Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

debian-changes-digest Digest V2008 #49

From: <debian-changes-digest-request(at)lists.debian.org>
Date: Sat Feb 16 2008 - 07:54:38 EST


Content-Type: text/plain

debian-changes-digest Digest Volume 2008 : Issue 49

Today's Topics:

  Accepted tcpreen 1.4.3-0.1etch1 (sou  [ Moritz Muehlenhoff  ]
  Accepted libchipcard2 2.1.9-3 (sourc  [ Micha Lenk  ]
  Accepted libvorbis 1.1.2.dfsg-1.3 (s  [ Moritz Muehlenhoff  ]
  Accepted libarchive 1.2.53-2etch1 (s  [ Steffen Joeris  ]
  Accepted libsndfile 1.0.16-2 (source  [ Moritz Muehlenhoff  ]
  Accepted libexif 0.6.13-5etch2 (sour  [ Moritz Muehlenhoff  ]
  Accepted unace-nonfree 2.5-1etch1 (s  [ Fabian Greffrath  ]

Date: Sat, 16 Feb 2008 12:17:30 +0000
From: Moritz Muehlenhoff <jmm@debian.org> To: debian-changes@lists.debian.org
Subject: Accepted tcpreen 1.4.3-0.1etch1 (source i386)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Sat, 29 Dec 2007 15:32:14 +0000
Source: tcpreen
Binary: tcpreen
Architecture: source i386
Version: 1.4.3-0.1etch1
Distribution: stable-security
Urgency: high
Maintainer: Oliver Kurth <oku@debian.org> Changed-By: Moritz Muehlenhoff <jmm@debian.org> Description:=20
 tcpreen - Simple TCP re-engineering tool Changes:=20
 tcpreen (1.4.3-0.1etch1) stable-security; urgency=3Dhigh  .

  • Fix multiple buffer overflows. (CVE-2007-6562) Files:=20 83c33a7131f3191048aba4b610e292ca 579 net optional tcpreen_1.4.3-0.1etch1= .dsc 5600968d012f8353e4e0797d4c330393 232290 net optional tcpreen_1.4.3.orig.= tar.gz b1af9b7571c037713b123f33e5e79721 26016 net optional tcpreen_1.4.3-0.1etc= h1.diff.gz bcd58bac3ae59767861a9fee6653e882 40274 net optional tcpreen_1.4.3-0.1etc= h1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

Do you need help?X

iD8DBQFHdmtBXm3vHE4uyloRAvnMAKCfMC7BzJdYXMYKMrB2bU6L+hessgCgk1Qw Ww+kYRsi0x84dpd56lTC+Ws=3D
=3DdSK0
-----END PGP SIGNATURE-----
Accepted:
tcpreen_1.4.3-0.1etch1.diff.gz
  to pool/main/t/tcpreen/tcpreen_1.4.3-0.1etch1.diff.gz tcpreen_1.4.3-0.1etch1.dsc
  to pool/main/t/tcpreen/tcpreen_1.4.3-0.1etch1.dsc tcpreen_1.4.3-0.1etch1_i386.deb
  to pool/main/t/tcpreen/tcpreen_1.4.3-0.1etch1_i386.deb

Date: Sat, 16 Feb 2008 12:17:12 +0000
From: Micha Lenk <micha@lenk.info>
To: debian-changes@lists.debian.org
Subject: Accepted libchipcard2 2.1.9-3 (source i386 all)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Sat, 5 Jan 2008 17:58:18 +0100
Source: libchipcard2
Binary: libchipcard2-dev libchipcard2-tools libchipcard2-libgwenhywfar38-= plugins libchipcard2-data libchipcard2-0c2 Architecture: source i386 all
Version: 2.1.9-3
Distribution: stable
Urgency: low
Maintainer: Micha Lenk <micha@lenk.info> Changed-By: Micha Lenk <micha@lenk.info> Description:=20

