thunderbird (1:102.7.1-1) unstable; urgency=medium

thunderbird (1:102.7.1-1) unstable; urgency=medium

  * [dbc3385] New upstream version 102.7.1
    Fixed CVE issues in upstream version 102.7 (MFSA 2023-03):
    CVE-2022-46871: libusrsctp library out of date
    CVE-2023-23598: Arbitrary file read from GTK drag and drop on Linux
    CVE-2023-23601: URL being dragged from cross-origin iframe into same
                    tab triggers navigation
    CVE-2023-23602: Content Security Policy wasn't being correctly applied
                    to WebSockets in WebWorkers
    CVE-2022-46877: Fullscreen notification bypass
    CVE-2023-23603: Calls to <code>console.log</code> allowed bypasing
                    Content Security Policy via format directive
    CVE-2023-23605: Memory safety bugs fixed in Thunderbird 102.7
    Fixed CVE issues in upstream version 102.7.1 (MFSA not yet released):
    CVE-2023-0430: Revocation status of S/Mime signature certificates was
                   not checked
  * [af92a36] Rebuild patch queue from patch-queue branch
    Added patch:
    debian-hacks/Python-3.11-Don-t-use-mode-rU-any-more.patch
    (Closes: #1028885)

[dgit import unpatched thunderbird 1:102.7.1-1]