[SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
From: joey@xxxxxxxxxxxx (Martin Schulze)
Date: Wed, 17 Aug 2005 11:27:19 +0200 (CEST)
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mail-followup-to: bugtraq@xxxxxxxxxxxxxxxxx
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Old-return-path: <joey@xxxxxxxxxxxx>
Priority: urgent
Reply-to: listadmin@xxxxxxxxxxxxxxxxx
Resent-cc: recipient list not shown: ;
Resent-date: Wed, 17 Aug 2005 04:27:46 -0500 (CDT)
Resent-from: list@xxxxxxxxxxxxxxxxx (Mailing List Manager)
Resent-message-id: <u6VE8C.A.-p.SMwADB@murphy>
User-agent: dsa-launch $Revision: 1.18 $
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 777-1                     security@xxxxxxxxxx
http://www.debian.org/security/                             Martin Schulze
August 17th, 2005                       http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : mozilla
Vulnerability  : frame injection spoofing
Problem-Type   : remote
Debian-specific: no
CVE ID         : CAN-2004-0718 CAN-2005-1937
BugTraq ID     : 14242

A vulnerability has been discovered in Mozilla and Mozilla Firefox
that allows remote attackers to inject arbitrary Javascript from one
page into the frameset of another site.  Thunderbird is not affected
by this and Galeon will be automatically fixed as it uses Mozilla
components.

For the stable distribution (sarge) this problem has been fixed in
version 1.7.8-1sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 1.7.10-1.

We recommend that you upgrade your Mozilla package.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.1 alias sarge
- --------------------------------

  Source archives:

    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1.dsc
      Size/MD5 checksum:     1123 7ab0311756a0de3407f84b923b053533
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1.diff.gz
      Size/MD5 checksum:   307355 2012677529e86d28c0e5a24294903ad3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8.orig.tar.gz
      Size/MD5 checksum: 30589520 13c0f0331617748426679e8f2e9f537a

  Alpha architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   168066 fe5db18b73d89c677c4b4a3635793b83
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   140542 9a988dc0e6fc3901bf16cff43bd55d13
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   184952 3495f9cbbb3f6f7fd9198b98fc1c25f2
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   850120 58e878f30f82b120f332c22f974c9330
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:     1032 b32e47e0f786e4ee3896b76a53499a42
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum: 11462324 c1b82022b4eaa7d133e6cbe86868e57f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   403296 421577f02c3b6b88615f4339bd18d0c3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   158346 059e84b66aa680681923deed7ba66b7e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:  3355028 dc43b577acdc4c40c089567b53e1cd0e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   122306 6d4aba83fd04bc34a36dd13a6dcd04fb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   204150 e2db0c815caeb3c9fef57cb1a4812591
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:  1936702 f24ebcb7ecbdf953992ad297903bff51
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_alpha.deb
      Size/MD5 checksum:   212302 d78b38041bc90a6ca78c1f8e57e3e3b3

  AMD64 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   168056 01fe31ac723a4a82c3c5d7c8f32df92c
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   139664 a2a501b2435eea376234a9530125f56e
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   184944 664061d174dde41a9a640cddf67ca506
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   708484 2d5e7ecc4753425b70863b9e046c6000
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:     1030 ffceb9ef440f5ae3477db3f7084db101
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum: 10937902 cf64fa09458651e25086046db6673e62
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   403284 41319f34441400e2c520bcbdeda64cc2
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   158338 40ed63c199d675695f008ef754432935
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:  3345598 99b00e6c50d91a2dae53a44d50faff60
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   121176 de6eb44c40cfc9bc183827d199381a96
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   204152 be4c266252b3377f94b2f198f880d457
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:  1935806 5f32496d2cfadfbc1b9c2e6c02fd6c73
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_amd64.deb
      Size/MD5 checksum:   204116 98cdcfed83d173f8197c0d23d298be99

  ARM architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   168072 6f5a448752b8e6ba6325a8ff2a2df67c
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   118050 9bb76ef7f7770fe15a8bfc3ea897deea
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   184954 2e46576a7d6d998551325d8eb2f0c74d
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   625708 12f00280e96540ff0abe74c105546cd4
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:     1034 fa3c6e72a47795e1ef413bdd38826d33
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:  9194340 61b44bd9352c9e2bc38ee840220df3e1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   403308 da3d8b0e79299e44654d7a1a08e961bc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   158338 11d61ce4adfec687b96ec6fee88776d3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:  3338606 cb07fb3f9ace01d8da22ded6cd86ff2e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   112664 e0d808afb09214b47493e4a0cab432c1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   204150 90d5b95d8ec5f3818e99f5fc7cfa16f6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:  1604236 4b9b9e5e9bedd501bfee53963681fb07
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_arm.deb
      Size/MD5 checksum:   168716 1b0ff67888379dc8a87b8983af97b0d3

