-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 11 Jan 2009 20:05:46 +0100 Source: xulrunner Binary: libmozjs0d-dbg libnspr4-0d-dbg libxul0d-dbg xulrunner libnspr4-dev libxul0d libnss3-tools xulrunner-gnome-support libnspr4-0d libsmjs-dev libnss3-0d libmozjs0d libmozjs-dev python-xpcom libnss3-0d-dbg libxul-common libmozillainterfaces-java spidermonkey-bin libnss3-dev libxul-dev libsmjs1 Architecture: source all amd64 Version: 1.8.0.15~pre080614i-0etch1 Distribution: stable-security Urgency: low Maintainer: Mike Hommey <[email protected]> Changed-By: Alexander Sack <[email protected]> Description: libmozillainterfaces-java - XPCOM bindings for Java libmozjs-dev - Development files for the Mozilla SpiderMonkey JavaScript library libmozjs0d - The Mozilla SpiderMonkey JavaScript library libmozjs0d-dbg - Development files for the Mozilla SpiderMonkey JavaScript library libnspr4-0d - NetScape Portable Runtime Library libnspr4-0d-dbg - Development files for the NetScape Portable Runtime library libnspr4-dev - Development files for the NetScape Portable Runtime library libnss3-0d - Network Security Service libraries libnss3-0d-dbg - Development files for the Network Security Service libraries libnss3-dev - Development files for the Network Security Service libraries libnss3-tools - Network Security Service tools libsmjs-dev - Migration package for the Mozilla SpiderMonkey JavaScript library libsmjs1 - Migration package for the Mozilla SpiderMonkey JavaScript library libxul-common - Gecko engine library - common files libxul-dev - Development files for the Gecko engine library libxul0d - Gecko engine library libxul0d-dbg - Development files for the Gecko engine library python-xpcom - XPCOM bindings for Python spidermonkey-bin - The SpiderMonkey Interpreter xulrunner - XUL + XPCOM application runner xulrunner-gnome-support - Support for Gnome in xulrunner applications Changes: xulrunner (1.8.0.15~pre080614i-0etch1) stable-security; urgency=low . [ Alexander Sack <[email protected]> ] * New security/stability upstream release (backports for 2.0.0.19) - Patches: http://people.ubuntu.com/~asac/mozilla-security/1.8.1.19/moz_1.8.0.15prepatches080614i.tar.gz - Tarball: http://people.ubuntu.com/~asac/mozilla-security/1.8.1.19/xulrunner_1.5.0.15pre080614i-source.tar.bz2 * Upstream advisories (v2.0.0.19): MFSA 2008-60 aka CVE-2008-5500 (layout) - Crashes with evidence of memory corruption (rv:1.9.0.5/1.8.1.19) MFSA 2008-61 aka CVE-2008-5503 - Information stealing via loadBindingDocument MFSA 2008-64 aka CVE-2008-5506 - XMLHttpRequest 302 response disclosure MFSA 2008-65 aka CVE-2008-5507 - Cross-domain data theft via script redirect error message MFSA 2008-66 aka CVE-2008-5508 - Errors parsing URLs with leading whitespace and control characters (fixed by bz451613) * MFSA 2008-68 aka CVE-2008-5511(XSS via XBL bindings to unloaded document), CVE-2008-5512(JavaScript privilege escalation) - XSS and JavaScript privilege escalation Files: 87dd485ac774e78373be5a196cbc8320 1981 devel optional xulrunner_1.8.0.15~pre080614i-0etch1.dsc 82b3061f947787bf267a36513a6bd2dd 43320191 devel optional xulrunner_1.8.0.15~pre080614i.orig.tar.gz 73ec26e81ce6e401845eb070aa26d909 971 devel optional xulrunner_1.8.0.15~pre080614i-0etch1.diff.gz d6685b7c5a83eb2fc383ad2284e0c300 208008 libdevel optional libnspr4-dev_1.8.0.15~pre080614i-0etch1_all.deb 03d96486a1cb92ca65b39376add42232 176532 libdevel optional libmozjs-dev_1.8.0.15~pre080614i-0etch1_all.deb 033e412379eab51f4608530af659596a 37402 libs optional libsmjs1_1.8.0.15~pre080614i-0etch1_all.deb a668ef6417fe2f868964b2e1f1cd9028 37436 libdevel optional libsmjs-dev_1.8.0.15~pre080614i-0etch1_all.deb 9935f278d06c5256a1cb6d34f6b43777 1052120 libs optional libxul-common_1.8.0.15~pre080614i-0etch1_all.deb f4c9fed2489696b18ecedf945729ffa7 2638014 libdevel optional libxul-dev_1.8.0.15~pre080614i-0etch1_all.deb f692e056f6eccb9633771a1b5d56d115 231436 libdevel optional libnss3-dev_1.8.0.15~pre080614i-0etch1_all.deb b8277c4699e9f2edc9131c525c72ac2a 1032570 libdevel extra libmozillainterfaces-java_1.8.0.15~pre080614i-0etch1_all.deb b7f981650c4b20db874b70a2bd6bc059 279116 devel optional xulrunner_1.8.0.15~pre080614i-0etch1_amd64.deb 4825855bdb9b5a8bb2c62436fde8ad7c 69626 devel optional xulrunner-gnome-support_1.8.0.15~pre080614i-0etch1_amd64.deb 19ab1c22cd55db2bc8ee33be7fff759b 149212 libs optional libnspr4-0d_1.8.0.15~pre080614i-0etch1_amd64.deb 4855bb5ffe73a231bb2a0d701616e7eb 