Debian-LTS alert DLA-472-1 (icedove)

From:
    	     
 
Markus Koschany <apo@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 472-1] icedove security update 
Date:
    	     
 
Sat, 14 May 2016 15:55:54 +0200
Message-ID:
    	     
 
<57372E6A.2020708@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : icedove
Version        : 38.8.0-1~deb7u1
CVE ID         : CVE-2016-1979 CVE-2016-2805 CVE-2016-2807

Multiple security issues have been found in Icedove, Debian's version of
the Mozilla Thunderbird mail client. Multiple memory safety errors may
lead to the execution of arbitrary code or denial of service.

For Debian 7 "Wheezy", this problem has been fixed in version
38.8.0-1~deb7u1.

We recommend that you upgrade your icedove packages.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQJ8BAEBCgBmBQJXNy5qXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBQ0YzRDA4OEVGMzJFREVGNkExQTgzNUZE
OUFEMTRCOTUxM0I1MUU0AAoJENmtFLlRO1HkmSAP/Rv7eGtA6qxm9k6Z7sYTDt0+
8SlzXhiOewIy3vpMoz+mNUAxgDtC5xUf7eHYMcuhcTdIX8BgiJ1SpDbaIlw53SA+
2zOW63HmxHc/Jj5q4hrCLhOiymXMFnCXH3ohzVo9wTpCVxzowBzbAQySSZPr54FM
k3HnmPBOMATYamuWtW3FV/9QQ2hWU8kO0Kmomz5MTRfrWY0EKV1Y1BSkn51sOJu9
pR3AkvWyJ8ndChm+IKT7ZPyAvm0pO/uyfMTgBOZUQ/sKON/42qtT25eIaIVpj1vI
Bk/xhY73vuHsFEN/UNhKi9DVd32oqQmqs9KukafM0jyKApTxRanyEGc2hesySgRb
5ZlQwMbxnr/JprwKeTnlC/U+8ZA7fMBCFqe3M7y1uotQ6ezzgITQzIx5gWqeeT1c
IA4NOwnt8SSizhIKxPFvtAbXwnADWoGxe9uan0QrYXHLh8swxW0UiBTeZRAhQz1f
4XvvnqANkaf7peSxvPRLWoQG/AX3r5UGhlILMXe10Q5wloRjLk22hwvduM9Vmsma
SjbSScSDWFMsWIiegfEx2mL5p/9ta0OyhJly2jyeqpnsTj5bBnW19itUPdfMKgTQ
4THFzC7ujqMiVShqHtaCtTb5CgYYfPAD4EVM2YfOOloN1xrp0N98oF13pe1SKDbw
d7I24iZnZk5Dw4tz2bRk
=wK4G
-----END PGP SIGNATURE-----