[SECURITY] [DSA 1532-1] New xulrunner packages fix several vulnerabilities

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [SECURITY] [DSA 1532-1] New xulrunner packages fix several vulnerabilities
From: Moritz Muehlenhoff <jmm@xxxxxxxxxx>
Date: Thu, 27 Mar 2008 23:01:06 +0100
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mail-followup-to: bugtraq@xxxxxxxxxxxxxxxxx
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Old-return-path: <jmm@xxxxxxxxxx>
Priority: urgent
Reply-to: listadmin@xxxxxxxxxxxxxxxxx
Resent-cc: recipient list not shown: ;
Resent-date: Thu, 27 Mar 2008 22:01:32 +0000 (UTC)
Resent-from: list@xxxxxxxxxxxxxxxx (Mailing List Manager)
Resent-message-id: <kDT56pHITpO.A.JzG.8kB7HB@liszt>
User-agent: Mutt/1.5.17+20080114 (2008-01-14)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-1532-1                  security@xxxxxxxxxx
http://www.debian.org/security/                       Moritz Muehlenhoff
March 27, 2008                        http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : xulrunner
Vulnerability  : several
Problem-Type   : remote
Debian-specific: no
CVE ID         : CVE-2007-4879 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235
                 CVE-2008-1236 CVE-2008-1237 CVE-2008-1238 CVE-2008-1240
                 CVE-2008-1241

Several remote vulnerabilities have been discovered in Xulrunner, a
runtime environment for XUL applications. The Common Vulnerabilities
and Exposures project identifies the following problems:

CVE-2007-4879

    Peter Brodersen and Alexander Klink discovered that the
    autoselection of SSL client certificates could lead to users
    being tracked, resulting in a loss of privacy.

CVE-2008-1233

    "moz_bug_r_a4" discovered that variants of CVE-2007-3738 and
    CVE-2007-5338 allow the execution of arbitrary code through
    XPCNativeWrapper.

CVE-2008-1234

    "moz_bug_r_a4" discovered that insecure handling of event
    handlers could lead to cross-site scripting.

CVE-2008-1235
  
    Boris Zbarsky, Johnny Stenback, and "moz_bug_r_a4" discovered
    that incorrect principal handling could lead to cross-site
    scripting and the execution of arbitrary code.

CVE-2008-1236

    Tom Ferris, Seth Spitzer, Martin Wargers, John Daggett and Mats
    Palmgren discovered crashes in the layout engine, which might
    allow the execution of arbitrary code.

CVE-2008-1237

    "georgi", "tgirmann" and Igor Bukanov discovered crashes in the
    Javascript engine, which might allow the execution of arbitrary
    code.

CVE-2008-1238

    Gregory Fleischer discovered that HTTP Referrer headers were
    handled incorrectly in combination with URLs containing Basic
    Authentication credentials with empty usernames, resulting
    in potential Cross-Site Request Forgery attacks.

CVE-2008-1240

    Gregory Fleischer discovered that web content fetched through
    the jar: protocol can use Java to connect to arbitrary ports.
    This is only an issue in combination with the non-free Java
    plugin.

CVE-2008-1241

    Chris Thomas discovered that background tabs could generate
    XUL popups overlaying the current tab, resulting in potential
    spoofing attacks.

For the stable distribution (etch), these problems have been fixed in
version 1.8.0.15~pre080323b-0etch1.

The Mozilla products from the old stable distribution (sarge) are
no longer supported.

For the unstable distribution (sid), these problems have been fixed in
version 1.8.1.13-1.


We recommend that you upgrade your xulrunner packages.

Upgrade instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian 4.0 (stable)
- -------------------

Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, 
mipsel, powerpc, s390 and sparc.

