Debian-LTS alert DLA-519-1 (icedove)

From:
    	     
 
Guido Günther <agx@sigxcpu.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 519-1] icedove security update 
Date:
    	     
 
Wed, 22 Jun 2016 08:41:20 +0200
Message-ID:
    	     
 
<20160622064120.GA2881@bogon.m.sigxcpu.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Package        : icedove
Version        : 45.1.0-1~deb7u1
CVE ID         : CVE-2016-2806

Multiple security issues have been found in Icedove, Debian's version of
the Mozilla Thunderbird mail client: Multiple memory safety errors may
lead to the execution of arbitrary code or denial of service.

Debian follows the extended support releases (ESR) of Thunderbird. Support
for the 38.x series has ended, so starting with this update we're now
following the 45.x releases.

For Debian 7 "Wheezy", these problems have been fixed in version
45.1.0-1~deb7u1.

We recommend that you upgrade your icedove packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=xNAf
-----END PGP SIGNATURE-----