ID

VAR-200609-1782

CVE

CVE-2006-4340

TITLE

OpenSSL SSLv2 client code fails to properly check for NULL

DESCRIPTION

Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462. A flaw in the OpenSSL library could allow a remote attacker to cause a denial of service on an affected application. The gzip program contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code or create a denial-of-service condition. Multiple RSA implementations fail to properly handle RSA signatures. This vulnerability may allow an attacker to forge RSA signatures. An attacker may exploit this issue to sign digital certificates or RSA keys and take advantage of trust relationships that depend on these credentials, possibly posing as a trusted party and signing a certificate or key. All versions prior to and including OpenSSL 0.9.7j and 0.9.8b are affected by this vulnerability. Updates are available. ---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available: http://secunia.com/quality_assurance_analyst/ http://secunia.com/web_application_security_specialist/ http://secunia.com/hardcore_disassembler_and_reverse_engineer/ ---------------------------------------------------------------------- TITLE: gzip Multiple Vulnerabilities SECUNIA ADVISORY ID: SA21996 VERIFY ADVISORY: http://secunia.com/advisories/21996/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: >From remote SOFTWARE: gzip 1.x http://secunia.com/product/4220/ DESCRIPTION: Tavis Ormandy has reported some vulnerabilities in gzip, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. 1) A boundary error within the "make_table()" function in unlzh.c can be used to modify certain stack data. tricking a user or automated system into unpacking a specially crafted archive file. tricking a user or automated system into unpacking a specially crafted "pack" archive file. 3) A buffer overflow within the "make_table()" function of gzip's LZH support can be exploited to cause a DoS and potentially to compromise a vulnerable system by e.g. tricking a user or automated system into unpacking an archive containing a specially crafted decoding table. 4) A NULL pointer dereference within the "huft_build()" function and an infinite loop within the LZH handling can be exploited to cause a DoS by e.g. tricking a user or automated system into unpacking a specially crafted archive file. The vulnerabilities have been reported in version 1.3.5. SOLUTION: Do not unpack untrusted archive files. PROVIDED AND/OR DISCOVERED BY: Tavis Ormandy, Google Security Team ORIGINAL ADVISORY: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676 OTHER REFERENCES: US-CERT VU#554780: http://www.kb.cert.org/vuls/id/554780 US-CERT VU#381508: http://www.kb.cert.org/vuls/id/381508 US-CERT VU#773548: http://www.kb.cert.org/vuls/id/773548 US-CERT VU#933712: http://www.kb.cert.org/vuls/id/933712 US-CERT VU#596848 http://www.kb.cert.org/vuls/id/596848 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ---------------------------------------------------------------------- . This update provides the latest Thunderbird to correct these issues. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4253 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4340 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4565 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4566 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4567 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4570 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4571 http://www.mozilla.org/security/announce/2006/mfsa2006-57.html http://www.mozilla.org/security/announce/2006/mfsa2006-58.html http://www.mozilla.org/security/announce/2006/mfsa2006-59.html http://www.mozilla.org/security/announce/2006/mfsa2006-60.html http://www.mozilla.org/security/announce/2006/mfsa2006-63.html http://www.mozilla.org/security/announce/2006/mfsa2006-64.html _______________________________________________________________________ Updated Packages: Mandriva Linux 2006.0: a0181eb9a6185c5d88f5509f5bcc6087 2006.0/i586/mozilla-thunderbird-1.5.0.7-0.1.20060mdk.i586.rpm 26f125bf90ec8d218f8d688a5daf5ecf 2006.0/i586/mozilla-thunderbird-bg-1.5.0.7-0.2.20060mdk.i586.rpm 8f5e179a0c9881cef43761c8711d3009 2006.0/i586/mozilla-thunderbird-ca-1.5.0.7-0.2.20060mdk.i586.rpm 4e3734cb2d452bbce35948a88750dd46 2006.0/i586/mozilla-thunderbird-cs-1.5.0.7-0.2.20060mdk.i586.rpm 0d99b2160e17d1a97986e4d06f881885 2006.0/i586/mozilla-thunderbird-da-1.5.0.7-0.2.20060mdk.i586.rpm 67f4cd0e512d5735d036347c8aec4011 2006.0/i586/mozilla-thunderbird-de-1.5.0.7-0.2.20060mdk.i586.rpm 84b473889fd98ca2eafcd799e4db29be 2006.0/i586/mozilla-thunderbird-devel-1.5.0.7-0.1.20060mdk.i586.rpm 098e11b85f8faab4473faf06e8455fd7 2006.0/i586/mozilla-thunderbird-el-1.5.0.7-0.2.20060mdk.i586.rpm 74b6cec28f2f0de66c30eb399091c220 