  Intel IA-32 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   168074 da8497a0b770f1c41d4195fc6356b461
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   130372 98fd23761563d3942df4473c3243d978
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   184956 d0b65b504cf226c8cb1578ce6bea7422
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   654240 9d25a31d785f3785f1444bb6df5c97ae
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:     1030 c11512ac6c0aa2d70acf5c563a829554
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum: 10287026 ffdc113a91821c82b1d6ef7c6c920bef
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   403286 4b059c14da633f42716aba12bd9a0cca
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   158342 3aa7215f4cb1261589ab13304f44c117
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:  3344356 e7a20515ccc6db34c74f3e7f51f8fffb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   116216 630b0ecb082b2d33a27019f87f4bfadf
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   204162 41ba78c68277097f602c5195e04ec2a9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:  1811096 f061f50b17ea899da27c1fba26430a47
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_i386.deb
      Size/MD5 checksum:   192308 908067740b8466440ed33e8910a99db2

  Intel IA-64 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   168048 74baf8eb1a9cfa0584deeaa742435903
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   168052 27e30141c62b2e7f9aa2976d25883fde
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   184918 f2d4b2a556c70df07761df3fc9e20495
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   960434 0172fe253a8741fdf77c4d5c6110f3fb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:     1030 e7df4da73c1fbb7bbb5ff453e3ed4250
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum: 12927484 7391b9e306b8f8fcb2d909274dc1e802
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   403272 e2b4f122371aef71fdae48f8da45b2fa
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   158328 48fcceb9b1cb0767ad0fe789e4fa543f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:  3374932 85908c1696361658be81ac9af571e0ae
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   125578 26db6256c5e0328ff1341b5121d13fb7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   204148 0b867cbb015c00b21f6ed49e3c00767c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:  2302092 3ec77e8430276623f3f4235362f4e8f3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_ia64.deb
      Size/MD5 checksum:   242272 9e76da79c6dc43fa6f6fb9d617dbe962

  HP Precision architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   168072 1cd103a31607398fa9810da5aea71aa3
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   150580 261e527cdf20991dcd5bc0fcf344e805
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   184968 d9c926b9eb0ce435c6ad3d16336e0e81
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   748456 d4e0e10f05b1717555708a47f7223d8a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:     1038 5ffc79a546a5b9ad82a3fa97252af202
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum: 12137588 9d4f5ce191df1141247b586438c293a1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   403300 19068a8ae5292c9d312e804e4d21aa97
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   158350 d1bd336593b2d9d5f261868161be54ed
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:  3355510 6b687cb5de1639f24cd0f458becbd973
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   123520 60af4d62e1d671183b272180c73cc8f4
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   204172 2be0db85e67fa831e58f7b5069e97580
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:  2135028 8d104012d6012b8c7b464df7e37be436
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_hppa.deb
      Size/MD5 checksum:   216076 2237121338e9463c79487783b0742550

  Motorola 680x0 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   168096 b6d7a71599cd138c4f8b652edc5b77f5
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   119734 5daa5117559e40125335769f9b77d781
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   184990 3178f1e171276b061f52de177220a17b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   593776 fab971e41776faf370b7f5502725889d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:     1042 03ecf1aacdce8b191f5cc9ab61c167d3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:  9688202 05b50d66d93d38f19b4cf4c1fb9471b6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   403384 983c115d6e86953c69b4491189a4dc71
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   158408 ca47244e7172265550d11057c6583180
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:  3334376 ca591499853bc4a6aac38af2e06bdcf6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   114506 eb17bf839c6cf15ca17e648fd0ae4aac
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   204244 99abf2db86319a701c290465c03eada8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:  1683068 caf8165b4af9eda6f06eed0e1e5238ed
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_m68k.deb
      Size/MD5 checksum:   174664 448d057f3ea9a4e9487194cf2629c458

  Big endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   168076 f7729a4215e50a8f50fe7cf93a6a66e1
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   134522 fe661f9bf78605047b45792fa9f1fee6
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   184966 37704d27018222a9942b68910142d96a
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   719572 3acfad01b9072fd8d168f75f08c30c00
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:     1038 87ece36f816acb1a2feb5fa444e85c72
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum: 10709602 5f47457619a6ddc192ecba7685cbb6b0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   403310 2127f4aefb131de0ae8187926ad04cc0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   158356 46f5806667782b338b289b3a0e647e50
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:  3354910 f34a776a4bb1603dda691a95552373c0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   117648 f86273f726c99701aeb74ded63e02d91
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   204190 497eb918f11ccbe9594860c24d049ef4
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:  1795442 6f76a2a57d4b776ce476a926af212144
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_mips.deb
      Size/MD5 checksum:   189698 c4c33fa5be39a071da8a22253d7d8a2b