 libchipcard2-0c2 - library for accessing smartcards
 libchipcard2-data - configuration files for libchipcard2-0c2
 libchipcard2-dev - API for smartcard readers
 libchipcard2-libgwenhywfar38-plugins - crypttoken plugin to libgwenhywfa=
r
 libchipcard2-tools - tools for libchipcard2 Closes: 457412
Changes:=20
 libchipcard2 (2.1.9-3) stable; urgency=3Dlow  .
  • Let libchipcard2-0c2 depend on libchipcard2-data. Otherwise applicat= ions linking against libchipcard2 suffer from segfaults when libchipcard2=
    -data
    is not installed (closes: #457412).
  • Set myself as maintainer. Thanks to Thomas for his contributions so = far. Files:=20 d72fb7c9b285fffdd6c770efa48061a3 773 libs optional libchipcard2_2.1.9-3.= dsc ed04b2a44a61448bb0630fdc949427af 8960 libs optional libchipcard2_2.1.9-3= .diff.gz ece13458673c65e51fa4336a58e1b3b3 54658 devel extra libchipcard2-dev_2.1.= 9-3_all.deb 44e7379b5a673c9bf238ed18981c3468 66578 libs optional libchipcard2-data_2= .1.9-3_all.deb 7b139dac27373df4b1ea91c41bf7ef15 296026 libs optional libchipcard2-0c2_2= .1.9-3_i386.deb 059ab25e381b3ca9069f977fcec820f9 241872 misc optional libchipcard2-tools= _2.1.9-3_i386.deb ed87c1129c3033a9206594daf18c5f33 51566 misc optional libchipcard2-libgwe= nhywfar38-plugins_2.1.9-3_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHh9VpQbn06FtxPfARAuY/AJ93293fkBR301uRNr3j1yJTeaFv+wCfSwuC vTcrg08rcMBYM1Ut8PNjG7M=3D
=3Dkil5
-----END PGP SIGNATURE-----
Accepted:
libchipcard2-0c2_2.1.9-3_i386.deb
  to pool/main/libc/libchipcard2/libchipcard2-0c2_2.1.9-3_i386.deb libchipcard2-data_2.1.9-3_all.deb
  to pool/main/libc/libchipcard2/libchipcard2-data_2.1.9-3_all.deb libchipcard2-dev_2.1.9-3_all.deb
  to pool/main/libc/libchipcard2/libchipcard2-dev_2.1.9-3_all.deb libchipcard2-libgwenhywfar38-plugins_2.1.9-3_i386.deb   to pool/main/libc/libchipcard2/libchipcard2-libgwenhywfar38-plugins_2.1= .9-3_i386.deb
libchipcard2-tools_2.1.9-3_i386.deb
  to pool/main/libc/libchipcard2/libchipcard2-tools_2.1.9-3_i386.deb libchipcard2_2.1.9-3.diff.gz
  to pool/main/libc/libchipcard2/libchipcard2_2.1.9-3.diff.gz libchipcard2_2.1.9-3.dsc
  to pool/main/libc/libchipcard2/libchipcard2_2.1.9-3.dsc

Do you need more help?X

Date: Sat, 16 Feb 2008 12:17:13 +0000
From: Moritz Muehlenhoff <jmm@debian.org> To: debian-changes@lists.debian.org
Subject: Accepted libvorbis 1.1.2.dfsg-1.3 (source i386)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Sun, 20 Jan 2008 12:49:01 +0000
Source: libvorbis
Binary: libvorbis0a libvorbis-dev libvorbisenc2 libvorbisfile3 Architecture: source i386
Version: 1.1.2.dfsg-1.3
Distribution: stable-security
Urgency: low
Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint@lists.alioth.debi= an.org>
Changed-By: Moritz Muehlenhoff <jmm@debian.org> Description:=20
 libvorbis-dev - The Vorbis General Audio Compression Codec (development = files)
 libvorbis0a - The Vorbis General Audio Compression Codec  libvorbisenc2 - The Vorbis General Audio Compression Codec  libvorbisfile3 - The Vorbis General Audio Compression Codec Changes:=20
 libvorbis (1.1.2.dfsg-1.3) stable-security; urgency=3Dlow  .

