"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Important: krb5 security and bug fix update
Advisory ID: RHSA-2010:0343-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0343.html
Issue date: 2010-04-06
CVE Names: CVE-2010-0629
=====================================================================
1. Summary:
Updated krb5 packages that fix one security issue and one bug are now
available for Red Hat Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.
2. Relevant releases/architectures:
RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64
3. Description:
Kerberos is a network authentication system which allows clients and
servers to authenticate to each other using symmetric encryption and a
trusted third party, the Key Distribution Center (KDC).
A use-after-free flaw was discovered in the MIT Kerberos administration
daemon, kadmind. A remote, authenticated attacker could use this flaw to
crash the kadmind daemon. Administrative privileges are not required to
trigger this flaw, as any realm user can request information about their
own principal from kadmind. (CVE-2010-0629)
This update also fixes the following bug:
* when a Kerberos client seeks tickets for use with a service, it must
contact the Key Distribution Center (KDC) to obtain them. The client must
also determine which realm the service belongs to and it typically does
this with a combination of client configuration detail, DNS information and
guesswork.
If the service belongs to a realm other than the client's, cross-realm
authentication is required. Using a combination of client configuration and
guesswork, the client determines the trust relationship sequence which
forms the trusted path between the client's realm and the service's realm.
This may include one or more intermediate realms.
Anticipating the KDC has better knowledge of extant trust relationships,
the client then requests a ticket from the service's KDC, indicating it
will accept guidance from the service's KDC by setting a special flag in
the request. A KDC which recognizes the flag can, at its option, return a
ticket-granting ticket for the next realm along the trust path the client
should be following.
If the ticket-granting ticket returned by the service's KDC is for use with
a realm the client has already determined was in the trusted path, the
client accepts this as an optimization and continues. If, however, the
ticket is for use in a realm the client is not expecting, the client
responds incorrectly: it treats the case as an error rather than continuing
along the path suggested by the service's KDC.
For this update, the krb5 1.7 modifications which allow the client to trust
such KDCs to send them along the correct path, resulting in the client
obtaining the tickets it originally desired, were backported to krb 1.6.1
(the version shipped with Red Hat Enterprise Linux 5.5). (BZ#578540)
All krb5 users should upgrade to these updated packages, which contain
backported patches to correct these issues. All running KDC services must
be restarted for the update to take effect.
4. Solution:
Before applying this update, make sure all previously-released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259
5. Bugs fixed (http://bugzilla.redhat.com/):
576011 - CVE-2010-0629 krb5: kadmind use-after-free remote crash (MITKRB5-SA-2010-003)
578540 - [RFE] Backport referral-chasing code within krb5-1.7 to RHEL5
6. Package List:
Red Hat Enterprise Linux Desktop (v. 5 client):
Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/krb5-1.6.1-36.el5_5.2.src.rpm
i386:
krb5-debuginfo-1.6.1-36.el5_5.2.i386.rpm
krb5-libs-1.6.1-36.el5_5.2.i386.rpm
krb5-workstation-1.6.1-36.el5_5.2.i386.rpm
x86_64:
krb5-debuginfo-1.6.1-36.el5_5.2.i386.rpm
krb5-debuginfo-1.6.1-36.el5_5.2.x86_64.rpm
krb5-libs-1.6.1-36.el5_5.2.i386.rpm
krb5-libs-1.6.1-36.el5_5.2.x86_64.rpm
krb5-workstation-1.6.1-36.el5_5.2.x86_64.rpm
RHEL Desktop Workstation (v. 5 client):
Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/krb5-1.6.1-36.el5_5.2.src.rpm
i386:
krb5-debuginfo-1.6.1-36.el5_5.2.i386.rpm
krb5-devel-1.6.1-36.el5_5.2.i386.rpm
krb5-server-1.6.1-36.el5_5.2.i386.rpm
x86_64:
krb5-debuginfo-1.6.1-36.el5_5.2.i386.rpm
krb5-debuginfo-1.6.1-36.el5_5.2.x86_64.rpm
krb5-devel-1.6.1-36.el5_5.2.i386.rpm
krb5-devel-1.6.1-36.el5_5.2.x86_64.rpm
krb5-server-1.6.1-36.el5_5.2.x86_64.rpm
Red Hat Enterprise Linux (v. 5 server):
Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/krb5-1.6.1-36.el5_5.2.src.rpm
i386:
krb5-debuginfo-1.6.1-36.el5_5.2.i386.rpm
krb5-devel-1.6.1-36.el5_5.2.i386.rpm
krb5-libs-1.6.1-36.el5_5.2.i386.rpm
krb5-server-1.6.1-36.el5_5.2.i386.rpm
krb5-workstation-1.6.1-36.el5_5.2.i386.rpm
ia64:
krb5-debuginfo-1.6.1-36.el5_5.2.i386.rpm
krb5-debuginfo-1.6.1-36.el5_5.2.ia64.rpm
krb5-devel-1.6.1-36.el5_5.2.ia64.rpm
krb5-libs-1.6.1-36.el5_5.2.i386.rpm
krb5-libs-1.6.1-36.el5_5.2.ia64.rpm
krb5-server-1.6.1-36.el5_5.2.ia64.rpm
krb5-workstation-1.6.1-36.el5_5.2.ia64.rpm
ppc:
krb5-debuginfo-1.6.1-36.el5_5.2.ppc.rpm
krb5-debuginfo-1.6.1-36.el5_5.2.ppc64.rpm
krb5-devel-1.6.1-36.el5_5.2.ppc.rpm
krb5-devel-1.6.1-36.el5_5.2.ppc64.rpm
krb5-libs-1.6.1-36.el5_5.2.ppc.rpm
krb5-libs-1.6.1-36.el5_5.2.ppc64.rpm
krb5-server-1.6.1-36.el5_5.2.ppc.rpm
krb5-workstation-1.6.1-36.el5_5.2.ppc.rpm
s390x:
krb5-debuginfo-1.6.1-36.el5_5.2.s390.rpm
krb5-debuginfo-1.6.1-36.el5_5.2.s390x.rpm
krb5-devel-1.6.1-36.el5_5.2.s390.rpm
krb5-devel-1.6.1-36.el5_5.2.s390x.rpm
krb5-libs-1.6.1-36.el5_5.2.s390.rpm
krb5-libs-1.6.1-36.el5_5.2.s390x.rpm
krb5-server-1.6.1-36.el5_5.2.s390x.rpm
krb5-workstation-1.6.1-36.el5_5.2.s390x.rpm
x86_64:
krb5-debuginfo-1.6.1-36.el5_5.2.i386.rpm
krb5-debuginfo-1.6.1-36.el5_5.2.x86_64.rpm
krb5-devel-1.6.1-36.el5_5.2.i386.rpm
krb5-devel-1.6.1-36.el5_5.2.x86_64.rpm
krb5-libs-1.6.1-36.el5_5.2.i386.rpm
krb5-libs-1.6.1-36.el5_5.2.x86_64.rpm
krb5-server-1.6.1-36.el5_5.2.x86_64.rpm
krb5-workstation-1.6.1-36.el5_5.2.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
https://www.redhat.com/security/data/cve/CVE-2010-0629.html
http://www.redhat.com/security/updates/classification/#important
8. Contact:
The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2010 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFLu7+ZXlSAg2UNWIIRApjsAJ93XHDDW4hJRWKduwl+5ArUKZrlGgCgs7RU
7EdrL9YNleFuddEdlArDMEU=
=Navz
-----END PGP SIGNATURE-----
"
RHSA-2010:0165-01 Moderate: nss security update
"Ubuntu Security Notice USN-923-1 April 07, 2010
openjdk-6 vulnerabilities
CVE-2009-3555, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085,
CVE-2010-0088, CVE-2010-0091, CVE-2010-0092, CVE-2010-0093,
CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838,
CVE-2010-0840, CVE-2010-0845, CVE-2010-0847, CVE-2010-0848
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 8.04 LTS:
openjdk-6-jre 6b11-2ubuntu2.2
openjdk-6-jre-lib 6b11-2ubuntu2.2
Ubuntu 8.10:
openjdk-6-jre 6b12-0ubuntu6.7
openjdk-6-jre-lib 6b12-0ubuntu6.7
Ubuntu 9.04:
openjdk-6-jre 6b14-1.4.1-0ubuntu13
openjdk-6-jre-lib 6b14-1.4.1-0ubuntu13
Ubuntu 9.10:
openjdk-6-jre 6b16-1.6.1-3ubuntu3
openjdk-6-jre-lib 6b16-1.6.1-3ubuntu3
After a standard system upgrade you need to restart all Java applications
to effect the necessary changes.
