-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 26 Oct 2012 21:53:42 -0400 Source: icedove Binary: icedove icedove-dev icedove-dbg Architecture: source amd64 Version: 3.0.11-1+squeeze14 Distribution: stable-security Urgency: low Maintainer: Alexander Sack <asac@debian.org> Changed-By: Christoph Goehre <chris@sigxcpu.org> Description: icedove - mail/news client with RSS and integrated spam filter support icedove-dbg - Debug Symbols for Icedove icedove-dev - Development files for Icedove Changes: icedove (3.0.11-1+squeeze14) stable-security; urgency=low . * [db8ce96] backported patches from xulrunner fixes mfsa2012-{74,77,81,85-87} - MFSA 2012-74 aka CVE-2012-3982: Miscellaneous memory safety hazards (rv:16.0/ rv:10.0.8) - MFSA 2012-77 aka CVE-2012-3986: Some DOMWindowUtils methods bypass security checks - MFSA 2012-81 aka CVE-2012-3991: GetProperty function can bypass security checks - MFSA 2012-85 aka CVE-2012-4179, CVE-2012-4180, CVE-2012-4182: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer - MFSA 2012-86 aka CVE-2012-4186, CVE-2012-4188: Heap memory corruption issues found using Address Sanitizer - MFSA 2012-87 aka CVE-2012-3990: Use-after-free in the IME State Manager Checksums-Sha1: 45e1b11418d0e50a5f974a3d5fa458a8d2e91cea 2532 icedove_3.0.11-1+squeeze14.dsc d5468d4603fadba613674893f70d48716ae8618d 545113 icedove_3.0.11-1+squeeze14.debian.tar.gz da3e035b837ced267f070ebe69cd7861127cbfda 12536368 icedove_3.0.11-1+squeeze14_amd64.deb e7f4c03d77f41cf1bbf35530c33aab5952cef116 5742650 icedove-dev_3.0.11-1+squeeze14_amd64.deb ae6af34f52f18f75674535c64b5b6256c233f702 68352956 icedove-dbg_3.0.11-1+squeeze14_amd64.deb Checksums-Sha256: 476b1144e4d4798d316ced37505b904ae25b0115c30ebd86def68f88cd0fd752 2532 icedove_3.0.11-1+squeeze14.dsc 1bc66ff414516a870dad58e4593a78869c42e3baa04b5df242e2b5ddf9ec906b 545113 icedove_3.0.11-1+squeeze14.debian.tar.gz a76357f4d9be6c5327e783ba65df26acd82ecc61777d2f45ead369f5c9d4058e 12536368 icedove_3.0.11-1+squeeze14_amd64.deb e2ddecbd45a623a51fa9175cf245f937a0a58721ccc62d1229edb1ac72ff4267 5742650 icedove-dev_3.0.11-1+squeeze14_amd64.deb 8a643188b1c074d43c2526f623a16c33ce2482f7d253e54ebd56884dbc2fb3e6 68352956 icedove-dbg_3.0.11-1+squeeze14_amd64.deb Files: 739473925f26242b4bd12c09aeae74ba 2532 web optional icedove_3.0.11-1+squeeze14.dsc 87ae77003b69ab2026f8a2794f4db829 545113 web optional icedove_3.0.11-1+squeeze14.debian.tar.gz a0123abbff4fa78e655aa0d897cab37e 12536368 mail optional icedove_3.0.11-1+squeeze14_amd64.deb ea2e6e93ea4d486d028c6777f0daa707 5742650 mail optional icedove-dev_3.0.11-1+squeeze14_amd64.deb 06436a9bf29050ec010ee19c35878dae 68352956 debug extra icedove-dbg_3.0.11-1+squeeze14_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJQi/pqAAoJECbjyHWnRCDvgXQP/3DqW4AO76JYlnZFB8o3MKye O9C6h4ibBxXu4kX4n9yGZGft4aDj+b1WlpFdWZuZIB8jeyGWQ0Tp6chEnrlLzmQU Wp7n0uh+PLPS6shpFj1r0WEm7ur3M8/GEDnROvNNHGhrih5kio08i09B4T+BUlEi 7K5ADYzBUlIEz2aH1Io4oecq1NoNxNswad9sIPwRrFMKFQYyqtLNFs8GaI791Spg IEmVyxPqBjm9mgmY55ItK+mj3NsxTbQdEY7ao6/9Ygw0nIwdCiwWa/Vh/8e850Da J5ZEFc9ErouTLj4annoiEXuCzZWpckZWHzobDYruWyHFRWt0HIOBJUCbr7TIapGX 2GL2OU3voAI3weOO2CNTwjB2BP1twgs3mYbiCmdhuU54kykCilbdZUjvVBlFuUDc 7IDZIXaL+sJxOcCaS1o3KctAoWWQEXjTiuDdhrLU4MXBeXFUrwugxIx3hhUHTZts qvCvfo8Ft3RznKRsxCO0ersBIowtcBasdLnl0ny+b+WqhxDU7bnZZ1RsHe36czxJ mfmpp4HxzeEjhbcSPp6tdzIzyvReZrt6pHsHXMHalnQclnJA9Tn3tGlKKZi/4sfr gsqvUkVxoRfA4NitnM4sdxPN5I/keiLH71Dr7lqAQM+7j4k0Jz8dpj+LdkaRnEnL WzOffV+XsekeBiyel0fO =FRKa -----END PGP SIGNATURE-----