  • Fix CVE-2007-3106 CVE-2007-4029 CVE-2007-4065 CVE-2007-4066 Files:=20 514e1b39b9020ec71b598a86ecd7a98a 787 libs optional libvorbis_1.1.2.dfsg-= 1.3.dsc 44cf09fef7f78e7c6ba7dd63b6137412 1312540 libs optional libvorbis_1.1.2.d= fsg.orig.tar.gz 6d5a52ab761bee984f8a3bf4824c1da2 15113 libs optional libvorbis_1.1.2.dfs= g-1.3.diff.gz 4ff2cbd6cd9acbbee79f14e15d48adc7 97908 libs optional libvorbis0a_1.1.2.d= fsg-1.3_i386.deb 6988a44b88cecade073a6904c493e8b4 75208 libs optional libvorbisenc2_1.1.2= .dfsg-1.3_i386.deb 278dc87b1e3486ea3a991bf0d3abf058 18756 libs optional libvorbisfile3_1.1.= 2.dfsg-1.3_i386.deb 580e82ae5823628b6ee7ecd2a5cc8f7c 446560 libdevel optional libvorbis-dev_= 1.1.2.dfsg-1.3_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHk0RBXm3vHE4uyloRAqKaAKDPUijGhuS2kFzKArjOZqZg3c/cNgCdHkUW NddqQIHL8aQZFP3FrVAU9rU=3D
=3DByKR
-----END PGP SIGNATURE-----
Accepted:
libvorbis-dev_1.1.2.dfsg-1.3_i386.deb
  to pool/main/libv/libvorbis/libvorbis-dev_1.1.2.dfsg-1.3_i386.deb libvorbis0a_1.1.2.dfsg-1.3_i386.deb
  to pool/main/libv/libvorbis/libvorbis0a_1.1.2.dfsg-1.3_i386.deb libvorbis_1.1.2.dfsg-1.3.diff.gz
  to pool/main/libv/libvorbis/libvorbis_1.1.2.dfsg-1.3.diff.gz libvorbis_1.1.2.dfsg-1.3.dsc
  to pool/main/libv/libvorbis/libvorbis_1.1.2.dfsg-1.3.dsc libvorbisenc2_1.1.2.dfsg-1.3_i386.deb
  to pool/main/libv/libvorbis/libvorbisenc2_1.1.2.dfsg-1.3_i386.deb libvorbisfile3_1.1.2.dfsg-1.3_i386.deb
  to pool/main/libv/libvorbis/libvorbisfile3_1.1.2.dfsg-1.3_i386.deb

Date: Sat, 16 Feb 2008 12:17:12 +0000
From: Steffen Joeris <white@debian.org>
To: debian-changes@lists.debian.org
Subject: Accepted libarchive 1.2.53-2etch1 (source i386)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Can we help you?X

Format: 1.7
Date: Fri, 4 Jan 2008 15:52:20 +0000
Source: libarchive
Binary: libarchive-dev libarchive1 bsdtar Architecture: source i386
Version: 1.2.53-2etch1
Distribution: stable-security
Urgency: high
Maintainer: John Goerzen <jgoerzen@complete.org> Changed-By: Steffen Joeris <white@debian.org> Description:=20
 bsdtar - tar(1) from FreeBSD, using libarchive  libarchive-dev - Single library to read/write tar, cpio, pax, zip, iso96= 60, etc.
 libarchive1 - Single library to read/write tar, cpio, pax, zip, iso9660,=  etc.
Changes:=20
 libarchive (1.2.53-2etch1) stable-security; urgency=3Dhigh  .