Source archives:

  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b.orig.tar.gz
    Size/MD5 checksum: 45764828 f7e8262a29bf69cce700927bef7300af
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1.diff.gz
    Size/MD5 checksum:   145281 bfc8c2aa41a7862e08aea26d511b0d7f
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1.dsc
    Size/MD5 checksum:     1346 b9aa349380f911380c63ea80d830e714

Architecture independent packages:

  
http://security.debian.org/pool/updates/main/x/xulrunner/libsmjs1_1.8.0.15~pre080323b-0etch1_all.deb
    Size/MD5 checksum:    35882 f2ce370eaf317061047c2ddb5d06fe9e
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.8.0.15~pre080323b-0etch1_all.deb
    Size/MD5 checksum:   175242 8fbf589810a9b9ba093f0a1edfcb35a8
  
http://security.debian.org/pool/updates/main/x/xulrunner/libsmjs-dev_1.8.0.15~pre080323b-0etch1_all.deb
    Size/MD5 checksum:    35922 920c075859f9b5eefd80e15bc99d7bdd
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul-dev_1.8.0.15~pre080323b-0etch1_all.deb
    Size/MD5 checksum:  2837876 633673664eed374b6430312dfb6e0c63
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-dev_1.8.0.15~pre080323b-0etch1_all.deb
    Size/MD5 checksum:   238196 c59bb911bbab99561ea6062bef50da97
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.8.0.15~pre080323b-0etch1_all.deb
    Size/MD5 checksum:  1030224 cd6b30bdbae92062cc9df0895a9e4062
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-dev_1.8.0.15~pre080323b-0etch1_all.deb
    Size/MD5 checksum:   211622 9a16bcf2dc9628ad51e77ced0fbeded7
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul-common_1.8.0.15~pre080323b-0etch1_all.deb
    Size/MD5 checksum:  1088114 6283895f8024771715073e99ef85a3b3

alpha architecture (DEC Alpha)

  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:   161226 d729ab085bdee6e9dcf1dce05850a14e
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:  3186384 c8245333f0130863a80879c3811929db
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:   906444 b70dcd7971c698078dc68f11abe5e1aa
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:   764982 4a1e753e3842e06918f9323b6240f856
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:   291230 57f40c7ad0e0f90387ede43c30ece309
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:    70456 3b2f1ff05eadb6b0340863f1d07fc63f
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum: 45975008 10514a1d33bb59593369a93bf4f76de8
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:  7332642 f96396caa887d64f6d74a81b5228e2b2
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:   385530 62d1df3e585b309fc07c5660e2f414b4
  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:    52438 22eab64b251c3e9ee06af63d708a82ff
  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:   130362 379933f55ced82411f6915d06b73a664
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:   301088 fd967936c8f8acc89af1916ddb121ecc
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_alpha.deb
    Size/MD5 checksum:   738554 2d2de82747b04baad87cd396f550d1bf

amd64 architecture (AMD x86_64 (AMD64))

  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:   148652 d0b4c30467002dea3626d90cb3297686
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:  6331562 ecd902372e4951675dc503b7090161fc
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum: 45177656 9a724b6f54ad3e93baac620d03bc6401
  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:   124378 da9982815bc3835842e9cb0237394982
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:   354910 4946a918d569cccc124ee2f59be69af7
  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:    51862 f66865da6c44f43baa1a710f2bc7c2e3
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:   669580 71e5321adeba7c1d4229e60f63d43069
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:   753904 d1ff3bb62276219b7c32b6e33884172f
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:  3174456 c426cff365dd6c40c563f27573360770
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:   808390 e86e788d2de494f12920f643158f1b6f
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:   277228 63ac70cbbd875ae7fb936b1741671d54
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:   303338 47356a1188c0317da55b9fd9a5a5846e
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_amd64.deb
    Size/MD5 checksum:    68270 db208422feaf2260ae88cbef481aa611

i386 architecture (Intel ia32)

