[SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities
From: joey@xxxxxxxxxxxx (Martin Schulze)
Date: Sat, 10 Mar 2007 20:12:34 +0100 (CET)
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mail-followup-to: bugtraq@xxxxxxxxxxxxxxxxx
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Old-return-path: <joey@xxxxxxxxxxxx>
Priority: urgent
Reply-to: listadmin@xxxxxxxxxxxxxxxxx
Resent-cc: recipient list not shown: ;
Resent-date: Sat, 10 Mar 2007 13:17:32 -0600 (CST)
Resent-from: list@xxxxxxxxxxxxxxxxx (Mailing List Manager)
Resent-message-id: <nQAePB.A.-ZB.LRw8FB@murphy>
User-agent: dsa-launch $Revision: 1.18 $
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1265-1                    security@xxxxxxxxxx
http://www.debian.org/security/                             Martin Schulze
March 10th, 2007                        http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : mozilla
Vulnerability  : several
Problem type   : remote
Debian-specific: no
CVE IDs        : CVE-2006-6497 CVE-2006-6498 CVE-2006-6499 CVE-2006-6501
                 CVE-2006-6502 CVE-2006-6503 CVE-2006-6505
CERT advisories: VU#263412 VU#405092 VU#427972 VU#428500 VU#447772
                 VU#606260 VU#887332
BugTraq ID     : 21668

Several security related problems have been discovered in Mozilla and
derived products.  The Common Vulnerabilities and Exposures project
identifies the following vulnerabilities:

CVE-2006-6497

    Several vulnerabilities in the layout engine allow remote
    attackers to cause a denial of service and possibly permit them to
    execute arbitrary code. [MFSA 2006-68]

CVE-2006-6498

    Several vulnerabilities in the JavaScript engine allow remote
    attackers to cause a denial of service and possibly permit them to
    execute arbitrary code. [MFSA 2006-68]

CVE-2006-6499

    A bug in the js_dtoa function allows remote attackers to cause a
    denial of service. [MFSA 2006-68]

CVE-2006-6501

    "shutdown" discovered a vulnerability that allows remote attackers
    to gain privileges and install malicious code via the watch
    JavaScript function. [MFSA 2006-70]

CVE-2006-6502

    Steven Michaud discovered a programming bug that allows remote
    attackers to cause a denial of service. [MFSA 2006-71]

CVE-2006-6503

    "moz_bug_r_a4" reported that the src attribute of an IMG element
    could be used to inject JavaScript code. [MFSA 2006-72]

CVE-2006-6505

    Georgi Guninski discovered several heap-based buffer overflows
    that allow remote attackers to execute arbitrary code. [MFSA 2006-74]

For the stable distribution (sarge) these problems have been fixed in
version 1.7.8-1sarge10.

For the unstable distribution (sid) these problems have been fixed in
version 1.0.7-1 of iceape.

We recommend that you upgrade your Mozilla and Iceape packages.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given at the end of this advisory:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.1 alias sarge
- --------------------------------

  Source archives:

    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10.dsc
      Size/MD5 checksum:     1125 7bbb0352ba3ac9f97a6349dc5b30830e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10.diff.gz
      Size/MD5 checksum:   610517 a93a7496c1ee1336de1eabb4ace10a40
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8.orig.tar.gz
      Size/MD5 checksum: 30589520 13c0f0331617748426679e8f2e9f537a

  Alpha architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   172736 2b766929fd8fc52fd2dba54550db816e
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   149964 a182e1466f9656f71d16ff2d7ab2571b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   189726 7343cb0178402a4aeb3054e80f0b2d9b
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   858650 6ca44187faea0d75dc0c868658e7282d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:     1030 f2a4a8b7f0dd9ab8b9a80ec1bd7a9a72
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum: 11535592 2eb72b02028260bb60aa77c17fe657bb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   403522 fe42c78ec1ee7e2292bb03904b3a2471
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   158336 e08a92e6530f91204f71d9067f426ff2
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:  3611380 0a3282afa4806af2be0c170052f3c7d0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   122474 7b7f1b48e9e80c3d09c8e3d7ad0c8a32
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   204166 850f9176b9fd783fab964a6725a4f62d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:  1944668 249b8cd8b3363470e6f1ee96ea7d5f55
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_alpha.deb
      Size/MD5 checksum:   212714 efa6c8dee9c1cbac9973867b3ce2992c

