[SECURITY] [DSA 1160-2] New Mozilla packages fix several vulnerabilities

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [SECURITY] [DSA 1160-2] New Mozilla packages fix several vulnerabilities
From: joey@xxxxxxxxxxxx (Martin Schulze)
Date: Fri, 15 Sep 2006 06:42:07 +0200 (CEST)
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mail-followup-to: bugtraq@xxxxxxxxxxxxxxxxx
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Old-return-path: <joey@xxxxxxxxxxxx>
Priority: urgent
Reply-to: listadmin@xxxxxxxxxxxxxxxxx
Resent-cc: recipient list not shown: ;
Resent-date: Thu, 14 Sep 2006 23:47:35 -0500 (CDT)
Resent-from: list@xxxxxxxxxxxxxxxxx (Mailing List Manager)
Resent-message-id: <Wumst.A.O-F.nBjCFB@murphy>
User-agent: dsa-launch $Revision: 1.18 $
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1160-2                    security@xxxxxxxxxx
http://www.debian.org/security/                             Martin Schulze
September 15th, 2006                    http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : mozilla
Vulnerability  : several
Problem type   : remote
Debian-specific: no
CVE IDs        : CVE-2006-2779 CVE-2006-3805 CVE-2006-3806 CVE-2006-3807
                 CVE-2006-3808 CVE-2006-3809 CVE-2006-3810
CERT advisories: VU#466673 VU#655892 VU#687396 VU#876420 VU#911004
BugTraq IDs    : 18228 19181

The latest security updates of Mozilla introduced a regression that
led to a disfunctional attachment panel which warrants a correction to
fix this issue.  For reference please find below the original advisory
text:

  Several security related problems have been discovered in Mozilla and
  derived products.  The Common Vulnerabilities and Exposures project
  identifies the following vulnerabilities:

  CVE-2006-2779

      Mozilla team members discovered several crashes during testing of
      the browser engine showing evidence of memory corruption which may
      also lead to the execution of arbitrary code.  The last bit of
      this problem will be corrected with the next update.  You can
      prevent any trouble by disabling Javascript.  [MFSA-2006-32]

  CVE-2006-3805

      The Javascript engine might allow remote attackers to execute
      arbitrary code.  [MFSA-2006-50]

  CVE-2006-3806

      Multiple integer overflows in the Javascript engine might allow
      remote attackers to execute arbitrary code.  [MFSA-2006-50]

  CVE-2006-3807

      Specially crafted Javascript allows remote attackers to execute
      arbitrary code.  [MFSA-2006-51]

  CVE-2006-3808

      Remote AutoConfig (PAC) servers could execute code with elevated
      privileges via a specially crafted PAC script.  [MFSA-2006-52]

  CVE-2006-3809

      Scripts with the UniversalBrowserRead privilege could gain
      UniversalXPConnect privileges and possibly execute code or obtain
      sensitive data.  [MFSA-2006-53]

  CVE-2006-3810

      A cross-site scripting vulnerability allows remote attackers to
      inject arbitrary web script or HTML.  [MFSA-2006-54]

For the stable distribution (sarge) these problems have been fixed in
version 1.7.8-1sarge7.2.2.

For the unstable distribution (sid) these problems won't be fixed
since its end of lifetime has been reached and the package will soon
be removed.

We recommend that you upgrade your mozilla package.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given at the end of this advisory:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.1 alias sarge
- --------------------------------

  Source archives:

    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2.dsc
      Size/MD5 checksum:     1131 bb39933b4dcb63f6f986f0da3ab9461e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2.diff.gz
      Size/MD5 checksum:   532293 5a86930497b980b25e7f8e5cd6305ad0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8.orig.tar.gz
      Size/MD5 checksum: 30589520 13c0f0331617748426679e8f2e9f537a

  Alpha architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   168074 553ba25202552c16c02cfdcf94bbc1c4
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   147582 e953bc1da64aaab9b50ef2bd357279b8
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   184944 18bfed4502c3e8a50cac55bd69cf6f20
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   857148 c9f560d4ad706a1e50dbd2db21978427
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:     1042 9de55ee42dcc1c484a801623ac29c80d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum: 11484766 4b31f8553a2ee93057858b35cdc522d9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   403274 da75d1e0207b660ae42d7d1eb0b99617
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   158338 264975902923a3c4b04f3fb2758cf61e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:  3358874 5728dcb6abe8f43915d0b62cdae5fb78
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   122312 c96ac910fe008c2582d5b33a4abdfdb0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   204152 e262ee393ee0114d19c646520b95a0e8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:  1937184 b87b131e3f4da4757b725ebb77a624aa
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_alpha.deb
      Size/MD5 checksum:   212582 e1bb8eb0ea7013d825f1c6368931b9d1

  AMD64 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   168072 0d98ed91660e7fc8d1f4a31ead03b9bf
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   146678 7a8e7068a414213850e54253ebb0d977
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   184950 f428f4a3ef968df80df014a98d747ce5
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   715510 91bd0fcde1c53b6056ea33860c464d90
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:     1042 47e650f92cdafea5dc08d93e37bc7d7e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum: 10948878 e537efe2b7e984f51dc1e187d3f34ac7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   403278 831026525cebf77e1195b9a571127911
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   158334 a1ff9fbaf23292c6d593fe5bed360ecb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:  3352852 d9704f4582d97890a546801df3716782
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   121206 e4687f0678206bc7546786c517771feb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   204158 89914bc3978d7502003529976e381ba8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:  1936056 4bbeba555dbc0b68c8c2ccd45e42d948
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_amd64.deb
      Size/MD5 checksum:   204432 d9975a7eafd40678112faad81185018f

  ARM architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   168068 fce9bf7f31bfdfbfe100965648b5fbe1
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   125028 a4bbf5fcb376c008a20a113823b4f528
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   184964 0d46a1f48a783fc781029e9d2b810c9c
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   632708 0d9a60c457fcb65d0100f8e26b79d2ca
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:     1038 da7c79e8962cf7d1c834ebf429d380e8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:  9219442 dd73deb6db71af0cdfdf86885d53465d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   403316 c39b47abf0d634e40e42fcbee2ffa1db
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   158380 abe3b5a07b4ff166d7ef3f2c018d8fcf
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:  3342318 b60668be41da0a39844b18d02aa63741
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   112658 231332c5934adafb236d8fde7be70cfb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   204176 d71b44edfe88785428619a51908b5d3b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:  1604478 075ca3db4526f490a3b6a57d52ce4dc7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_arm.deb
      Size/MD5 checksum:   169016 0a74bc4e92be3879da2da8d126868299

  HP Precision architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   168068 79ff86fa3907e2a53a5dadd5d315b56a
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   157604 12b6abdb4a0d7706c67e6418b4e73f9b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   184962 9364b64efcd74f2a34dabc783c0ce986
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   755438 de9b01a201480a90831d1fbc1fac5c6c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:     1042 2d88d33a47e5a9372d503705b3ace0c9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum: 12167958 1195ed2e4e13a95a04283d04267a48ce
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   403276 53a622d0957c63ef52029b7ea514c4d8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   158348 9dfaf9108f6b53ef2590ed9926922499
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:  3359196 2d74deb88c6808c27b5f820ba723bb6b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   123516 3e4d3c99cb18c8dc619784d9710cb2f6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   204158 742a5f3e3607163909b019fc8199c5b3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:  2135242 ef8c1529ad34a6597fd7881ec97036f5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_hppa.deb
      Size/MD5 checksum:   216392 b91e9dc35b71766e3c2d866f3597b170

  Intel IA-32 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   170352 40703cb53ee5b7294dc107887569c08b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   137502 f85890195ea91c20d4b8c4992133c9c5
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   187146 35b47880629e7947d510ac659b1dd3d0
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   662276 52c7a3db98c5a97f260bc32d275b2919
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:     1038 96c3fdcc00a3815780d1c852f97a3306
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum: 10346404 0375cc857561973bce9465d44e5c5cd9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   403518 bd1d71b85dc5804a8aa10d2f7b72a932
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   158372 7629bf899b61e3f6e0ce0443eb8afbdb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:  3594582 4e1d44adf416fef07f8f8e3ac8251ea8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   116674 8dc261639f60ae8c63c9fc4dfc172888
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   204172 23721786d112c62e2ab6d79cfe982cd6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:  1816144 8b73736956fd00eab47d3da1b69d52dc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_i386.deb
      Size/MD5 checksum:   192752 2750113b2c0b9a9a17294c82ccb1abb8