  • Non-maintainer upload by the security team
  • Fix buffer overflow, NULL pointer reference and DoS in archive_read_support_format_tar.c Fixes: CVE-2007-3641, CVE-2007-3644, CVE-2007-3645 Files:=20 6bd6417d5da3132138dfec988dd0b484 723 libs optional libarchive_1.2.53-2et= ch1.dsc 2e2df461fef05049b3a92e5bedc2de2c 522540 libs optional libarchive_1.2.53.= orig.tar.gz 454b6a56eec392fff05fde2e39b33241 6474 libs optional libarchive_1.2.53-2e= tch1.diff.gz e3e924b9c25d33d9412ab66e5745002b 95600 libdevel optional libarchive-dev_= 1.2.53-2etch1_i386.deb 9ae44a93dbe577fea5a3121b32e00bf5 73122 libs optional libarchive1_1.2.53-= 2etch1_i386.deb 5f52d186b87c77092c092836ad457585 82918 libs optional bsdtar_1.2.53-2etch= 1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHgAP562zWxYk/rQcRAu97AJ9D2YXx1Mk8n2wQjHPVLO0X/XFJpACeIVkl aYgZBnQMDscYshXxwx4rIyU=3D
=3Dwh1E
-----END PGP SIGNATURE-----
Accepted:
bsdtar_1.2.53-2etch1_i386.deb
  to pool/main/liba/libarchive/bsdtar_1.2.53-2etch1_i386.deb libarchive-dev_1.2.53-2etch1_i386.deb
  to pool/main/liba/libarchive/libarchive-dev_1.2.53-2etch1_i386.deb libarchive1_1.2.53-2etch1_i386.deb
  to pool/main/liba/libarchive/libarchive1_1.2.53-2etch1_i386.deb libarchive_1.2.53-2etch1.diff.gz
  to pool/main/liba/libarchive/libarchive_1.2.53-2etch1.diff.gz libarchive_1.2.53-2etch1.dsc
  to pool/main/liba/libarchive/libarchive_1.2.53-2etch1.dsc

Date: Sat, 16 Feb 2008 12:17:13 +0000
From: Moritz Muehlenhoff <jmm@debian.org> To: debian-changes@lists.debian.org
Subject: Accepted libsndfile 1.0.16-2 (source i386)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Thu, 27 Dec 2007 21:07:10 +0000
Source: libsndfile
Binary: libsndfile1 libsndfile1-dev sndfile-programs Architecture: source i386
Version: 1.0.16-2
Distribution: stable-security
Urgency: high
Maintainer: Anand Kumria <wildfire@progsoc.org> Changed-By: Moritz Muehlenhoff <jmm@debian.org> Description:=20
 libsndfile1 - Library for reading/writing audio files  libsndfile1-dev - Library for reading/writing audio files  sndfile-programs - Sample programs that use libsndfile Changes:=20
 libsndfile (1.0.16-2) stable-security; urgency=3Dhigh  .

  • Fix buffer overflow in FLAC code. (CVE-2007-4974) Files:=20 778f77063bf0aee761b5d9f7af793ced 639 devel optional libsndfile_1.0.16-2.= dsc 773b6639672d39b6342030c7fd1e9719 857117 devel optional libsndfile_1.0.16= .orig.tar.gz 3143afa4d8b69fe1ba9d0428d3b5b472 5465 devel optional libsndfile_1.0.16-2= .diff.gz 9fe5127322c613449eb0dde18a27cfb8 319560 libdevel optional libsndfile1-de= v_1.0.16-2_i386.deb e9bc609646a45373a0d365b071950c6a 197498 libs optional libsndfile1_1.0.16=
    -2_i386.deb
    834537ca8b562a4350d5a9c422f436ca 74262 utils optional sndfile-programs_1= .0.16-2_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

Can't find what you're looking for?X

iD8DBQFHdBUaXm3vHE4uyloRAhBjAJ4zgVXpKZtrVxuk/jSD014kjjXfuACeOUm6 +HXHXGXMSs9JS41MoxOfY90=3D
=3DFnEq
-----END PGP SIGNATURE-----
Accepted:
libsndfile1-dev_1.0.16-2_i386.deb
  to pool/main/libs/libsndfile/libsndfile1-dev_1.0.16-2_i386.deb libsndfile1_1.0.16-2_i386.deb
  to pool/main/libs/libsndfile/libsndfile1_1.0.16-2_i386.deb libsndfile_1.0.16-2.diff.gz
  to pool/main/libs/libsndfile/libsndfile_1.0.16-2.diff.gz libsndfile_1.0.16-2.dsc
  to pool/main/libs/libsndfile/libsndfile_1.0.16-2.dsc sndfile-programs_1.0.16-2_i386.deb
  to pool/main/libs/libsndfile/sndfile-programs_1.0.16-2_i386.deb