  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:    49652 b1e665106b63bc6ad8f04cfb77d9ed11
  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:   116748 41cc2a92e3e04b1559dbdd7b72fb7554
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:  5372530 250f5b5f520ec5928c1bd66991bbda1f
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:    62786 f655dcb5aeec4a2c8923c232a388b471
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:   335966 50a07d15670d74e724f8e483488949e3
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:  3032842 20bee79266e72f57403cb3152671086d
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum: 44658644 8aade9e0c4627707dd1ca99a28e132aa
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:   741670 c3951402efc54ddba61955fd93d8e3ce
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:   714016 c98812879b4550e6dd9e9e36b494f850
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:   295656 0edd608c1d4dbb74ee978e8447f0face
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:   627318 e00b9254b0fbde1ff7c439e7f944c5ae
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:   138788 f0fa8a248699b29c1bb0f6bc9c42079b
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_i386.deb
    Size/MD5 checksum:   266766 d1ca812ce1ceb0eeab2ced78d0284a25

ia64 architecture (Intel ia64)

  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:    56664 f5a75b2bb0b2823f23842a7a59923c8c
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:    79828 76473d42d1d983482338404bcdc0d865
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:   286608 2605ca0cd488319d2e86fb053ccf31d4
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:   936698 58fc441685f9c8a0bbed396f97072bfa
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:   332758 cf8c60c72fe7affa7a1ff84a17ec1aca
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:   197996 0207c44d2d339999f14b774eb39120de
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:  3051188 989a4d21ba77742e40a04406ac37fe74
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:   531358 0e4beefa497ac52badd68a16813c100c
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:  1121218 c6ad4ad7f40f89720b809e86db1970fb
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:  9669140 ef137b9f65d18ec6bdad0881866bcb16
  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:   149248 8dd09b6e7cfbd14793e308c7a96f6961
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum:   756024 b553fb0b46c31c24ba97703758c9631d
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_ia64.deb
    Size/MD5 checksum: 45389676 d6aa7c13c2213f62c5c302a3a60344f2

mips architecture (MIPS (Big Endian))

  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:   785092 4edf15273e68511a2d446dd07d0dd809
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum: 46723876 ee24fe73fd2300a8b2de27273085f6eb
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:  3289318 586bc4d51c3b8d7ccd60e42ef5c98753
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:   274386 7311c00c61911e38d78f6ecac78047c5
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:    63498 05c52433cb018f6f69f1478f8ad3a327
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:   311870 7f9eb42dbc6b12dbdcf1b0d0542332d6
  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:    50778 8bed283129f6829b14ffdd412a5ff263
  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:   118094 245b435752a2bb02fb2462ff2a10db6a
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:   669864 f9f020be575216a0928462f1d8e90ef4
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:  5946452 27ae0bd5b72056f79be3032aa32d3e3f
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:   145790 851c54d5d237ff610b3d5ab98d5fde5a
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:   351584 5f32453811c2992e2e52f0f574909fdb
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_mips.deb
    Size/MD5 checksum:   808368 077cf1def9c63a018ba5ba94a4016576

mipsel architecture (MIPS (Little Endian))

  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:   117784 1572f36c48293326a866cdfe34cfdfae
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:   145356 1bf8c9026f7e86a4dd9a4a226c01c2b3
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:   350146 c52571ed70ce5ba88eb745691bf01ebb
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:   669682 1d6d7b0cce2283b9d468f7e9e63014e1
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:    64070 029439008e32a309b2c48a2cc40e9540
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:   304858 ae2b98349c0c6e833c4b446bfe3e6c6e
  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:    51366 4d5c48175269f4bba867a894cd680487
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum: 45326432 ad07c2fc78e16fc9787fc6aa5d520c38
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:  3186104 d54c0bd3b7f5d0aa38863bae901494ae
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:   765954 dec06465580de9d6777110f111681df6
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:   273808 d8048e010b2e3f4d8ac5f8566c59594c
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:   784690 d5e82d07385de9c3d486ccdf0292db6d
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_mipsel.deb
    Size/MD5 checksum:  5745222 3efa9fc25037a4f4747a1f2d9515476b

powerpc architecture (PowerPC)