2006.0/i586/mozilla-thunderbird-enigmail-1.5.0.7-0.1.20060mdk.i586.rpm 5e1c3f067f842f1d03c89e9264fdaf27 2006.0/i586/mozilla-thunderbird-enigmail-ca-1.5.0.7-0.2.20060mdk.i586.rpm 6d5dc8c2af7132285975c874958960de 2006.0/i586/mozilla-thunderbird-enigmail-cs-1.5.0.7-0.2.20060mdk.i586.rpm d7dbbd4f15edfe506fe52f88b1e0df1a 2006.0/i586/mozilla-thunderbird-enigmail-de-1.5.0.7-0.2.20060mdk.i586.rpm 14c407b36d9f6fba4a35b886b8298833 2006.0/i586/mozilla-thunderbird-enigmail-es-1.5.0.7-0.2.20060mdk.i586.rpm 4cc5161ff5bf80923eaf16a2031ef3e4 2006.0/i586/mozilla-thunderbird-enigmail-fi-1.5.0.7-0.2.20060mdk.i586.rpm 06eb24f632306f76325bafdb527fd08e 2006.0/i586/mozilla-thunderbird-enigmail-fr-1.5.0.7-0.2.20060mdk.i586.rpm d66d922480770e7edf2066f0451e0de7 2006.0/i586/mozilla-thunderbird-enigmail-hu-1.5.0.7-0.2.20060mdk.i586.rpm 0ddaff30c7f4b9c19e10594b75d8ed8a 2006.0/i586/mozilla-thunderbird-enigmail-it-1.5.0.7-0.2.20060mdk.i586.rpm f9212b1353e602d1ca8e7be99aa6db3e 2006.0/i586/mozilla-thunderbird-enigmail-ja-1.5.0.7-0.2.20060mdk.i586.rpm 21b38a631eaa54addf2d750547fd3b58 2006.0/i586/mozilla-thunderbird-enigmail-nb-1.5.0.7-0.2.20060mdk.i586.rpm 68f611b759152d557a7f45135607191f 2006.0/i586/mozilla-thunderbird-enigmail-nl-1.5.0.7-0.2.20060mdk.i586.rpm 2679ea75e3cc4bd872b0380fc63ddcff 2006.0/i586/mozilla-thunderbird-enigmail-pl-1.5.0.7-0.2.20060mdk.i586.rpm 9643d66d1873fbf1cf4bb84dd5569b02 2006.0/i586/mozilla-thunderbird-enigmail-pt-1.5.0.7-0.2.20060mdk.i586.rpm 44a205a8ae35838a93200621561b7a71 2006.0/i586/mozilla-thunderbird-enigmail-pt_BR-1.5.0.7-0.2.20060mdk.i586.rpm a9df7749d8f1b5171bdcb45672fff762 2006.0/i586/mozilla-thunderbird-enigmail-ru-1.5.0.7-0.2.20060mdk.i586.rpm 5adaa05b3e35a626c098095fee0bb9c4 2006.0/i586/mozilla-thunderbird-enigmail-zh_CN-1.5.0.7-0.2.20060mdk.i586.rpm ded4312b03b2075dc8659ddc5933a82d 2006.0/i586/mozilla-thunderbird-es-1.5.0.7-0.2.20060mdk.i586.rpm bbbbcc0092e77581b6ad41310e1e0ccb 2006.0/i586/mozilla-thunderbird-es_AR-1.5.0.7-0.2.20060mdk.i586.rpm 4f9eebcaa2e8a6a9c9dc5f53db69d958 2006.0/i586/mozilla-thunderbird-eu-1.5.0.7-0.2.20060mdk.i586.rpm bc486c122a05f427451f1ef12c53deb0 2006.0/i586/mozilla-thunderbird-fi-1.5.0.7-0.2.20060mdk.i586.rpm 88c23a128f315682f3868a1ac69286dc 2006.0/i586/mozilla-thunderbird-fr-1.5.0.7-0.2.20060mdk.i586.rpm be2c6a51bc70f952461024c94db6eee0 2006.0/i586/mozilla-thunderbird-ga-1.5.0.7-0.2.20060mdk.i586.rpm b73ccfffebbb496d361356630103238a 2006.0/i586/mozilla-thunderbird-he-1.5.0.7-0.2.20060mdk.i586.rpm 2e1c13b9fe4b34f15ac78ca994a73b4d 2006.0/i586/mozilla-thunderbird-hu-1.5.0.7-0.2.20060mdk.i586.rpm b5a1361c512d1ea8d2501e2b8e4f6550 2006.0/i586/mozilla-thunderbird-it-1.5.0.7-0.2.20060mdk.i586.rpm 244002fab18cca48992db394d79c88b4 2006.0/i586/mozilla-thunderbird-ja-1.5.0.7-0.2.20060mdk.i586.rpm 5ea1dd696a6d333a4da7002cf23c435e 2006.0/i586/mozilla-thunderbird-ko-1.5.0.7-0.2.20060mdk.i586.rpm fd119b706e5457b4dc4f9da6783fd97f 2006.0/i586/mozilla-thunderbird-lt-1.5.0.7-0.2.20060mdk.i586.rpm 1a658adef12d0d0c12e0a47b8a3f8e42 2006.0/i586/mozilla-thunderbird-mk-1.5.0.7-0.2.20060mdk.i586.rpm 275981f50bc8de0a39b90958526394f3 2006.0/i586/mozilla-thunderbird-nb-1.5.0.7-0.2.20060mdk.i586.rpm 4e74d860c9091632d75db6f2bc2d5711 2006.0/i586/mozilla-thunderbird-nl-1.5.0.7-0.2.20060mdk.i586.rpm c93b8c8218ff6f932b16cf819cf7f301 2006.0/i586/mozilla-thunderbird-pa_IN-1.5.0.7-0.2.20060mdk.i586.rpm 6321bf9634666013d713212c6815c636 2006.0/i586/mozilla-thunderbird-pl-1.5.0.7-0.2.20060mdk.i586.rpm 2937018143c6d10d12d56dfcab582977 2006.0/i586/mozilla-thunderbird-pt_BR-1.5.0.7-0.2.20060mdk.i586.rpm fff2f43bd2310ed3c20593737e8cefe0 2006.0/i586/mozilla-thunderbird-ru-1.5.0.7-0.2.20060mdk.i586.rpm 389b8d1ab9e45d2666008262fb55ed05 2006.0/i586/mozilla-thunderbird-sk-1.5.0.7-0.2.20060mdk.i586.rpm d6305407729eeeee8d51e4a81797301e 2006.0/i586/mozilla-thunderbird-sl-1.5.0.7-0.2.20060mdk.i586.rpm 6c21caff382f8794448ae629f323d4ed 2006.0/i586/mozilla-thunderbird-sv-1.5.0.7-0.2.20060mdk.i586.rpm da16ec66f6174d4abc0103d2e83514c2 2006.0/i586/mozilla-thunderbird-tr-1.5.0.7-0.2.20060mdk.i586.rpm 32d286f3f0d4ecddc12c049246f780c5 2006.0/i586/mozilla-thunderbird-zh_CN-1.5.0.7-0.2.20060mdk.i586.rpm 8772d3f910529a52af795302236f737b 2006.0/i586/nsinstall-1.5.0.7-0.1.20060mdk.i586.rpm cfd20ef146806ea69d6b4386652474d4 2006.0/SRPMS/mozilla-thunderbird-1.5.0.7-0.1.20060mdk.src.rpm 26db981d7425e300c2a9f27bd4dd603c 2006.0/SRPMS/mozilla-thunderbird-enigmail-l10n-1.5.0.7-0.2.20060mdk.src.rpm 731311cf845f321821a84a28ce6dc351 2006.0/SRPMS/mozilla-thunderbird-l10n-1.5.0.7-0.2.20060mdk.src.rpm Mandriva Linux 2006.0/X86_64: 73c24d4f45c375642a02d7b46ae8c425 2006.0/x86_64/mozilla-thunderbird-1.5.0.7-0.1.20060mdk.x86_64.rpm 3532ebaed2f390532804533d7abbf1e2 2006.0/x86_64/mozilla-thunderbird-bg-1.5.0.7-0.2.20060mdk.x86_64.rpm