  Little endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   168072 62b5021be4a2e817fd42f46ac4e02d35
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   134470 48f5936b5ed61a62074f845c4e4a9cf3
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   184956 9f2781aa77e45c66d5434e26c835f323
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   708974 7f86eb1313701fc9c4a9a2979bd8bbbd
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:     1038 5808a4427ee7f6d3867423c56d97fe85
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum: 10588162 8e0c2ca16c7ddcd4aa01f990c70e8be0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   403290 abdbfea11bdf5081d8642227c9f8525b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   158338 20bc1bf6b3d8683389d908414c68e5fe
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:  3355498 42dfc73ec31618b3d5ec9aa6cf79e23b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   117200 f9da71080daffca5e262707ae0966408
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   204158 0a98168eeb8905144787ff501075c758
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:  1777510 604445ed5644ca786132b47811ade183
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_mipsel.deb
      Size/MD5 checksum:   187284 c87359e6613f4cf36b141d6d480e8dfb

  PowerPC architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   168072 961c3fe8ab2994b5f6e0eb8972a83465
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   125072 80e453c80c1c9dcb0e391ae6526ffce7
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   184962 a12c81b696a0acbbe3bfeb87b47a9944
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   712714 30699c25f8e63ed3b9143694ce05e3e5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:     1038 7b706a704c8ea502c3225434d804dc6b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:  9683088 5094032aa6f3d64db4f39decdafb56d9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   403310 c23889a4ad8098b4322c6dec6265a307
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   158364 007c2ad171f74862d6fb453dd6ac2a59
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:  3337100 382f06390acf9bfc9eeba496a9ad4ade
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   114600 033ee754e3e175a202c607c35bf29bde
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   204172 61675534cef26849cb54342dbf7d8970
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:  1642932 0306ae5ce3709dbaba40d18c2e40f6e3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_powerpc.deb
      Size/MD5 checksum:   175502 90778a628ed97d4cbc7c5400787eae18

  IBM S/390 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   168076 d2afc2a24593ff088c0b585e0201c03f
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   150370 5dc6e70c792a5646ba227af074fb57a0
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   184942 368f48efcbce533415ee83db8e3d2b89
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   792708 84972f8e21b0e08f0452d393d7eda49a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:     1034 7540473b684567cfe839051f8182218e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum: 11309168 bac4aeea83a9b9233d4ff41c569fc7d7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   403286 3c4eb8807c45f90d682f7781624bff0d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   158354 d658aa731fc85d28a6bee04ad8ec68a9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:  3349814 85275a8e4c217bf147324b3b4821a065
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   121354 ad4613cfb421ef11910da1e567ed8673
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   204158 afc733c58d35fa71c6fd1d3127e7b3da
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:  1944642 d5bc11e62553f1b4adb3b9bb344f354e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_s390.deb
      Size/MD5 checksum:   213340 98c7a540b74238471ad54e2c49508b54

  Sun Sparc architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   168076 6428ec559f02195ff50f699d712d7d18
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   122230 9d47e07ab455ae0f1cf910174a10befc
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   184942 913e521909494e81255818d68f37a5a1
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   666542 bf2b1a10ee1289f2357a2e5ed381c2db
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:     1034 7d9cf470bceff30a2d5dd50dd5ebf27a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:  9356026 c4b85a65fff0b19534860b270ee8b48c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   403296 cc6c7adb31b6b7e9e4535e1c637b6983
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   158356 8b067ab9cf3a5092d61f2c2677e855cc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:  3338322 425efb21651816eec8e850e7823839fe
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   112524 075ae0b2561d1f29a6c4136419037394
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   204182 ec4696e83df611458ac53a3e2ece0d37
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:  1583722 8761e0ad9c6d41e694f019b52e0c939a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge1_sparc.deb
      Size/MD5 checksum:   167906 cf862aa0ba44bbd443977d3345ce41ed


  These files will probably be moved into the stable distribution on
  its next update.

- 
---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security 
dists/stable/updates/main
Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDAwL2W5ql+IAeqTIRAtZKAJ9VxSoqmPKt7ZnYVldde9vhnBixEQCfSsHE
97k2wh304Jl5MLxhAXXZeF8=
=cWUO
-----END PGP SIGNATURE-----
Follow-Ups:
- Re: [SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
  - From: Douglas Duckworth
Prev by Date: SQL injection in mediabox404 v1.2
Next by Date: PHPTB Topic Board <= 20: Multiple PHP injection vulnerabilities
Previous by thread: SQL injection in mediabox404 v1.2
Next by thread: Re: [SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
Index(es):
- Date
- Thread