bugtraq - [SECURITY] [DSA 2996-1] icedove security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 3 Aug 2014 10:52:34 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 2996-1] icedove security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2996-1                   security@...ian.org
http://www.debian.org/security/                        Moritz Muehlenhoff
August 03, 2014                        http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : icedove
CVE ID         : CVE-2014-1544 CVE-2014-1547 CVE-2014-1555 CVE-2014-1556 
                 CVE-2014-1557

Multiple security issues have been found in Icedove, Debian's version of 
the Mozilla Thunderbird mail and news client: Multiple memory safety 
errors and use-after-frees may lead to the execution of arbitrary code 
or denial of service.

For the stable distribution (wheezy), these problems have been fixed in
version 24.7.0-1~deb7u1.

For the unstable distribution (sid), these problems will be fixed soon.

We recommend that you upgrade your icedove packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=VVj3
-----END PGP SIGNATURE-----