-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 05 Jul 2009 13:49:04 +0200 Source: icedove Binary: icedove icedove-gnome-support icedove-dbg icedove-dev Architecture: source i386 Version: 2.0.0.22-0lenny1 Distribution: stable-security Urgency: low Maintainer: Alexander Sack <asac@debian.org> Changed-By: Alexander Sack <asac@debian.org> Description: icedove - free/unbranded thunderbird mail/news/rss clone icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove icedove-gnome-support - Support for Gnome in Icedove Closes: 535124 Changes: icedove (2.0.0.22-0lenny1) stable-security; urgency=low . * New upstream security/stability update (v2.0.0.21/v2.0.0.22) (Closes: 535124) * MFSA 2009-33: Crash viewing multipart/alternative message with text/enhanced part * MFSA 2009-32 aka CVE-2009-1841: JavaScript chrome privilege escalation * MFSA 2009-29 aka CVE-2009-1838: Arbitrary code execution using event listeners attached to an element whose owner document is null * MFSA 2009-27 aka CVE-2009-1836: SSL tampering via non-200 responses to proxy CONNECT requests * MFSA 2009-24 aka CVE-2009-1832+CVE-2009-1831: Crashes with evidence of memory corruption (rv:1.9.0.11) * MFSA 2009-17 aka CVE-2009-1307: Same-origin violations when Adobe Flash loaded via view-source: scheme * MFSA 2009-14 aka CVE-2009-1303+CVE-2009-1302: Crashes with evidence of memory corruption (rv:1.9.0.9) * MFSA 2009-15 aka CVE-2009-0652: URL spoofing with box drawing character * MFSA 2009-10 aka CVE-2009-0040: Upgrade PNG library to fix memory safety hazards * MFSA 2009-09 aka CVE-2009-0776: XML data theft via RDFXMLDataSource and cross-domain redirect * MFSA 2009-07 aka CVE-2009-0771,-0772,-0773,-0774: Crashes with evidence of memory corruption (rv:1.9.0.7) * MFSA 2009-01 aka CVE-2009-0352,CVE-2009-0353 Crashes with evidence of memory corruption (rv:1.9.0.6) * adjust patches to changed codebase - update debian/patches/ubuntu-mail-app-xre-name * take back Maintainer: field in debian/control Checksums-Sha1: 69fcfcc253a2dffe2b81517fc9e26b3397dec694 1667 icedove_2.0.0.22-0lenny1.dsc 69906157f63eb834f9448113935a54cdd7c57b5a 36965969 icedove_2.0.0.22.orig.tar.gz f9bc63c0ee4dbab50922ed8092bc8526623dad99 118782 icedove_2.0.0.22-0lenny1.diff.gz 22e74ac4f14d901c869042181b1f05253bb72732 10924508 icedove_2.0.0.22-0lenny1_i386.deb 67f5af976de89479df153d06edebdd69027a6dd1 54082 icedove-gnome-support_2.0.0.22-0lenny1_i386.deb 8e2a91dde150f489cf561534d6384d0c87e337b0 56523330 icedove-dbg_2.0.0.22-0lenny1_i386.deb 13681c7f08d57e2e49e9be0d542ab16008bc57ed 3934604 icedove-dev_2.0.0.22-0lenny1_i386.deb Checksums-Sha256: 7c4f2f074137d6b79d0c32f398a1ed6772812033c1116ce4e7d0decdd63ae7db 1667 icedove_2.0.0.22-0lenny1.dsc a7807bee77140c93ef335c726609eebb4f35eaec0fc316e309e959dfecf11fa1 36965969 icedove_2.0.0.22.orig.tar.gz 2dc63c4c7892c5f1e90f079897280ca1e13c2a5a104003f2b634cdfc6a7bc210 118782 icedove_2.0.0.22-0lenny1.diff.gz 2635be264a874a24a7ca4628c3029e52da93ae4c89147b1a0a561b30ae4b4cdb 10924508 icedove_2.0.0.22-0lenny1_i386.deb d5972e137dec4483d5fd2dcca5b12005341a53919a2f75372b3800ed4c5dedb5 54082 icedove-gnome-support_2.0.0.22-0lenny1_i386.deb eb8a3dd3d254cad1d3b22c2f35e1b69972b1ab10245d8afdcba1d11f703b4c59 56523330 icedove-dbg_2.0.0.22-0lenny1_i386.deb 3da208aaf246deefab82be6b669e1de81cbdf1ede6471210e9205fdd5274dbd7 3934604 icedove-dev_2.0.0.22-0lenny1_i386.deb Files: e373157340de8a93d36e6210afe2f345 1667 mail optional icedove_2.0.0.22-0lenny1.dsc 8e0ffafaece0680a42c0cb11ff34c64a 36965969 mail optional icedove_2.0.0.22.orig.tar.gz 0f1d8098818180a72820438adfa79436 118782 mail optional icedove_2.0.0.22-0lenny1.diff.gz b4cf9766cac84f9d21defc2ea4e1d1bc 10924508 mail optional icedove_2.0.0.22-0lenny1_i386.deb 86ac55697cfc6abc6a719be26c5fcb48 54082 mail optional icedove-gnome-support_2.0.0.22-0lenny1_i386.deb 8f925c6cea9ec7e628e05a8079dd30ad 56523330 mail optional icedove-dbg_2.0.0.22-0lenny1_i386.deb 336b57d8a95a52cffc2c07b5ed605c74 3934604 mail optional icedove-dev_2.0.0.22-0lenny1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkpTXrEACgkQ62zWxYk/rQeCaQCglQG2ElCm5Tva83h6Pb4nZkos uA4An0TghngCcjEfzMK7qoZBB6/5N7yw =ZJ34 -----END PGP SIGNATURE----- Accepted: icedove-dbg_2.0.0.22-0lenny1_i386.deb to pool/main/i/icedove/icedove-dbg_2.0.0.22-0lenny1_i386.deb icedove-dev_2.0.0.22-0lenny1_i386.deb to pool/main/i/icedove/icedove-dev_2.0.0.22-0lenny1_i386.deb icedove-gnome-support_2.0.0.22-0lenny1_i386.deb to pool/main/i/icedove/icedove-gnome-support_2.0.0.22-0lenny1_i386.deb icedove_2.0.0.22-0lenny1.diff.gz to pool/main/i/icedove/icedove_2.0.0.22-0lenny1.diff.gz icedove_2.0.0.22-0lenny1.dsc to pool/main/i/icedove/icedove_2.0.0.22-0lenny1.dsc icedove_2.0.0.22-0lenny1_i386.deb to pool/main/i/icedove/icedove_2.0.0.22-0lenny1_i386.deb