[SECURITY] [DSA 866-1] New Mozilla packages fix several vulnerabilities

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [SECURITY] [DSA 866-1] New Mozilla packages fix several vulnerabilities
From: joey@xxxxxxxxxxxx (Martin Schulze)
Date: Thu, 20 Oct 2005 07:44:19 +0200 (CEST)
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mail-followup-to: bugtraq@xxxxxxxxxxxxxxxxx
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Old-return-path: <joey@xxxxxxxxxxxx>
Priority: urgent
Reply-to: listadmin@xxxxxxxxxxxxxxxxx
Resent-cc: recipient list not shown: ;
Resent-date: Thu, 20 Oct 2005 00:48:05 -0500 (CDT)
Resent-from: list@xxxxxxxxxxxxxxxxx (Mailing List Manager)
Resent-message-id: <NLDAz.A.2X.V-yVDB@murphy>
User-agent: dsa-launch $Revision: 1.18 $
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 866-1                     security@xxxxxxxxxx
http://www.debian.org/security/                             Martin Schulze
October 20th, 2005                      http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : mozilla
Vulnerability  : several
Problem type   : remote
Debian-specific: no
CVE IDs        : CAN-2005-2871 CAN-2005-2701 CAN-2005-2702 CAN-2005-2703 
                 CAN-2005-2704 CAN-2005-2705 CAN-2005-2706 CAN-2005-2707
                 CAN-2005-2968 
Debian Bug     : 327366 329778

Several security-related problems have been discovered in Mozilla and
derived programs.  The Common Vulnerabilities and Exposures project
identifies the following problems:

CAN-2005-2871

    Tom Ferris discovered a bug in the IDN hostname handling of
    Mozilla that allows remote attackers to cause a denial of service
    and possibly execute arbitrary code via a hostname with dashes.

CAN-2005-2701

    A buffer overflow allows remote attackers to execute arbitrary
    code via an XBM image file that ends in a large number of spaces
    instead of the expected end tag.

CAN-2005-2702

    Mats Palmgren discovered a buffer overflow in the Unicode string
    parser that allowas a specially crafted unicode sequences to
    overflow a buffer and cause arbitrary code to be executed.

CAN-2005-2703

    Remote attackers could spoof HTTP headers of XML HTTP requests
    via XMLHttpRequest and possibly use the client to exploit
    vulnerabilities in servers or proxies.

CAN-2005-2704

    Remote attackers could spoof DOM objects via an XBL control that
    implements an internal XPCOM interface.

CAN-2005-2705

    Georgi Guninski discovered an integer overflow in the JavaScript
    engine that might allow remote attackers to execute arbitrary
    code.

CAN-2005-2706

    Remote attackers could execute Javascript code with chrome
    privileges via an about: page such as about:mozilla.

CAN-2005-2707

    Remote attackers could spawn windows without user interface
    components such as the address and status bar that could be used
    to conduct spoofing or phishing attacks.

CAN-2005-2968

    Peter Zelezny discovered that shell metacharacters are not
    properly escaped when they are passed to a shell script and allow
    the execution of arbitrary commands, e.g. when a malicious URL is
    automatically copied from another program into Mozilla as default
    browser.

For the stable distribution (sarge) these problems have been fixed in
version 1.7.8-1sarge3.

For the unstable distribution (sid) these problems have been fixed in
version 1.7.12-1.

We recommend that you upgrade your mozilla package.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.1 alias sarge
- --------------------------------

  Source archives:

    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3.dsc
      Size/MD5 checksum:     1123 8bcf5da1d244d5793c6848126887cb6e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3.diff.gz
      Size/MD5 checksum:   410904 c6a4dc4aa262b71eb3e2f927ccba5be0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8.orig.tar.gz
      Size/MD5 checksum: 30589520 13c0f0331617748426679e8f2e9f537a

