mozilla-thunderbird 1.5.0.5-0ubuntu0.6.06 source package in Ubuntu

Changelog

mozilla-thunderbird (1.5.0.5-0ubuntu0.6.06) dapper-security; urgency=low

  * New upstream security update:
    - MFSA 2006-46, CVE-2006-3113: Memory corruption with simultaneous
      events [does not affect 1.0]
    - MFSA 2006-47, CVE-2006-3802: Native DOM methods can be hijacked
      across domains [does not affect 1.0]
    - MFSA 2006-48, CVE-2006-3803: JavaScript new Function race
      condition [does not affect 1.0]
    - MFSA 2006-49, CVE-2006-3804: Heap buffer overwrite on malformed
      VCard
    - MFSA 2006-50, CVE-2006-3805, CVE-2006-3806: JavaScript engine
      vulnerabilities
    - MFSA 2006-51, CVE-2006-3807: Privilege escalation using
      named-functions and redefined "new Object()"
    - MFSA 2006-53, CVE-2006-3809: UniversalBrowserRead privilege
      escalation
    - MFSA 2006-54, CVE-2006-3810: XSS with XPCNativeWrapper
      (window).Function(...) [does not affect 1.0]
    - MFSA 2006-55, CVE-2006-3811: Crashes with evidence of memory
      corruption (rv:1.8.0.5)
    - MFSA 2006-56, CVE-2006-3812: chrome: scheme loading remote
      content
  * debian/patches/10_pangoxft_linkage.dpatch: Adapted to new upstream
    version.

 -- Martin Pitt <email address hidden>   Fri, 28 Jul 2006 12:41:29 +0000