-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 28 Apr 2012 12:34:30 +0200 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: source amd64 Version: 3.0.11-1+squeeze9 Distribution: stable-security Urgency: high Maintainer: Alexander Sack <asac@debian.org> Changed-By: Christoph Goehre <chris@sigxcpu.org> Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze9) stable-security; urgency=high . * [54a660a] backported patches from xulrunner fixes mfsa2012-{20,23,24,29,33} - MFSA 2012-20 aka CVE-2012-0467: Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4) - MFSA 2012-23 aka CVE-2012-0470: Invalid frees causes heap corruption in gfxImageSurface - MFSA 2012-24 aka CVE-2012-0471: Potential XSS via multibyte content processing errors - MFSA 2012-29 aka CVE-2012-0477: Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues - MFSA 2012-33 aka CVE-2012-0479: Potential site identity spoofing when loading RSS and Atom feeds Checksums-Sha1: 75148ddd888e4a817b74f31502b2d803caf5be79 2528 icedove_3.0.11-1+squeeze9.dsc 3e50ba3498731cd05a29d524ffa2d9ace59f9ba7 510062 icedove_3.0.11-1+squeeze9.debian.tar.gz bb968b641eddadaab4ffc7e87fc312db34d8ed3f 12529992 icedove_3.0.11-1+squeeze9_amd64.deb b0c2bf11c3f422a5c1f119738fcab26803d7feaf 5748472 icedove-dev_3.0.11-1+squeeze9_amd64.deb ffa85298199e46e3ee1b23abfd835ce0b9f25587 68314068 icedove-dbg_3.0.11-1+squeeze9_amd64.deb Checksums-Sha256: d8277088f696ff9f779f05fc11dddac8c48b4afb2115a97efce0e60e4074283d 2528 icedove_3.0.11-1+squeeze9.dsc ce841c8873405f0b805ae945817f2802423254bb5c6a926345792db1e94551cf 510062 icedove_3.0.11-1+squeeze9.debian.tar.gz 1959fb4f360f9f41ddbdba075bb1156b85e65e72daad50c71d5057ec0cd6a266 12529992 icedove_3.0.11-1+squeeze9_amd64.deb 8d01c4c27d60deacdb938ebde842ef35f38963622008bad9fc756f212efb5fc4 5748472 icedove-dev_3.0.11-1+squeeze9_amd64.deb 5379acab86b74fe5f8f9394a5b6cc4dac17d277173110d6ed7478ec930d65ae1 68314068 icedove-dbg_3.0.11-1+squeeze9_amd64.deb Files: 744c0f6fb0537b26d9fcc3af437d4025 2528 web optional icedove_3.0.11-1+squeeze9.dsc 9bf88785987019be51dbb6aced18b184 510062 web optional icedove_3.0.11-1+squeeze9.debian.tar.gz f403ef9790c0074922e2990f9b02c146 12529992 mail optional icedove_3.0.11-1+squeeze9_amd64.deb 5b06087b6694248d289fd110024db079 5748472 mail optional icedove-dev_3.0.11-1+squeeze9_amd64.deb 98f321e49ca8706de82620dbf082aa87 68314068 debug extra icedove-dbg_3.0.11-1+squeeze9_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJPnmQkAAoJECbjyHWnRCDvdXkP/ieKkxFGYF9eToK075T9pEP4 izjj+5wt5sjjXW7lWfiHN8VtC1r4R2ecv2GrZSUG3N1noSmGSjGlR2ZR34t7k+fZ zymnAkIyj9va4z+VbRW2ICq+GQK3BW8rlEBJM4EcsjYdyPKPAqkq9Kg3VbDhHNrV 3t9JLZk50rJZ7UXKMf/At074GgMM4lKj6/pnQLBUoRwNdqMHjb6VoobKSjbn1zuv gCej6NPlaxuTOVsusYfsbDLiqoE/wg0MDF+iyEmFZsXUjxsPbiJVxk+fLZGZyGbB 7ibPRYrcNUQwehWQQsaScUAcbOF/+aV2C4ZaOK+wcILgJkM2W1JdI5/QH7jdmx4O DhRcYePcXNj0MWQnKAAvN73ZPI682ZLuEkEmd2ok7Rk9/sISutWbug4RcGJWFTbT +4ALT/tR4uZt6nDpuThZjFCNOf1dhap/ujBV+1eACyM13Ufd6h4it5y6iTZ6Z43K qOIwkzX+Arh/ZpJnf0ENuKIHqq9TrAMFLUCM9liaxE3XLXWUNpzdq/irzcePRJqT 2IBRWG2PjFxEBSG7v/YyCuXaI2AUqTw9vYGgsTfjgj5J0rAtLjysUhEav/LMPnTR u2IFqVbm6fsvYYjYlCND+ZtqgNiuVLzRRKcaNjWMILTzBbaapXmKvNOrgYwhtgAi l3XRtsNzDVBc+lGM+neE =4k00 -----END PGP SIGNATURE----- Accepted: icedove-dbg_3.0.11-1+squeeze9_amd64.deb to main/i/icedove/icedove-dbg_3.0.11-1+squeeze9_amd64.deb icedove-dev_3.0.11-1+squeeze9_amd64.deb to main/i/icedove/icedove-dev_3.0.11-1+squeeze9_amd64.deb icedove_3.0.11-1+squeeze9.debian.tar.gz to main/i/icedove/icedove_3.0.11-1+squeeze9.debian.tar.gz icedove_3.0.11-1+squeeze9.dsc to main/i/icedove/icedove_3.0.11-1+squeeze9.dsc icedove_3.0.11-1+squeeze9_amd64.deb to main/i/icedove/icedove_3.0.11-1+squeeze9_amd64.deb