Package: xulrunner-1.9 Version: 1.9.0.4-2 Severity: normal
Apart from xulrunner iceweasel and flashplayer are needed to trigger the problem. ii iceweasel 3.0.4-1 Adobe flashplayer for Linux (either version 9.0 r31 or 10.0 r12) Without grsecurity I'd expect a security hole. With grsecurity flash and iceweasel are killed. All open links are lost and iceweasel can't restore the old session. (The new session starts the same scripts and will be killed again. Therefore there is a possibility to lose information in open links). One of the effected sites: www.tokyopop.com (the standard flash script). If flash does not start iceweasel is not killed. Even if the plugin is at fault, xulrunner and iceweasel should not crash! # dmesg ... grsec: signal 11 sent to /usr/lib/xulrunner-1.9/xulrunner-stub[firefox-bin:22608] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:22316] u id/euid:1000/1000 gid/egid:1000/1000 grsec: signal 11 sent to /usr/lib/xulrunner-1.9/xulrunner-stub[firefox-bin:22608] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:22316] u id/euid:1000/1000 gid/egid:1000/1000 PAX: execution attempt in: <anonymous mapping>, 4b44c000-4b44d000 4b44c000 PAX: terminating task: /usr/lib/xulrunner-1.9/xulrunner-stub(firefox-bin):22608, uid/euid: 1000/1000, PC: 4b44c000, SP: 5f0a488c PAX: bytes at PC: 81 fc 68 3b 04 5f 0f 82 85 00 00 00 55 8b ec 81 ec 10 00 00 PAX: bytes at SP-4: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib/xulrunner-1.9/xulrunner-stub[firefox-bin:22608] uid/eui d:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:22316] uid/euid:1000/1000 gid/egid:1000/1000 -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (600, 'unstable'), (70, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.27.7-grsec-200811250412-1 (PREEMPT) Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages xulrunner-1.9 depends on: ii libatk1.0-0 1.22.0-1 The ATK accessibility toolkit ii libbz2-1.0 1.0.5-1 high-quality block-sorting file co ii libc6 2.7-16 GNU C Library: Shared libraries ii libcairo2 1.6.4-6.1 The Cairo 2D vector graphics libra ii libfontconfig1 2.6.0-3 generic font configuration library ii libfreetype6 2.3.7-2 FreeType 2 font engine, shared lib ii libgcc1 1:4.3.2-1 GCC support library ii libglib2.0-0 2.16.6-1 The GLib library of C routines ii libgtk2.0-0 2.12.11-4 The GTK+ graphical user interface ii libhunspell-1.2-0 1.2.6-1 spell checker and morphological an ii libjpeg62 6b-14 The Independent JPEG Group's JPEG ii liblcms1 1.17.dfsg-1 Color management library ii libmozjs1d 1.9.0.4-2 The Mozilla SpiderMonkey JavaScrip ii libnspr4-0d 4.7.1-4 NetScape Portable Runtime Library ii libnss3-1d 3.12.0-5 Network Security Service libraries ii libpango1.0-0 1.20.5-3 Layout and rendering of internatio ii libpng12-0 1.2.27-2 PNG library - runtime ii libreadline5 5.2-3 GNU readline and history libraries ii libsqlite3-0 3.5.9-6 SQLite 3 shared library ii libstartup-notificatio 0.9-1 library for program launch feedbac ii libstdc++6 4.3.2-1 The GNU Standard C++ Library v3 ii libx11-6 2:1.1.5-2 X11 client-side library ii libxrender1 1:0.9.4-2 X Rendering Extension client libra ii libxt6 1:1.0.5-3 X11 toolkit intrinsics library ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime xulrunner-1.9 recommends no packages. Versions of packages xulrunner-1.9 suggests: pn xulrunner-1.9-gnome-support <none> (no description available) -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