e021091abdef0ea092948dfbf9959646 2006.0/x86_64/mozilla-thunderbird-ca-1.5.0.7-0.2.20060mdk.x86_64.rpm 817dcc314c6b0f4db117a7ed867b3c00 2006.0/x86_64/mozilla-thunderbird-cs-1.5.0.7-0.2.20060mdk.x86_64.rpm 858581d0e3a40b02b20f604bdc792092 2006.0/x86_64/mozilla-thunderbird-da-1.5.0.7-0.2.20060mdk.x86_64.rpm e8946fd6378fef93c85945de23de81db 2006.0/x86_64/mozilla-thunderbird-de-1.5.0.7-0.2.20060mdk.x86_64.rpm d8d1a7b9a6200e830ef1627f6b9fbd1e 2006.0/x86_64/mozilla-thunderbird-devel-1.5.0.7-0.1.20060mdk.x86_64.rpm 568afcdc0c4de91418ffdd0505c4a55d 2006.0/x86_64/mozilla-thunderbird-el-1.5.0.7-0.2.20060mdk.x86_64.rpm 86dc9e6f2c8eedf42bd641dc202ecedf 2006.0/x86_64/mozilla-thunderbird-enigmail-1.5.0.7-0.1.20060mdk.x86_64.rpm 997464349658497f470640ce80e06b41 2006.0/x86_64/mozilla-thunderbird-enigmail-ca-1.5.0.7-0.2.20060mdk.x86_64.rpm 9d47b66feb664c8e0ef480cc8781ec13 2006.0/x86_64/mozilla-thunderbird-enigmail-cs-1.5.0.7-0.2.20060mdk.x86_64.rpm 3ae67ae82aa92b6d4aa6e9428b45e4ef 2006.0/x86_64/mozilla-thunderbird-enigmail-de-1.5.0.7-0.2.20060mdk.x86_64.rpm b175bb676e41f2a560f8bc44925bda48 2006.0/x86_64/mozilla-thunderbird-enigmail-es-1.5.0.7-0.2.20060mdk.x86_64.rpm fb9bf26ff9efe2c06bb911eebaedf0e5 2006.0/x86_64/mozilla-thunderbird-enigmail-fi-1.5.0.7-0.2.20060mdk.x86_64.rpm 43712218f8fbb959eb06a06203dadbc8 2006.0/x86_64/mozilla-thunderbird-enigmail-fr-1.5.0.7-0.2.20060mdk.x86_64.rpm de49b1408540fedc9a03820bf819b012 2006.0/x86_64/mozilla-thunderbird-enigmail-hu-1.5.0.7-0.2.20060mdk.x86_64.rpm 86563716d76a09465cf56c7dbb2bd584 2006.0/x86_64/mozilla-thunderbird-enigmail-it-1.5.0.7-0.2.20060mdk.x86_64.rpm 759ee4f4a5c51ac5b026b8985eb7a1b0 2006.0/x86_64/mozilla-thunderbird-enigmail-ja-1.5.0.7-0.2.20060mdk.x86_64.rpm 39c54989b19f5e8fcb698613f4655387 2006.0/x86_64/mozilla-thunderbird-enigmail-nb-1.5.0.7-0.2.20060mdk.x86_64.rpm 63c124faf6ab7704aa6b683f0a903150 2006.0/x86_64/mozilla-thunderbird-enigmail-nl-1.5.0.7-0.2.20060mdk.x86_64.rpm 398823dd4ad2ea13cbef543bb8f7d71a 2006.0/x86_64/mozilla-thunderbird-enigmail-pl-1.5.0.7-0.2.20060mdk.x86_64.rpm 892586bbe96d2cb448b8b9c46ffc71c8 2006.0/x86_64/mozilla-thunderbird-enigmail-pt-1.5.0.7-0.2.20060mdk.x86_64.rpm c1549045be17429d8afe74c3d5df2046 2006.0/x86_64/mozilla-thunderbird-enigmail-pt_BR-1.5.0.7-0.2.20060mdk.x86_64.rpm b5c99d85e0c14e84284b2961f05c7533 2006.0/x86_64/mozilla-thunderbird-enigmail-ru-1.5.0.7-0.2.20060mdk.x86_64.rpm 7f841b873f1972fa9ac37f45519cdf42 2006.0/x86_64/mozilla-thunderbird-enigmail-zh_CN-1.5.0.7-0.2.20060mdk.x86_64.rpm 16ea934ee025071bdb71e74492d4183a 2006.0/x86_64/mozilla-thunderbird-es-1.5.0.7-0.2.20060mdk.x86_64.rpm 9c865e97ea7f1b6803168dc571638a29 2006.0/x86_64/mozilla-thunderbird-es_AR-1.5.0.7-0.2.20060mdk.x86_64.rpm fcef74bf8dd78bfc932129ed96132c9e 2006.0/x86_64/mozilla-thunderbird-eu-1.5.0.7-0.2.20060mdk.x86_64.rpm cefb8d22be289d88837db1f3d561a7f0 2006.0/x86_64/mozilla-thunderbird-fi-1.5.0.7-0.2.20060mdk.x86_64.rpm df6ed8b8fa05d77e1a1b732e26758404 2006.0/x86_64/mozilla-thunderbird-fr-1.5.0.7-0.2.20060mdk.x86_64.rpm e2349b93240b9eeda0e6d3a36be8fe2a 2006.0/x86_64/mozilla-thunderbird-ga-1.5.0.7-0.2.20060mdk.x86_64.rpm 128f0dc7255b5b06861517a7eb214dd4 2006.0/x86_64/mozilla-thunderbird-he-1.5.0.7-0.2.20060mdk.x86_64.rpm c04b9f48093a8deb5921786161414bb9 2006.0/x86_64/mozilla-thunderbird-hu-1.5.0.7-0.2.20060mdk.x86_64.rpm 7a605c4437d88826b8dfb04231d2ebd1 2006.0/x86_64/mozilla-thunderbird-it-1.5.0.7-0.2.20060mdk.x86_64.rpm 8e7868578e918543ce276d1c3a5067a4 2006.0/x86_64/mozilla-thunderbird-ja-1.5.0.7-0.2.20060mdk.x86_64.rpm 70605ece00e36fd55a2f8f4ae64612ae 2006.0/x86_64/mozilla-thunderbird-ko-1.5.0.7-0.2.20060mdk.x86_64.rpm 316ba3319d94b0dff9e9f83ed376d351 2006.0/x86_64/mozilla-thunderbird-lt-1.5.0.7-0.2.20060mdk.x86_64.rpm e8562915acb5019a119b0895b4bdd18e 2006.0/x86_64/mozilla-thunderbird-mk-1.5.0.7-0.2.20060mdk.x86_64.rpm 4ac2b36f5cd7f5a5c91594e8b92524c8 2006.0/x86_64/mozilla-thunderbird-nb-1.5.0.7-0.2.20060mdk.x86_64.rpm 04215576387922ce214a6543fccbe891 2006.0/x86_64/mozilla-thunderbird-nl-1.5.0.7-0.2.20060mdk.x86_64.rpm 332625e92aa4cba88da64375bde51839 2006.0/x86_64/mozilla-thunderbird-pa_IN-1.5.0.7-0.2.20060mdk.x86_64.rpm 16ad9bc1bd8fc4aa697d5a52f4d1a151 2006.0/x86_64/mozilla-thunderbird-pl-1.5.0.7-0.2.20060mdk.x86_64.rpm 496326d0621e63bf0db0e0f30e646639 2006.0/x86_64/mozilla-thunderbird-pt_BR-1.5.0.7-0.2.20060mdk.x86_64.rpm 50fbbd4dbef824839d74c7cce1635257 2006.0/x86_64/mozilla-thunderbird-ru-1.5.0.7-0.2.20060mdk.x86_64.rpm 0a2021de2ff0ce387baa853db587127f 2006.0/x86_64/mozilla-thunderbird-sk-1.5.0.7-0.2.20060mdk.x86_64.rpm 46db2a8d0d21701ab5c547deffe14c7c 2006.0/x86_64/mozilla-thunderbird-sl-1.5.0.7-0.2.20060mdk.x86_64.rpm 280af338b3732634923d2016649485f3 2006.0/x86_64/mozilla-thunderbird-sv-1.5.0.7-0.2.20060mdk.x86_64.rpm aea3ace5817c655b7433194b84a05179 