  AMD64 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   168068 602ab0a50371ee85c1e24e07ec865b98
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   147948 2b1cc78e04ad96e059b8dd233e4b3a67
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   184954 d734db1b5ca992bd70af680bbeaa6220
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   716890 da25703b601f11eff047c23b3c0eda4d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:     1032 c9b79acfed03d66e01bc10f6f49c9cf3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum: 10969436 48b8292a2aa2165725a4369a1d97e478
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   403286 a6aaad4cc9792b8bcaca22b148fd0311
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   158346 b63c895eac9513f198a90603ad2324f8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:  3355976 f6217fbaee062d673d780903202029ce
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   121180 ca385ca8a676e3598f9bc0b208bd6b7d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   204158 0e2cebed94fbb47b94aadd59f3ed99cc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:  1936114 7c816b72b247b08fcca0d7452c7bc535
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_amd64.deb
      Size/MD5 checksum:   204450 1c58a8695823894720f5ec0ec084a690

  ARM architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   168068 2e0f9b698bd88badad19f4d35f87731a
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   126344 ec6493fc14f2f646eb490d30560dca3a
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   184960 b259b06a75e2d58552356856fca50c73
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   634208 83a4efc3409617d221612d77770642a6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:     1032 c7bac0fb65f98f983ada2c45e283fc44
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:  9229692 42c0407150f63a20bd2d0c03da69af96
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   403338 c88648931ff1376c6ca9f62d3be3b41a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   158354 48a7602a96af575d58136d016d42534a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:  3345550 b9f70348039fd28763cd27f6b3afb084
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   112660 c7c7951fe15f94aee2bf27848e5d789f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   204180 c48e45c2ef07929d5dd545d0ebd75941
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:  1604600 d0c2383b15b5dd39009191e0c82112cc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_arm.deb
      Size/MD5 checksum:   169010 27cafb09b8d106343fd05d8636be4c3b

  HP Precision architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   168076 e151c35896c99c2f17bffcca13fdbfdd
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   158874 e66fec2857d5824b038fdf4ed262c9f3
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   184962 d7c0dc35f9137d96aee0ea15a7f21099
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   756948 ba2be6881037793a0864edf94ee25d54
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:     1040 7179202a9d22040b6f8817388011a6a8
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum: 12185334 0e81fa0a3b128d3e59a43f0469e167ef
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   403280 bf5e45144eaed02358bb99d65e72611d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   158344 4d21f908a885b5a8f1213bb15fb70c82
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:  3362246 92944a9adfab0f180ed6e710b773f864
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   123516 f1de3773178b7580946ffd5820eb68a4
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   204160 066382bc79dba7c6c7a51ff7a8963b71
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:  2136028 ff22cc2462568964127dc7c8801cd1d5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_hppa.deb
      Size/MD5 checksum:   216448 d2f0535989b6092bb50146746577edd5

  Intel IA-32 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   170348 78073f6743a8f13e98cbb8ad117c3ed0
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   138766 1850f81d7637448cef807ecf9005efce
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   187130 48bbbea8ad3836a13e9c9a8a969eb3df
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   663600 78af6d85019a7e94985248631787acbb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:     1026 aed96c20dad3636b303c49246ef2663a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum: 10357262 b0684cf752780172885a979a9b4183d1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   403516 8c824f68f5cccdb98a515309b079236c
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   158360 eefd2ca5d4d46b716884cd5ca95e54eb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:  3597596 db69f859a7c4b4378f93f6f03c5431ab
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   116688 f21bbf6efcb7f7a88f2294ac6a009213
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   204164 b58ec2817339ee60c8192b389bc5467e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:  1816198 889f9dd971c7094f12b9f7e98d29963e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_i386.deb
      Size/MD5 checksum:   192790 53792a4c0035b95d156dd454dec104b1

