-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 02 Mar 2011 18:22:20 +0100 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: ia64 Version: 3.0.11-1+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: ia64 Build Daemon (alkman) Changed-By: Christoph Goehre Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze1) stable-security; urgency=high . * [2bf1366] backported patches from xulrunner fixes mfsa2011-{01-08,10} - MFSA 2011-01 aka CVE-2011-0053: Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17) - MFSA 2011-02 aka CVE-2011-0051: Recursive eval call causes confirm dialogs to evaluate to true - MFSA 2011-03 aka CVE-2011-0055: Use-after-free error in JSON.stringify - MFSA 2011-04 aka CVE-2011-0054: Buffer overflow in JavaScript upvarMap - MFSA 2011-05 aka CVE-2011-0056: Buffer overflow in JavaScript atom map - MFSA 2011-06 aka CVE-2011-0057: Use-after-free error using Web Workers - MFSA 2011-07 aka CVE-2011-0058: Memory corruption during text run construction (Windows) - MFSA 2011-08 aka CVE-2010-1585: ParanoidFragmentSink allows javascript: URLs in chrome documents - MFSA 2011-10 aka CVE-2011-0059: CSRF risk with plugins and 307 redirects Checksums-Sha1: 87890c7eb577bf2e5d9c28046955a1b0d9cb7364 16998118 icedove_3.0.11-1+squeeze1_ia64.deb 3b6cea49719052923e3926aec52b587745d37ebc 5540936 icedove-dev_3.0.11-1+squeeze1_ia64.deb ca48d51220a2976078c6ab5a901f2c219ccb14af 68617062 icedove-dbg_3.0.11-1+squeeze1_ia64.deb Checksums-Sha256: 9beb5764a826574b081b994a0272281eb957855d73429a293dc828846575e98f 16998118 icedove_3.0.11-1+squeeze1_ia64.deb a51f8e2534bdc4936b5f79bd7f34578f67283d7747868011ceb918256993b253 5540936 icedove-dev_3.0.11-1+squeeze1_ia64.deb 988f664f8c96fb8102ce71bb88ff845b0b10e237c4e42e0f09693575793e6db5 68617062 icedove-dbg_3.0.11-1+squeeze1_ia64.deb Files: 53b82f778d22bdaf04aafb60dfe3ce33 16998118 mail optional icedove_3.0.11-1+squeeze1_ia64.deb 2adbc6ecf8d35d5c1ec53837435ab122 5540936 mail optional icedove-dev_3.0.11-1+squeeze1_ia64.deb 4c56b5829437e270cc02ea70cd086ead 68617062 debug extra icedove-dbg_3.0.11-1+squeeze1_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk11DJ4ACgkQXm3vHE4uylpRIwCeLtoslcZCuTqYw82V+VQzrwPu 5NEAnjcjrjh2ySR6cZbWrtEh6A2go0d+ =07vA -----END PGP SIGNATURE-----