-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 03 Mar 2011 19:48:19 +0100 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: source amd64 Version: 3.0.11-2 Distribution: unstable Urgency: high Maintainer: Alexander Sack <asac@debian.org> Changed-By: Christoph Goehre <chris@sigxcpu.org> Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Closes: 403458 487494 505875 Changes: icedove (3.0.11-2) unstable; urgency=high . * backported patches from xulrunner fixes mfsa2011-{01-08,10} - MFSA 2011-01 aka CVE-2011-0053: Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17) - MFSA 2011-02 aka CVE-2011-0051: Recursive eval call causes confirm dialogs to evaluate to true - MFSA 2011-03 aka CVE-2011-0055: Use-after-free error in JSON.stringify - MFSA 2011-04 aka CVE-2011-0054: Buffer overflow in JavaScript upvarMap - MFSA 2011-05 aka CVE-2011-0056: Buffer overflow in JavaScript atom map - MFSA 2011-06 aka CVE-2011-0057: Use-after-free error using Web Workers - MFSA 2011-07 aka CVE-2011-0058: Memory corruption during text run construction (Windows) - MFSA 2011-08 aka CVE-2010-1585: ParanoidFragmentSink allows javascript: URLs in chrome documents - MFSA 2011-10 aka CVE-2011-0059: CSRF risk with plugins and 307 redirects * [466ff7f] rebuild patch queue from patch-queue branch added patches: - 0060-save-a-copy-of-a-attached-file-when-sending-from-OOo.patch (Closes: #505875) - 0061-News-article-is-empty-if-selected-during-download-fr.patch (Closes: #487494) - 0062-restore-icedove-on-login-by-session-management.patch (Closes: #403458) Checksums-Sha1: 9bd839a71d473ae1210bbcf867460da1c8462eee 1852 icedove_3.0.11-2.dsc 9a1574915ef24a82d062fd9bf792d106a71a05f2 417779 icedove_3.0.11-2.debian.tar.gz a739d8a6f1867e3218697d7d9c447f6874b483c4 12521674 icedove_3.0.11-2_amd64.deb cd384e4cd163309cd46f565c04e237f64f8de089 5743160 icedove-dev_3.0.11-2_amd64.deb 73b622851ba4e9a6c62b58bed7f8bab7b3d60eca 68286496 icedove-dbg_3.0.11-2_amd64.deb Checksums-Sha256: ad478e76ad36eb6c13ddb5ea5b342b435f53fea87f9bbc32eac01134874a8081 1852 icedove_3.0.11-2.dsc e6154d39c335f98faa2c63eae2509b4b700d953bba04b704c92543dffacc7796 417779 icedove_3.0.11-2.debian.tar.gz 44660be367a678f9738b49981c5fa39284d5108df8374b739a102c8084749000 12521674 icedove_3.0.11-2_amd64.deb f89122c71e3b1edcb0294933aa21e81fbfb88d3b7510054ac0816d0a325a2b87 5743160 icedove-dev_3.0.11-2_amd64.deb e0789e4663d836f57b58b38802085d97876acd591bdf5b7cb49786a215123a17 68286496 icedove-dbg_3.0.11-2_amd64.deb Files: 82eee01ab566287dfd687adc044b899f 1852 web optional icedove_3.0.11-2.dsc 19b511066a14cacb4c6bca178b390262 417779 web optional icedove_3.0.11-2.debian.tar.gz ea567b9f6275f0f0e8cfdb2efd2636be 12521674 mail optional icedove_3.0.11-2_amd64.deb a74973748c479d657208f694a7ad9b19 5743160 mail optional icedove-dev_3.0.11-2_amd64.deb ef866d249a070e33d72b979b3dc5f057 68286496 debug extra icedove-dbg_3.0.11-2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk1v/NQACgkQaT2DDHtihbfzFgCeIo1tuhHqm+9lxfBHnBL5Pub7 a54AoJgQs4pkO+tPjaApehHA0GDJE7YF =Tia/ -----END PGP SIGNATURE----- Accepted: icedove-dbg_3.0.11-2_amd64.deb to main/i/icedove/icedove-dbg_3.0.11-2_amd64.deb icedove-dev_3.0.11-2_amd64.deb to main/i/icedove/icedove-dev_3.0.11-2_amd64.deb icedove_3.0.11-2.debian.tar.gz to main/i/icedove/icedove_3.0.11-2.debian.tar.gz icedove_3.0.11-2.dsc to main/i/icedove/icedove_3.0.11-2.dsc icedove_3.0.11-2_amd64.deb to main/i/icedove/icedove_3.0.11-2_amd64.deb