Debian GNU/Linux
Debian Security Advisory DSA 1160-2 security@debian.org
http://www.debian.org/security/
Martin Schulze
September 15th, 2006 http://www.debian.org/security/faq
Package : mozilla
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE IDs : CVE-2006-2779 CVE-2006-3805 CVE-2006-3806 CVE-2006-3807
CVE-2006-3808 CVE-2006-3809 CVE-2006-3810
CERT advisories: VU#466673 VU#655892 VU#687396 VU#876420 VU#911004
BugTraq IDs : 18228 19181
The latest security updates of Mozilla introduced a regression
that led to a disfunctional attachment panel which warrants a
correction to fix this issue. For reference please find below the
original advisory text:
Several security related problems have been discovered in
Mozilla and derived products. The Common Vulnerabilities and
Exposures project identifies the following vulnerabilities:
CVE-2006-2779
Mozilla team members discovered several crashes during testing
of the browser engine showing evidence of memory corruption which
may also lead to the execution of arbitrary code. The last bit of
this problem will be corrected with the next update. You can
prevent any trouble by disabling Javascript. [MFSA-2006-32]
CVE-2006-3805
The Javascript engine might allow remote attackers to execute
arbitrary code. [MFSA-2006-50]
CVE-2006-3806
Multiple integer overflows in the Javascript engine might allow
remote attackers to execute arbitrary code. [MFSA-2006-50]
CVE-2006-3807
Specially crafted Javascript allows remote attackers to execute
arbitrary code. [MFSA-2006-51]
CVE-2006-3808
Remote AutoConfig (PAC) servers could execute code with elevated
privileges via a specially crafted PAC script. [MFSA-2006-52]
CVE-2006-3809
Scripts with the UniversalBrowserRead privilege could gain
UniversalXPConnect privileges and possibly execute code or obtain
sensitive data. [MFSA-2006-53]
CVE-2006-3810
A cross-site scripting vulnerability allows remote attackers to
inject arbitrary web script or HTML. [MFSA-2006-54]
For the stable distribution (sarge) these problems have been
fixed in version 1.7.8-1sarge7.2.2.
For the unstable distribution (sid) these problems won’t be
fixed since its end of lifetime has been reached and the package
will soon be removed.
We recommend that you upgrade your mozilla package.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given at the end of this advisory:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge
Source archives:
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2.dsc
Size/MD5 checksum: 1131
bb39933b4dcb63f6f986f0da3ab9461e
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2.diff.gz
Size/MD5 checksum: 532293
5a86930497b980b25e7f8e5cd6305ad0
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8.orig.tar.gz
Size/MD5 checksum: 30589520
13c0f0331617748426679e8f2e9f537a
Alpha architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 168074
553ba25202552c16c02cfdcf94bbc1c4
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 147582
e953bc1da64aaab9b50ef2bd357279b8
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 184944
18bfed4502c3e8a50cac55bd69cf6f20
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 857148
c9f560d4ad706a1e50dbd2db21978427
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 1042
9de55ee42dcc1c484a801623ac29c80d
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 11484766
4b31f8553a2ee93057858b35cdc522d9
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 403274
da75d1e0207b660ae42d7d1eb0b99617
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 158338
264975902923a3c4b04f3fb2758cf61e
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 3358874
5728dcb6abe8f43915d0b62cdae5fb78
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 122312
c96ac910fe008c2582d5b33a4abdfdb0
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 204152
e262ee393ee0114d19c646520b95a0e8
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 1937184
b87b131e3f4da4757b725ebb77a624aa
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_alpha.deb
Size/MD5 checksum: 212582
e1bb8eb0ea7013d825f1c6368931b9d1
AMD64 architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 168072
0d98ed91660e7fc8d1f4a31ead03b9bf
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 146678
7a8e7068a414213850e54253ebb0d977
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 184950
f428f4a3ef968df80df014a98d747ce5
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 715510
91bd0fcde1c53b6056ea33860c464d90
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 1042
47e650f92cdafea5dc08d93e37bc7d7e
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 10948878
e537efe2b7e984f51dc1e187d3f34ac7
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 403278
831026525cebf77e1195b9a571127911
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 158334
a1ff9fbaf23292c6d593fe5bed360ecb
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 3352852
d9704f4582d97890a546801df3716782
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 121206
e4687f0678206bc7546786c517771feb
