thunderbird (1:102.14.0-1~deb12u1) bookworm-security; urgency=medium
* [
bcc7c87] New upstream version 102.14.0
Fixed CVE issues in upstream version 102.14 (MFSA 2023-32):
CVE-2023-4045: Offscreen Canvas could have bypassed cross-origin restrictions
CVE-2023-4046: Incorrect value used during WASM compilation
CVE-2023-4047: Potential permissions request bypass via clickjacking
CVE-2023-4048: Crash in DOMParser due to out-of-memory conditions
CVE-2023-4049: Fix potential race conditions when releasing platform objects
CVE-2023-4050: Stack buffer overflow in StorageManager
CVE-2023-4055: Cookie jar overflow caused unexpected cookie jar state
CVE-2023-4056: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
* Rebuild for bookworm-security
[dgit import unpatched thunderbird 1:102.14.0-1~deb12u1]