  Intel IA-64 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   168070 4695d880018466dac52b3454a020670a
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   176298 2e7d6215feb4ceb59d5451b6a7a3b732
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   184944 105cca57aafbf3be06e513ed86fb14fe
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   969138 331f491b3e1ff82a9f519c029bddfa37
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:     1036 752d6fb5e51298d09b32def453806b58
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum: 12983174 ab7bf4e017d88128dfec3a80afaf4edd
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   403270 d9a67db96ce38aaa6a0a76db0045422b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   158324 ef4a4e59c4a3e073b7488a374bc249a5
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:  3381586 4fc2d689248d2cbc7a695db152eaf60d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   125586 a507e6485fd4f1c636aa8034d5e2bfcc
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   204156 02085e768a412b4bb471e65de98c05c3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:  2302540 946746e5a8fe040be976de65929e358a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_ia64.deb
      Size/MD5 checksum:   242942 2c61e82fbcc6df1baf900826e51e596c

  Motorola 680x0 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   168098 02cd6c6e601a2ab3c89e035ca26823cf
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   127956 1ea4a5048bd63f8cbc720ccc267db4a1
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   184982 5d96b3ef6f7bd6f6eca920fa12a9ac0a
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   602176 c6426641f0214604c12a138f67f41a29
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:     1048 0451c5e703ca61be54bdb9701ef1fa6a
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:  9727450 bea32e95fc3698a283b23b5c3bfc6237
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   403402 dedfc5c7d835a050cb134e25603d0ab3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   158400 f2907386e9005db586a189cb928d5e11
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:  3341050 0a77e0044d48ceb0c18ca779d5b561ca
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   114504 105371506b9fd99ca06f4da8e3e7fd09
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   204220 fb5b4d0086b847c56d00313b65abf918
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:  1683284 b67b7f09b6ca87a87fdc69a74a867334
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_m68k.deb
      Size/MD5 checksum:   175040 373ab0869fdfefafe695f533762bffd7

  Big endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   168070 23a0d6b5d15384a44a9ae5c577fdc044
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   142816 e3672988e714fb05b7356515735c8fb6
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   184964 f399c4e2d6c72290789654ff0da62dc4
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   727874 b4d22e8aa563e26c6cbf91ce84acae50
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:     1036 4a50cbbfba126a52c91bc89bac0af140
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum: 10751708 d0624da379686cb55bcb48234ffbd4de
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   403278 076dff6ac2c0102e458c7731b7b08a60
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   158338 671f9df6361ffbc75f3a442e25fa0b19
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:  3361894 9dd76e8aa5af128131790a9f5275ac52
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   117624 2f25e108659e753c9c9f0121d15bc280
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   204146 591bc43c13c5aafae333200166b2bd20
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:  1795650 301bd997c2d505dc5b4af07435536699
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_mips.deb
      Size/MD5 checksum:   190108 7d5bf0b8fa1873c77295e5af9e41e7c2

  Little endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   168084 b531f807b44916ee1454cee2a2c4ed95
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   142770 d6eb46f99c12cba5969ed5274171c888
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   184964 a81ff04bd3035f036586c3750df1b21d
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   717376 321fb1b0016c14a3a5024c5ab8cd284d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:     1040 949aa6c00fbbcb6e543b760a3e0b9ba7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum: 10627686 b696603e3ed0c803d0f8dcda0722a6d7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   403292 a5fda733c03f9a0b9261897818b88525
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   158342 adbde4463c4e1f01243b18b7667b6c9d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:  3362380 9447899ae7629f8c39fbbb11d0286220
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   117206 89ad42c81fc47dc5047b79908266f26e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   204172 a1c118240e09fbe51871e9f63beb5e03
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:  1777696 17ab98f7563b48b42563f479c906fbb0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_mipsel.deb
      Size/MD5 checksum:   187620 c130a71e5505ee351d301006b891feb6