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 204158
89914bc3978d7502003529976e381ba8
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 1936056
4bbeba555dbc0b68c8c2ccd45e42d948
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_amd64.deb
Size/MD5 checksum: 204432
d9975a7eafd40678112faad81185018f
ARM architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 168068
fce9bf7f31bfdfbfe100965648b5fbe1
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 125028
a4bbf5fcb376c008a20a113823b4f528
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 184964
0d46a1f48a783fc781029e9d2b810c9c
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 632708
0d9a60c457fcb65d0100f8e26b79d2ca
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 1038
da7c79e8962cf7d1c834ebf429d380e8
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 9219442
dd73deb6db71af0cdfdf86885d53465d
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 403316
c39b47abf0d634e40e42fcbee2ffa1db
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 158380
abe3b5a07b4ff166d7ef3f2c018d8fcf
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 3342318
b60668be41da0a39844b18d02aa63741
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 112658
231332c5934adafb236d8fde7be70cfb
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 204176
d71b44edfe88785428619a51908b5d3b
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 1604478
075ca3db4526f490a3b6a57d52ce4dc7
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_arm.deb
Size/MD5 checksum: 169016
0a74bc4e92be3879da2da8d126868299
HP Precision architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 168068
79ff86fa3907e2a53a5dadd5d315b56a
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 157604
12b6abdb4a0d7706c67e6418b4e73f9b
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 184962
9364b64efcd74f2a34dabc783c0ce986
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 755438
de9b01a201480a90831d1fbc1fac5c6c
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 1042
2d88d33a47e5a9372d503705b3ace0c9
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 12167958
1195ed2e4e13a95a04283d04267a48ce
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 403276
53a622d0957c63ef52029b7ea514c4d8
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 158348
9dfaf9108f6b53ef2590ed9926922499
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 3359196
2d74deb88c6808c27b5f820ba723bb6b
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 123516
3e4d3c99cb18c8dc619784d9710cb2f6
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 204158
742a5f3e3607163909b019fc8199c5b3
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 2135242
ef8c1529ad34a6597fd7881ec97036f5
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_hppa.deb
Size/MD5 checksum: 216392
b91e9dc35b71766e3c2d866f3597b170
Intel IA-32 architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 170352
40703cb53ee5b7294dc107887569c08b
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 137502
f85890195ea91c20d4b8c4992133c9c5
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 187146
35b47880629e7947d510ac659b1dd3d0
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 662276
52c7a3db98c5a97f260bc32d275b2919
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 1038
96c3fdcc00a3815780d1c852f97a3306
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 10346404
0375cc857561973bce9465d44e5c5cd9
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 403518
bd1d71b85dc5804a8aa10d2f7b72a932
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 158372
7629bf899b61e3f6e0ce0443eb8afbdb
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 3594582
4e1d44adf416fef07f8f8e3ac8251ea8
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 116674
8dc261639f60ae8c63c9fc4dfc172888
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 204172
23721786d112c62e2ab6d79cfe982cd6
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 1816144
8b73736956fd00eab47d3da1b69d52dc
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_i386.deb
Size/MD5 checksum: 192752
2750113b2c0b9a9a17294c82ccb1abb8
Intel IA-64 architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 168068
8a8b01bc327c81ac9a35eec2606f0afc
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 175020
7f421d9a83a3645a3e6defcea674eee7
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 184960
9f48269063f614ad7f2452ea5d684582
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 967452
51e6465184e6368d9cd3a5d2dfbb328a
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 1034
c1407f176821f65d05121b9b9fa2be17
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 12961330
9afc30c671d79c2820b38d44550a9334
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 403274
97e3733b9ed636dde9f64607a8fd5b31
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 158334
18eb5b155cba3e74c07bd08d60e26b18
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 3378646
028b0d4dde4a766b856855e96432d0c1
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 125610
