-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 02 Mar 2011 18:22:20 +0100 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: armel Version: 3.0.11-1+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: armel Build Daemon (antheil) Changed-By: Christoph Goehre Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze1) stable-security; urgency=high . * [2bf1366] backported patches from xulrunner fixes mfsa2011-{01-08,10} - MFSA 2011-01 aka CVE-2011-0053: Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17) - MFSA 2011-02 aka CVE-2011-0051: Recursive eval call causes confirm dialogs to evaluate to true - MFSA 2011-03 aka CVE-2011-0055: Use-after-free error in JSON.stringify - MFSA 2011-04 aka CVE-2011-0054: Buffer overflow in JavaScript upvarMap - MFSA 2011-05 aka CVE-2011-0056: Buffer overflow in JavaScript atom map - MFSA 2011-06 aka CVE-2011-0057: Use-after-free error using Web Workers - MFSA 2011-07 aka CVE-2011-0058: Memory corruption during text run construction (Windows) - MFSA 2011-08 aka CVE-2010-1585: ParanoidFragmentSink allows javascript: URLs in chrome documents - MFSA 2011-10 aka CVE-2011-0059: CSRF risk with plugins and 307 redirects Checksums-Sha1: c1b6952d86431d77d0ad1d3feb72819e636c4c78 11323782 icedove_3.0.11-1+squeeze1_armel.deb b4c838e7048c7b9b7fcafefd3639f0b99bf0800b 5814068 icedove-dev_3.0.11-1+squeeze1_armel.deb 09bda6b1bd7407ea3e2340c346697029d3e15e5e 70186356 icedove-dbg_3.0.11-1+squeeze1_armel.deb Checksums-Sha256: b8590d7e900756d0de74c881c5ecec73c288052cb8233d9da9a477de0b5b75e7 11323782 icedove_3.0.11-1+squeeze1_armel.deb d25012067d6cd8821ba9f60df4b06e53493b1a1df30a7e4975ada505264bb42d 5814068 icedove-dev_3.0.11-1+squeeze1_armel.deb a2ed271ba250061a1e223e17654a8052e3d3f2b3eb2bedd0fd03dbbd54cba674 70186356 icedove-dbg_3.0.11-1+squeeze1_armel.deb Files: 2030c3a76c690f257ffe26ef97c24be4 11323782 mail optional icedove_3.0.11-1+squeeze1_armel.deb eafff3c56ce37ec18657bd58e6bf1749 5814068 mail optional icedove-dev_3.0.11-1+squeeze1_armel.deb 1c6b762b3d52f069ab18171be194615a 70186356 debug extra icedove-dbg_3.0.11-1+squeeze1_armel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk11DKkACgkQXm3vHE4uylpoJQCg6UO3t97uq0v1Scjfpd0oKjqH tOYAmwRSUtao1mp2CF/R/icCt6S1YZMC =tp96 -----END PGP SIGNATURE-----