mozilla-thunderbird 1.5.0.2-0ubuntu1 source package in Ubuntu

Changelog

mozilla-thunderbird (1.5.0.2-0ubuntu1) dapper; urgency=low

  * New upstream incremental security and bugfix release (launchpad.net/41096):
    - MFSA 2006-28, CVE-2006-1726: Security check of js_ValueToFunctionObject()
      can be circumvented
    - MFSA 2006-27, CVE-2006-0748: Table Rebuilding Code Execution Vuln
    - MFSA 2006-26, CVE-2006-1045: Mail Multiple Information Disclosure
    - MFSA 2006-25, CVE-2006-1727: Privilege escalation through Print Preview
    - MFSA 2006-24, CVE-2006-1728: Privilege escalation using
      crypto.generateCRMFRequest
    - MFSA 2006-22, CVE-2006-1730: CSS Letter-Spacing Heap Overflow Vuln
    - MFSA 2006-21, CVE-2006-0884: JavaScript execution in mail when
      forwarding in-line
    - MFSA 2006-20, CVE-2006-1529, CVE-2006-1530, CVE-2006-1531,
      CVE-2006-1723, CVE-2006-1724: Crashes with memory corruption.
    - MFSA 2006-08, CVE-2006-0299: "AnyName" entrainment and access control
      hazard
    - MFSA 2006-07, CVE-2006-0298: Read beyond buffer while parsing XML
    - MFSA 2006-06, CVE-2006-0297: Integer overflows in E4X, SVG and Canvas
    - MFSA 2006-05, CVE-2006-0296: Localstore.rdf XML injection through
      XULDocument.persist()
    - MFSA 2006-04, CVE-2006-0295: Memory corruption via QueryInterface on
      Location, Navigator objects
    - MFSA 2006-02, CVE-2006-0294: Changing postion:relative to static
      corrupts memory
    - MFSA 2006-01, CVE-2006-0292: JavaScript garbage-collection hazards
  * New upstream should have restored the ability to send attachments
    via the command line interface (launchpad.net/35690)
  * Add the (at this point, very well-tested) GNOME/MIME handling patch
    from Firefox, so we get GNOME MIME definitions (launchpad.net/30375)
  * Sync 91_fontsfix_359763.dpatch from Debian, to use the generic font
    aliases instead of demanding "Times", "Courier", and "Helvetica".
  * Sync isolated arch build failure fixes from Debian as well, for people
    who feel the urge to port dapper after it's released: 50_arch_*.dpatch
  * Drop all references to mozilla-thunderbird-update-chrome, and the *.d
    directories in /var/lib/mozilla-thunderbird and stop shipping them, as
    they've been obsolete and broken since 1.5 (launchpad.net/{35465,25997})
  * Stop shipping /tmp in the typeaheadfind package (launchpad.net/43470)
  * Rework the Debconf www-browser selection so it automatically chooses to
    use gnome-control-center's choice if it detects it installed, otherwise
    falling back to x-www-browser (launchpad.net/{31841,34546,41706,25704})
  * Drop suggests on xprint, which we stopped using (launchpad.net/33307)
  * Depend on "myspell-en-us | myspell-dictionary", since we now appear to
    require it unconditionally for operation (launchpad.net/{35212,37825})
  * Fix the default theme so it shows up in themes list, so you can remove
    added themes, since they're not the "last one" (launchpad.net/43022)
  * Hide the Profile Manager menu icon by default (launchpad.net/12874)
  * Add proper branding (Yay, we're Thunderbird again, not Mail/News, and we
    have an icon and an about box, oh my!), icon thanks to Andy Fitzsimon,
    integration mangling thanks to Alexander Sack. (launchpad.net/19439)

 -- Adam Conrad <email address hidden>   Sun, 14 May 2006 04:50:44 +1000