2b2b7e71175af23fdb4acb766ecb216d
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 204146
a85654f4a1e5d6445af59983689ac5b9
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 2302356
f68c5a97ca84e5a8789c7ea8616feda3
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_ia64.deb
Size/MD5 checksum: 242824
57b969592c8d46f13e42fc45bd2b620f
Motorola 680×0 architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 168084
ebaefee3ded203ba02eb42d440d01140
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 126708
639cc0b13f5a259ca255a214e7448cb6
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 184984
bda1a3fb6f94da0fa93caafd8726c4bb
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 600782
0da67847bd97a0deeca7221ed6daa762
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 1044
0e3b52647ec4d1cab0df8133c4183bb6
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 9712800
73f41e356d2d7d7e2b2131c33f3fb865
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 403356
5703ad69f20642dff0b73abaf3b291e9
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 158386
15f302f71c73e88c2bdf4599f1a990b7
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 3336818
b8570a6a33a5aaaf9165f9bd7870f3d2
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 114446
59dda0bbda07cff9e208e1fad40c5357
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 204192
e0bb7bac75c0e86b972efa750a1170cd
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 1683150
6595c133e2616136f47c44cf595cfcc3
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_m68k.deb
Size/MD5 checksum: 174924
d1c35762abfe065b9d703960a21a9d99
Big endian MIPS architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 168076
5947b8928a7d52f2d40cc93a0efe95ed
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 141558
dc10a1a91e526e92d22d4585594c0669
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 184958
a7ff18cd5c7522cb46250f970b792541
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 726538
e5cfada69c95b3ff6374c0dde7b755e8
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 1044
6fe88cb467a02eb83f1b6cc56cb2ba63
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 10735426
b229a0c89d52fed9a6ca47da0630f870
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 403270
7dcffe7aa3853fe206eaf3209809ec59
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 158344
04223592accfc2dfd5a32b00f303c8ac
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 3358718
43bc8b35c0b1d67ea06ddd4649d36fbc
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 117626
cd932bedb3c95f08d612eff4b9bec368
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 204164
5689c8ae6a39dfc735af908e216f4505
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 1795556
cfa51006dde9b3433f25048b0c562166
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_mips.deb
Size/MD5 checksum: 189938
e7ca25e62753d01a29e668680110fd03
Little endian MIPS architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 168076
fa13db77745d2c3dc3e7a12fc19ad4cd
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 141502
f6a859a3cd7a1f8e8d704a189a72ba8b
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 184968
d90edf8a1c7642b76cfea3068efa55d3
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 715976
7a9aea273c635f0ba708f15b887b16c5
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 1042
4ead757bdb7893ddfb5eef4ca12464e1
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 10610616
0c0aabe84441b9ef639159bc849121e8
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 403286
6f4b7ee71b7f4927daa64166a5934a14
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 158348
325353631a54b489d4cc0ed578459ba9
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 3359394
f3b7354fe4e390c4ea740e364610d6fd
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 117228
2cc3a94499f9504531c1dfbc42bb2987
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 204160
35a12913bf54c279401c34bcaf02f837
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 1777626
bc1de5ce86cb2947975e2d15368e6ad5
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_mipsel.deb
Size/MD5 checksum: 187518
d2d60cc4b957fb143d89855d51b89b64
PowerPC architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 168068
fe49d18e432e28aa0aa4e06ee720bdb6
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 132040
088cf084ba4f12278a498570de88bda2
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 184950
971800ffb5d07ca71b8a665cb4cdd3c1
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 719746
079df4da7ec5cc46052378464f68bb73
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 1040
dbe93abdb48856ee45c5c1f31dc74d83
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 9708238
60c1f1d72c777602d3663bd9f6d66d8c
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 403288
3d67e5bbca986f3d493f092de173b986
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 158338
210cb429751cc16741a99a5a501252bd
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 3341180
