From: [email protected]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------ Debian Security Advisory DSA-2132-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 11, 2010 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package : xulrunner
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2010-3776 CVE-2010-3778 CVE-2010-3769 CVE-2010-3771 CVE-2010-3772 CVE-2010-3775 CVE-2010-3767 CVE-2010-3773 CVE-2010-3770

Several remote vulnerabilities have been discovered in Xulrunner, a
runtime environment for XUL applications. The Common Vulnerabilities
and Exposures project identifies the following problems:

For the stable distribution (lenny), these problems have been fixed in
version 1.9.0.19-7.

For the upcoming stable version (squeeze) and the unstable
distribution (sid), these problems have been fixed in version 3.5.15-1.

For the experimental distribution, these problems have been fixed in
version 3.6.13-1.

We recommend that you upgrade your xulrunner packages.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 5.0 alias lenny
- --------------------------------

Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.19-7.dsc
Size/MD5 checksum: 2395 644970f97799b0cedf925a2c8303f2e8
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.19-7.diff.gz
Size/MD5 checksum: 192334 56a4a1a9b083b7cd92b29cd11a015e79
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.19.orig.tar.gz
Size/MD5 checksum: 44174623 83667df1e46399960593fdd8832e958e

Architecture independent packages:

http://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.9.0.19-7_all.deb
Size/MD5 checksum: 1468538 408e0dba665407318563c9ace335f887

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 223280 178397115d1162385892d626fe792b24
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 9511894 7db4e68bf006563fc76e5d7ef7cc1f35
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 51220414 46e2eb53a8450dc6b09ab2c04e46c393
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 434238 8b7075f8a39aa75c39b119e0d3d135dc
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 165054 5022695ffeb82bc7e38e229a578e586e
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 72976 f7b15c4573ea75fe83fd6398f8a6b1d7
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 939744 19dd61fd1ad9d23add66faab4720c3c8
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 3658850 51980c9c9cf575d4af59a5e2033f6b1d
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-7_alpha.deb
Size/MD5 checksum: 113776 700edb5b7b4778ce0b43eeff702bf4ce

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 50471444 5c27a6ce1376234377e1327cece90e58
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 7736416 73c4297d3f7693eb75e1f52275968dd3
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 70642 62fa42480817a42b7c3186644e395adf
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 3300092 de7c05ebe980974b7f677d691675346e
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 153778 3095de264efc138f55a08932e5f633b2
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 375798 6076292260d0a0a21f426e205c2c8045
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 102292 3e2e5af63df8a9db1c898ef092edef7d
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 891538 b5851f59bc3c61fe0ff6a85b870477da
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-7_amd64.deb
Size/MD5 checksum: 223652 45370096b9ad11d37126f9d4da5f2dfe

arm architecture (ARM)

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-7_arm.deb
Size/MD5 checksum: 84364 2b6ca89bc12cd2df1a1958638f2b6a19
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-7_arm.deb
Size/MD5 checksum: 352324 d1f0a3422bbbbfdb05a68c703b333b7b
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-7_arm.deb
Size/MD5 checksum: 818192 9631161a7acb39824b0d40270f2f828d
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-7_arm.deb
Size/MD5 checksum: 224266 8f229b45f02deaf66d3c1ccacc125909

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)