-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Oct 2011 20:44:21 +0200 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: sparc Version: 3.0.11-1+squeeze5 Distribution: squeeze-security Urgency: high Maintainer: sparc Build Daemon (lebrun) Changed-By: Christoph Goehre Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze5) stable-security; urgency=high . * [44577f9] backported patches from xulrunner fixes mfsa2011-{36-40} - MFSA 2011-36 aka CVE-2011-2995: Miscellaneous memory safety hazards (rv:7.0 / rv:1.9.2.23) - MFSA 2011-37 aka CVE-2011-2998: Integer underflow when using JavaScript RegExp - MFSA 2011-38 aka CVE-2011-2999: XSS via plugins and shadowed window.location object - MFSA 2011-39 aka CVE-2011-3000: Defense against multiple Location headers due to CRLF Injection - MFSA 2011-40 aka CVE-2011-2372, CVE-2011-3001: Code installation through holding down Enter Checksums-Sha1: 0134848377dc22e37498a465fdf1a86e86db4ef5 11714806 icedove_3.0.11-1+squeeze5_sparc.deb 3deaf53cf6d32d7ca665d1a0422b156f07927e7d 5817438 icedove-dev_3.0.11-1+squeeze5_sparc.deb b6d055cbed85464d17c27be2389bd50a121f480a 69263760 icedove-dbg_3.0.11-1+squeeze5_sparc.deb Checksums-Sha256: 6c0ba5ea4d3b1f0f04dd0783eeca5fa7387b2514565a48f43b0f72a42e1374c7 11714806 icedove_3.0.11-1+squeeze5_sparc.deb 74403cd809742f0ddf0d72e50847a01ea3a5c051e97a040b7c0eb615799a64f9 5817438 icedove-dev_3.0.11-1+squeeze5_sparc.deb 001a4759b137d1f4cc16101ad505d016634bfdef38ec1e4c4616cbf4adfc9526 69263760 icedove-dbg_3.0.11-1+squeeze5_sparc.deb Files: 429694384cb238f79ee68129f1234ec9 11714806 mail optional icedove_3.0.11-1+squeeze5_sparc.deb cfa6f43ed97233d84e6f6d048c794ad2 5817438 mail optional icedove-dev_3.0.11-1+squeeze5_sparc.deb 760207fa9ab525b819bbd6bc1b148931 69263760 debug extra icedove-dbg_3.0.11-1+squeeze5_sparc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOi41CAAoJEMSeX6ljLj22jqAP/j8879UAJVEeyYJeogpA6g4X /ZHU7zYm8xcq30G6y+SulDCRcrlGZD6Szu47L+jDm4PbRgIYklMoOMbYNgM3hQWF 3ZXLYLZWL6Uz4UdnnXj4+zVvf1U5tEQ1cQJqbMGwOVxm3WedJ35dGSRfHhl9xOTo mrKaSgNVVNRk8vN/o0VhkTMGgjryb7KVvhEmDwlLBLbIMeWsV6swCGKfnqxCron4 HuaO0kAJVfT+7KbmzbTbac7aLXrVSTtG0D5YQQEzEtpIxTYWaQ5oHHF3E9kl/CeM 9Zjkw1c5Jo3R0bSe5f/wC1S0kcUcw7ALlsva7uYjXe2wp+IwxR89CCV1eAbRh/S6 rEuvvnmcRbtucSGF5n5LnezCtZEHGd+J0pt8v97TmkCT5wipBPQldX9lFOELToCs aSoyWR1FqWrTgiTcVdp+acpFZc928woH6FOJ2r06XhtbP/EExQ3DiHJ9boOeEsIJ makDKRuUBROmZAhe7H5zTDb/ISgI1LGBm5nkyDH8EClgfBX8EUE172DdFYtBJWw4 NsUkavx3F777l4esAxkWiwc6G5NhCBtU0B2ExzhYLvxbI33Z14tL4rhPBljFQGUf zO1j9o0kqR6Lx2UWA50XZlH+VEPgA5J6HqV7ZyI/+7YY2mhOY/u4P+7vCmVudO04 YIovyhDGwyQT0yBFNqDT =P/PQ -----END PGP SIGNATURE-----