Date: Sat, 16 Feb 2008 12:17:13 +0000
From: Moritz Muehlenhoff <jmm@debian.org> To: debian-changes@lists.debian.org
Subject: Accepted libexif 0.6.13-5etch2 (source i386)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Wed, 6 Feb 2008 00:00:57 +0100
Source: libexif
Binary: libexif12 libexif-dev
Architecture: source i386
Version: 0.6.13-5etch2
Distribution: stable-security
Urgency: high
Maintainer: Frederic Peters <fpeters@debian.org> Changed-By: Moritz Muehlenhoff <jmm@debian.org> Description:=20
 libexif-dev - library to parse EXIF files (development files)  libexif12 - library to parse EXIF files Changes:=20
 libexif (0.6.13-5etch2) stable-security; urgency=3Dhigh  .

  • Fix CVE-2007-2645, CVE-2007-6151, CVE-2007-6253 plus two crash bugs. Files:=20 31d21b75dede8ab7357d68dc10f31b03 611 libs optional libexif_0.6.13-5etch2= .dsc 99a0a91ef86facebe77eb309e84187ee 9821 libs optional libexif_0.6.13-5etch= 2.diff.gz 98478f9f44a8121aaa68173eabb9d045 1008258 libdevel optional libexif-dev_0= .6.13-5etch2_i386.deb 74f55a40478fb3735293b8b20a9b29b9 140088 libs optional libexif12_0.6.13-5= etch2_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHqiWjXm3vHE4uyloRAjgxAKC8UMlycfJmxB0sEZwAeN8xY5+qgQCgkTVx S4Q1qpNeTFPM97lf/hCh/fw=3D
=3DvPV5
-----END PGP SIGNATURE-----
Accepted:
libexif-dev_0.6.13-5etch2_i386.deb
  to pool/main/libe/libexif/libexif-dev_0.6.13-5etch2_i386.deb libexif12_0.6.13-5etch2_i386.deb
  to pool/main/libe/libexif/libexif12_0.6.13-5etch2_i386.deb libexif_0.6.13-5etch2.diff.gz
  to pool/main/libe/libexif/libexif_0.6.13-5etch2.diff.gz libexif_0.6.13-5etch2.dsc
  to pool/main/libe/libexif/libexif_0.6.13-5etch2.dsc

Don't know where to look next?X

Date: Sat, 16 Feb 2008 12:32:39 +0000
From: Fabian Greffrath <fabian@debian-unofficial.org> To: debian-changes@lists.debian.org
Subject: Accepted unace-nonfree 2.5-1etch1 (source i386)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Confused? Frustrated?X
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Fri, 28 Dec 2007 20:37:00 +0100
Source: unace-nonfree
Binary: unace-nonfree
Architecture: source i386
Version: 2.5-1etch1
Distribution: stable
Urgency: medium
Maintainer: Fabian Greffrath <fabian@debian-unofficial.org> Changed-By: Fabian Greffrath <fabian@debian-unofficial.org> Description:=20
 unace-nonfree - extract, test and view .ace archives (non-free version) Closes: 449395
Changes:=20
 unace-nonfree (2.5-1etch1) stable; urgency=3Dmedium  .

  • debian/control: + Reduced supported Archs to i386 and amd64 for the time being. .
  • Applied a series of patches courtesy of Michael Karcher <debian@mkarcher.dialup.fu-berlin.de>:
  • debian/patches/04-64bit.dpatch: + Replace declare.h by a generic stdint based version (Closes: #4493= 95).
  • debian/patches/11-possibly-critical.dpatch: + Fixes a possible security issue by initialising a local variable. Files:=20 a6a1d3098efd8ae6a3edc2d92c5e5fab 687 non-free/utils optional unace-nonfr= ee_2.5-1etch1.dsc fc03f3fc13eeba5c5496383cd1c31fc6 4748 non-free/utils optional unace-nonf= ree_2.5-1etch1.diff.gz 37e5b16fe1203f887e3d863df80e79dd 54016 non-free/utils optional unace-non= free_2.5-1etch1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHdYg45UTeB5t8Mo0RAj2vAJ96t99B/BHkMaV6EUeYd349Rah3dwCePXvD c8LT6KGaL+r2otM0/ylPDG8=3D
=3DQjKC
-----END PGP SIGNATURE-----
Accepted:
unace-nonfree_2.5-1etch1.diff.gz
  to pool/non-free/u/unace-nonfree/unace-nonfree_2.5-1etch1.diff.gz unace-nonfree_2.5-1etch1.dsc
  to pool/non-free/u/unace-nonfree/unace-nonfree_2.5-1etch1.dsc unace-nonfree_2.5-1etch1_i386.deb
  to pool/non-free/u/unace-nonfree/unace-nonfree_2.5-1etch1_i386.deb

