Accepted xulrunner 1.8.0.15~pre080614d-0etch1 (source all i386)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 17 Jul 2008 09:16:13 +0000
Source: xulrunner
Binary: libmozjs0d-dbg libnspr4-0d-dbg libxul0d-dbg xulrunner libnspr4-dev libxul0d libnss3-tools xulrunner-gnome-support libnspr4-0d libsmjs-dev libnss3-0d libmozjs0d libmozjs-dev python-xpcom libnss3-0d-dbg libxul-common libmozillainterfaces-java spidermonkey-bin libnss3-dev libxul-dev libsmjs1
Architecture: source all i386
Version: 1.8.0.15~pre080614d-0etch1
Distribution: stable-security
Urgency: low
Maintainer: Mike Hommey <glandium@debian.org>
Changed-By: Alexander Sack <asac@canonical.com>
Description:
libmozillainterfaces-java - XPCOM bindings for Java
libmozjs-dev - Development files for the Mozilla SpiderMonkey JavaScript library
libmozjs0d - The Mozilla SpiderMonkey JavaScript library
libmozjs0d-dbg - Development files for the Mozilla SpiderMonkey JavaScript library
libnspr4-0d - NetScape Portable Runtime Library
libnspr4-0d-dbg - Development files for the NetScape Portable Runtime library
libnspr4-dev - Development files for the NetScape Portable Runtime library
libnss3-0d - Network Security Service libraries
libnss3-0d-dbg - Development files for the Network Security Service libraries
libnss3-dev - Development files for the Network Security Service libraries
libnss3-tools - Network Security Service tools
libsmjs-dev - Migration package for the Mozilla SpiderMonkey JavaScript library
libsmjs1 - Migration package for the Mozilla SpiderMonkey JavaScript library
libxul-common - Gecko engine library - common files
libxul-dev - Development files for the Gecko engine library
libxul0d - Gecko engine library
libxul0d-dbg - Development files for the Gecko engine library
python-xpcom - XPCOM bindings for Python
spidermonkey-bin - The SpiderMonkey Interpreter
xulrunner - XUL + XPCOM application runner
xulrunner-gnome-support - Support for Gnome in xulrunner applications
Changes:
xulrunner (1.8.0.15~pre080614d-0etch1) stable-security; urgency=low
.
[ Alexander Sack <asac@canonical.com> ]
* New security/stability upstream release (backports for 2.0.0.15 + 2.0.0.16)
* Upstream advisories (v2.0.0.15):
MFSA 2008-21 aka CVE-2008-2798 Crashes with evidence of memory corruption (rv:1.8.1.15)
MFSA 2008-21 aka CVE-2008-2799 Crashes with evidence of memory corruption (rv:1.8.1.15)
MFSA 2008-22 aka CVE-2008-2800 - XSS through JavaScript same-origin violation
MFSA 2008-23 aka CVE-2008-2801 - Signed JAR tampering
MFSA 2008-24 aka CVE-2008-2802 - Chrome script loading from fastload file
MFSA 2008-25 aka CVE-2008-2803 - Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript()
MFSA 2008-27 aka CVE-2008-2805 - Arbitrary file upload via originalTarget and DOM Range
MFSA 2008-28 aka CVE-2008-2806 - Arbitrary socket connections with Java LiveConnect on Mac OS X
MFSA 2008-29 aka CVE-2008-2807 - Faulty .properties file results in uninitialized memory being used
MFSA 2008-30 aka CVE-2008-2808 - File location URL in directory listings not escaped properly
MFSA 2008-31 aka CVE-2008-2809 - Peer-trusted certs can use alt names to spoof
MFSA 2008-32 aka CVE-2008-2810 - Remote site run as local file via Windows URL shortcut
MFSA 2008-33 aka CVE-2008-2811 - Crash and remote code execution in block reflow
* Upstream advisories (v2.0.0.16):
MFSA 2008-35 aka CVE-2008-2785 - Command-line URLs launch multiple tabs when Firefox not running
MFSA 2008-34 aka CVE-2008-2933 - Remote code execution by overflowing CSS reference counter
MFSA 2008-36 aka CVE-2008-2934 - Crash with malformed GIF file on Mac OS X
* debian/patches/90_bz421622.dpatch,90_bz425576.dpatch: drop prepatched
prepatches which are now shipped in upstream source.
* debian/patches/00list: Updated accordingly.
* debian/patches/00list: disable 20_visibility patch now shipped upstream
* debian/patches/99_configure.dpatch: updated accordingly.
