mozilla-thunderbird 1.0.7-0ubuntu1 source package in Ubuntu

Changelog

mozilla-thunderbird (1.0.7-0ubuntu1) breezy; urgency=low


  * SECURITY UPDATE: Update to 1.0.7 to resolve multiple issues:
    + CAN-2005-2871, MFSA-2005-57 - IDN heap overrun
    + CAN-2005-2701, MFSA-2005-58 - Heap overrun in XBM image processing
    + CAN-2005-2702, MFSA-2005-58 - Crash on "zero-width non-joiner" sequence
    + CAN-2005-2703, MFSA-2005-58 - XMLHttpRequest header spoofing
    + CAN-2005-2704, MFSA-2005-58 - Object spoofing using XBL <implements>
    + CAN-2005-2705, MFSA-2005-58 - JavaScript integer overflow
    + CAN-2005-2706, MFSA-2005-58 - Privilege escalation using about: scheme
    + CAN-2005-2707, MFSA-2005-58 - Chrome window spoofing
  * CAN-2005-2968, MFSA-2005-59 (Command-line shell execution vulnerability)
    was addressed in Debian in 1.0.6-4, and we're preferring their patch
    over upstream's, as it allows us to update with the minimum amount of
    fuss, without re-diffing all our other patches (see Debian bug #329667)
  * Drop 81_security-idn-normalization.dpatch, now included upstream.
  * Compile with -fno-strict-aliasing (as discussed in Ubuntu bug #17276)

 -- Adam Conrad <email address hidden>  Mon, 10 Oct 2005 18:39:53 +1000