• [SECURITY] [DSA 3730-1] icedove security update

    From Salvatore Bonaccorso@1:229/2 to All on Sun Dec 11 17:10:02 2016
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 11, 2016 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : icedove
    CVE ID : CVE-2016-5290 CVE-2016-5291 CVE-2016-5296 CVE-2016-5297
    CVE-2016-9066 CVE-2016-9074 CVE-2016-9079

    Multiple security issues have been found in Icedove, Debian's version of
    the Mozilla Thunderbird mail client: Multiple memory safety errors,
    same-origin policy bypass issues, integer overflows, buffer overflows
    and use-after-frees may lead to the execution of arbitrary code or
    denial of service.

    For the stable distribution (jessie), these problems have been fixed in
    version 1:45.5.1-1~deb8u1.

    For the unstable distribution (sid), these problems have been fixed in
    version 1:45.5.1-1 or earlier.

    We recommend that you upgrade your icedove packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlhNeSBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0TethAAhm36AZCty9KUOtfTeXCrgfaFahBzWlQ21CZg7zwVI3IWvhulei7SEWop t84BGmnEZ3hJ26/yQf/Bi0wwpn1WRKe3wX3Hm7PDVqYngYEeNEjY90FdtjqRqSBL nIKAQjT5kZp9sh+O2+HZUwjGenfmvNOY2EYZ7If8abQ7aO7FLDRKuY72XcVfgLSv J/uDE6X/RZk4sJqfr+ObpHtp3hkGlaYHCsB+p2pros4xW60gZVDVltPX10ICXS9+ plBLUMhdKLux5dIj90TvnxB6SOYu0u+Jahjf6owMNJoRIwwW/KvNc99szTWs/X0H M9fdBBmLdNh/6IhRAYiym/HLNyt44rxShvSOTPOU4eKzG4O9gDEpSNmlh9+WIOtN cbDZ0S7OzEdfuW/74AVI4XNlqFL3SzHS2kqDAAYBjlsMbt0O5Ep6DpO8UZIbEiz+ 97ohaD0wM/Lg/l4sNStUuJzg1P4HEPae4+lk2UiKO3Ty3xSRzYDbqAWYlwkDwr2V X2QHzR0iaMapjPWdrOIBd4c1tG8HLIG44FNeJvEglC7kdgNuUTUG641TAqkKV1iR YyO5vd22RuNBQ0ryAKUx//TfMRgJTdN9QwWth6TcBj88dhLKBQGeRe8D4j66kwE8 bsEIlMP6Dpb3sgyjbGLQP4xVGmYrvtzbNKN3JZwzhr2a9Giqwkw=
    =19SC
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)