Files:
31304658ad202bb9e5f675c17336cf3f 1984 devel optional xulrunner_1.8.0.15~pre080614d-0etch1.dsc
489cde3dae0240fefe68b2f53053d8c3 145874 devel optional xulrunner_1.8.0.15~pre080614d-0etch1.diff.gz
0a4cf16412f00f337752f57395b32ef2 42800584 devel optional xulrunner_1.8.0.15~pre080614d.orig.tar.gz
0224ec7e681a40f000157dd255dc6d51 213302 libdevel optional libnspr4-dev_1.8.0.15~pre080614d-0etch1_all.deb
875d41d8f381cba8311fdcec7673e00a 175680 libdevel optional libmozjs-dev_1.8.0.15~pre080614d-0etch1_all.deb
5568df5c50c54dd495b02ff96eb06ef8 36556 libs optional libsmjs1_1.8.0.15~pre080614d-0etch1_all.deb
42c02bb83126e0ff1e8276f2dbfb9da1 36594 libdevel optional libsmjs-dev_1.8.0.15~pre080614d-0etch1_all.deb
f85c0b7ed95d5e8fb00147c56c474e96 1086636 libs optional libxul-common_1.8.0.15~pre080614d-0etch1_all.deb
fcab4e8948288b783fa4404c5c433720 2844006 libdevel optional libxul-dev_1.8.0.15~pre080614d-0etch1_all.deb
465784dcbe74f3099d9e637458d3910b 238584 libdevel optional libnss3-dev_1.8.0.15~pre080614d-0etch1_all.deb
44a40685e1300d81d41278e326ba89f9 1031908 libdevel extra libmozillainterfaces-java_1.8.0.15~pre080614d-0etch1_all.deb
e5b337cadc3b9ea99669dc36b3519d39 269596 devel optional xulrunner_1.8.0.15~pre080614d-0etch1_i386.deb
c155593b6dce9d537a8796b60c22fe2a 63362 devel optional xulrunner-gnome-support_1.8.0.15~pre080614d-0etch1_i386.deb
5ca255701da7ee91e839e712711671a4 139410 libs optional libnspr4-0d_1.8.0.15~pre080614d-0etch1_i386.deb
7fa80424bb86a8d1b80eb07c66a49917 296082 libdevel extra libnspr4-0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
b7e628ff213cde0bcf1761c69cce433e 336508 libs optional libmozjs0d_1.8.0.15~pre080614d-0etch1_i386.deb
718b18f861642f31bd6b9cf717d55f22 713624 libdevel extra libmozjs0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
8ba198c6a9e6ac569a115de228984375 51098 interpreters optional spidermonkey-bin_1.8.0.15~pre080614d-0etch1_i386.deb
66cdbd0c177054c001773c30e5f274cd 5380682 libs optional libxul0d_1.8.0.15~pre080614d-0etch1_i386.deb
41cb675a04ce3b25b67ab3a5c5ded88a 44674802 libdevel extra libxul0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
d9f9ec731d98ebe33cafdf36bea469c2 743780 libs optional libnss3-0d_1.8.0.15~pre080614d-0etch1_i386.deb
66a097c73ca0df785d80cda7fd9ada4d 628096 admin optional libnss3-tools_1.8.0.15~pre080614d-0etch1_i386.deb
8a261ce5bfc95a4b134a65b2c0505bf7 3033472 libdevel extra libnss3-0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
e389eb982bc4ea7d304941f657d469e6 117950 python extra python-xpcom_1.8.0.15~pre080614d-0etch1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)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=qsr1
-----END PGP SIGNATURE-----
Accepted:
libmozillainterfaces-java_1.8.0.15~pre080614d-0etch1_all.deb
to pool/main/x/xulrunner/libmozillainterfaces-java_1.8.0.15~pre080614d-0etch1_all.deb
libmozjs-dev_1.8.0.15~pre080614d-0etch1_all.deb
to pool/main/x/xulrunner/libmozjs-dev_1.8.0.15~pre080614d-0etch1_all.deb
libmozjs0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
libmozjs0d_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080614d-0etch1_i386.deb
libnspr4-0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
libnspr4-0d_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080614d-0etch1_i386.deb
libnspr4-dev_1.8.0.15~pre080614d-0etch1_all.deb
to pool/main/x/xulrunner/libnspr4-dev_1.8.0.15~pre080614d-0etch1_all.deb
libnss3-0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
libnss3-0d_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080614d-0etch1_i386.deb
libnss3-dev_1.8.0.15~pre080614d-0etch1_all.deb
to pool/main/x/xulrunner/libnss3-dev_1.8.0.15~pre080614d-0etch1_all.deb
libnss3-tools_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080614d-0etch1_i386.deb
libsmjs-dev_1.8.0.15~pre080614d-0etch1_all.deb
to pool/main/x/xulrunner/libsmjs-dev_1.8.0.15~pre080614d-0etch1_all.deb
libsmjs1_1.8.0.15~pre080614d-0etch1_all.deb
to pool/main/x/xulrunner/libsmjs1_1.8.0.15~pre080614d-0etch1_all.deb
libxul-common_1.8.0.15~pre080614d-0etch1_all.deb
to pool/main/x/xulrunner/libxul-common_1.8.0.15~pre080614d-0etch1_all.deb
libxul-dev_1.8.0.15~pre080614d-0etch1_all.deb
to pool/main/x/xulrunner/libxul-dev_1.8.0.15~pre080614d-0etch1_all.deb
libxul0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080614d-0etch1_i386.deb
libxul0d_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/libxul0d_1.8.0.15~pre080614d-0etch1_i386.deb
python-xpcom_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/python-xpcom_1.8.0.15~pre080614d-0etch1_i386.deb
spidermonkey-bin_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080614d-0etch1_i386.deb
xulrunner-gnome-support_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080614d-0etch1_i386.deb
xulrunner_1.8.0.15~pre080614d-0etch1.diff.gz
to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614d-0etch1.diff.gz
xulrunner_1.8.0.15~pre080614d-0etch1.dsc
to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614d-0etch1.dsc
xulrunner_1.8.0.15~pre080614d-0etch1_i386.deb
to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614d-0etch1_i386.deb
xulrunner_1.8.0.15~pre080614d.orig.tar.gz
to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614d.orig.tar.gz
Reply to: