* Michael Casadevall [Sat, 18 Oct 2008 21:15:58 -0400]:
> It clears two RC bugs and a few security bugs.Here's the recent changelog.
> icedove (2.0.0.17-1) unstable; urgency=low
> * New upstream security/stability update (v.2.0.0.17), Closes: #500721
> * MFSA 2008-37 aka CVE-2008-0016 - UTF-8 URL stack buffer overflow
> * MFSA 2008-38 aka CVE-2008-3835 - nsXMLDocument::OnChannelRedirect()
> same-origin violation
> * MFSA 2008-41 aka CVE-2008-4058, CVE-2008-4059, CVE-2008-4060 - Privilege
> escalation via XPCnativeWrapper pollution
> * MFSA 2008-42 aka CVE-2008-4061, CVE-2008-4062, CVE-2008-4063,
> CVE-2008-4064 - Crashes with evidence of memory corruption
> (rv:1.9.0.2/1.8.1.17)
> * MFSA 2008-43 aka CVE-2008-4065, CVE-2008-4066 - BOM characters, low
> surrogates stripped from JavaScript before execution
> * MFSA 2008-44 aka CVE-2008-4067, CVE-2008-4068 - resource: traversal
> vulnerabilities
> * MFSA 2008-46 aka CVE-2008-4070 - Heap overflow when canceling newsgroup
> message
> [ Michael Casadevall <[EMAIL PROTECTED]> ]
> * debian/control:
> - Changed maintainer to Ubuntu Mozillateam
> - Added Uploaders to the team
> - Set DM-Upload-Allowed
> - Bumped standards version to 3.8.0
> [ Alexander Sack <[EMAIL PROTECTED]> ]
> * Closes: #497491 - Icedove inappropriately sets file-/MIME-type
> associations in .desktop database; we drop the Mime-Type= entry
> from debian/icedove.desktop
> - update debian/icedove.desktop
> -- Michael Casadevall <[EMAIL PROTECTED]> Sat, 18 Oct 2008 09:07:20 -0400
Unblocked by Luk.
--
Adeodato Simó dato at net.com.org.es
Debian Developer adeodato at debian.org
Listening to: The Wallflowers - Bleeders
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
