[SECURITY] [DSA 2584-1] iceape security update

2012-12-0814:05:02

lists.debian.org

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.4 High

AI Score

Confidence

High

0.034 Low

EPSS

Percentile

91.5%

JSON

Debian Security Advisory DSA-2584-1 [email protected]
http://www.debian.org/security/ Yves-Alexis Perez
December 08, 2012 http://www.debian.org/security/faq

Package : iceape
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-4201 CVE-2012-4207 CVE-2012-4216 CVE-2012-5829
CVE-2012-5842
Debian Bug :

For the stable distribution (squeeze), these problems have been fixed in
version 2.0.11-17.

For the testing distribution (wheezy), these problems have been fixed in
version 2.7.11-1.

For the unstable distribution (sid), these problems have been fixed in
version 2.7.11-1.

We recommend that you upgrade your iceape packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6armelxulrunner-1.9.1-dbg< 1.9.1.16-20xulrunner-1.9.1-dbg_1.9.1.16-20_armel.deb
Debian6amd64iceweasel< 3.5.16-20iceweasel_3.5.16-20_amd64.deb
Debian6s390iceweasel-dbg< 3.5.16-20iceweasel-dbg_3.5.16-20_s390.deb
Debian6s390libmozjs2d-dbg< 1.9.1.16-20libmozjs2d-dbg_1.9.1.16-20_s390.deb
Debian6kfreebsd-i386libmozjs-dev< 1.9.1.16-20libmozjs-dev_1.9.1.16-20_kfreebsd-i386.deb
Debian6armellibmozjs2d< 1.9.1.16-20libmozjs2d_1.9.1.16-20_armel.deb
Debian6mipseliceape-mailnews< 2.0.11-17iceape-mailnews_2.0.11-17_mipsel.deb
Debian6kfreebsd-i386iceweasel-dbg< 3.5.16-20iceweasel-dbg_3.5.16-20_kfreebsd-i386.deb
Debian6amd64icedove-dev< 3.0.11-1+squeeze15icedove-dev_3.0.11-1+squeeze15_amd64.deb
Debian6kfreebsd-i386iceape-mailnews< 2.0.11-17iceape-mailnews_2.0.11-17_kfreebsd-i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	armel	xulrunner-1.9.1-dbg	< 1.9.1.16-20	xulrunner-1.9.1-dbg_1.9.1.16-20_armel.deb
Debian	6	amd64	iceweasel	< 3.5.16-20	iceweasel_3.5.16-20_amd64.deb
Debian	6	s390	iceweasel-dbg	< 3.5.16-20	iceweasel-dbg_3.5.16-20_s390.deb
Debian	6	s390	libmozjs2d-dbg	< 1.9.1.16-20	libmozjs2d-dbg_1.9.1.16-20_s390.deb
Debian	6	kfreebsd-i386	libmozjs-dev	< 1.9.1.16-20	libmozjs-dev_1.9.1.16-20_kfreebsd-i386.deb
Debian	6	armel	libmozjs2d	< 1.9.1.16-20	libmozjs2d_1.9.1.16-20_armel.deb
Debian	6	mipsel	iceape-mailnews	< 2.0.11-17	iceape-mailnews_2.0.11-17_mipsel.deb
Debian	6	kfreebsd-i386	iceweasel-dbg	< 3.5.16-20	iceweasel-dbg_3.5.16-20_kfreebsd-i386.deb
Debian	6	amd64	icedove-dev	< 3.0.11-1+squeeze15	icedove-dev_3.0.11-1+squeeze15_amd64.deb
Debian	6	kfreebsd-i386	iceape-mailnews	< 2.0.11-17	iceape-mailnews_2.0.11-17_kfreebsd-i386.deb