2006.0/x86_64/mozilla-thunderbird-tr-1.5.0.7-0.2.20060mdk.x86_64.rpm c74857b2945692b61e13b0f992bdcb33 2006.0/x86_64/mozilla-thunderbird-zh_CN-1.5.0.7-0.2.20060mdk.x86_64.rpm 157c69c5373e2bdbaa232d51b0969a35 2006.0/x86_64/nsinstall-1.5.0.7-0.1.20060mdk.x86_64.rpm cfd20ef146806ea69d6b4386652474d4 2006.0/SRPMS/mozilla-thunderbird-1.5.0.7-0.1.20060mdk.src.rpm 26db981d7425e300c2a9f27bd4dd603c 2006.0/SRPMS/mozilla-thunderbird-enigmail-l10n-1.5.0.7-0.2.20060mdk.src.rpm 731311cf845f321821a84a28ce6dc351 2006.0/SRPMS/mozilla-thunderbird-l10n-1.5.0.7-0.2.20060mdk.src.rpm Corporate 3.0: f38625b0a1184cd2b1f44e7a54fb95ce corporate/3.0/i586/mozilla-thunderbird-1.5.0.7-0.1.C30mdk.i586.rpm adf4241f304d15e77be0978a9dd3397e corporate/3.0/i586/mozilla-thunderbird-bg-1.5.0.7-0.2.C30mdk.i586.rpm d7f5258a9fcc80386e3a8addcc396b20 corporate/3.0/i586/mozilla-thunderbird-ca-1.5.0.7-0.2.C30mdk.i586.rpm c8b0682ff83b1a8ad45b4bc99ee028bc corporate/3.0/i586/mozilla-thunderbird-cs-1.5.0.7-0.2.C30mdk.i586.rpm be888c836ff2f0d7db1450d45bd80b2f corporate/3.0/i586/mozilla-thunderbird-da-1.5.0.7-0.2.C30mdk.i586.rpm b87216e5e5d34b52d318b315dd301b13 corporate/3.0/i586/mozilla-thunderbird-de-1.5.0.7-0.2.C30mdk.i586.rpm fafdb77e57ab4d4c11f02290b1bce1ee corporate/3.0/i586/mozilla-thunderbird-devel-1.5.0.7-0.1.C30mdk.i586.rpm 36e9b9d60d4ad8706cba25637191b26c corporate/3.0/i586/mozilla-thunderbird-el-1.5.0.7-0.2.C30mdk.i586.rpm 24f690bb3bebf16f8e7a6dc8c63af55a corporate/3.0/i586/mozilla-thunderbird-enigmail-1.5.0.7-0.1.C30mdk.i586.rpm 360298725330088fd52c5cea08f31dd4 corporate/3.0/i586/mozilla-thunderbird-enigmail-ca-1.5.0.7-0.2.C30mdk.i586.rpm b6d73f8e920b52f340e8695450606d56 corporate/3.0/i586/mozilla-thunderbird-enigmail-cs-1.5.0.7-0.2.C30mdk.i586.rpm 59cbcdcdb874c2a41676f570d38ff253 corporate/3.0/i586/mozilla-thunderbird-enigmail-de-1.5.0.7-0.2.C30mdk.i586.rpm 98f3e32e70722ec40eeb9ada8e0864af corporate/3.0/i586/mozilla-thunderbird-enigmail-es-1.5.0.7-0.2.C30mdk.i586.rpm c2bc7fdf9ba333de2b51084a60ce58fe corporate/3.0/i586/mozilla-thunderbird-enigmail-fi-1.5.0.7-0.2.C30mdk.i586.rpm 559692491ad52d4e984f7bc99857b62f corporate/3.0/i586/mozilla-thunderbird-enigmail-fr-1.5.0.7-0.2.C30mdk.i586.rpm 8f1b21f080228a9b7fc239336b27c565 corporate/3.0/i586/mozilla-thunderbird-enigmail-hu-1.5.0.7-0.2.C30mdk.i586.rpm c40d80690b847934eeb15163ec8ce147 corporate/3.0/i586/mozilla-thunderbird-enigmail-it-1.5.0.7-0.2.C30mdk.i586.rpm 620fafa084e8b60bc7bc2555cc02b737 corporate/3.0/i586/mozilla-thunderbird-enigmail-ja-1.5.0.7-0.2.C30mdk.i586.rpm 52a574e2e088e068445e2451177a97fd corporate/3.0/i586/mozilla-thunderbird-enigmail-nb-1.5.0.7-0.2.C30mdk.i586.rpm 96d656959b3a66dc3619a3f98efae90f corporate/3.0/i586/mozilla-thunderbird-enigmail-nl-1.5.0.7-0.2.C30mdk.i586.rpm 10eb42c8e61e5b4c6e6210a2af19b5ba corporate/3.0/i586/mozilla-thunderbird-enigmail-pl-1.5.0.7-0.2.C30mdk.i586.rpm f48529c2458fd5a2cae5cfb24b019e79 corporate/3.0/i586/mozilla-thunderbird-enigmail-pt-1.5.0.7-0.2.C30mdk.i586.rpm 0363c46eabdd3f37109b084feafce37e corporate/3.0/i586/mozilla-thunderbird-enigmail-pt_BR-1.5.0.7-0.2.C30mdk.i586.rpm c87e54c64f0524a1210ccbc07437fc55 corporate/3.0/i586/mozilla-thunderbird-enigmail-ru-1.5.0.7-0.2.C30mdk.i586.rpm 4cdf476e4680fe1786ffec239527099d corporate/3.0/i586/mozilla-thunderbird-enigmail-zh_CN-1.5.0.7-0.2.C30mdk.i586.rpm 07b3dec069d53d1ea5c4726e70dde33a corporate/3.0/i586/mozilla-thunderbird-es-1.5.0.7-0.2.C30mdk.i586.rpm 24335a6e2e0d2bebe5ba6cf9f3bea99b corporate/3.0/i586/mozilla-thunderbird-es_AR-1.5.0.7-0.2.C30mdk.i586.rpm c671dfa3bfac047bb2c8b62a5b4ec39c corporate/3.0/i586/mozilla-thunderbird-eu-1.5.0.7-0.2.C30mdk.i586.rpm 9ece00b0132b3ccef3cc072c1bd02506 corporate/3.0/i586/mozilla-thunderbird-fi-1.5.0.7-0.2.C30mdk.i586.rpm 9ba9e067b3e9a01d3b8bfac29874f2f7 corporate/3.0/i586/mozilla-thunderbird-fr-1.5.0.7-0.2.C30mdk.i586.rpm 961d01012ed376dbd239406f66c9e761 corporate/3.0/i586/mozilla-thunderbird-ga-1.5.0.7-0.2.C30mdk.i586.rpm 3d7732a6ad8e104fa0890fd03df9e434 corporate/3.0/i586/mozilla-thunderbird-he-1.5.0.7-0.2.C30mdk.i586.rpm 035869e788039c90bcbc89aeb3fad099 corporate/3.0/i586/mozilla-thunderbird-hu-1.5.0.7-0.2.C30mdk.i586.rpm 66bf47f593c4e1cc482d04ac6f991771 corporate/3.0/i586/mozilla-thunderbird-it-1.5.0.7-0.2.C30mdk.i586.rpm d2d5f7951ee7040944a17353c9684319 corporate/3.0/i586/mozilla-thunderbird-ja-1.5.0.7-0.2.C30mdk.i586.rpm 1bb9246f9ec025a7d746f2c3ce54d963 corporate/3.0/i586/mozilla-thunderbird-ko-1.5.0.7-0.2.C30mdk.i586.rpm 12a564a530c74cd895cd78ba4ae1bca8 corporate/3.0/i586/mozilla-thunderbird-lt-1.5.0.7-0.2.C30mdk.i586.rpm 5d009c9aa80611ff45d4e68ed028224f corporate/3.0/i586/mozilla-thunderbird-mk-1.5.0.7-0.2.C30mdk.i586.rpm 00a15f1b57bd2824e8b45ace60d930e3 corporate/3.0/i586/mozilla-thunderbird-nb-1.5.0.7-0.2.C30mdk.i586.rpm f84c8c7217b7a2fa599b126a9a822c36 corporate/3.0/i586/mozilla-thunderbird-nl-1.5.0.7-0.2.C30mdk.i586.rpm 