Details follow:
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a man in the middle attack at the
start of a TLS connection, the attacker could inject arbitrary content
at the beginning of the user's session. (CVE-2009-3555)
It was discovered that Loader-constraint table, Policy/PolicyFile,
Inflater/Deflater, drag/drop access, and deserialization did not correctly
handle certain sensitive objects. If a user were tricked into running a
specially crafted applet, private information could be leaked to a remote
attacker, leading to a loss of privacy. (CVE-2010-0082, CVE-2010-0084,
CVE-2010-0085, CVE-2010-0088, CVE-2010-0091, CVE-2010-0094)
It was discovered that AtomicReferenceArray, System.arraycopy,
InetAddress, and HashAttributeSet did not correctly handle certain
situations. If a remote attacker could trigger specific error conditions,
a Java application could crash, leading to a denial of service.
(CVE-2010-0092, CVE-2010-0093, CVE-2010-0095, CVE-2010-0845)
It was discovered that Pack200, CMM readMabCurveData, ImagingLib, and
the AWT library did not correctly check buffer lengths. If a user or
automated system were tricked into handling specially crafted JAR files or
images, a remote attacker could crash the Java application or possibly
gain user privileges (CVE-2010-0837, CVE-2010-0838, CVE-2010-0847,
CVE-2010-0848).
It was discovered that applets did not correctly handle certain trust
chains. If a user were tricked into running a specially crafted applet,
a remote attacker could possibly run untrusted code with user privileges.
(CVE-2010-0840)
Updated packages for Ubuntu 8.04 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6_6b11-2ubuntu2.2.diff.gz
Size/MD5: 183148 c52d5567be104b1ecf671fae43a15682
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6_6b11-2ubuntu2.2.dsc
Size/MD5: 1797 3733e7dce2f951b329b777fb097b853a
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6_6b11.orig.tar.gz
Size/MD5: 51692912 a409bb4e935a22dcbd3529dc098c58de
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-doc_6b11-2ubuntu2.2_all.deb
Size/MD5: 8465062 e8317e2c220626b5766ba857015f04e1
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre-lib_6b11-2ubuntu2.2_all.deb
Size/MD5: 4721000 0dea03e5492b2a86e1b0a78df4acb46b
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-source_6b11-2ubuntu2.2_all.deb
Size/MD5: 25593942 6fd45df7392ca30f33b4a282531eef12
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-dbg_6b11-2ubuntu2.2_amd64.deb
Size/MD5: 47453206 eae77d94e79f5e4cb3c46cab6cd57c5c
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-demo_6b11-2ubuntu2.2_amd64.deb
Size/MD5: 2364290 2baf34a6a7a5a094d4b4438dbbc7147b
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jdk_6b11-2ubuntu2.2_amd64.deb
Size/MD5: 9447596 eef973ac531daaadf5ab760a265b41fe
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre-headless_6b11-2ubuntu2.2_amd64.deb
Size/MD5: 22508466 8b15c220adb38f64ae754800396d3a19
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre_6b11-2ubuntu2.2_amd64.deb
Size/MD5: 228484 a323f8696f9a5378a3a631a95109450f
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-dbg_6b11-2ubuntu2.2_i386.deb
Size/MD5: 104058320 a95066e7f890da39eb7b8556f0a36977
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-demo_6b11-2ubuntu2.2_i386.deb
Size/MD5: 2345048 bde1fa6d004e73a6d097b7be02f4d9ae
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jdk_6b11-2ubuntu2.2_i386.deb
Size/MD5: 9447476 7889de9b3b87f4a9f461b35e56ab64cf
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre-headless_6b11-2ubuntu2.2_i386.deb
Size/MD5: 23773682 619f57ae6a09fbc56d09e1a1a6d59e62
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre_6b11-2ubuntu2.2_i386.deb
Size/MD5: 217638 428e8670220b4fbf719a3a124e60d536
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-dbg_6b11-2ubuntu2.2_lpia.deb
Size/MD5: 104062648 13e73eae4986b94270032c8f4e3ddcf8
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-demo_6b11-2ubuntu2.2_lpia.deb
Size/MD5: 2344972 795aa31006cccb06d818aff24a1f82b4
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jdk_6b11-2ubuntu2.2_lpia.deb
Size/MD5: 9448498 98cb40a0d788c3750247379a22bee067
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jre-headless_6b11-2ubuntu2.2_lpia.deb
Size/MD5: 23773060 8d8e89c8d4e801f9911de9d12c245875
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jre_6b11-2ubuntu2.2_lpia.deb
Size/MD5: 217316 6fcfbcff910e018a64ec9f76894c81ab
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-dbg_6b11-2ubuntu2.2_sparc.deb
Size/MD5: 104450388 ce9db0e72401ee64ee59df0c816f9372
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-demo_6b11-2ubuntu2.2_sparc.deb
Size/MD5: 2352116 980d9aee28124513b8edacda713f1a31
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jdk_6b11-2ubuntu2.2_sparc.deb
Size/MD5: 9475864 71f0c82b94c1c75345067d419a265ebe
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jre-headless_6b11-2ubuntu2.2_sparc.deb
Size/MD5: 23756416 ff20b7e7079455a796cac85e9553d88b
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jre_6b11-2ubuntu2.2_sparc.deb
Size/MD5: 220918 2d9b81c6d6c71a1693c4d7d886a7bb74
Updated packages for Ubuntu 8.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b12-0ubuntu6.7.diff.gz
Size/MD5: 1375087 10d1160d42871b6e8606373cbced4dc7
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b12-0ubuntu6.7.dsc
Size/MD5: 2359 60d4e5bf13b4ce37812dbf188b7824ad
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b12.orig.tar.gz
Size/MD5: 54363262 f3aa01206f2192464b998fb7cc550686
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-doc_6b12-0ubuntu6.7_all.deb
Size/MD5: 8470746 29ef8fdb9c2c062a52b402d70dc692c7
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-lib_6b12-0ubuntu6.7_all.deb
Size/MD5: 4711518 e678e345460278483fd3a9801f99d7f6
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-source_6b12-0ubuntu6.7_all.deb
Size/MD5: 25635634 6b7261befbce12caabbc1e77b093e161
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-source-files_6b12-0ubuntu6.7_all.deb
Size/MD5: 49158148 53bcac8f60e7ee27ef10720137709f93
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea6-plugin_6b12-0ubuntu6.7_amd64.deb
Size/MD5: 81034 9a0395e548e5899c74377f4a23992d71
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-dbg_6b12-0ubuntu6.7_amd64.deb
Size/MD5: 47367112 ee7ed0d1c2bf41fb0ebb47f76111f090
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-demo_6b12-0ubuntu6.7_amd64.deb
Size/MD5: 2365970 ac935137ac7ca66121a675e336014e63
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jdk_6b12-0ubuntu6.7_amd64.deb
Size/MD5: 9982830 2d94c57fdf821cf81d34b71faa9963fa
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b12-0ubuntu6.7_amd64.deb
Size/MD5: 24301504 c9a50074f40bcc93f0625c8dfb6baa1d
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre_6b12-0ubuntu6.7_amd64.deb
Size/MD5: 241776 49722cd46d681443fe4c8e1ad99deb70
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea6-plugin_6b12-0ubuntu6.7_i386.deb
Size/MD5: 71514 f7cf567e9c524867a32b0920a7761965
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-dbg_6b12-0ubuntu6.7_i386.deb
Size/MD5: 101843712 722f0c60fef209bd901c60a609f7bddc
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-demo_6b12-0ubuntu6.7_i386.deb
