-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 02 Mar 2011 18:22:20 +0100 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: powerpc Version: 3.0.11-1+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: powerpc Build Daemon (praetorius) Changed-By: Christoph Goehre Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze1) stable-security; urgency=high . * [2bf1366] backported patches from xulrunner fixes mfsa2011-{01-08,10} - MFSA 2011-01 aka CVE-2011-0053: Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17) - MFSA 2011-02 aka CVE-2011-0051: Recursive eval call causes confirm dialogs to evaluate to true - MFSA 2011-03 aka CVE-2011-0055: Use-after-free error in JSON.stringify - MFSA 2011-04 aka CVE-2011-0054: Buffer overflow in JavaScript upvarMap - MFSA 2011-05 aka CVE-2011-0056: Buffer overflow in JavaScript atom map - MFSA 2011-06 aka CVE-2011-0057: Use-after-free error using Web Workers - MFSA 2011-07 aka CVE-2011-0058: Memory corruption during text run construction (Windows) - MFSA 2011-08 aka CVE-2010-1585: ParanoidFragmentSink allows javascript: URLs in chrome documents - MFSA 2011-10 aka CVE-2011-0059: CSRF risk with plugins and 307 redirects Checksums-Sha1: b0e643e5e3673dcb3d8f363df9f9ef2d86d75ac3 11989724 icedove_3.0.11-1+squeeze1_powerpc.deb 4cad1d11e5e31484fdd745cb3abd7b10083fdff1 5708722 icedove-dev_3.0.11-1+squeeze1_powerpc.deb 44a2ac14199052fdee2beaa4c22c9cc64a46b077 68168830 icedove-dbg_3.0.11-1+squeeze1_powerpc.deb Checksums-Sha256: de5f1c04129b87cb49198b7ee2438f53f91db3620b768fc4ef34a21cc5544e44 11989724 icedove_3.0.11-1+squeeze1_powerpc.deb bfbd0cd2003238d90726519cbf8b595b06159564bf0f90fbbe78f4c843c8f469 5708722 icedove-dev_3.0.11-1+squeeze1_powerpc.deb 4809ce4b6557779dd908d03487d5dbf3fa49e67a4eb22492767569ead8a84857 68168830 icedove-dbg_3.0.11-1+squeeze1_powerpc.deb Files: 9690d6d8ecb1f44c9ed2ba7bf8815a08 11989724 mail optional icedove_3.0.11-1+squeeze1_powerpc.deb ce5ec1f4eb2775837d53c91ad1f5b920 5708722 mail optional icedove-dev_3.0.11-1+squeeze1_powerpc.deb 01eb8c72277beb6f6fdbcf58c02d01e8 68168830 debug extra icedove-dbg_3.0.11-1+squeeze1_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk11DJoACgkQXm3vHE4uylqRKQCgpaX4lFgSwlQQK6DiqghtiGBC vugAnRKOdBPoj2SkVDYP591ZIQ+ZjVZa =Uhq6 -----END PGP SIGNATURE-----