  Alpha architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   168068 0f0d0d688c3ab7cc560f8fd9d6c25d42
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   141750 2ae997e1246b9b1622206b501bea6600
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   184954 4abf2c0225afacf0aa1e1ba3dd800f4b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   851320 2322e9672808b8dbd61ce546c34ae48d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:     1034 ccbb5b52c82a76d6068fb1e566cfc0e8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum: 11473888 416d49672810722e9d6a4744ba720801
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   403252 54b0512cf811dca554b670fdd86d49bc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   158332 27c845b849ff9572f4dc422f49a245bb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:  3356504 309d86cb85b51f705a90305234bdd349
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   122294 9da4fba65b40fb381f7c286845db016c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   204138 daba15cfb57b4e90f82f6d5d9229dadd
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:  1937032 e3e3b5b01ccc599e80802ea5542be2a8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_alpha.deb
      Size/MD5 checksum:   212304 34a959e6684c4d2420ec8b171431337f

  AMD64 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   168070 468e694be0ebaa5ce4e16ea0c4406189
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   140860 ee10c3ff4a930822c9429adc52bc45ec
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   184958 fd569d871b83791830e2a34bb6d7057d
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   709690 daa6df6f1136911cebd67b65e5ae0d8c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:     1034 7506e80353b173f5937fa81b5226c46f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum: 10945966 04cc79158e4dbd34d4914c74b77bf171
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   403278 ac4204e9a030cedbcc2d70f9cf29ec74
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   158332 a948ab9d30f0f70ed531df741bbef633
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:  3350620 ed6b86963e5633e930efa04cbf49c23a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   121188 461d803a26259e607a8ae88227bb8f9b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   204146 57847a442a198b0292cb7342aa601f6a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:  1935958 ecf18b188b80e21b5d453a5f10c98eec
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_amd64.deb
      Size/MD5 checksum:   204120 adedcdc7ce580e37aa1691e1f0017465

  ARM architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   168072 1680de3cf45d25f199169df90198d91b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   119254 ed0841a82dcbff6f50eaf86884123139
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   184958 760e7eca4f231c8b710679223a1509f4
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   626902 b827e60ee8ef0451819d2b35d94e0cde
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:     1034 4067826ca023d09accef5e01cdcf8927
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:  9199650 6c0531d03c913bdd833244c09c69a755
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   403318 8528b835eb767963139990e95ac22479
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   158370 63bf5489d67b03f59914660f5e3fbc19
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:  3340150 7677f622511082306114f5975a1fdfd5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   112664 6a63c4b71535b14a2951b496bb1737ee
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   204180 a721d46a7ae817223a25a917d7b75b59
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:  1604374 b8c9560bc78a2b11dfa47b909a134915
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_arm.deb
      Size/MD5 checksum:   168724 68e4814d6b8a48ae504c0348e8ba5339

  Intel IA-32 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   170348 3a338ed93f9999e56e8de24750380951
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   131660 371c4a5c674351727d2dafe5981ed459
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   187124 8d536c4dc957e4448d1ca923ff7504e1
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   656500 9a48b94605f82038226bdfae108437ad
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:     1032 e00305ced1db4728dc26cbde13f0c875
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum: 10323428 d781aa4f05704110d987cd24ff60787b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   403498 d0b31286d891952b68f8f96244264933
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   158350 cac6b890d307df1f55f64c5ffa6aa0ec
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:  3591928 60af02162969c248eea0960220b8c494
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   116678 1aac8406b1c144c534bcb59cbf2915e5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   204160 b5b7c32fba5f1e20f7e9180888a36c86
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:  1816024 4a576d88be7edd2557b00e0f27b475ca
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_i386.deb
      Size/MD5 checksum:   192474 4a5c07772c5ae39ae8567f50ddd87510