Size/MD5: 2348852 b6ee3b0392f5fe6bca46ae05a37782de
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jdk_6b12-0ubuntu6.7_i386.deb
Size/MD5: 9988498 cacb6b8de48b6dbe2068d85ea4d44c42
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b12-0ubuntu6.7_i386.deb
Size/MD5: 25384560 f071f739e8dbccf1ed2274165d9a317f
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre_6b12-0ubuntu6.7_i386.deb
Size/MD5: 230916 d6c41f5b108d3bf35a642c82dd5b3d4a
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b12-0ubuntu6.7_lpia.deb
Size/MD5: 72114 416d9761e7e77aaac7509bd70bf45acf
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b12-0ubuntu6.7_lpia.deb
Size/MD5: 101928710 9f3b79fde15926026775861f589c37d3
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b12-0ubuntu6.7_lpia.deb
Size/MD5: 2345378 d33dc1056d95ccba50993236102ca840
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b12-0ubuntu6.7_lpia.deb
Size/MD5: 9985588 38f76e4a1762ed21f37eb590f053e589
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b12-0ubuntu6.7_lpia.deb
Size/MD5: 25404434 5ebe205933aab2a9c67139ed671654bd
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b12-0ubuntu6.7_lpia.deb
Size/MD5: 227702 3342a99a7c3a6d3b2df8b99a088a0af1
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b12-0ubuntu6.7_sparc.deb
Size/MD5: 70106 1911c148e05427b55400a399f819c51a
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b12-0ubuntu6.7_sparc.deb
Size/MD5: 103684952 0756ff303702b1541950068f3ef26a94
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b12-0ubuntu6.7_sparc.deb
Size/MD5: 2355094 83c8a90c6fd62bf30904bc6414d363d1
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b12-0ubuntu6.7_sparc.deb
Size/MD5: 9986064 bed1922cf2dc79e014860af321d5306a
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b12-0ubuntu6.7_sparc.deb
Size/MD5: 25390306 d720246e4c85631745bb08d7f6a1d226
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b12-0ubuntu6.7_sparc.deb
Size/MD5: 233156 1d700e023dfb790e6f9e7bb7e24d2c27
Updated packages for Ubuntu 9.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b14-1.4.1-0ubuntu13.diff.gz
Size/MD5: 4320319 4021c8fcd4c1614a2451160790a85405
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b14-1.4.1-0ubuntu13.dsc
Size/MD5: 2415 c7756818c527a60c1ae5a4ea1411813b
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b14-1.4.1.orig.tar.gz
Size/MD5: 65306137 071e4d08171b577d3cb35ae3a09f4cb8
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-doc_6b14-1.4.1-0ubuntu13_all.deb
Size/MD5: 8472854 340422a72c165a478129695b87a3decd
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-lib_6b14-1.4.1-0ubuntu13_all.deb
Size/MD5: 4771496 23f3c880aa6f4d1ff5b4acdd1bcd6cb8
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-source_6b14-1.4.1-0ubuntu13_all.deb
Size/MD5: 25681316 996af30b86be694c165d5a58852c99b5
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-source-files_6b14-1.4.1-0ubuntu13_all.deb
Size/MD5: 57004614 f4c7edfd8b1b2e2d53c98d31e29e603b
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b14-1.4.1-0ubuntu13_amd64.deb
Size/MD5: 446312 98920eac0bb9aa7f4abb7fe5e40496c2
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea6-plugin_6b14-1.4.1-0ubuntu13_amd64.deb
Size/MD5: 87810 277a7b218a36623cae073cca7449d8a4
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-dbg_6b14-1.4.1-0ubuntu13_amd64.deb
Size/MD5: 87535158 65df1284d16dedcdf5751e1faf424b54
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-demo_6b14-1.4.1-0ubuntu13_amd64.deb
Size/MD5: 2365580 92d2e716091cd87020102e6e3cb4b075
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jdk_6b14-1.4.1-0ubuntu13_amd64.deb
Size/MD5: 10829214 4acb9fafb20f1bb228da14f1cc2da0b8
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b14-1.4.1-0ubuntu13_amd64.deb
Size/MD5: 24670588 29e8e6207186557e03f7b64c3262c164
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre_6b14-1.4.1-0ubuntu13_amd64.deb
Size/MD5: 267412 2b7eddeaf144c46ab38bc8712a12d138
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre-zero_6b14-1.4.1-0ubuntu13_amd64.deb
Size/MD5: 1794560 ba9a8cced38085eeb7fb040b4dfbf691
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b14-1.4.1-0ubuntu13_i386.deb
Size/MD5: 498920 e02ca2da27e70599577a60c007be8493
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea6-plugin_6b14-1.4.1-0ubuntu13_i386.deb
Size/MD5: 76838 92ed2b38936e10a0eab660f077bb1757
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-dbg_6b14-1.4.1-0ubuntu13_i386.deb
Size/MD5: 149231132 db05ea43b092e89bb4028131bb276339
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-demo_6b14-1.4.1-0ubuntu13_i386.deb
Size/MD5: 2348572 d1125ff6daa3f7974c065dcd41b942cb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jdk_6b14-1.4.1-0ubuntu13_i386.deb
Size/MD5: 10929528 136cf1f9245338787498b575fe83de07
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b14-1.4.1-0ubuntu13_i386.deb
Size/MD5: 25900108 dd0cc85c2c122b0c3c51d92d35e88338
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre_6b14-1.4.1-0ubuntu13_i386.deb
Size/MD5: 253256 c5ff4fa05eebc58a47db13a8d6065a79
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre-zero_6b14-1.4.1-0ubuntu13_i386.deb
Size/MD5: 1558272 01dc786c3de0cddfb8b8c719b9e31ba7
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b14-1.4.1-0ubuntu13_lpia.deb
Size/MD5: 436134 9316505ae832a36dc09a1c83518ba8d9
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b14-1.4.1-0ubuntu13_lpia.deb
Size/MD5: 77330 5c6197772fcd49840fa7734452ed801d
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b14-1.4.1-0ubuntu13_lpia.deb
Size/MD5: 149400248 d7dcc7705e50e2d7f7de5116856d4cb8
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b14-1.4.1-0ubuntu13_lpia.deb
Size/MD5: 2345326 22076953b3af77f06692f7ac45483417
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b14-1.4.1-0ubuntu13_lpia.deb
Size/MD5: 10848220 d6dcfe8087e5663944d594bac2995fed
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b14-1.4.1-0ubuntu13_lpia.deb
Size/MD5: 25925550 47d8bd1984367794ef7f949171c1fb77
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b14-1.4.1-0ubuntu13_lpia.deb
Size/MD5: 249588 89fe1d94a183806172bf5f93cba08d90
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jre-zero_6b14-1.4.1-0ubuntu13_lpia.deb
Size/MD5: 1475474 b2d04c74193cac3504e546a10c21c688
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b14-1.4.1-0ubuntu13_powerpc.deb
Size/MD5: 471620 e11ec836592b371cb674132e7beb0913
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b14-1.4.1-0ubuntu13_powerpc.deb
Size/MD5: 82192 2fd9797d1eb5811c2f93fbc1327b207b
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b14-1.4.1-0ubuntu13_powerpc.deb
Size/MD5: 41322854 1eabcfe599bae6fd46703524d482c9dd
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b14-1.4.1-0ubuntu13_powerpc.deb
Size/MD5: 2393316 c353cb8a1852f1e1da40dd0474145c74
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b14-1.4.1-0ubuntu13_powerpc.deb
Size/MD5: 8651154 fa3878a77ed0d95da518c5d110a47c9c
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b14-1.4.1-0ubuntu13_powerpc.deb
Size/MD5: 23432700 f9d15b89f89bd1fc046da4341653ce44
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b14-1.4.1-0ubuntu13_powerpc.deb