Date: Sat, 16 Feb 2008 12:17:09 +0000
From: Alexander Sack <asac@debian.org>
To: debian-changes@lists.debian.org
Subject: Accepted icedove 1.5.0.13+1.5.0.15b.dfsg1-0etch1 (source all amd64)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Call Pantek today for Open Source Technical Support at 1-877-546-8934 - 24/7/365X

Format: 1.7
Date: Fri, 08 Feb 2008 10:52:28 +0100
Source: icedove

Binary: icedove-inspector icedove-dev thunderbird-dbg thunderbird-inspect=
or icedove-typeaheadfind mozilla-thunderbird-typeaheadfind icedove-dbg th=
underbird-gnome-support thunderbird-typeaheadfind icedove mozilla-thunder=
bird-inspector icedove-gnome-support thunderbird mozilla-thunderbird-dev =
thunderbird-dev mozilla-thunderbird
Architecture: source amd64 all
Version: 1.5.0.13+1.5.0.15b.dfsg1-0etch1 Distribution: stable-security
Urgency: low
Maintainer: Alexander Sack <asac@debian.org> Changed-By: Alexander Sack <asac@debian.org> Description:=20
 icedove - free/unbranded thunderbird mail client
 icedove-dbg - debugging symbols for icedove/thunderbird
 icedove-dev - development files for icedove/thunderbird
 icedove-gnome-support - GNOME support package for icedove/thunderbird
 icedove-inspector - DOM inspector extension for icedove/thunderbird
 icedove-typeaheadfind - typeaheadfind extension for icedove/thunderbird
 mozilla-thunderbird - Transition package for icedove rename
 mozilla-thunderbird-dev - Transition package for icedove-dev rename
 mozilla-thunderbird-inspector - Transition package for icedove-inspector=
 rename
 mozilla-thunderbird-typeaheadfind - Transition package for icedove-typea= headfind rename
 thunderbird - Transition package for icedove rename
 thunderbird-dbg - Transition package for icedove-dbg rename
 thunderbird-dev - Transition package for icedove-dev rename
 thunderbird-gnome-support - Transition package for icedove-gnome-support=
 rename
 thunderbird-inspector - Transition package for icedove-inspector rename  thunderbird-typeaheadfind - Transition package for icedove-typeaheadfind=  rename
Changes:=20
 icedove (1.5.0.13+1.5.0.15b.dfsg1-0etch1) stable-security; urgency=3Dlow  .
   [ Alexander Sack ]
  • security/stability update 1.5.0.13 + 1.5.0.15 (prepatch backports fo= r v2.0.0.12)
  • MFSA 2008-01 aka CVE-2008-0412: Crashes with evidence of memory corr= uption v1.8.1.12 (Browser crashes)
  • MFSA 2008-01 aka CVE-2008-0413: Crashes with evidence of memory corr= uption v1.8.1.12 (javascript crashes)
  • MFSA 2008-02 aka CVE-2008-0414: Multiple file input focus stealing vulnerabilities: 1. Focus shifting bugs and 2. Selective keystroke blocking bugs
  • MFSA 2008-03 aka CVE-2008-0415: Privilege escalation, XSS, Remote Co= de Execution (JavaScript privilege escalation bugs)
  • MFSA 2008-04 aka CVE-2008-0417: Stored password corruption
  • MFSA 2008-05 aka CVE-2008-0418: Directory traversal via chrome: URI
  • MFSA 2008-06 aka CVE-2008-0419: Web browsing history and forward navigation stealing
  • MFSA 2008-08 aka CVE-2008-0591: File action dialog tampering
  • MFSA 2008-09 aka CVE-2008-0592: Mishandling of locally-saved plain t= ext files
  • MFSA 2008-10 aka CVE-2008-0593: URL token stealing via stylesheet re= direct
  • MFSA 2008-11 aka CVE-2008-0594: Web forgery overwrite with div overl= ay Files:=20 47d17cda0ae1ec315855f996e37a0ee2 1934 mail optional icedove_1.5.0.13+1.5= .0.15b.dfsg1-0etch1.dsc b1a02873d5e320b1a208dbffc256baee 35174191 mail optional icedove_1.5.0.13= +1.5.0.15b.dfsg1.orig.tar.gz c8a2dd2880fd468314e00a3dcdc9713a 640166 mail optional icedove_1.5.0.13+1= .5.0.15b.dfsg1-0etch1.diff.gz 2ccb02753ddc07f672554b7cb0fcfc86 12176086 mail optional icedove_1.5.0.13= +1.5.0.15b.dfsg1-0etch1_amd64.deb ff2443c7df9dff331f9f54050c191a88 196082 mail optional icedove-inspector_= 1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb 63a6d9b1e0d24dd0c19ba12472a353df 52482 mail optional icedove-gnome-suppo= rt_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb 70d41408a7964be8d214b83c52f873d8 29066 mail optional thunderbird-gnome-s= upport_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb 7a29b7ebb0148d1dc10cf3184791de68 61508 mail optional icedove-typeaheadfi= nd_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb 7f2501ff09f24d2a4fa384d531969897 3678346 mail optional icedove-dev_1.5.0= .13+1.5.0.15b.dfsg1-0etch1_amd64.deb f56252c61054eae347480d45fb3e845f 51479136 mail optional icedove-dbg_1.5.= 0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb 620536610d06e9062eb8760cde3d990c 29042 mail optional thunderbird-dbg_1.5= .0.13+1.5.0.15b.dfsg1-0etch1_all.deb 32015cf440db3318d6459f6c60a17792 29032 mail optional thunderbird_1.5.0.1= 3+1.5.0.15b.dfsg1-0etch1_all.deb ce479eb792bfef00ae3161fd0d157a61 29050 mail optional mozilla-thunderbird= _1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb 3d934b7f3583e3a04a0bd193e45a3fa6 29070 mail optional mozilla-thunderbird=
    -inspector_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb
    75b83c322479e095016108453ff7e862 29054 mail optional thunderbird-inspect= or_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb b98a074d7074c155a6ba1df263419376 29074 mail optional mozilla-thunderbird=
    -typeaheadfind_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb
    cbae212a095f4aac3b30443328b5ad85 29072 mail optional thunderbird-typeahe= adfind_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb 6665f3ce45a1c320dd55891bceb16f14 29048 mail optional thunderbird-dev_1.5= .0.13+1.5.0.15b.dfsg1-0etch1_all.deb 156f796fe78bbebda0b7e25fcf5dbe54 29060 mail optional mozilla-thunderbird=
    -dev_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iQIVAwUBR6xLPaBE/gcUDGZkAQIBhQ//aZzsa1i0nJOe7g19xNYBS3BVLJgFtgM0 yqVDaSaGOX6SqZg5zt5wl0jjolK8e3SOu5fGBTPOoUPwSMbuYgY73S8ObWogtOuz fxFjYSKEN6COhJRY5tAJBIK6pfo44j71g11LFjIfbrqi+1rXtQEN9fb63XvOg54G yifGq6NAlAghkpKwtRTJJ5N7HeZirvRw57Yu+70VTGIXlBqqcxZ/gPjDQF9nwan2 SHgAZF4GAI2rehvufeXhi4uW7oT1W2wuBsoQkWSIDmDws3QPRsgSD4rJ4058Zchr tJoMjYbC1+EjjfLHh10nloJH1PdywG4s4o6kF2k+zWiSLyv+5ymaHAYfeB+CBuwt U6cwWXQhOq9ranokKwmz6ZZG6aysiIcdpCGxrPvW+FP+dD++A9T/KmT/30+2Mx7n 3AaFEYYZzsxYWH76QJLZdKANLljFqgUoQfoLVDPJVgmImsOu61A5bLCp8Vs0bgZT iW5zj3ZCMZ+cM2l0y+3Ib8ghWbpreqmIv10auRvbtnNKGeZM7J047OvH6dI2n8cm f+dMJUgqxhpfFWjC1YY8ZzaCkJZbvKxu4gN+JYGDdTTZvndECijHjU5ntjs0z+Kt P1hWa/vye3aN/ujhLLpWrrmaBAkx8vA6V77fTe88q6LRLvQNBTX1BIuv7f0Pmebw gwuU5xGuVEg=3D
=3D3U7y
-----END PGP SIGNATURE-----
Accepted:
icedove-dbg_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb   to pool/main/i/icedove/icedove-dbg_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd6= 4.deb
icedove-dev_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb   to pool/main/i/icedove/icedove-dev_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd6= 4.deb
icedove-gnome-support_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb   to pool/main/i/icedove/icedove-gnome-support_1.5.0.13+1.5.0.15b.dfsg1-0= etch1_amd64.deb
icedove-inspector_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb   to pool/main/i/icedove/icedove-inspector_1.5.0.13+1.5.0.15b.dfsg1-0etch= 1_amd64.deb
icedove-typeaheadfind_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb   to pool/main/i/icedove/icedove-typeaheadfind_1.5.0.13+1.5.0.15b.dfsg1-0= etch1_amd64.deb
icedove_1.5.0.13+1.5.0.15b.dfsg1-0etch1.diff.gz   to pool/main/i/icedove/icedove_1.5.0.13+1.5.0.15b.dfsg1-0etch1.diff.gz icedove_1.5.0.13+1.5.0.15b.dfsg1-0etch1.dsc