  Intel IA-64 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   168074 34194b2472f75c435e4888d035751c7e
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   169256 69f323c191a107e6d13131457bcb4201
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   184942 1c81683df7075e3ff638943fd66da558
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   961618 d70bed86c7064819420484ef09f747fa
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:     1034 8942e83eb30f9c784fda07e000ffd2cb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum: 12935870 d31336ee6f759a56f0c5a031be5db2a0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   403266 af925e5281bb125f9b9dcb8118ede048
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   158328 0c6de22bd54959f4ef12a7ee148d0a1c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:  3376324 f1d100626a6b892fbe560613db00d4e1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   125600 99bf7b1eac7fd3b9325292c6bb01983c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   204150 7b429e1c119fb0c6f99b73202dd47340
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:  2302138 90d4d4480fddd4b33843d5ede6c6432b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_ia64.deb
      Size/MD5 checksum:   242290 19ef32ec7a3d8112bd262a972abc3244

  HP Precision architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   168074 857d31e6f4765f484dcf2188dcc98179
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   151784 93fad6b80c013029fcb2a05d1a894f62
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   184934 a68dbc505fc8c4816adb46a5a3c82c67
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   749684 997993f03e0ff8d8feae6ea7a0ee4dff
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:     1036 ad7167f505365eed5c800f3a6d824a16
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum: 12151356 c3088480f9d891e0668475c630871fa1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   403266 4b3a2d2248051b60f2c8193fff5e0027
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   158348 52d42654912ce2b829e74f4cae61e5f3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:  3357118 030f4677e561c75940a23fc17c53186b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   123528 575de4da90909f637a8209a8b5206a75
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   204160 52cb13a773c8cf6720444832773b2a6d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:  2135076 95b9731fc144da69aa8a565129285867
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_hppa.deb
      Size/MD5 checksum:   216088 0b580da8010bc446450437c4bef6a852

  Motorola 680x0 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   168086 5baab34b027715db138a553fa6186ca2
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   120922 30aefe61290eea8ecd5d3bb394393cc3
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   184978 d28e4c157e0f7f8d7e6365871325472d
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   594988 d0fbe7576e14d79a8a26a6aca6febe54
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:     1040 df7a707868c3782e3e185f51398652ec
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:  9694422 d35904c88782014105ad627782a4d647
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   403392 e9baf3831aabc80453fc932a21705f55
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   158404 64d9cacaee7eddbbebcba896d91a3fb8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:  3336022 410c6771807a58f84fbc68f4efe5d8c0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   114488 ce1439ec5417be6c5331a4d36b2d0ad3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   204204 b0586fecf23027fbb2da77ab2a087374
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:  1683046 202452b798d007b686cfc73b4828e6e4
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_m68k.deb
      Size/MD5 checksum:   174656 0576d4e28cff50f35b3b792820a891ee

  Big endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   168074 6e600772f1ae9937fad3a85e2d2a819b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   135780 da21f8ecfc98011cab3878329edf0e90
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   184964 eb695db44835f788ffd161d9a09bc07e
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   720760 df7ed9e05f5feb97ad5b5aed6a8c1cb9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:     1030 9e7a23c2f26c00651603614bfffcadf7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum: 10717192 7532d54da0609102c98779fcb91342ab
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   403276 b7e6d63030f2507aa6a0edf202a5fcf5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   158342 c0e3c0a92974c016ebe747abe219025a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:  3356424 475fa0b07bf51ff03deae78dbe03e49a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   117650 0c5e2d08ec8f6994fd25249412905810
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   204154 6dc1f043fd9711ef85e746fa68343466
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:  1795494 2902bb4f3409ca9bf1bf5db9f156f4f5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_mips.deb
      Size/MD5 checksum:   189686 03ba2c9ff569a7fd9c5662593a79a203

  Little endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   168078 dc38711d28268f3612fb63aab9e81e48
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   135722 82e9e23f175607d8df77972ebf1ff567
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   184960 56362daf4f5ece4a42f70d4d679b8920
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   710146 6ff64a6b95ae5a9769f1137b515bb718
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:     1036 0c163e3c37edcce0f892385bba98ae68
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum: 10595798 8c436a58b72d41a17be8b5bd1ba937d0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   403298 74b98bdc891109b89396b728c3a350d6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   158360 0abb0b8f6b9a66598faedc36a4c6aeef
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:  3357168 6c6ade8883db324618c8eb087204b848
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   117230 2a3525c7ae141f632ea91d7f9c53d867
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   204168 8f9b446f41a6ed4377aeabadbb5f727a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:  1777632 a89dff300509a955328983a11fa9715f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_mipsel.deb
      Size/MD5 checksum:   187280 4e690552ec6beb0984781e3d02d6ae0b