Size/MD5: 282878 c360d272d178f1d5f8ad158646aee4b1
Updated packages for Ubuntu 9.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b16-1.6.1-3ubuntu3.diff.gz
Size/MD5: 189626 f2bce81c432bd538792e5271b2199f34
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b16-1.6.1-3ubuntu3.dsc
Size/MD5: 2347 f5e807f1f9bd85ac28ec9d00915369d0
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6_6b16-1.6.1.orig.tar.gz
Size/MD5: 63908782 4fe4fd2bc93074ff7a208265888a36b0
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-doc_6b16-1.6.1-3ubuntu3_all.deb
Size/MD5: 8462214 43a2edb121514adf08ba9185cc135461
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-lib_6b16-1.6.1-3ubuntu3_all.deb
Size/MD5: 4772052 604cabebd5e9c4eeae1d186984b56b4c
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-source_6b16-1.6.1-3ubuntu3_all.deb
Size/MD5: 25684570 f002f587f0773833bce4893ae5019740
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b16-1.6.1-3ubuntu3_amd64.deb
Size/MD5: 331476 b13401043a474794c9f363850a75036a
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea6-plugin_6b16-1.6.1-3ubuntu3_amd64.deb
Size/MD5: 88444 07a7aca4c43029ab2536e813a141f098
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-dbg_6b16-1.6.1-3ubuntu3_amd64.deb
Size/MD5: 93589046 caaefff32bde8ad5ef5048757fdfd0d6
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-demo_6b16-1.6.1-3ubuntu3_amd64.deb
Size/MD5: 2369542 64dbab7480bdbda94f0e79e2d184a4e1
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jdk_6b16-1.6.1-3ubuntu3_amd64.deb
Size/MD5: 10835892 04b03aa158add9a5ec4fb51e14e735b6
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b16-1.6.1-3ubuntu3_amd64.deb
Size/MD5: 24801720 96d4c56f665da4c4439bd4e5ddca41cc
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre_6b16-1.6.1-3ubuntu3_amd64.deb
Size/MD5: 270976 11bf2056bd8dc624fffcf99414a24abe
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre-zero_6b16-1.6.1-3ubuntu3_amd64.deb
Size/MD5: 4700646 3ca67367189b5afb60c73783ab30519d
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b16-1.6.1-3ubuntu3_i386.deb
Size/MD5: 295016 c35a01472676b0777d2efa148788cdb7
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea6-plugin_6b16-1.6.1-3ubuntu3_i386.deb
Size/MD5: 77906 5726d9e09ef7cf6964dc1be85c7a1dbf
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-dbg_6b16-1.6.1-3ubuntu3_i386.deb
Size/MD5: 154868278 665da097b3e8ec12298ce2ef4b24cac9
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-demo_6b16-1.6.1-3ubuntu3_i386.deb
Size/MD5: 2352980 98a442b9ec469ab4c4ed718cdd360004
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jdk_6b16-1.6.1-3ubuntu3_i386.deb
Size/MD5: 10953658 fe677db503bbf3dd45ed0c5ec84d1818
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b16-1.6.1-3ubuntu3_i386.deb
Size/MD5: 26071290 6a46dbae9a611e7d868c414702918a81
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre_6b16-1.6.1-3ubuntu3_i386.deb
Size/MD5: 258644 60ae0f320a6cef87f1ce8e8d4b1b3657
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6-jre-zero_6b16-1.6.1-3ubuntu3_i386.deb
Size/MD5: 4179062 1fafce1885ba7f4f1ac42d6834ad2ddb
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b16-1.6.1-3ubuntu3_lpia.deb
Size/MD5: 295648 98a7c38778a14a58cc1b2ef8cc3fc6aa
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b16-1.6.1-3ubuntu3_lpia.deb
Size/MD5: 78994 eacb841dc0f72601408472022475e4ea
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b16-1.6.1-3ubuntu3_lpia.deb
Size/MD5: 155028880 3cd1909d1a0c6309db78f10ba2303e47
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b16-1.6.1-3ubuntu3_lpia.deb
Size/MD5: 2349960 a4ed8cbe6b808d20b3905805a88ea8f6
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b16-1.6.1-3ubuntu3_lpia.deb
Size/MD5: 10834376 27f3b73570d9b0966771b6dcda748ffe
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b16-1.6.1-3ubuntu3_lpia.deb
Size/MD5: 26115464 5e987d96c2ee41ec0abac25a291f2b04
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b16-1.6.1-3ubuntu3_lpia.deb
Size/MD5: 254844 7382c5d11d2964b28005b8aa033ac054
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jre-zero_6b16-1.6.1-3ubuntu3_lpia.deb
Size/MD5: 4171478 97a4455fec8056d1c51758ed6498ed64
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b16-1.6.1-3ubuntu3_powerpc.deb
Size/MD5: 320710 7e6f3f341c506ee102d55e0b0eeab3ec
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b16-1.6.1-3ubuntu3_powerpc.deb
Size/MD5: 82728 7f74262de7084d8e02617ffa101a4c0d
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b16-1.6.1-3ubuntu3_powerpc.deb
Size/MD5: 79465642 e4157d6a2e402289b5f59802e57daf35
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b16-1.6.1-3ubuntu3_powerpc.deb
Size/MD5: 2368570 5fadc447b30b87a868a797f151f8a953
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b16-1.6.1-3ubuntu3_powerpc.deb
Size/MD5: 8786542 e47528b55a38e7993ff0b9a8d8d94f0e
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b16-1.6.1-3ubuntu3_powerpc.deb
Size/MD5: 23510102 d254a8014e50bfda3dae495007ffb3cf
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b16-1.6.1-3ubuntu3_powerpc.deb
Size/MD5: 278238 e43b7f00294bcb017400afee75c61f09
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jre-zero_6b16-1.6.1-3ubuntu3_powerpc.deb
Size/MD5: 4046108 babed0cdb15cde22daf171cefcaee9f0
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b16-1.6.1-3ubuntu3_sparc.deb
Size/MD5: 75514 63122f5f2dc2ea5a22b6cc96e749e2ed
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b16-1.6.1-3ubuntu3_sparc.deb
Size/MD5: 119361738 2b71a8764c11424b3d389c9a3d5f9422
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b16-1.6.1-3ubuntu3_sparc.deb
Size/MD5: 2358884 4f7bf2738932ebec0f78e987ee71eb60
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b16-1.6.1-3ubuntu3_sparc.deb
Size/MD5: 10858710 1368b7cede30e323cba35c8b103949f1
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6b16-1.6.1-3ubuntu3_sparc.deb
Size/MD5: 26040612 2a4ed661590203bc0aa8ed119057012a
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b16-1.6.1-3ubuntu3_sparc.deb
Size/MD5: 259016 1208328eb1a6bee5d87c0d28534767da
--Rmm1Stw9KgbdL9/H
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Kees Cook
iEYEARECAAYFAku8HVsACgkQH/9LqRcGPm0L9wCdHGY+EaZ4mrp+Go6gcLKmNFFr
DxQAnjo/hQv/sORg2Xd6W307oXFCvC6q
=+YRx
-----END PGP SIGNATURE-----
"
USN-922-1: libnss-db vulnerabilityHawkwind and Hadouken! to play GuilFest
"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Moderate: GFS security and bug fix update
Advisory ID: RHSA-2010:0330-01
Product: Red Hat Global File System
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0330.html
Issue date: 2010-03-30
CVE Names: CVE-2010-0727
=====================================================================
1. Summary:
Updated GFS packages that fix one security issue are now available for Red
Hat Enterprise Linux 3.9, kernel release 2.4.21-63.EL.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
2. Relevant releases/architectures:
Red Hat Global File System 3AS - i386, ia64, x86_64
Red Hat Global File System 3ES - i386, ia64, x86_64
Red Hat Global File System 3WS - i386, ia64, x86_64
3. Description:
The Red Hat Global File System (GFS) allows a cluster of Linux servers to
share data in a common pool of storage.