479bc3b9addbe9af5bfffdc065919e3c corporate/3.0/i586/mozilla-thunderbird-pa_IN-1.5.0.7-0.2.C30mdk.i586.rpm cef17853bd4d8b96727addcd123680d8 corporate/3.0/i586/mozilla-thunderbird-pl-1.5.0.7-0.2.C30mdk.i586.rpm 92ad520589eb2cf4dabed10490e94053 corporate/3.0/i586/mozilla-thunderbird-pt_BR-1.5.0.7-0.2.C30mdk.i586.rpm 7ff42ed41b1e3556a317020d25642379 corporate/3.0/i586/mozilla-thunderbird-ru-1.5.0.7-0.2.C30mdk.i586.rpm e1b38d4c388786ced83c6e905042ccff corporate/3.0/i586/mozilla-thunderbird-sk-1.5.0.7-0.2.C30mdk.i586.rpm 5de87d55b60188cef580e683a1260887 corporate/3.0/i586/mozilla-thunderbird-sl-1.5.0.7-0.2.C30mdk.i586.rpm 66fc91cd7130f018949f944998cfae8c corporate/3.0/i586/mozilla-thunderbird-sv-1.5.0.7-0.2.C30mdk.i586.rpm 4462468b2ec1e559aee30f99788ce4fb corporate/3.0/i586/mozilla-thunderbird-tr-1.5.0.7-0.2.C30mdk.i586.rpm bc50c69871e347ffcb9c32caded62134 corporate/3.0/i586/mozilla-thunderbird-zh_CN-1.5.0.7-0.2.C30mdk.i586.rpm 18b69c39d84f2543858bfe993e3d6062 corporate/3.0/i586/nsinstall-1.5.0.7-0.1.C30mdk.i586.rpm 9b5142a507886540819e97a54c09bf5a corporate/3.0/SRPMS/mozilla-thunderbird-1.5.0.7-0.1.C30mdk.src.rpm 36a09d0a455bf7daf21c03266f78e99b corporate/3.0/SRPMS/mozilla-thunderbird-enigmail-l10n-1.5.0.7-0.2.C30mdk.src.rpm c9fe3a0b919df71940819a7ba9e70e74 corporate/3.0/SRPMS/mozilla-thunderbird-l10n-1.5.0.7-0.2.C30mdk.src.rpm Corporate 3.0/X86_64: e7189024cb1abd0196aec86857528221 corporate/3.0/x86_64/mozilla-thunderbird-1.5.0.7-0.1.C30mdk.x86_64.rpm 68cbccdbef8db1f1b3ec879363f787ae corporate/3.0/x86_64/mozilla-thunderbird-bg-1.5.0.7-0.2.C30mdk.x86_64.rpm 06e7133ba5bd804d62c7ceb1f078f8ca corporate/3.0/x86_64/mozilla-thunderbird-ca-1.5.0.7-0.2.C30mdk.x86_64.rpm 48faabe0dcc7374a67b7275e3399061b corporate/3.0/x86_64/mozilla-thunderbird-cs-1.5.0.7-0.2.C30mdk.x86_64.rpm 6abe65908a3368591ec3f53e140b3410 corporate/3.0/x86_64/mozilla-thunderbird-da-1.5.0.7-0.2.C30mdk.x86_64.rpm b76720016ae84ffd2cc5fa1a6d33385c corporate/3.0/x86_64/mozilla-thunderbird-de-1.5.0.7-0.2.C30mdk.x86_64.rpm bb096187064c00d8b13b13963ba11ab6 corporate/3.0/x86_64/mozilla-thunderbird-devel-1.5.0.7-0.1.C30mdk.x86_64.rpm 7cb200ff02782bd1631e4bd44d3b9707 corporate/3.0/x86_64/mozilla-thunderbird-el-1.5.0.7-0.2.C30mdk.x86_64.rpm d425eee96dfa5cbd147472071a28d1b2 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-1.5.0.7-0.1.C30mdk.x86_64.rpm 3b454c905e706d756ce12242ec50e6d1 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-ca-1.5.0.7-0.2.C30mdk.x86_64.rpm 3ffc852a7ced50d6c62a63b806205eb7 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-cs-1.5.0.7-0.2.C30mdk.x86_64.rpm c615309cb1e6badb4b2e7b885095bc3c corporate/3.0/x86_64/mozilla-thunderbird-enigmail-de-1.5.0.7-0.2.C30mdk.x86_64.rpm 684278407122181fa8edfc1441dd29e1 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-es-1.5.0.7-0.2.C30mdk.x86_64.rpm cbbff7189c7639a0a4bfd7b8ddd0cfed corporate/3.0/x86_64/mozilla-thunderbird-enigmail-fi-1.5.0.7-0.2.C30mdk.x86_64.rpm 6e6ef1c21860f1e31f6e9dcf9088bd9a corporate/3.0/x86_64/mozilla-thunderbird-enigmail-fr-1.5.0.7-0.2.C30mdk.x86_64.rpm 2387b815b4e542bf6f22459ce3b356af corporate/3.0/x86_64/mozilla-thunderbird-enigmail-hu-1.5.0.7-0.2.C30mdk.x86_64.rpm d162f6e479ba6431b0d91c812ae9cda8 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-it-1.5.0.7-0.2.C30mdk.x86_64.rpm aa93d9bf588ba6292064b64ed81f99ae corporate/3.0/x86_64/mozilla-thunderbird-enigmail-ja-1.5.0.7-0.2.C30mdk.x86_64.rpm d773268d3eb851b817c9a6806967bb10 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-nb-1.5.0.7-0.2.C30mdk.x86_64.rpm aee8c8265420fba2784f353369bcc527 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-nl-1.5.0.7-0.2.C30mdk.x86_64.rpm 106f00ea602bf250dc5e4603859fac47 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-pl-1.5.0.7-0.2.C30mdk.x86_64.rpm 9c3e8b946e8cc71b878ee720b68064d7 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-pt-1.5.0.7-0.2.C30mdk.x86_64.rpm ad52a6836c76b7fdfb6966c9f39bc638 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-pt_BR-1.5.0.7-0.2.C30mdk.x86_64.rpm 9e2fa4ffcc96855c25230a8b7ed192e5 corporate/3.0/x86_64/mozilla-thunderbird-enigmail-ru-1.5.0.7-0.2.C30mdk.x86_64.rpm 8e27ec168a2ed568e36c771007e8471c corporate/3.0/x86_64/mozilla-thunderbird-enigmail-zh_CN-1.5.0.7-0.2.C30mdk.x86_64.rpm f9e694c2c806d8d41ec0be263ae300f0 corporate/3.0/x86_64/mozilla-thunderbird-es-1.5.0.7-0.2.C30mdk.x86_64.rpm 0a0f144ed3a6b9b077a759ae4deeb292 corporate/3.0/x86_64/mozilla-thunderbird-es_AR-1.5.0.7-0.2.C30mdk.x86_64.rpm d8c2cbde06991695f25aec88c2a7a0f3 corporate/3.0/x86_64/mozilla-thunderbird-eu-1.5.0.7-0.2.C30mdk.x86_64.rpm c5696c79662e473eb42da737f18e09e1 corporate/3.0/x86_64/mozilla-thunderbird-fi-1.5.0.7-0.2.C30mdk.x86_64.rpm a9f13c4095b17d57b7ebb7d8db72e24b corporate/3.0/x86_64/mozilla-thunderbird-fr-1.5.0.7-0.2.C30mdk.x86_64.rpm 