0.source.tar.bz2

https://ftp.mozilla.org/pub/thunderbird/releases/38.6.0/SHA512SUMS.asc

https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird38.6.0

Security Advisories for Thunderbird

Last was for 38.5.0

But on Firefox ESR 38.6:

https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr38.6

Fixed in Firefox ESR 38.6

    Critical
    • 2016-03 Buffer overflow in WebGL after out of memory allocation
    • 2016-01 Miscellaneous memory safety hazards (rv:44.0 / rv:38.6)


    Moderate
    • 2015-150 MD5 signatures accepted within TLS 1.2 ServerKeyExchange
      in server signature

https://www.mozilla.org/en-US/thunderbird/38.6.0/releasenotes/

Thunderbird Notes

Version 38.6.0, first offered to Release channel users on February 16,
2016

Check out "What’s New" and "Known Issues" for this version of
Thunderbird below. As always, you’re encouraged to tell us what you
think, or file a bug in Bugzilla. If interested, please see the complete
list of changes in this release.  What’s New

    • Various security fixes.
    • Filters ran on a different folder than selected
    • For Windows systems on roaming profiles, could not display
      messages after Thunderbird update (related to Lightning updates)

Change History (5)

comment:1 by Fernando de Oliveira, 6 years ago

Owner: changed from blfs-book@… to Fernando de Oliveira
Status: newassigned

comment:2 by Fernando de Oliveira, 6 years ago

Owner: changed from Fernando de Oliveira to blfs-book@…
Status: assignednew

I think I am doing a bad work here.

I apologize for the mistakes I did.

Will not create the tickets, and only when somebody thinks there is a ticket I am capable of doing, please, tell me and I will be happy to do it.

comment:3 by Fernando de Oliveira, 6 years ago

Owner: changed from blfs-book@… to Fernando de Oliveira

Private email from someone of my great respect and that I thank very much disagreed with me, about the relevance of my work, number of errors and capability.

Let's try to work in the morning, when I succeed in getting up. ;-)

comment:4 by Fernando de Oliveira, 6 years ago

Status: newassigned

comment:5 by Fernando de Oliveira, 6 years ago

Resolution: fixed
Status: assignedclosed

Fixed at r16968.

Note: See TracTickets for help on using tickets.