  Intel IA-64 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   168068 8a8b01bc327c81ac9a35eec2606f0afc
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   175020 7f421d9a83a3645a3e6defcea674eee7
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   184960 9f48269063f614ad7f2452ea5d684582
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   967452 51e6465184e6368d9cd3a5d2dfbb328a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:     1034 c1407f176821f65d05121b9b9fa2be17
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum: 12961330 9afc30c671d79c2820b38d44550a9334
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   403274 97e3733b9ed636dde9f64607a8fd5b31
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   158334 18eb5b155cba3e74c07bd08d60e26b18
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:  3378646 028b0d4dde4a766b856855e96432d0c1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   125610 2b2b7e71175af23fdb4acb766ecb216d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   204146 a85654f4a1e5d6445af59983689ac5b9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:  2302356 f68c5a97ca84e5a8789c7ea8616feda3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_ia64.deb
      Size/MD5 checksum:   242824 57b969592c8d46f13e42fc45bd2b620f

  Motorola 680x0 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   168084 ebaefee3ded203ba02eb42d440d01140
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   126708 639cc0b13f5a259ca255a214e7448cb6
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   184984 bda1a3fb6f94da0fa93caafd8726c4bb
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   600782 0da67847bd97a0deeca7221ed6daa762
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:     1044 0e3b52647ec4d1cab0df8133c4183bb6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:  9712800 73f41e356d2d7d7e2b2131c33f3fb865
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   403356 5703ad69f20642dff0b73abaf3b291e9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   158386 15f302f71c73e88c2bdf4599f1a990b7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:  3336818 b8570a6a33a5aaaf9165f9bd7870f3d2
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   114446 59dda0bbda07cff9e208e1fad40c5357
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   204192 e0bb7bac75c0e86b972efa750a1170cd
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:  1683150 6595c133e2616136f47c44cf595cfcc3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_m68k.deb
      Size/MD5 checksum:   174924 d1c35762abfe065b9d703960a21a9d99

  Big endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   168076 5947b8928a7d52f2d40cc93a0efe95ed
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   141558 dc10a1a91e526e92d22d4585594c0669
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   184958 a7ff18cd5c7522cb46250f970b792541
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   726538 e5cfada69c95b3ff6374c0dde7b755e8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:     1044 6fe88cb467a02eb83f1b6cc56cb2ba63
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum: 10735426 b229a0c89d52fed9a6ca47da0630f870
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   403270 7dcffe7aa3853fe206eaf3209809ec59
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   158344 04223592accfc2dfd5a32b00f303c8ac
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:  3358718 43bc8b35c0b1d67ea06ddd4649d36fbc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   117626 cd932bedb3c95f08d612eff4b9bec368
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   204164 5689c8ae6a39dfc735af908e216f4505
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:  1795556 cfa51006dde9b3433f25048b0c562166
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_mips.deb
      Size/MD5 checksum:   189938 e7ca25e62753d01a29e668680110fd03

  Little endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   168076 fa13db77745d2c3dc3e7a12fc19ad4cd
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   141502 f6a859a3cd7a1f8e8d704a189a72ba8b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   184968 d90edf8a1c7642b76cfea3068efa55d3
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   715976 7a9aea273c635f0ba708f15b887b16c5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:     1042 4ead757bdb7893ddfb5eef4ca12464e1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum: 10610616 0c0aabe84441b9ef639159bc849121e8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   403286 6f4b7ee71b7f4927daa64166a5934a14
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   158348 325353631a54b489d4cc0ed578459ba9
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:  3359394 f3b7354fe4e390c4ea740e364610d6fd
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   117228 2cc3a94499f9504531c1dfbc42bb2987
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   204160 35a12913bf54c279401c34bcaf02f837
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:  1777626 bc1de5ce86cb2947975e2d15368e6ad5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_mipsel.deb
      Size/MD5 checksum:   187518 d2d60cc4b957fb143d89855d51b89b64