f0fbd1b7ae8e83a6212f10e210a7afbc
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 114582
23b3b328c10d7472f37062d1fb89835a
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 204146
8906e4e5938b651da42ecaadf5ede88a
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 1643152
f997b2218228de4a821e1a76ac307a8e
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_powerpc.deb
Size/MD5 checksum: 175706
df8d203557f6c0da764ab163dfd35ba0
IBM S/390 architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 168070
dbbc50f83250fa4e96ce5fa5aa1f1239
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 157342
9ca3b2ba1392a8e0b9ae312770fa422f
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 184942
64f9ec8255365634cf3e985d78b0a918
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 799736
3a649e5c93b057fb5c49e9614b9c4d48
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 1034
312e876dd1ada606d872ecc3f5dd1c87
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 11332196
ba8e90e85c7e47b1f7d2a0e558572bd0
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 403286
84d8aa100b642ddf3e11d25d7cf2e3f4
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 158334
eee9734fc27ed2120b19b68f64ed9a47
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 3353460
94a5f4aeb8e6caf52298ab42ce51925b
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 121356
039e4621cc5f1f396f04cce7d936ae20
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 204162
76138f26bcc903413304ecdea530b582
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 1944774
2a1fc7f1bda7ecb455993706030f3886
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_s390.deb
Size/MD5 checksum: 213602
4b929622e24e962f12715d98ec5184e7
Sun Sparc architecture:
http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 168072
41eac7654297e41bb8ea1bcdeb41855e
http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 129260
08ca2de15725be7d32b3b2324715a058
http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 184956
d4a41f56e9b37ffb60a2c66b30c5471f
http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 673524
84378a8cf1d88b597fb6a4cbb815adcc
http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 1042
88279f4538a6e215092f5b9bc9e16e68
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 9381720
4912beeb2cb4a02cc4abf6d5c730180a
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 403296
c6346a95715ba44112e46cf80959c503
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 158350
b12497e5a02785d466d1975ea22d4040
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 3342192
ef8bfe776ee10bbbd7cb2a7fa3754aa6
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 112532
b3e1ff572f35ca8a5fa368cf815cb32f
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 204164
f376fe7d73e318e1c87e66bd527ef147
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 1583792
7a9053fa95df17218f140360f69fe05a
http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge7.2.2_sparc.deb
Size/MD5 checksum: 168116
65ecc744a989197668923747d5dfcdde
These files will probably be moved into the stable distribution
on its next update.
Debian Security Advisory DSA 1177-1 security@debian.org
http://www.debian.org/security/
Martin Schulze
September 15th, 2006 http://www.debian.org/security/faq
Package : usermin
Vulnerability : programming error
Problem type : remote
Debian-specific: no
CVE ID : CVE-2006-4246
Debian Bug : 374609
Hendrik Weimer discovered that it is possible for a normal user
to disable the login shell of the root account via usermin, a
web-based administration tool.
For the stable distribution (sarge) this problem has been fixed
in version 1.110-3.1.
In the upstream distribution this problem is fixed in version
1.220.
We recommend that you upgrade your usermin package.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given at the end of this advisory:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge
Source archives:
http://security.debian.org/pool/updates/main/u/usermin/usermin_1.110-3.1.dsc
Size/MD5 checksum: 1079
1b5ab754b82a6ff0abc0d2fc125c920a
http://security.debian.org/pool/updates/main/u/usermin/usermin_1.110-3.1.diff.gz
Size/MD5 checksum: 20131
d1582cca3bbe1a376cb16591b550a241
http://security.debian.org/pool/updates/main/u/usermin/usermin_1.110.orig.tar.gz
Size/MD5 checksum: 1791868
cf214bb9927bd230a148ea3077bd8919
Architecture independent components:
http://security.debian.org/pool/updates/main/u/usermin/usermin-at_1.110-3.1_all.deb
Size/MD5 checksum: 21654
7709317a8e5182ed0f9f76b942cc608a
http://security.debian.org/pool/updates/main/u/usermin/usermin-changepass_1.110-3.1_all.deb
Size/MD5 checksum: 18924
cbaad0cc1daf80efbdb6eacc20829e99
http://security.debian.org/pool/updates/main/u/usermin/usermin-chfn_1.110-3.1_all.deb
Size/MD5 checksum: 13858
72ae504bded25ed8b8ecfe3cb6708168
http://security.debian.org/pool/updates/main/u/usermin/usermin-commands_1.110-3.1_all.deb
Size/MD5 checksum: 27728
4b80b6d368265d43139f2a7a800a9a0b
http://security.debian.org/pool/updates/main/u/usermi