  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum: 46906058 3e248440ae765c7ed64bf9dcc62bd5eb
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:   348768 26c683a72ad08d4f7f6759ad43ccc7de
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:   639430 6566ef1a600701d73d9bbfa61a5a46ed
  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:    52632 93cf2165ae5639afe615f43fb04ea13c
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:   278018 c2ed2d505e3caab62b3ba4a2225d85e6
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:    63986 5e0452a82a88dd1c0a9bd34faffbec6b
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:  6101626 af82f05e648802c03a18dc5de96b5033
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:   809428 1e80fe2da6becf2a15d971b22e404650
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:   773254 95e411af4fc1b2e4426bc073d81e49ef
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:   310316 c0bddab9d07772942034e5fddd5ad9e4
  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:   123254 9961833815143c8ce15cdb2e553edceb
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:   147112 e4d0ad40cc109ae0cd14d92bd338f902
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_powerpc.deb
    Size/MD5 checksum:  3207168 551666c0a866c3304d853d83e02dacd2

s390 architecture (IBM S/390)

  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:   687758 757fa88a79dbae077be47e8bf1494a10
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:   305978 19ae358d489bb7fc82bfb1ebd686626a
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:   281708 2255e5dd1d696e337930a14588741739
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:   898196 95922b0ea1711d700bf090eed5782eb0
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:   755712 3589abdc1c72b80fa2480c359c436f23
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:  3180612 f95a6db580e98f6b023ce13abd4a62ca
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:  6807102 06d0aec7760683f47ddb47e3fb049a98
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum: 46039278 d9188f5282b60f333f1a2bafd0ad2867
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:    68972 c80df62d2f503e5bee986f6aa9215a65
  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:    52866 8fcb54ef65fd1b95f1106662c66ebc88
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:   371524 a417939e58bf7e005995da13b81b1c3c
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:   159698 42ce7553a3bb90bd0cd5526cac51e82b
  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_s390.deb
    Size/MD5 checksum:   126174 c70ff0e986ef87352c609db8d38ee9a2

sparc architecture (Sun SPARC/UltraSPARC)

  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:   322582 2c18a34bd799015fa0807021bed307be
  
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:   117932 7c43500e827c70d2d2bd0e701f3e9aca
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:   260210 5d629ece7be7fed2984404bad20c3c31
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:   718838 9f00574bc04a2a40cf34ad0abff46ad4
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:   585340 f47998d5f69b8e4cdab0fcb8fc43ff6e
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum: 44751342 0c441a5d7f99f9ce0828ffe83f677282
  
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:    62272 cbb5218e8dd7697831759096450af93c
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:   283370 89f4d127c00856f5f03cdf526278953e
  
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:    50750 2a1c75692c21c72caafff2259fd96be6
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:  2853850 8a7b99a0dfed7669ebd669db8d5b01c9
  
http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:   135910 99bc8823167b2a0657a52a25fbc2a609
  
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:   674772 5ef9d0792cdba9211452c75d1daf365b
  
http://security.debian.org/pool/updates/main/x/xulrunner/libxul0d_1.8.0.15~pre080323b-0etch1_sparc.deb
    Size/MD5 checksum:  5681186 a9e27572a661821abad23967ac4d8543


  These files will probably be moved into the stable distribution on
  its next update.

- 
---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security 
dists/stable/updates/main
Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH7BjvXm3vHE4uyloRAmLaAJ0bSYPhC7EKkr9Lv0W+C8el18rNOACgxDD4
kxVPzNrHFoftko7A6oFpnGs=
=Tt9F
-----END PGP SIGNATURE-----
Prev by Date: rPSA-2008-0128-1 firefox
Next by Date: [ MDVSA-2008:079 ] - Updated sarg packages fix multiple vulnerabilities
Previous by thread: rPSA-2008-0128-1 firefox
Next by thread: [ MDVSA-2008:079 ] - Updated sarg packages fix multiple vulnerabilities
Index(es):
- Date
- Thread