  PowerPC architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   168068 fe49d18e432e28aa0aa4e06ee720bdb6
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   132040 088cf084ba4f12278a498570de88bda2
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   184950 971800ffb5d07ca71b8a665cb4cdd3c1
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   719746 079df4da7ec5cc46052378464f68bb73
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:     1040 dbe93abdb48856ee45c5c1f31dc74d83
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:  9708238 60c1f1d72c777602d3663bd9f6d66d8c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   403288 3d67e5bbca986f3d493f092de173b986
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   158338 210cb429751cc16741a99a5a501252bd
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:  3341180 f0fbd1b7ae8e83a6212f10e210a7afbc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   114582 23b3b328c10d7472f37062d1fb89835a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   204146 8906e4e5938b651da42ecaadf5ede88a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:  1643152 f997b2218228de4a821e1a76ac307a8e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_powerpc.deb
      Size/MD5 checksum:   175706 df8d203557f6c0da764ab163dfd35ba0

  IBM S/390 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   168070 dbbc50f83250fa4e96ce5fa5aa1f1239
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   157342 9ca3b2ba1392a8e0b9ae312770fa422f
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   184942 64f9ec8255365634cf3e985d78b0a918
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   799736 3a649e5c93b057fb5c49e9614b9c4d48
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:     1034 312e876dd1ada606d872ecc3f5dd1c87
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum: 11332196 ba8e90e85c7e47b1f7d2a0e558572bd0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   403286 84d8aa100b642ddf3e11d25d7cf2e3f4
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   158334 eee9734fc27ed2120b19b68f64ed9a47
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:  3353460 94a5f4aeb8e6caf52298ab42ce51925b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   121356 039e4621cc5f1f396f04cce7d936ae20
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   204162 76138f26bcc903413304ecdea530b582
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:  1944774 2a1fc7f1bda7ecb455993706030f3886
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_s390.deb
      Size/MD5 checksum:   213602 4b929622e24e962f12715d98ec5184e7

  Sun Sparc architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   168072 41eac7654297e41bb8ea1bcdeb41855e
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   129260 08ca2de15725be7d32b3b2324715a058
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   184956 d4a41f56e9b37ffb60a2c66b30c5471f
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   673524 84378a8cf1d88b597fb6a4cbb815adcc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:     1042 88279f4538a6e215092f5b9bc9e16e68
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:  9381720 4912beeb2cb4a02cc4abf6d5c730180a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   403296 c6346a95715ba44112e46cf80959c503
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   158350 b12497e5a02785d466d1975ea22d4040
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:  3342192 ef8bfe776ee10bbbd7cb2a7fa3754aa6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   112532 b3e1ff572f35ca8a5fa368cf815cb32f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   204164 f376fe7d73e318e1c87e66bd527ef147
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:  1583792 7a9053fa95df17218f140360f69fe05a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_sparc.deb
      Size/MD5 checksum:   168116 65ecc744a989197668923747d5dfcdde



  These files will probably be moved into the stable distribution on
  its next update.

- 
---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security 
dists/stable/updates/main
Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFCi8eW5ql+IAeqTIRAixcAJ9k2r6d7atRXaNm9NAlvLvT6/HPqwCfdI1G
XFoU8PToGJgeQMowkOV+CWw=
=MV56
-----END PGP SIGNATURE-----
Prev by Date: PhotoPost => 4.6 (PP_PATH) Remote File Inclusion Exploit
Next by Date: [SECURITY] [DSA 1177-1] New usermin packages fix denial of service
Previous by thread: PhotoPost => 4.6 (PP_PATH) Remote File Inclusion Exploit
Next by thread: [SECURITY] [DSA 1177-1] New usermin packages fix denial of service
Index(es):
- Date
- Thread