305094 libdevel extra libnspr4-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb dbec2df715586df57acd7228a3175ef9 356260 libs optional libmozjs0d_1.8.0.15~pre080614i-0etch1_amd64.deb af22a3727a03e9bda037a329ee21df65 756112 libdevel extra libmozjs0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb 5d946fe8bf84c2e5514f0114ce77ac71 53664 interpreters optional spidermonkey-bin_1.8.0.15~pre080614i-0etch1_amd64.deb f975d16444059b3b9ae1b43c1a9c0cda 6345322 libs optional libxul0d_1.8.0.15~pre080614i-0etch1_amd64.deb 2aba2e701aac5639822ce0e6ed911948 45243162 libdevel extra libxul0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb 5493e297887f037ed4cdd9c2150e68ed 810610 libs optional libnss3-0d_1.8.0.15~pre080614i-0etch1_amd64.deb 269e0391c1bffea6f26c283457fdb5a3 671242 admin optional libnss3-tools_1.8.0.15~pre080614i-0etch1_amd64.deb ba7dcb523f47170cf40f8d07f078ff38 3180000 libdevel extra libnss3-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb 76ebe8f1cc4eb9a881fdea16732c2674 126976 python extra python-xpcom_1.8.0.15~pre080614i-0etch1_amd64.deb
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQIVAwUBSWpOv6BE/gcUDGZkAQJulBAAk/VpeT07s3Xry7BPH5nNaQ+BPp1ZejFd cNSF6ITgJcmsCyOLSW8FGBi8smU4f8OXPXBme9JtLDpKc3Y6iF979eAGGboPysIL +FyNhTYT0dpggF9RcyWEfcIVxXwKO4bOl/+4SCVFK/44fIZMOjwHl73yJN9A9hyd q7FFaFEEtJdw18jxhWOnIdUcwvKjXgmPSwhEuqr8+6GFBBuH5o0pscG60/whEJhM mU/AtAvIpqq7WoRy3Nda5bV1w4+PLoIXhJJbC+lnmK58PbazfXnaGlUmfIjJ3FtM xfMS9Hv5tp9L/QDd82xjWihwoUlifVAzu7HRb6EMv+XJYF4O1n5P4QIzTkCwDv3L ZAZDuNj7lKeROLcv/owLzPR6p0b6GCKYKtTEdlGsuVdC1gepmG9wzunP9iAsGa6y LH0uvM1vtsCG+Kf0rFkjS97kYvTYxMD4CFIipR+ezRJ3NFHq88bcnQX+Q05M2nqI Enf4sVtJ4x3HKnoq2ypLuYJ4D76bHOlQiCCz7p//u71ROENT6oH7PjQKab7mRlhv X5dnzM2DDUKak93GbnWDgsvQWoj18hgUqovZLueg0MMgK0J36kd3i+gud+P5HQqa NcuGU9zt572zzbOF2SeQ7zxzNo7DVlgF10SrA5NbkQhu4/3JCE3x1lgP8lgEW4kf Q+8m/GT3nsc= =Znzp -----END PGP SIGNATURE----- Accepted: libmozillainterfaces-java_1.8.0.15~pre080614i-0etch1_all.deb to pool/main/x/xulrunner/libmozillainterfaces-java_1.8.0.15~pre080614i-0etch1_all.deb libmozjs-dev_1.8.0.15~pre080614i-0etch1_all.deb to pool/main/x/xulrunner/libmozjs-dev_1.8.0.15~pre080614i-0etch1_all.deb libmozjs0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb libmozjs0d_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080614i-0etch1_amd64.deb libnspr4-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb libnspr4-0d_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080614i-0etch1_amd64.deb libnspr4-dev_1.8.0.15~pre080614i-0etch1_all.deb to pool/main/x/xulrunner/libnspr4-dev_1.8.0.15~pre080614i-0etch1_all.deb libnss3-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb libnss3-0d_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080614i-0etch1_amd64.deb libnss3-dev_1.8.0.15~pre080614i-0etch1_all.deb to pool/main/x/xulrunner/libnss3-dev_1.8.0.15~pre080614i-0etch1_all.deb libnss3-tools_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080614i-0etch1_amd64.deb libsmjs-dev_1.8.0.15~pre080614i-0etch1_all.deb to pool/main/x/xulrunner/libsmjs-dev_1.8.0.15~pre080614i-0etch1_all.deb libsmjs1_1.8.0.15~pre080614i-0etch1_all.deb to pool/main/x/xulrunner/libsmjs1_1.8.0.15~pre080614i-0etch1_all.deb libxul-common_1.8.0.15~pre080614i-0etch1_all.deb to pool/main/x/xulrunner/libxul-common_1.8.0.15~pre080614i-0etch1_all.deb libxul-dev_1.8.0.15~pre080614i-0etch1_all.deb to pool/main/x/xulrunner/libxul-dev_1.8.0.15~pre080614i-0etch1_all.deb libxul0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb libxul0d_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/libxul0d_1.8.0.15~pre080614i-0etch1_amd64.deb python-xpcom_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/python-xpcom_1.8.0.15~pre080614i-0etch1_amd64.deb spidermonkey-bin_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080614i-0etch1_amd64.deb xulrunner-gnome-support_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080614i-0etch1_amd64.deb xulrunner_1.8.0.15~pre080614i-0etch1.diff.gz to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614i-0etch1.diff.gz xulrunner_1.8.0.15~pre080614i-0etch1.dsc to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614i-0etch1.dsc xulrunner_1.8.0.15~pre080614i-0etch1_amd64.deb to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614i-0etch1_amd64.deb xulrunner_1.8.0.15~pre080614i.orig.tar.gz to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614i.orig.tar.gz -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
