-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 02 Mar 2011 18:22:20 +0100 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: amd64 Version: 3.0.11-1+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: amd64 Builddd Daemon (barber) Changed-By: Christoph Goehre Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze1) stable-security; urgency=high . * [2bf1366] backported patches from xulrunner fixes mfsa2011-{01-08,10} - MFSA 2011-01 aka CVE-2011-0053: Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17) - MFSA 2011-02 aka CVE-2011-0051: Recursive eval call causes confirm dialogs to evaluate to true - MFSA 2011-03 aka CVE-2011-0055: Use-after-free error in JSON.stringify - MFSA 2011-04 aka CVE-2011-0054: Buffer overflow in JavaScript upvarMap - MFSA 2011-05 aka CVE-2011-0056: Buffer overflow in JavaScript atom map - MFSA 2011-06 aka CVE-2011-0057: Use-after-free error using Web Workers - MFSA 2011-07 aka CVE-2011-0058: Memory corruption during text run construction (Windows) - MFSA 2011-08 aka CVE-2010-1585: ParanoidFragmentSink allows javascript: URLs in chrome documents - MFSA 2011-10 aka CVE-2011-0059: CSRF risk with plugins and 307 redirects Checksums-Sha1: 22fef00bff5249c7b67ac2d6a2f65836465b8ac0 12523514 icedove_3.0.11-1+squeeze1_amd64.deb e15c8d0d9a68f72c19dd0c058fc1735ea3307169 5735156 icedove-dev_3.0.11-1+squeeze1_amd64.deb dcec1917ad96f7c454762945b0c0b3f07f2a3876 68281838 icedove-dbg_3.0.11-1+squeeze1_amd64.deb Checksums-Sha256: f62a449a126cc7f93747586ad0997f735c767295b1620319d7d63b54db902c2b 12523514 icedove_3.0.11-1+squeeze1_amd64.deb 8574f1c5d22b05e0a661a7a44979b5d25c2013b71a7cff06aeca4e880915276a 5735156 icedove-dev_3.0.11-1+squeeze1_amd64.deb 8dad9519dc4a7ba12dd080e50f51cfcb6561d8ab3f6fbd894e925d8257f65678 68281838 icedove-dbg_3.0.11-1+squeeze1_amd64.deb Files: 47eb58d662984f766b60c1e5dca007f4 12523514 mail optional icedove_3.0.11-1+squeeze1_amd64.deb 3df1d56bdfecc47b0d28c57a70aa07a7 5735156 mail optional icedove-dev_3.0.11-1+squeeze1_amd64.deb 46889a6fa95d04ccab63f3bd11fe1e46 68281838 debug extra icedove-dbg_3.0.11-1+squeeze1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk11DJcACgkQXm3vHE4uylop/QCfc0pIqwWqNuh673VGaYhsEtKm P1IAoJ9bCFLnpB5yAI0/cGqoptW60Dc1 =xbdp -----END PGP SIGNATURE-----