Foxrm18

• Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems: - CVE-2008-0412 Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine.
• IceDove has filled that place. It does an excellent indexing (in terms of performance) and presents a very user intuitive way to narrowing it down to, when looking for a particular information.

Icedove mail/news client with RSS and integrated spam filter support. Dropbox folder not showing up in finder download.

The following security updates has been released for Debian GNU/Linux: [SECURITY] [DSA 2529-1] python-django security update and [SECURITY] [DSA 2528-1] icedove security update
[SECURITY] [DSA 2529-1] python-django security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2529-1 security@debian.org
http://www.debian.org/security/ Thijs Kinkhorst
August 14, 2012 http://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : python-django
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-3442 CVE-2012-3443 CVE-2012-3444
Debian Bug : 683364
Jeroen Dekkers and others reported several vulnerabilities in Django,
a Python Web framework. The Common Vulnerabilities and Exposures
project defines the following issues:
CVE-2012-3442
Two functions do not validate the scheme of a redirect target,
which might allow remote attackers to conduct cross-site scripting
(XSS) attacks via a data: URL.
CVE-2012-3443
The ImageField class completely decompresses image data during image
validation, which allows remote attackers to cause a denial of service
(memory consumption) by uploading an image file.
CVE-2012-3444
The get_image_dimensions function in the image-handling functionality
uses a constant chunk size in all attempts to determine dimensions,
which allows remote attackers to cause a denial of service (process
or thread consumption) via a large TIFF image.
For the stable distribution (squeeze), this problem has been fixed in
version 1.2.3-3+squeeze3.
For the unstable distribution (sid), this problem has been fixed in
version 1.4.1-1.
We recommend that you upgrade your python-django packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

[SECURITY] [DSA 2528-1] icedove security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2528-1 security@debian.org
http://www.debian.org/security/ Florian Weimer
August 14, 2012 http://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : icedove
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-1948 CVE-2012-1950 CVE-2012-1954 CVE-2012-1967
Several vulnerabilities were discovered in Icedove, Debian's version
of the Mozilla Thunderbird mail and news client.
CVE-2012-1948
Multiple unspecified vulnerabilities in the browser engine
were fixed.
CVE-2012-1950
The underlying browser engine allows address bar spoofing
through drag-and-drop.
CVE-2012-1954
A use-after-free vulnerability in the nsDocument::AdoptNode
function allows remote attackers to cause a denial of service
(heap memory corruption) or possibly execute arbitrary code.
CVE-2012-1967
An error in the implementation of the Javascript sandbox
allows execution of Javascript code with improper privileges
using javascript: URLs.
For the stable distribution (squeeze), these problems have been fixed
in version 3.0.11-1+squeeze12.
For the testing distribution (wheezy) and the unstable distribution
(sid), these problems have been fixed in version 10.0.6-1.
We recommend that you upgrade your icedove packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Iced Over Gutters

Links for icedove

Debian Resources:

• Debian Source Repository (Git)

Maintainers:

• Christoph Goehre (QA Page)
• Guido Günther (QA Page)
• Carsten Schoenert (QA Page)

External Resources:

• Homepage [www.mozilla.org]

Iced Overwatch

Other Packages Related to icedove

build-depends

build-depends-indep

• adep:autoconf2.13

  automatic configure script builder (obsolete version)

• adep:autotools-dev

  Update infrastructure for config.{guess,sub} files

• adep:bash-completion

  programmable completion for the bash shell

• adep:bzip2

  high-quality block-sorting file compressor - utilities

• adep:debhelper (>= 9.20150101~)

  helper programs for debian/rules

• adep:dh-apparmor

  AppArmor debhelper routines

• adep:dh-exec

  Scripts to help with executable debhelper files

• adep:dpkg (>= 1.16.18~)

  Debian package management system

• adep:dpkg-dev (>= 1.16.18~)

  Debian package development tools

• adep:libasound2-dev [linux-any]

  shared library for ALSA applications -- development files

• adep:libatk-adaptor

  AT-SPI 2 toolkit bridge

• adep:libbz2-dev

  high-quality block-sorting file compressor library - development

• adep:libcairo2-dev (>= 1.10.2-1.1~)

  Development files for the Cairo 2D graphics library

• adep:libdbus-glib-1-dev (>= 0.60)

  simple interprocess messaging system (GLib interface)

• adep:libevent-dev (>= 1.4.1)

  Asynchronous event notification library (development files)

• adep:libffi-dev

  Foreign Function Interface library (development files)

• adep:libfontconfig1-dev

  generic font configuration library - development

• adep:libglib2.0-dev (>= 2.22.0)

  Development files for the GLib library

• adep:libgnomeui-dev (>= 2.22)

  GNOME user interface library - development files

• adep:libgtk2.0-dev

  development files for the GTK+ library

• adep:libgtk-3-dev (>= 3.4)

  development files for the GTK+ library

• adep:libhunspell-dev (>= 1.2)

  spell checker and morphological analyzer (development)

• adep:libjsoncpp-dev

  Library for reading and writing JSON for C++ (devel files)

• adep:libidl-dev (>= 0.8.0)

  development files for programs that use libIDL

• adep:libiw-dev [linux-any]

  Wireless tools - development files

• adep:libnotify-dev

  sends desktop notifications to a notification daemon (Development files)

• adep:libpng-dev

  virtual package provided by libpng12-dev

• adep:libpulse-dev

  PulseAudio client development headers and libraries

• adep:libreadline-dev

  GNU readline and history libraries, development files

• adep:libstartup-notification0-dev

  library for program launch feedback (development headers)

• adep:libx11-dev

  X11 client-side library (development headers)

• adep:libx11-xcb-dev

  Xlib/XCB interface library (development headers)

• adep:libxau-dev

  X11 authorisation library (development headers)

• adep:libxft-dev

  FreeType-based font drawing library for X (development files)

• adep:libxt-dev

  X11 toolkit intrinsics library (development headers)

• adep:mesa-common-dev

  Developer documentation for Mesa

• adep:mozilla-devscripts

  Development scripts used by Mozilla's addons packages

• adep:python-minimal (>= 2.6.6-13~)

  minimal subset of the Python language (default version)

• adep:python-ply

  Lex and Yacc implementation for Python2

• adep:python2.7

  Interactive high-level object-oriented language (version 2.7)

• adep:unzip

  De-archiver for .zip files

• adep:yasm (>= 1.1)

  modular assembler with multiple syntaxes support

• adep:zip

  Archiver for .zip files

• adep:zlib1g-dev

  compression library - development

Ice Dove

Download icedove

File	Size (in kB)	MD5 checksum
icedove_52.3.0-4~deb8u2.dsc	19.5 kB	3a86a8a2d2cc8f1a0ec09a20b94828b3
icedove_52.3.0.orig-icedove-l10n.tar.xz	8,837.9 kB	d819b4bc64979969f9fc319293efd37b
icedove_52.3.0.orig-iceowl-l10n.tar.xz	854.7 kB	be93dc3af98d180f2dccb801fc193fec
icedove_52.3.0.orig.tar.xz	230,434.8 kB	ded0f820643c5d210bfa9121b11ffc53
icedove_52.3.0-4~deb8u2.debian.tar.xz	389.6 kB	7b19e53b2c7cb5944f6ecdf33c63e9ee

Icedove

Debian Package Source Repository (VCS: Git)

https://anonscm.debian.org/cgit/pkg-mozilla/icedove.git

Debian Package Source Repository (Browsable)

https://anonscm.debian.org/cgit/pkg-mozilla/icedove.git