13da5a2d673a576f6b1db00ba169b8b1 corporate/3.0/x86_64/mozilla-thunderbird-ga-1.5.0.7-0.2.C30mdk.x86_64.rpm d650baa04536715d33b2d282b428daf4 corporate/3.0/x86_64/mozilla-thunderbird-he-1.5.0.7-0.2.C30mdk.x86_64.rpm 12111b215df46e2052baaa2fa284f8da corporate/3.0/x86_64/mozilla-thunderbird-hu-1.5.0.7-0.2.C30mdk.x86_64.rpm d00a22804811bf2dd10b024576997a76 corporate/3.0/x86_64/mozilla-thunderbird-it-1.5.0.7-0.2.C30mdk.x86_64.rpm 274f6f8c59b7c81a1197031a8f51a81e corporate/3.0/x86_64/mozilla-thunderbird-ja-1.5.0.7-0.2.C30mdk.x86_64.rpm cd3e834479fa951d6609b11457e7969b corporate/3.0/x86_64/mozilla-thunderbird-ko-1.5.0.7-0.2.C30mdk.x86_64.rpm d97bdac33b7095ca83b855d5c993d9ab corporate/3.0/x86_64/mozilla-thunderbird-lt-1.5.0.7-0.2.C30mdk.x86_64.rpm 599f25745359dda9245242571ba7dcd7 corporate/3.0/x86_64/mozilla-thunderbird-mk-1.5.0.7-0.2.C30mdk.x86_64.rpm eb3a367368518535e3d6767365109a5c corporate/3.0/x86_64/mozilla-thunderbird-nb-1.5.0.7-0.2.C30mdk.x86_64.rpm 0d8e06a71b961f5600c98a403de97f65 corporate/3.0/x86_64/mozilla-thunderbird-nl-1.5.0.7-0.2.C30mdk.x86_64.rpm dd81934a7aab0f430e23abec7afa3628 corporate/3.0/x86_64/mozilla-thunderbird-pa_IN-1.5.0.7-0.2.C30mdk.x86_64.rpm 3a03f6ae7fa21095522429c0246154c8 corporate/3.0/x86_64/mozilla-thunderbird-pl-1.5.0.7-0.2.C30mdk.x86_64.rpm fba71ec50f3654e7a74da244b6f22062 corporate/3.0/x86_64/mozilla-thunderbird-pt_BR-1.5.0.7-0.2.C30mdk.x86_64.rpm ed86e18755516d95be7ea79dce590ad6 corporate/3.0/x86_64/mozilla-thunderbird-ru-1.5.0.7-0.2.C30mdk.x86_64.rpm 043a690950395f9eb8a2fabb16774643 corporate/3.0/x86_64/mozilla-thunderbird-sk-1.5.0.7-0.2.C30mdk.x86_64.rpm cd81e23fd7d878a55bef40c1a51ede44 corporate/3.0/x86_64/mozilla-thunderbird-sl-1.5.0.7-0.2.C30mdk.x86_64.rpm 374420902673ba390dc6a50a50b33d65 corporate/3.0/x86_64/mozilla-thunderbird-sv-1.5.0.7-0.2.C30mdk.x86_64.rpm b9fe5e845b946ad5f2130717df1fbadc corporate/3.0/x86_64/mozilla-thunderbird-tr-1.5.0.7-0.2.C30mdk.x86_64.rpm 991dd9a94111bde053a51a7719f6ebdf corporate/3.0/x86_64/mozilla-thunderbird-zh_CN-1.5.0.7-0.2.C30mdk.x86_64.rpm d32f6f942f17f7e594f479f9799db5a6 corporate/3.0/x86_64/nsinstall-1.5.0.7-0.1.C30mdk.x86_64.rpm 9b5142a507886540819e97a54c09bf5a corporate/3.0/SRPMS/mozilla-thunderbird-1.5.0.7-0.1.C30mdk.src.rpm 36a09d0a455bf7daf21c03266f78e99b corporate/3.0/SRPMS/mozilla-thunderbird-enigmail-l10n-1.5.0.7-0.2.C30mdk.src.rpm c9fe3a0b919df71940819a7ba9e70e74 corporate/3.0/SRPMS/mozilla-thunderbird-l10n-1.5.0.7-0.2.C30mdk.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFFFBMMmqjQ0CJFipgRApsRAJwMa7P9kg4thgXuAvzyFQne0BHRTwCg3faZ 2eAdps0V14VRqRhBul3ekhM= =bOHX -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1210-1 security@debian.org http://www.debian.org/security/ Martin Schulze November 14th, 2006 http://www.debian.org/security/faq - -------------------------------------------------------------------------- Package : mozilla-firefox Vulnerability : several Problem type : remote Debian-specific: no CVE IDs : CVE-2006-2788 CVE-2006-4340 CVE-2006-4565 CVE-2006-4566 CVE-2006-4568 CVE-2006-4571 BugTraq ID : 20042 Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. CVE-2006-4340 Daniel Bleichenbacher recently described an implementation error in RSA signature verification that cause the application to incorrectly trust SSL certificates. For the stable distribution (sarge) these problems have been fixed in version 1.0.4-2sarge12. For the unstable distribution (sid) these problems have been fixed in version 1.5.dfsg+1.5.0.7-1 of firefox. We recommend that you upgrade your Mozilla Firefox package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given at the end of this advisory: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12.dsc Size/MD5 checksum: 1003 751f0df80be8491ac3b24e902da6e3cb http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12.diff.gz Size/MD5 checksum: 441420 8b1078ef98ff79137869c932999d3957 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4.orig.tar.gz Size/MD5 checksum: 40212297 8e4ba81ad02c7986446d4e54e978409d Alpha architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_alpha.deb Size/MD5 checksum: 11181154 771ba85fbf21e6419d87820fc6f19a9a http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_alpha.deb Size/MD5 checksum: 170352 f2c75d2fb5ab8684a20ba6fc08585cdb http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_alpha.deb Size/MD5 checksum: 62166 79fd193ea817fc1f466a57e4a37d74fa AMD64 architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_amd64.deb Size/MD5 checksum: 9411492 3c3704ef1014e0d9dc38ece9d16a36d4 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_amd64.deb Size/MD5 checksum: 165132 54e7468747e04dc1449faa8ff9c123b4 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_amd64.deb Size/MD5 checksum: 60700 a8ac42c24a29be9b260a0ec426b83f1c ARM architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_arm.deb Size/MD5 checksum: 8232340 0d9f98d7a3bc7bcef0d759b98061c79b http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_arm.deb Size/MD5 checksum: 156586 7b74819b6afa58f7c485fb581ace3501 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_arm.deb Size/MD5 checksum: 55998 08e378fe351fc437422ea242ff83a60c HP Precision architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_hppa.deb Size/MD5 checksum: 10285622 0558779439806d577d49c812255c6d0d http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_hppa.deb Size/MD5 checksum: 168054 cd002591b783ecec56da8995fb75a400 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_hppa.deb Size/MD5 checksum: 61152 a38e7bca2cbe87bf5bdfd006bc95e448 Intel IA-32 architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_i386.deb Size/MD5 checksum: 8907626 1a353f19735c6339a74fe9d2a2b97fdf http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_i386.deb Size/MD5 checksum: 160320 e833f8887c1b541d8f6ef4b7552a70c7 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_i386.deb Size/MD5 checksum: 57550 00e2dc72d2a8af56650004ac095eee06 Intel IA-64 architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_ia64.deb Size/MD5 checksum: 11644736 049ecdd937bff15ed7e12f1282599a98 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_ia64.deb Size/MD5 checksum: 170668 f3298445d8884cf133bcb837cc049240 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_ia64.deb Size/MD5 checksum: 65358 134710ff8c57f8e02e113b5af1df6662 Motorola 680x0 architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_m68k.deb Size/MD5 checksum: 8184660 b0103cf8b425bb76d91a7873f78d0217 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_m68k.deb Size/MD5 checksum: 159262 e04d0648d5b817a1b7314e5d77108873 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_m68k.deb Size/MD5 checksum: 56816 15dc3184acaf65cca897de7092a588ff Big endian MIPS architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_mips.deb Size/MD5 checksum: 9942738 846cc617e99976a64ce379ff04822370 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_mips.deb Size/MD5 checksum: 158130 e8812baecfd3f93a6540a44b7d97a9aa http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_mips.deb Size/MD5 checksum: 57818 44d481edc96edd5b33c6474064792a76 Little endian MIPS architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_mipsel.deb Size/MD5 checksum: 9819470 41ecbd5f3543c0b110771e93e2307abc http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_mipsel.deb Size/MD5 checksum: 157672 43ca2a353bacf378a2dc7dfa9a7f3a73 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_mipsel.deb Size/MD5 checksum: 57634 8d16796108c3a7627ab9654e977277a5 PowerPC architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_powerpc.deb Size/MD5 checksum: 8579128 b673ec3ded27be02020cc1e532b80740 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_powerpc.deb Size/MD5 checksum: 158740 8c7ef8d61c6753e3474b8867d5356d9b http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_powerpc.deb Size/MD5 checksum: 59932 ead83381ef8abacb712f57d64ab736df IBM S/390 architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_s390.deb Size/MD5 checksum: 9649760 a4cd1c6d8ee856640fef8b97bee96657 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_s390.deb Size/MD5 checksum: 165732 197737ac3038ab474cb47e7c30d92374 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_s390.deb Size/MD5 checksum: 60126 81193293f0e149cfa90e8cd9b71a3e22 Sun Sparc architecture: http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge12_sparc.deb Size/MD5 checksum: 8671300 f486f39ddab307216a90532093d178b3 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge12_sparc.deb Size/MD5 checksum: 158928 03c9877b5d2151af331509a9c9d191b8 http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge12_sparc.deb Size/MD5 checksum: 56362 5fb4c5c035b32c5fd1b86b48f1b5cafb These files will probably be moved into the stable distribution on its next update. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-333A Apple Releases Security Update to Address Multiple Vulnerabilities Original release date: November 29, 2006 Last revised: -- Source: US-CERT Systems Affected * Apple Mac OS X version 10.3.x and 10.4.x * Apple Mac OS X Server version 10.3.x and 10.4.x * Apple Safari web browser These vulnerabilities affect both Intel-based and PowerPC-based Apple systems. Overview Apple has released Security Update 2006-007 to correct multiple vulnerabilities affecting Mac OS X, Mac OS X Server, Safari web browser. Vulnerabilities in OpenSSL, gzip, and other products are also addressed. I. Description Apple Security Update 2006-007 addresses a number of vulnerabilities affecting Mac OS X, OS X Server, Safari web browser, and other products. Further details are available in the