-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 14 Sep 2010 13:41:19 +0200 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: source amd64 Version: 3.1.3-1 Distribution: experimental Urgency: low Maintainer: Alexander Sack <asac@debian.org> Changed-By: Christoph Goehre <chris@sigxcpu.org> Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Closes: 595665 Changes: icedove (3.1.3-1) experimental; urgency=low . * New Upstream Version - MFSA 2010-49 aka CVE-2010-3169: Miscellaneous memory safety hazards (rv:1.9.2.9/ 1.9.1.12) - MFSA 2010-50 aka CVE-2010-2765: Frameset integer overflow vulnerability - MFSA 2010-51 aka CVE-2010-2767: Dangling pointer vulnerability using DOM plugin array - MFSA 2010-53 aka CVE-2010-3166: Heap buffer overflow in nsTextFrameUtils::TransformText - MFSA 2010-54 aka CVE-2010-2760: Dangling pointer vulnerability in nsTreeSelection - MFSA 2010-55 aka CVE-2010-3168: XUL tree removal crash and remote code execution - MFSA 2010-56 aka CVE-2010-3167: Dangling pointer vulnerability in nsTreeContentView - MFSA 2010-57 aka CVE-2010-2766: Crash and remote code execution in normalizeDocument - MFSA 2010-59 aka CVE-2010-2762: SJOW creates scope chains ending in outer object - MFSA 2010-61 aka CVE-2010-2768: UTF-7 XSS by overriding document charset using <object> type attribute - MFSA 2010-62 aka CVE-2010-2769: Copy-and-paste or drag-and-drop into designMode document allows XSS - MFSA 2010-63 aka CVE-2010-2764: Information leak via XMLHttpRequest statusText * [9a03eb1] rebuild patch queue from patch-queue branch added patches: - 0060-fix-FTBFS-on-hurd.patch (Closes: #595665) - 0061-Enable-x64-JIT-backend-by-default.patch - 0062-Fix-unaligned-reads-in-qcms.patch - 0063-Import-js-src-nanojit-njcpudetect.h.patch - 0064-Use-clz-on-android-even-for-armv5-target.patch - 0065-Fix-ARM-verbose-assembly-output-for-BLX.patch - 0066-Get-rid-of-blx_lr_bug.patch - 0067-Avoid-some-ARM-CPU-arch-related-runtime-tests-depend.patch - 0068-ARMv4T-support-for-nanojit.patch Checksums-Sha1: 3009dc678121f3732277c612f4cf55b8c699fde0 1881 icedove_3.1.3-1.dsc 808a579b768445d9ec8bc816f497ac8a3e9872f2 58793040 icedove_3.1.3.orig.tar.bz2 7566db3c7b29ee0d876d584e01dd1b07365d5fab 463253 icedove_3.1.3-1.debian.tar.gz e7c46d7eedcea0515060c9996fd4733cccf9250e 13361462 icedove_3.1.3-1_amd64.deb 5a4235cb5d8c5c43191c9c7cc8672cbf0615b2ac 5666792 icedove-dev_3.1.3-1_amd64.deb 5639e72dfe59794461d98316add9ba2c77a0eff1 68671032 icedove-dbg_3.1.3-1_amd64.deb Checksums-Sha256: e27d236de367a1869093dcc39f1d5a1ff20f3ee5b24778f83639a611a058fb01 1881 icedove_3.1.3-1.dsc 451d46958cf5ce06572fb6a0d4a2460667c54d73ba0d86ce48a9dee691377a6c 58793040 icedove_3.1.3.orig.tar.bz2 3d9f47380be15c618954e4ebbd16b50baf78e78d23b9db1bd120ed64bd850e52 463253 icedove_3.1.3-1.debian.tar.gz a16e7b4b8406e26d215658d1423206ea7f009a879ede8aa4a16020b3002daf16 13361462 icedove_3.1.3-1_amd64.deb 75c5751d63ad6c6e6b2d693b82dc2b0c5322d9ee4ce45b9d90e84b89610ad9d0 5666792 icedove-dev_3.1.3-1_amd64.deb 62025371b75c7d78292b1e4a85c313755c53498c50174d6c428138cd9e9620d9 68671032 icedove-dbg_3.1.3-1_amd64.deb Files: 466f6d1f52ef5f4849a62951ea3532bd 1881 web optional icedove_3.1.3-1.dsc b0ac1ec708c675a15c159a7a2120e694 58793040 web optional icedove_3.1.3.orig.tar.bz2 43a55ca5b1aaa2f8af6c0a1b7bc27d27 463253 web optional icedove_3.1.3-1.debian.tar.gz 2294b8c8f07edfd4b863bb4c15494f8f 13361462 mail optional icedove_3.1.3-1_amd64.deb 6afa2ac2e058619bb9e27d77eb6456fa 5666792 mail optional icedove-dev_3.1.3-1_amd64.deb dcda97c4f63aa2762fddc157c54d47a8 68671032 debug extra icedove-dbg_3.1.3-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAkyPh/0ACgkQaT2DDHtihbc78QCgjAG5sY9Cw1Nh5mmo35Agt9tX XXgAoMH1TZJWBA3WuWxv2bLoSTQOkgsh =9xMX -----END PGP SIGNATURE----- Accepted: icedove-dbg_3.1.3-1_amd64.deb to main/i/icedove/icedove-dbg_3.1.3-1_amd64.deb icedove-dev_3.1.3-1_amd64.deb to main/i/icedove/icedove-dev_3.1.3-1_amd64.deb icedove_3.1.3-1.debian.tar.gz to main/i/icedove/icedove_3.1.3-1.debian.tar.gz icedove_3.1.3-1.dsc to main/i/icedove/icedove_3.1.3-1.dsc icedove_3.1.3-1_amd64.deb to main/i/icedove/icedove_3.1.3-1_amd64.deb icedove_3.1.3.orig.tar.bz2 to main/i/icedove/icedove_3.1.3.orig.tar.bz2