A flaw was found in the gfs_lock() implementation. The GFS locking code
could skip the lock operation for files that have the S_ISGID bit
(set-group-ID on execution) in their mode set. A local, unprivileged user
on a system that has a GFS file system mounted could use this flaw to cause
a kernel panic. (CVE-2010-0727)
As well, these updated GFS packages are in sync with the latest kernel
(2.4.21-63.EL). The modules in earlier GFS packages fail to load because
they do not match the running kernel. It is possible to force-load the
modules; however, with this update, force-loading the modules is not
required. (BZ#525198)
Users are advised to upgrade to these latest GFS packages, which resolve
this issue and are updated for use with the 2.4.21-63.EL kernel.
4. Solution:
Before applying this update, make sure all previously-released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259
5. Bugs fixed (http://bugzilla.redhat.com/):
525198 - Need rebuild for 2.4.21-63.EL kernel
570863 - CVE-2010-0727 bug in GFS/GFS2 locking code leads to dos
6. Package List:
Red Hat Global File System 3AS:
Source:
ftp://updates.redhat.com/enterprise/3AS/en/RHGFS/SRPMS/GFS-6.0.2.36-13.src.rpm
i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm
x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm
Red Hat Global File System 3ES:
Source:
ftp://updates.redhat.com/enterprise/3ES/en/RHGFS/SRPMS/GFS-6.0.2.36-13.src.rpm
i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm
x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm
Red Hat Global File System 3WS:
Source:
ftp://updates.redhat.com/enterprise/3WS/en/RHGFS/SRPMS/GFS-6.0.2.36-13.src.rpm
i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm
x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
https://www.redhat.com/security/data/cve/CVE-2010-0727.html
http://www.redhat.com/security/updates/classification/#moderate
8. Contact:
The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2010 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFLsjvRXlSAg2UNWIIRAuv8AKCq0i++UxQhdufnkegmQLfvCNlOKACfbFKf
AnIoy/nWBqZAdUYgR7582hQ=
=MeBe
-----END PGP SIGNATURE-----
"
RHSA-2010:0333-01 Critical: seamonkey security updateCypress Hill ‘Trouble Seeker’ collaboration clip
"Ubuntu Security Notice USN-922-1 March 31, 2010
libnss-db vulnerability
CVE-2010-0826
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 8.04 LTS:
libnss-db 2.2.3pre1-3ubuntu1.8.04.2
Ubuntu 8.10:
libnss-db 2.2.3pre1-3ubuntu1.8.10.2
Ubuntu 9.04:
libnss-db 2.2.3pre1-3ubuntu3.9.04.2
Ubuntu 9.10:
libnss-db 2.2.3pre1-3ubuntu3.9.10.2
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
Stephane Chazelas discovered that libnss-db did not correctly set up a
database environment. A local attacker could exploit this to read the
first line of arbitrary files, leading to a loss of privacy and possibly
privilege escalation.
Updated packages for Ubuntu 8.04 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.04.2.diff.gz
Size/MD5: 517634 340efc402c8b2f7326c3f16ab694d0df
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.04.2.dsc
Size/MD5: 1022 69032365bd9f24e8a99cbc8d68eb415e
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1.orig.tar.gz
Size/MD5: 235360 b4440ba2865d28e9068e465426c19ede
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.04.2_amd64.deb
Size/MD5: 27790 5b4f1ca2abf0c63e88c1dc3ea9b2e862
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.04.2_i386.deb
Size/MD5: 26078 333db9551f6d7b13a1c7e77abe8a8d64
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.04.2_lpia.deb
Size/MD5: 25830 71fcfc9642e9d41f4023a481487a12e0
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.04.2_powerpc.deb
Size/MD5: 29488 3526a671bc2f498945b630e2801a0120
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.04.2_sparc.deb
Size/MD5: 25974 1d3286113878cd972956710285c28aef
Updated packages for Ubuntu 8.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.10.2.diff.gz
Size/MD5: 520678 30aa88974f0353eb151484fdb08221a7
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.10.2.dsc
Size/MD5: 1454 3d5c2f0c417203490962f6993e07fc7a
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1.orig.tar.gz
Size/MD5: 235360 b4440ba2865d28e9068e465426c19ede
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.10.2_amd64.deb
Size/MD5: 27864 1f8814425488e56279bc3cafa98a344b
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.10.2_i386.deb
Size/MD5: 26102 2a393ea3d246bdb80fb785ed9f385f08
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.10.2_lpia.deb
Size/MD5: 26030 80e48bbb31ba51552a26eba264e2f3a0
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.10.2_powerpc.deb
Size/MD5: 29406 3742ba8e8b62b4417ba6063511076dc7
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu1.8.10.2_sparc.deb
Size/MD5: 26192 7fac30eec8b18445296530c21a0ac54e
Updated packages for Ubuntu 9.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.04.2.diff.gz
Size/MD5: 520796 8b8385951a229138681591fc6d9c066d
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.04.2.dsc
Size/MD5: 1454 bd14227b2e022d15b27dc7376cb78b44
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1.orig.tar.gz
Size/MD5: 235360 b4440ba2865d28e9068e465426c19ede
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.04.2_amd64.deb
Size/MD5: 27994 4af7bd72b6cf6f8787f761e49bbda5f4
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.04.2_i386.deb
Size/MD5: 26232 c97642d832eaf8f90b3d563434c9498d
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.04.2_lpia.deb
Size/MD5: 26138 a38eedb037ba1eeb93ee0d4a35233869
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.04.2_powerpc.deb
Size/MD5: 29550 b1fdb2c966e8e81425a5838ef043a26f
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.04.2_sparc.deb
Size/MD5: 26250 e7a918fec55b148e9ff3d749e217387e
Updated packages for Ubuntu 9.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.10.2.diff.gz
Size/MD5: 520798 8bfc7f33c0f7ced9ca4cc47c854c11e9
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.10.2.dsc
Size/MD5: 1454 b79b2833b0c30cd92edb44513837e53c
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1.orig.tar.gz
Size/MD5: 235360 b4440ba2865d28e9068e465426c19ede
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.10.2_amd64.deb
Size/MD5: 28130 14a4238962ee33e44489d94e4dbfeddb
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.10.2_i386.deb
Size/MD5: 26372 47716613b66e9ee0be23cc46f7493bf2
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.10.2_lpia.deb
Size/MD5: 26130 93caa6343ce3d324b029b213ed95a257
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.10.2_powerpc.deb
Size/MD5: 27488 e400c27ac8269da19c2e2c26253652d9
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3ubuntu3.9.10.2_sparc.deb
Size/MD5: 26234 0611d6a34a988914154ef6484e7472d5
--uQr8t48UFsdbeI+V
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Kees Cook
iEYEARECAAYFAkuzpU0ACgkQH/9LqRcGPm0l5gCcCN+lOP6jP3cKB/eAJNu7ykbG
AgwAmgMO5O0rYnTgXQCSDB9jXLoRbxFk
=JFPO
-----END PGP SIGNATURE-----
"
USN-917-1: Puppet vulnerabilitiesHawkwind and Hadouken! to play GuilFest
"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- ------------------------------------------------------------------------
Debian Security Advisory DSA-2027-1 security@debian.org
http://www.debian.org/security/ Moritz Muehlenhoff
April 03, 2010 http://www.debian.org/security/faq
- ------------------------------------------------------------------------
Package : xulrunner
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178 CVE-2010-0179
Several remote vulnerabilities have been discovered in Xulrunner, a
runtime environment for XUL applications, such as the Iceweasel web
browser. The Common Vulnerabilities and Exposures project identifies
the following problems:
CVE-2010-0174
Jesse Ruderman and Ehsan Akhgari discovered crashes in the layout
engine, which might allow the execution of arbitrary code.
CVE-2010-0175
It was discovered that incorrect memory handling in the XUL event
handler might allow the execution of arbitrary code.
CVE-2010-0176
It was discovered that incorrect memory handling in the XUL event
handler might allow the execution of arbitrary code.
CVE-2010-0177
It was discovered that incorrect memory handling in the plugin code
might allow the execution of arbitrary code.
CVE-2010-0178
Paul Stone discovered that forced drag-and-drop events could lead to
Chrome privilege escalation.