related vulnerability notes. This security update also addresses previously known vulnerabilities in PHP, Perl, OpenSSL, and gzip, which are shipped with Mac OS X. Information is also available through the OpenSSL vulnerabilities page. Information about the vulnerabilities in gzip is available in a series of vulnerability notes. II. Impact The impacts of these vulnerabilities vary. For specific details, see the appropriate vulnerability notes. Potential consequences include remote execution of arbitrary code or commands, bypass of security restrictions, and denial of service. III. Solution Install updates Install Apple Security Update 2006-007. IV. References * Vulnerability Notes for Apple Security Update 2006-007 - <http://www.kb.cert.org/vuls/byid?searchview&query=apple-2006-007> * Vulnerability Notes for OpenSSL Security Advisory [28th September 2006] - <http://www.kb.cert.org/vuls/byid?searchview&query=openssl_secadv_20060928> * Vulnerability Note VU#845620 - <http://www.kb.cert.org/vuls/id/845620> * Vulnerability Note VU#933712 - <http://www.kb.cert.org/vuls/id/933712> * Vulnerability Note VU#381508 - <http://www.kb.cert.org/vuls/id/381508> * Vulnerability Note VU#554780 - <http://www.kb.cert.org/vuls/id/554780> * Vulnerability Note VU#596848 - <http://www.kb.cert.org/vuls/id/596848> * Vulnerability Note VU#773548 - <http://www.kb.cert.org/vuls/id/773548> * About the security content of Security Update 2006-007 - <http://docs.info.apple.com/article.html?artnum=304829> * Mac OS X: Updating your software - <http://docs.info.apple.com/article.html?artnum=106704> * Apple Downloads - <http://www.apple.com/support/downloads/> * OpenSSL: OpenSSL vulnerabilities - <http://www.openssl.org/news/vulnerabilities.html> * Securing Your Web Browser - <http://www.us-cert.gov/reading_room/securing_browser/#Safari> _________________________________________________________________ The most recent version of this document can be found at: <http://www.us-cert.gov/cas/techalerts/TA06-333A.html> _________________________________________________________________ Feedback can be directed to US-CERT Technical Staff. Please send email to <cert@cert.org> with "TA06-333A Feedback VU#191336" in the subject. _________________________________________________________________ Produced 2006 by US-CERT, a government organization. Terms of use: <http://www.us-cert.gov/legal.html> _________________________________________________________________ Revision History November 29, 2006: Initial release -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iQEVAwUBRW33NuxOF3G+ig+rAQJtiggApJKRh7x+z8vp0xb26sE16RUOD3epcrk6 lJZ4rXnqVqoFacAt0Ucb8T43/Uc4N85UMa695YbFspYZum3hcGZo+WnNPolGUeRz iN/4bfKgzekfpbHxf6T3YvQYp+PVMRfHPUcxfaZDYXhu2813N4SSQpM59KRL5BD7 xr+5VvB09biVKlzpEdgtk2EHcqc+sMF5+o3cCgDJCnJNL+NG4J6d/hsyNP15ekTf 8m0W4rJonUe2gR2Bp7F1Y47KgRr3BT1aH2gxUSim9qEJpPdP/CkmGoFp+BfrFP9q A580LOrqFK8HIly1fbPKb26p2theUUESnQqM9Ob8xolkCDLy6h7ssg== =f7N+ -----END PGP SIGNATURE----- . - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200610-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Mozilla Thunderbird: Multiple vulnerabilities Date: October 04, 2006 Bugs: #147653 ID: 200610-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== The Mozilla Foundation has reported multiple security vulnerabilities related to Mozilla Thunderbird. Background ========== The Mozilla Thunderbird mail client is a redesign of the Mozilla Mail component. ------------------------------------------------------------------- Description =========== A number of vulnerabilities have been found and fixed in Mozilla Thunderbird. For details please consult the references below. Other vulnerabilities include program crashes and the acceptance of forged certificates. Workaround ========== There is no known workaround at this time. Resolution ========== All Mozilla Thunderbird users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-1.5.0.7" All Mozilla Thunderbird binary users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-bin-1.5.0.7" References ========== [ 1 ] CVE-2006-4253 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4253 [ 2 ] CVE-2006-4340 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4340 [ 3 ] CVE-2006-4565 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4565 [ 4 ] CVE-2006-4566 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4566 [ 5 ] CVE-2006-4567 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4567 [ 6 ] CVE-2006-4570 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4570 [ 7 ] CVE-2006-4571 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4571 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200610-01.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2006 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

AFFECTED PRODUCTS