  to pool/main/i/icedove/icedove_1.5.0.13+1.5.0.15b.dfsg1-0etch1.dsc
icedove_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.deb
  to pool/main/i/icedove/icedove_1.5.0.13+1.5.0.15b.dfsg1-0etch1_amd64.de=
b
icedove_1.5.0.13+1.5.0.15b.dfsg1.orig.tar.gz   to pool/main/i/icedove/icedove_1.5.0.13+1.5.0.15b.dfsg1.orig.tar.gz mozilla-thunderbird-dev_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/mozilla-thunderbird-dev_1.5.0.13+1.5.0.15b.dfsg1=
-0etch1_all.deb

mozilla-thunderbird-inspector_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.15b= .dfsg1-0etch1_all.deb
mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0= .15b.dfsg1-0etch1_all.deb
mozilla-thunderbird_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/mozilla-thunderbird_1.5.0.13+1.5.0.15b.dfsg1-0et= ch1_all.deb
thunderbird-dbg_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/thunderbird-dbg_1.5.0.13+1.5.0.15b.dfsg1-0etch1_= all.deb
thunderbird-dev_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/thunderbird-dev_1.5.0.13+1.5.0.15b.dfsg1-0etch1_= all.deb
thunderbird-gnome-support_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/thunderbird-gnome-support_1.5.0.13+1.5.0.15b.dfs= g1-0etch1_all.deb
thunderbird-inspector_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/thunderbird-inspector_1.5.0.13+1.5.0.15b.dfsg1-0= etch1_all.deb
thunderbird-typeaheadfind_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/thunderbird-typeaheadfind_1.5.0.13+1.5.0.15b.dfs= g1-0etch1_all.deb
thunderbird_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.deb   to pool/main/i/icedove/thunderbird_1.5.0.13+1.5.0.15b.dfsg1-0etch1_all.= deb

End of debian-changes-digest Digest V2008 Issue #49


Received on Sat Feb 16 10:52:24 2008

This archive was generated by hypermail 2.1.8 : Wed Mar 19 2008 - 07:01:49 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library