CVE-2010-0179
It was discovered that a programming error in the XMLHttpRequestSpy
module could lead to the execution of arbitrary code.
For the stable distribution (lenny), these problems have been fixed in
version 1.9.0.19-1.
For the unstable distribution (sid), these problems will be fixed soon.
We recommend that you upgrade your xulrunner packages.
Upgrade instructions
- --------------------
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 5.0 alias lenny
- --------------------------------
Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.
Source archives:
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.19.orig.tar.gz
Size/MD5 checksum: 44174623 83667df1e46399960593fdd8832e958e
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.19-1.diff.gz
Size/MD5 checksum: 116550 6c9e415004f27291e49f84e90d1d0131
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.19-1.dsc
Size/MD5 checksum: 1755 e04cb5b6bd5b8b7f9add59c8a806e3c8
Architecture independent packages:
http://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.9.0.19-1_all.deb
Size/MD5 checksum: 1465282 ce022b6790d6e14f4b788c308653dab8
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 9484100 a782bd0ed837f3432c71a109dd98d045
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 223290 ecb8f397d3e6c7463b1c24c0a8ee3675
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 433032 7eec73671d538f485671874579557bc5
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 51124160 1a6dcf57c7d1185c6d95ea4d8bad1f12
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 165330 ee07c899e85d144a8f04ecb462e1c780
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 113322 ac5b08d50ccb70971bb42f44dd938eb3
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 3356812 f445e0ef422d18b9428ee8190810eb5f
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 72410 b6055fee3f283a3b4f299398d156a21a
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_alpha.deb
Size/MD5 checksum: 940016 fc6778b3d408736e10d43b5f30d2469a
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 70096 59959a92c5cd12582b36000575b81b98
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 223180 7b656ca6976ca0bc5e5dac21a2566807
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 890448 643a3817476fd091dca841dfcefd4584
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 101702 96847a84ad24da47f98b4b332870c6bb
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 374384 85617766ed0a0ac960db1664b51f7891
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 152132 edcab736e161e97cf9738f43aecf2272
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 50350940 d38916e2024e9dc46dc40a30da643f2a
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 3290136 7b32902cd2a92a45a4b8f7163b684ad9
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_amd64.deb
Size/MD5 checksum: 7730682 b4f1fc1f804898e1e6e787c1e826dfcf
arm architecture (ARM)
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_arm.deb
Size/MD5 checksum: 140840 9213b7e72b0a4089d5e9220a3c2d1c59
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_arm.deb
Size/MD5 checksum: 815414 c2ecc249eaaf006274019578d9325467
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_arm.deb
Size/MD5 checksum: 84082 5a539ed642fe58a23f7e36046d6880f7
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_arm.deb
Size/MD5 checksum: 222238 67145776fd90e6218a1b75e6c6b7c3d9
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_arm.deb
Size/MD5 checksum: 49312054 9aa19e14aacb0afaced2067f9923ea0b
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_arm.deb
Size/MD5 checksum: 6798174 3706217040f237a960bc122fc7fee5dd
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_arm.deb
Size/MD5 checksum: 350754 1d4d221f446d90b0d6e4b6b86f4fedbd
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_arm.deb
Size/MD5 checksum: 3583612 899a0b80111ae54cf2f97ba747f7e90f
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_arm.deb
Size/MD5 checksum: 68406 941ade1edf2e875e257b65334c85ad57
armel architecture (ARM EABI)
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_armel.deb
Size/MD5 checksum: 84618 8b9e421b08f62fa826d4d4559d65657a
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_armel.deb
Size/MD5 checksum: 353042 3ad84aaa456eef02cf30301ffcbcb331
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_armel.deb
Size/MD5 checksum: 142304 a1d731a41a4c20089cdb96eeeb52b82c
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_armel.deb
Size/MD5 checksum: 822678 6f6677d15e6995acc40b2a01867a8dff
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_armel.deb
Size/MD5 checksum: 3583134 257b1b81c726f5e62968119519bbe0a6
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_armel.deb
Size/MD5 checksum: 223240 c0c70b778f57a1fb6fa56a4d10a04757
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_armel.deb
Size/MD5 checksum: 6959862 9484bbf6d85604dc0bbadb10f2205795
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_armel.deb
Size/MD5 checksum: 70574 1ff9b320aa648dbeebf3558cdf33d266
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_armel.deb
Size/MD5 checksum: 50147836 73702b83786ef3b8313edb56b29359f1
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 412450 a484d05bdf756bf3c4f11d47d7d9b0ae
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 223022 0d4a5aa91ed4938685cbc2dc946b1624
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 106090 ae7211d323ac2cf55efb86320d24f1d9
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 51231378 0a89533b5c3cb6b30f86fc9305ba3699
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 71534 b28b5e9086c3c714e41cb291caafb5e1
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 158976 00d4f5c739aad8069d677d83424e523e
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 898452 63b29a8fee489017233085ef111deff4
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 3623488 b11650685105902470f644985c3ee4fb
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_hppa.deb
Size/MD5 checksum: 9517850 ef0a7bab2097c89458e1df4712bfe818
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_i386.deb
Size/MD5 checksum: 68224 d79dbbd49ccd869fbb75ba6a6463e824
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_i386.deb
Size/MD5 checksum: 140848 8a2c2187f946dcee05fcb6a8ea7b2348
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_i386.deb
Size/MD5 checksum: 3569760 2fcc2fff9a8622c93849bcd52a95d66b
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_i386.deb
Size/MD5 checksum: 851994 10cebc4ce2b519229be78e0cb5b6bf24
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_i386.deb
Size/MD5 checksum: 350988 81024ae846f8ef96e317c2f9fc732420
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_i386.deb
Size/MD5 checksum: 222056 206b45fc3245d48c117b09ff9cf90f3b
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_i386.deb
Size/MD5 checksum: 82716 22d5b3764a6dcd3bc35b5577a5de7bc0
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_i386.deb
Size/MD5 checksum: 49523498 54a2e4f0ed19be5b0978ace5a379cb26
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_i386.deb
Size/MD5 checksum: 6604388 7b0276ee4f8bb91d7900af2b437aa15b
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 11307954 5f41a2e3292471699098a71dc7e07d86
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 223272 53b380b4a2206b8e08239317210490db
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 811282 b2bb56fb4744608c5a6d9adaa11ac956
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 121662 87ae39bfee9b50c9530d8b862d0ec8ab
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 542262 a490459aa56a72227d746771c7e4fd38
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 49705360 fbf406c88d94e9df58b20c3860368a2f
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 3399446 e35b0acdbbe8ea41549c5408b3c994e4
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 180336 94e52072a9edeefebb3639b78e0906b9
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_ia64.deb
Size/MD5 checksum: 76664 2d9a7ae2827fb63f192a4a19b4b52dff
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 3592586 55c062ecc411207bd989b0c90043e669
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 152718 0588b69278fa88cc4e46ee06b556b0c1
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 363498 8f3cf54da3915e67381812b1b6443dd1
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 888474 0ef63edd8c0adbe499bd669910e1e801
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 94508 96f25e720c7fd9afef7b5f6307c7ce2c
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 7305390 3fb096941c22e896f65de9d05feab1e5
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 51430576 13d14a97056d060ef434c2371396b7eb
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 73504 94ef4eceab50e6bc4189abee7b5a4e02
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_powerpc.deb
Size/MD5 checksum: 223302 3129fdf4c4ac144ea9dd2eac197b810a
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 49375616 86a3efe68f31cd50c54cd732d1969869
http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 69526 9b077b92e08e5c424d3dda70bf9e0221
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 350202 9add4dc2667d1e66bfcecf3c51b20446
http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 143276 90f5793e4ef8289563a2aa0412d8f1f3
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 821462 70e73a7be0077bea49846ef049ec1a14
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 7173522 752cec72a8bc6f013a0e5ae4798fb9fa
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 88382 b0abf523058087e5f96d9acf0a8adb07
http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 222434 42ac86dea6c9bfbb986192440b6cf936
http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.19-1_sparc.deb
Size/MD5 checksum: 3569660 af4abe4b40d62e158ee09c4e6c908720
These files will probably be moved into the stable distribution on
its next update.
- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and http://packages.debian.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAku3f6QACgkQXm3vHE4uyloz9QCfbMp0wvuoy7Yfhsrcv0MN6/0c
ttYAoKWC4nERXKmdsRcyXgknTSvsults
=/ruO
-----END PGP SIGNATURE-----
"
Hawkwind and Hadouken! to play GuilFestDSA 2021-1: New spamass-milter packages fix remote command execution
"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: seamonkey security update
Advisory ID: RHSA-2010:0333-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0333.html
Issue date: 2010-03-30
CVE Names: CVE-2010-0174 CVE-2010-0175 CVE-2010-0176
CVE-2010-0177
=====================================================================
1. Summary:
Updated seamonkey packages that fix several security issues are now
available for Red Hat Enterprise Linux 3 and 4.
The Red Hat Security Response Team has rated this update as having critical
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux Desktop version 4 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64
3. Description:
SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.
Several use-after-free flaws were found in SeaMonkey. Visiting a web page
containing malicious content could result in SeaMonkey executing arbitrary
code with the privileges of the user running SeaMonkey. (CVE-2010-0175,
CVE-2010-0176, CVE-2010-0177)
Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-0174)
All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.
4. Solution:
Before applying this update, make sure all previously-released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259
5. Bugs fixed (http://bugzilla.redhat.com/):
578147 - CVE-2010-0174 Mozilla crashes with evidence of memory corruption
578149 - CVE-2010-0175 Mozilla remote code execution with use-after-free in nsTreeSelection
578150 - CVE-2010-0176 Mozilla Dangling pointer vulnerability in nsTreeContentView
578152 - CVE-2010-0177 Mozilla Dangling pointer vulnerability in nsPluginArray
6. Package List:
Red Hat Enterprise Linux AS version 3:
Source:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/seamonkey-1.0.9-0.52.el3.src.rpm
i386:
seamonkey-1.0.9-0.52.el3.i386.rpm
seamonkey-chat-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-devel-1.0.9-0.52.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.i386.rpm
seamonkey-mail-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.i386.rpm
ia64:
seamonkey-1.0.9-0.52.el3.ia64.rpm
seamonkey-chat-1.0.9-0.52.el3.ia64.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.ia64.rpm
seamonkey-devel-1.0.9-0.52.el3.ia64.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.ia64.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.ia64.rpm
seamonkey-mail-1.0.9-0.52.el3.ia64.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.ia64.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.ia64.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.ia64.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.ia64.rpm
ppc:
seamonkey-1.0.9-0.52.el3.ppc.rpm
seamonkey-chat-1.0.9-0.52.el3.ppc.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.ppc.rpm
seamonkey-devel-1.0.9-0.52.el3.ppc.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.ppc.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.ppc.rpm
seamonkey-mail-1.0.9-0.52.el3.ppc.rpm
seamonkey-nspr-1.0.9-0.52.el3.ppc.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.ppc.rpm
seamonkey-nss-1.0.9-0.52.el3.ppc.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.ppc.rpm
s390:
seamonkey-1.0.9-0.52.el3.s390.rpm
seamonkey-chat-1.0.9-0.52.el3.s390.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.s390.rpm
seamonkey-devel-1.0.9-0.52.el3.s390.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.s390.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.s390.rpm
seamonkey-mail-1.0.9-0.52.el3.s390.rpm
seamonkey-nspr-1.0.9-0.52.el3.s390.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.s390.rpm
seamonkey-nss-1.0.9-0.52.el3.s390.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.s390.rpm
s390x:
seamonkey-1.0.9-0.52.el3.s390x.rpm
seamonkey-chat-1.0.9-0.52.el3.s390x.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.s390.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.s390x.rpm
seamonkey-devel-1.0.9-0.52.el3.s390x.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.s390x.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.s390x.rpm
seamonkey-mail-1.0.9-0.52.el3.s390x.rpm
seamonkey-nspr-1.0.9-0.52.el3.s390.rpm
seamonkey-nspr-1.0.9-0.52.el3.s390x.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.s390x.rpm
seamonkey-nss-1.0.9-0.52.el3.s390.rpm
seamonkey-nss-1.0.9-0.52.el3.s390x.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.s390x.rpm
x86_64:
seamonkey-1.0.9-0.52.el3.i386.rpm
seamonkey-1.0.9-0.52.el3.x86_64.rpm
seamonkey-chat-1.0.9-0.52.el3.x86_64.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.x86_64.rpm
seamonkey-devel-1.0.9-0.52.el3.x86_64.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.x86_64.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.x86_64.rpm
seamonkey-mail-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.x86_64.rpm
Red Hat Desktop version 3:
Source:
ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/seamonkey-1.0.9-0.52.el3.src.rpm
i386:
seamonkey-1.0.9-0.52.el3.i386.rpm
seamonkey-chat-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-devel-1.0.9-0.52.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.i386.rpm
seamonkey-mail-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.i386.rpm
x86_64:
seamonkey-1.0.9-0.52.el3.i386.rpm
seamonkey-1.0.9-0.52.el3.x86_64.rpm
seamonkey-chat-1.0.9-0.52.el3.x86_64.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.x86_64.rpm
seamonkey-devel-1.0.9-0.52.el3.x86_64.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.x86_64.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.x86_64.rpm
seamonkey-mail-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.x86_64.rpm
Red Hat Enterprise Linux ES version 3:
Source:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/seamonkey-1.0.9-0.52.el3.src.rpm
i386:
seamonkey-1.0.9-0.52.el3.i386.rpm
seamonkey-chat-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-devel-1.0.9-0.52.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.i386.rpm
seamonkey-mail-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.i386.rpm
ia64:
seamonkey-1.0.9-0.52.el3.ia64.rpm
seamonkey-chat-1.0.9-0.52.el3.ia64.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.ia64.rpm
seamonkey-devel-1.0.9-0.52.el3.ia64.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.ia64.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.ia64.rpm
seamonkey-mail-1.0.9-0.52.el3.ia64.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.ia64.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.ia64.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.ia64.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.ia64.rpm
x86_64:
seamonkey-1.0.9-0.52.el3.i386.rpm
seamonkey-1.0.9-0.52.el3.x86_64.rpm
seamonkey-chat-1.0.9-0.52.el3.x86_64.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.x86_64.rpm
seamonkey-devel-1.0.9-0.52.el3.x86_64.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.x86_64.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.x86_64.rpm
seamonkey-mail-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.x86_64.rpm
Red Hat Enterprise Linux WS version 3:
Source:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/seamonkey-1.0.9-0.52.el3.src.rpm
i386:
seamonkey-1.0.9-0.52.el3.i386.rpm
seamonkey-chat-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-devel-1.0.9-0.52.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.i386.rpm
seamonkey-mail-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.i386.rpm
ia64:
seamonkey-1.0.9-0.52.el3.ia64.rpm
seamonkey-chat-1.0.9-0.52.el3.ia64.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.ia64.rpm
seamonkey-devel-1.0.9-0.52.el3.ia64.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.ia64.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.ia64.rpm
seamonkey-mail-1.0.9-0.52.el3.ia64.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.ia64.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.ia64.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.ia64.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.ia64.rpm
x86_64:
seamonkey-1.0.9-0.52.el3.i386.rpm