  PowerPC architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   168076 6be5c206b5c241ffda864746d73a2c95
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   133286 e44942791c23a55ba1a81270cc3bea26
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   184958 7c3e576cc646e09861dbc6d22f352ffc
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   721114 03f802acf6ce0c8add98bf018cd76068
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:     1038 3063339855639ec01332612a94fa557f
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:  9725604 8dde3e98886d1ebbec02051b564c7946
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   403280 4ee33d9976b5d9e32d6e4630aec5c2a1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   158340 74d524e3e052b493231e48a4a79dfc13
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:  3344226 3089be604fa96cd05310e87a528dba65
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   114580 4c0af570a237ed62ae20001b19698f4d
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   204156 ee11b499a318d77b412bd9ba703d4032
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:  1643124 8b562e6023efb0383dadd31e3a1c5987
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_powerpc.deb
      Size/MD5 checksum:   175794 5dfa6c4d5048a80177400479faf540ee

  IBM S/390 architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   168074 906b75f5289f71fd672fe88ae4b53446
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   158626 904ae46ff91af059c92149014994293d
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   184948 c37aaff814082a99223b0393b5caf03d
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   801258 2fc96c0bf01c8b993724de4b4123ef68
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:     1036 1aaf1b40e49ee0e717b09c022aeda4d1
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum: 11350200 5d4faac1ea131b6b4bd0b8a71435d7bb
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   403268 528523ea07238f1ad424b60b24675bb7
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   158332 f0514f50fbaca37b827582ef8daedf20
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:  3356606 4a101015110e309db8da4c5d1fbbd2b3
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   121340 0007f3e54fd13dbe0a863581b1e0e999
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   204148 1bb7e0ed16de7c2a48351dc2e241e1ec
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:  1944954 86ad4ff75d268908de6b7e6a90d27e20
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_s390.deb
      Size/MD5 checksum:   213638 4b38189430e56bca35c7c2992de67cf3

  Sun Sparc architecture:

    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   168080 ff889bf3ae475c2fae97b96ab2d0c4eb
    
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   130520 8822ddffc0f10283fd66960b9a87606a
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   184944 954aab25750f542918c38ccbfd574707
    
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   674872 fb56b11a0d169f2d1812caf7128b7a32
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:     1038 e03b2f24b711ca2d6ce9250ae051c1f4
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:  9392822 9261a06ad435a2934b2194a22f8d1770
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   403286 faa3b89c7a82e2ead53b7b393b4b7110
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   158356 4642b1b2a495c0f4c54c409c65e38ff6
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:  3345424 109efbe68d9be0bc651904488f6e2836
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   112530 26883e13f71eb101c2362470424f788b
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   204162 2a7734d4e3f7d50e7604e8f9c8a1fdb0
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:  1583796 956c24b9412a595c4be697f54c8b082e
    
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge10_sparc.deb
      Size/MD5 checksum:   168200 195d31de5c4535901f174019f325b93b


  These files will probably be moved into the stable distribution on
  its next update.

- 
---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security 
dists/stable/updates/main
Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFF8wMhW5ql+IAeqTIRApjJAKCcAOSMi/kyDi0BqJbAJgGu5smHKQCgssda
GzbIINUMyR+zpjA8v1bVKjM=
=BkYY
-----END PGP SIGNATURE-----
Prev by Date: Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite
Next by Date: Remote File Include In Script PHP Photo Album
Previous by thread: [ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability
Next by thread: Remote File Include In Script PHP Photo Album
Index(es):
- Date
- Thread