  PowerPC architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   168070 2910309767f54c3d9179e41d6609071c
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   126254 b48a81baa031c2f66a41138694092bde
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   184970 885947f4a6c993fe56b9d7ca7a4d0a49
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   713902 a3f5f45ebfcb4572eee055f34ddc6d3c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:     1032 a79846dc6dee5341341dfc0efb839da5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:  9692218 c4c97459a3358dd97f2bb13adb6617b1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   403262 327617a0606e4403989f357bc5816f00
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   158338 7223c837a306972a49005963272827d0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:  3338984 438eeba7c05594e72b934aa3ff0d6b00
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   114572 3dc6efa3ec953457adef9e86e2218252
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   204148 cdb236b98cdd04ea38c4cfeae882dddd
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:  1642994 83c2648f40675e1166c38642e5c018fc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_powerpc.deb
      Size/MD5 checksum:   175488 f91f3374e33d102f2e80f47845bbd37a

  IBM S/390 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   168076 9b7c95dae196bca9760da3044314101c
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   151560 2d8299d552d5aefb1909635cd6855178
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   184944 026e95bb0540d3adefc663ef05c30d26
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   793916 4af6b6eff683ecea1c0774e87a9824a4
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:     1036 5deff17e56c5bbb63c62abde258dec81
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum: 11316324 577ebed78cd6b3967932766a559b8138
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   403278 497e377c89b6efcff42109fe8056bf2f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   158342 3add2de4c148f0a9b10c8d2a1332a152
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:  3351434 4e3097be4aea2a697126b9a65c459b31
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   121362 cd9ba2c09ca95d7a642d0d786211998e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   204160 1171d20b501f7753313fdaf23a41c024
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:  1944682 2049277c30f63f1d615cc627eb2cec4f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_s390.deb
      Size/MD5 checksum:   213338 5a916db53bef94506e6b0d6f1df9376f

  Sun Sparc architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   168074 53076a1fba2d330bd5571cb4fea4fa95
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   123456 818e82c6902a8eb7ff83e5e9ee49d638
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   184950 9ed1a72a7ad2f7822c45b640fc12db2d
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   667752 f51a3e38c77d915b56fc4dc858542df0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:     1038 2c6c69ca282a5b3795400a4a6be97dab
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:  9363540 21cd6ebf954090ec18d4440ca3b42ea3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   403306 b2c9c63ba99a77f2c201a131982913d7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   158338 5e7b31b5566dfcb672fc77304e397bc2
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:  3339922 e85b9b0a8bb22ba133603e5079176c24
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   112514 5e9c038d6af9878049b337fc7752acca
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   204154 2c38ffa9843ed399eeb91c497c512db9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:  1583742 ea09d4a4dbf10fb80f35e6ff6da8c690
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge3_sparc.deb
      Size/MD5 checksum:   167912 7c07aaca4dcc3a97589237a0b7ffa650


  These files will probably be moved into the stable distribution on
  its next update.

- 
---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security 
dists/stable/updates/main
Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDVy6yW5ql+IAeqTIRAhJ2AKCzDWZWymjU0a+MQ/YP2Ot0Z/KLLQCeMLhf
jDP9xzoCAxmIUQsVvfX8CNE=
=ioS5
-----END PGP SIGNATURE-----
Prev by Date: Oracle 10g - emagent.exe Stack-Based Overflow
Next by Date: Oracle Workflow CSS Vulnerability wf_monitor
Previous by thread: Oracle 10g - emagent.exe Stack-Based Overflow
Next by thread: Oracle Workflow CSS Vulnerability wf_monitor
Index(es):
- Date
- Thread