-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Oct 2011 20:44:21 +0200 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: source amd64 Version: 3.0.11-1+squeeze5 Distribution: stable-security Urgency: high Maintainer: Alexander Sack Changed-By: Christoph Goehre Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze5) stable-security; urgency=high . * [44577f9] backported patches from xulrunner fixes mfsa2011-{36-40} - MFSA 2011-36 aka CVE-2011-2995: Miscellaneous memory safety hazards (rv:7.0 / rv:1.9.2.23) - MFSA 2011-37 aka CVE-2011-2998: Integer underflow when using JavaScript RegExp - MFSA 2011-38 aka CVE-2011-2999: XSS via plugins and shadowed window.location object - MFSA 2011-39 aka CVE-2011-3000: Defense against multiple Location headers due to CRLF Injection - MFSA 2011-40 aka CVE-2011-2372, CVE-2011-3001: Code installation through holding down Enter Checksums-Sha1: 222878c97164b30dfe8ce83ed191a242b4d5967e 2528 icedove_3.0.11-1+squeeze5.dsc b0c56b23f68284411b7e53aac15c298b54fd1d4f 474403 icedove_3.0.11-1+squeeze5.debian.tar.gz 94a5d1ae9c657fa410df1582422c962dec25f689 12527606 icedove_3.0.11-1+squeeze5_amd64.deb e4376630436b3d83a773412a13e2f20debcee5e2 5745338 icedove-dev_3.0.11-1+squeeze5_amd64.deb 5924cf8bc4f09c684b1ca3431472e8f76e7bff15 68300980 icedove-dbg_3.0.11-1+squeeze5_amd64.deb Checksums-Sha256: cec53146d9140a44ea2411c2ead84488e285adce8e3c7f9c9450675b8dfc1016 2528 icedove_3.0.11-1+squeeze5.dsc 1bc664279bf0c524d70dbb7208ed7814cee94c0bd451a06be6967f61d99f1dd4 474403 icedove_3.0.11-1+squeeze5.debian.tar.gz f40f1a45434600388b8e1e5d21322675f8abb46631727e965c8788641e883a62 12527606 icedove_3.0.11-1+squeeze5_amd64.deb 4e39891fbb3d12148a68b7c67c277ccb8a62e0b9d306d1fd81e4f4838bcea2d8 5745338 icedove-dev_3.0.11-1+squeeze5_amd64.deb 8eada2d8051e69ee9b7b7e05a06ff5b1a210a3aedd79eaa7c1c1d0154e0603df 68300980 icedove-dbg_3.0.11-1+squeeze5_amd64.deb Files: a64e36e8b5eee16e1082b281935f2e01 2528 web optional icedove_3.0.11-1+squeeze5.dsc a7c71be19639c785b22378881b89221e 474403 web optional icedove_3.0.11-1+squeeze5.debian.tar.gz 03945ba1b579129fd546c96a27d8d12a 12527606 mail optional icedove_3.0.11-1+squeeze5_amd64.deb 242949cc672d1012ea646e1769cd977a 5745338 mail optional icedove-dev_3.0.11-1+squeeze5_amd64.deb c3d071076e52357fd8e0bbf1b0e59d19 68300980 debug extra icedove-dbg_3.0.11-1+squeeze5_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCAAGBQJOi2IqAAoJECbjyHWnRCDvokYP/04xxopJkdFhAopMp0JRIEJw HKsBZtxXbNokInMMRET690Wu2H9b9AaW3NOO2gDfIg3YOvbvOJ595KK/CPyBypSA m86h2Zgwk/N7m7YwE8LfGcYay6hXddcHf8+tfEIqNURUDeNFqK5+taDMmU5xLjrm iWD9HqaqBB/Ad96ZEqYrkfcVagixueJ9To1ZlwxTkNgA11m2i+oxCWUCsjWouTAe GVpVT3CK0Citd0Juqg7CZZ1yhJGuCZzLEzkMBeNyY5fst108z6GnVa9T2lkXMQ2K 1GLXSRQIlSueyczzjRPZHZebpAE5XNVBxULUIbO3aA9XhcZU5sCguqzCFAskiF8a E8uz1QIDudeAoSvO+CEtqL+39C0VQzFXbVsCkbyE9Bt43nUqZGQ7IS9KENRv7Uik cIYG/1xUej7heBL2ApppRxQtN+eiyIwmf1gBp5Z+8UHp9RG/+qqELfenyrl050qa +E9T/syNbUmmyT7xUGNyL/fa2r+aNkSUyC/7t+dZUUol+JggA7I/2Z9Viq6ooYEC n77I6bojBi6nz4VI1xvCyjMh1vJ2uAmnspu3GhnB/+B5sENNqk+9CFLKlipikkLU ZR/oZLvweBOyfyPu37moJe5KE1qFHnizeBe+NzdAW1tDNdBX1CByu/RgWkWKFEPH 5JV6gveuoccLrEyTkQ7E =Ql3E -----END PGP SIGNATURE-----