seamonkey-1.0.9-0.52.el3.x86_64.rpm
seamonkey-chat-1.0.9-0.52.el3.x86_64.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.i386.rpm
seamonkey-debuginfo-1.0.9-0.52.el3.x86_64.rpm
seamonkey-devel-1.0.9-0.52.el3.x86_64.rpm
seamonkey-dom-inspector-1.0.9-0.52.el3.x86_64.rpm
seamonkey-js-debugger-1.0.9-0.52.el3.x86_64.rpm
seamonkey-mail-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nspr-1.0.9-0.52.el3.i386.rpm
seamonkey-nspr-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nspr-devel-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nss-1.0.9-0.52.el3.i386.rpm
seamonkey-nss-1.0.9-0.52.el3.x86_64.rpm
seamonkey-nss-devel-1.0.9-0.52.el3.x86_64.rpm
Red Hat Enterprise Linux AS version 4:
Source:
ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/seamonkey-1.0.9-54.el4_8.src.rpm
i386:
seamonkey-1.0.9-54.el4_8.i386.rpm
seamonkey-chat-1.0.9-54.el4_8.i386.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.i386.rpm
seamonkey-devel-1.0.9-54.el4_8.i386.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.i386.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.i386.rpm
seamonkey-mail-1.0.9-54.el4_8.i386.rpm
ia64:
seamonkey-1.0.9-54.el4_8.ia64.rpm
seamonkey-chat-1.0.9-54.el4_8.ia64.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.ia64.rpm
seamonkey-devel-1.0.9-54.el4_8.ia64.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.ia64.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.ia64.rpm
seamonkey-mail-1.0.9-54.el4_8.ia64.rpm
ppc:
seamonkey-1.0.9-54.el4_8.ppc.rpm
seamonkey-chat-1.0.9-54.el4_8.ppc.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.ppc.rpm
seamonkey-devel-1.0.9-54.el4_8.ppc.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.ppc.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.ppc.rpm
seamonkey-mail-1.0.9-54.el4_8.ppc.rpm
s390:
seamonkey-1.0.9-54.el4_8.s390.rpm
seamonkey-chat-1.0.9-54.el4_8.s390.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.s390.rpm
seamonkey-devel-1.0.9-54.el4_8.s390.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.s390.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.s390.rpm
seamonkey-mail-1.0.9-54.el4_8.s390.rpm
s390x:
seamonkey-1.0.9-54.el4_8.s390x.rpm
seamonkey-chat-1.0.9-54.el4_8.s390x.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.s390x.rpm
seamonkey-devel-1.0.9-54.el4_8.s390x.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.s390x.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.s390x.rpm
seamonkey-mail-1.0.9-54.el4_8.s390x.rpm
x86_64:
seamonkey-1.0.9-54.el4_8.x86_64.rpm
seamonkey-chat-1.0.9-54.el4_8.x86_64.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.x86_64.rpm
seamonkey-devel-1.0.9-54.el4_8.x86_64.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.x86_64.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.x86_64.rpm
seamonkey-mail-1.0.9-54.el4_8.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
Source:
ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/seamonkey-1.0.9-54.el4_8.src.rpm
i386:
seamonkey-1.0.9-54.el4_8.i386.rpm
seamonkey-chat-1.0.9-54.el4_8.i386.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.i386.rpm
seamonkey-devel-1.0.9-54.el4_8.i386.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.i386.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.i386.rpm
seamonkey-mail-1.0.9-54.el4_8.i386.rpm
x86_64:
seamonkey-1.0.9-54.el4_8.x86_64.rpm
seamonkey-chat-1.0.9-54.el4_8.x86_64.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.x86_64.rpm
seamonkey-devel-1.0.9-54.el4_8.x86_64.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.x86_64.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.x86_64.rpm
seamonkey-mail-1.0.9-54.el4_8.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
Source:
ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/seamonkey-1.0.9-54.el4_8.src.rpm
i386:
seamonkey-1.0.9-54.el4_8.i386.rpm
seamonkey-chat-1.0.9-54.el4_8.i386.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.i386.rpm
seamonkey-devel-1.0.9-54.el4_8.i386.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.i386.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.i386.rpm
seamonkey-mail-1.0.9-54.el4_8.i386.rpm
ia64:
seamonkey-1.0.9-54.el4_8.ia64.rpm
seamonkey-chat-1.0.9-54.el4_8.ia64.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.ia64.rpm
seamonkey-devel-1.0.9-54.el4_8.ia64.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.ia64.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.ia64.rpm
seamonkey-mail-1.0.9-54.el4_8.ia64.rpm
x86_64:
seamonkey-1.0.9-54.el4_8.x86_64.rpm
seamonkey-chat-1.0.9-54.el4_8.x86_64.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.x86_64.rpm
seamonkey-devel-1.0.9-54.el4_8.x86_64.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.x86_64.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.x86_64.rpm
seamonkey-mail-1.0.9-54.el4_8.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
Source:
ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/seamonkey-1.0.9-54.el4_8.src.rpm
i386:
seamonkey-1.0.9-54.el4_8.i386.rpm
seamonkey-chat-1.0.9-54.el4_8.i386.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.i386.rpm
seamonkey-devel-1.0.9-54.el4_8.i386.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.i386.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.i386.rpm
seamonkey-mail-1.0.9-54.el4_8.i386.rpm
ia64:
seamonkey-1.0.9-54.el4_8.ia64.rpm
seamonkey-chat-1.0.9-54.el4_8.ia64.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.ia64.rpm
seamonkey-devel-1.0.9-54.el4_8.ia64.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.ia64.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.ia64.rpm
seamonkey-mail-1.0.9-54.el4_8.ia64.rpm
x86_64:
seamonkey-1.0.9-54.el4_8.x86_64.rpm
seamonkey-chat-1.0.9-54.el4_8.x86_64.rpm
seamonkey-debuginfo-1.0.9-54.el4_8.x86_64.rpm
seamonkey-devel-1.0.9-54.el4_8.x86_64.rpm
seamonkey-dom-inspector-1.0.9-54.el4_8.x86_64.rpm
seamonkey-js-debugger-1.0.9-54.el4_8.x86_64.rpm
seamonkey-mail-1.0.9-54.el4_8.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
https://www.redhat.com/security/data/cve/CVE-2010-0174.html
https://www.redhat.com/security/data/cve/CVE-2010-0175.html
https://www.redhat.com/security/data/cve/CVE-2010-0176.html
https://www.redhat.com/security/data/cve/CVE-2010-0177.html
http://www.redhat.com/security/updates/classification/#critical
8. Contact:
The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2010 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFLsomwXlSAg2UNWIIRAr3nAJwO72g8f348gtHjFQuO6aX6swVtvwCgkgqt
rcZIuKhXD85xhWcWNwHFl28=
=V5O0
-----END PGP SIGNATURE-----
"
Justin Bieber would date a fanRHSA-2010:0165-01 Moderate: nss security update
"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- ------------------------------------------------------------------------
Debian Security Advisory DSA-2025-1 security@debian.org
http://www.debian.org/security/ Steffen Joeris
March 31, 2010 http://www.debian.org/security/faq
- ------------------------------------------------------------------------
Package : icedove
Vulnerability : several vulnerabilities
Problem type : remote
Debian-specific: no
CVE IDs : CVE-2009-2408 CVE-2009-2404 CVE-2009-2463
CVE-2009-3072 CVE-2009-3075 CVE-2010-0163
Several remote vulnerabilities have been discovered in the Icedove
mail client, an unbranded version of the Thunderbird mail client. The
Common Vulnerabilities and Exposures project identifies the following
problems:
CVE-2009-2408
Dan Kaminsky and Moxie Marlinspike discovered that icedove does not
properly handle a '
Hawkwind and Hadouken! to play GuilFestDSA 2021-1: New spamass-milter packages fix remote command execution
Archives
-
▼
2011
(171)
-
▼
November
(17)
- PC/104-Plus board gets guillotined to save power
- OpenSUSE 12.1 ships with GNOME 3.2, SystemD, Snapp...
- O'Reilly book tackles embedded system development
- OpenTTD/phpDocumentor Updates for Gentoo
- 36 CentOS Updates
- Adobe Fixes 12 Critical Flaws in Flash
- Compact networking appliance offers optional Wi-Fi...
- $19/month Android plan is 'unlimited' thanks to Wi-Fi
- ETX module gets DDR3 refresh
- How to remove autohide option in unity on ubuntu 1...
- 6 CentOS Updates
- Oracle JRE/JDK Security Update for Gentoo
- Ubuntu 11.10 Review
- 6 CentOS Updates
- Nginx 1.0.9 for Debian
- Installing Nginx With PHP5 (And PHP-FPM) And MySQL...
- All-in-one POS system has plenty of ports
-
▼
November
(17)