-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Oct 2011 20:44:21 +0200 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: armel Version: 3.0.11-1+squeeze5 Distribution: squeeze-security Urgency: high Maintainer: armel Build Daemon (alwyn) Changed-By: Christoph Goehre Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze5) stable-security; urgency=high . * [44577f9] backported patches from xulrunner fixes mfsa2011-{36-40} - MFSA 2011-36 aka CVE-2011-2995: Miscellaneous memory safety hazards (rv:7.0 / rv:1.9.2.23) - MFSA 2011-37 aka CVE-2011-2998: Integer underflow when using JavaScript RegExp - MFSA 2011-38 aka CVE-2011-2999: XSS via plugins and shadowed window.location object - MFSA 2011-39 aka CVE-2011-3000: Defense against multiple Location headers due to CRLF Injection - MFSA 2011-40 aka CVE-2011-2372, CVE-2011-3001: Code installation through holding down Enter Checksums-Sha1: 3e71226f3db0926b7c46a1a07626f9004fe30c7f 11332350 icedove_3.0.11-1+squeeze5_armel.deb 0f65a887362559b5270466d9436f965ee8336197 5827366 icedove-dev_3.0.11-1+squeeze5_armel.deb aac5d03062d85af91267c373d6ecf3bb7cec302d 70208854 icedove-dbg_3.0.11-1+squeeze5_armel.deb Checksums-Sha256: 4cf382da53d97b6544f453eb2d8becb3304f0d9509f694fc15f5963af9ee36cf 11332350 icedove_3.0.11-1+squeeze5_armel.deb 04acb6cef60bc279a190f07e83eef56858a53c9bc1780ac0b440dbf138e3a938 5827366 icedove-dev_3.0.11-1+squeeze5_armel.deb e9120115684069c1212a2d501de23e94b3e82cff7670b2086f966b037008b1df 70208854 icedove-dbg_3.0.11-1+squeeze5_armel.deb Files: 617e4dac78810846539a599d86e07c64 11332350 mail optional icedove_3.0.11-1+squeeze5_armel.deb 765b6c8e25eb98fb3e62faf110f76a24 5827366 mail optional icedove-dev_3.0.11-1+squeeze5_armel.deb 437399a14243ec88f5166759e2793b01 70208854 debug extra icedove-dbg_3.0.11-1+squeeze5_armel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOi6s4AAoJEAE0hOa8i7tt3eoP/i8FmUUNyrvOFxqg/m4fh2Sh Tw6vafBvvsLsUciOKqpj9rLFsKpqeRiOeWbIWEVSeIMO3OmJN2AmdoIOPdwvvwJH BsPUbJNc3SEEfm0AMrhRdv/PSOKDcnrSqtyEAUUcivDSwUIj+ubgisTjbVUjQjmL qVAygehzA6dg3nWwGL8doOWV0PNomTWRS9GinZNw5rwEldggAi1IMFtVsRNmFrvZ WAjSicRtmvf37B/Bqf0tBFIi0LVdDsPA8FWskVE8b/sw029I6wv5NaoaJ4QUkiA+ MtqgDqcViWOZK15CafZ0yOa1CRJ8l19UTlJmrn63jwe7V6d5s4BhhPGAJ+/sQqhU tsJD9bfxlP7rcssNl+EMwMSxMffpjwAv+VMC9FD9pfvZxIC440BhvSQBpmTEvYLr o7zqqHRK4nMiCgS8OohCBz+BZjua3a8mUAk2B1tCDQ0HQkBVR/ok1FTMQ/FzLxUr g/rjy6zAxgRra5qDLKEwLhJXKDf/VAvegku+4pOkeUBthReSyrj+jIWw2rmN7586 OIA+ufl6Ijqm0IYes+mrjxjYROPyvMjnq9bxBMtgAEw9sfyZ3jj6xQi3wOY5TM0/ cJ2XnOEtjei/cB+lRCvuK4XkXWut7NZWx8JYeDQPRPwaZ50d2TX90nswAAjyXC2N U+WOo2TcGuKydb24949f =lQjY -----END PGP SIGNATURE-----