thunderbird (1:115.7.0-1) unstable; urgency=medium
* [
6e0c26c] New upstream version 115.7.0
Fixed CVE issues in upstream version 115.7 (MFSA 2024-04):
CVE-2024-0741: Out of bounds write in ANGLE
CVE-2024-0742: Failure to update user input timestamp
CVE-2024-0746: Crash when listing printers on Linux
CVE-2024-0747: Bypass of Content Security Policy when directive
unsafe-inline was set
CVE-2024-0749: Phishing site popup could show local origin in address bar
CVE-2024-0750: Potential permissions request bypass via clickjacking
CVE-2024-0751: Privilege escalation through devtools
CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain
CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
and Thunderbird 115.7
[dgit import unpatched thunderbird 1:115.7.0-1]