Accepted xulrunner 1.8.0.15~pre080614i-0etch1 (source all amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 11 Jan 2009 20:05:46 +0100
Source: xulrunner
Binary: libmozjs0d-dbg libnspr4-0d-dbg libxul0d-dbg xulrunner libnspr4-dev libxul0d libnss3-tools xulrunner-gnome-support libnspr4-0d libsmjs-dev libnss3-0d libmozjs0d libmozjs-dev python-xpcom libnss3-0d-dbg libxul-common libmozillainterfaces-java spidermonkey-bin libnss3-dev libxul-dev libsmjs1
Architecture: source all amd64
Version: 1.8.0.15~pre080614i-0etch1
Distribution: stable-security
Urgency: low
Maintainer: Mike Hommey <glandium@debian.org>
Changed-By: Alexander Sack <asac@debian.org>
Description:
libmozillainterfaces-java - XPCOM bindings for Java
libmozjs-dev - Development files for the Mozilla SpiderMonkey JavaScript library
libmozjs0d - The Mozilla SpiderMonkey JavaScript library
libmozjs0d-dbg - Development files for the Mozilla SpiderMonkey JavaScript library
libnspr4-0d - NetScape Portable Runtime Library
libnspr4-0d-dbg - Development files for the NetScape Portable Runtime library
libnspr4-dev - Development files for the NetScape Portable Runtime library
libnss3-0d - Network Security Service libraries
libnss3-0d-dbg - Development files for the Network Security Service libraries
libnss3-dev - Development files for the Network Security Service libraries
libnss3-tools - Network Security Service tools
libsmjs-dev - Migration package for the Mozilla SpiderMonkey JavaScript library
libsmjs1 - Migration package for the Mozilla SpiderMonkey JavaScript library
libxul-common - Gecko engine library - common files
libxul-dev - Development files for the Gecko engine library
libxul0d - Gecko engine library
libxul0d-dbg - Development files for the Gecko engine library
python-xpcom - XPCOM bindings for Python
spidermonkey-bin - The SpiderMonkey Interpreter
xulrunner - XUL + XPCOM application runner
xulrunner-gnome-support - Support for Gnome in xulrunner applications
Changes:
xulrunner (1.8.0.15~pre080614i-0etch1) stable-security; urgency=low
.
[ Alexander Sack <asac@canonical.com> ]
* New security/stability upstream release (backports for 2.0.0.19)
- Patches: http://people.ubuntu.com/~asac/mozilla-security/1.8.1.19/moz_1.8.0.15prepatches080614i.tar.gz
- Tarball: http://people.ubuntu.com/~asac/mozilla-security/1.8.1.19/xulrunner_1.5.0.15pre080614i-source.tar.bz2
* Upstream advisories (v2.0.0.19):
MFSA 2008-60 aka CVE-2008-5500 (layout) - Crashes with evidence of memory
corruption (rv:1.9.0.5/1.8.1.19)
MFSA 2008-61 aka CVE-2008-5503 - Information stealing via loadBindingDocument
MFSA 2008-64 aka CVE-2008-5506 - XMLHttpRequest 302 response disclosure
MFSA 2008-65 aka CVE-2008-5507 - Cross-domain data theft via script redirect
error message
MFSA 2008-66 aka CVE-2008-5508 - Errors parsing URLs with leading whitespace
and control characters (fixed by bz451613)
* MFSA 2008-68 aka CVE-2008-5511(XSS via XBL bindings to unloaded document),
CVE-2008-5512(JavaScript privilege escalation) - XSS and JavaScript
privilege escalation
Files:
87dd485ac774e78373be5a196cbc8320 1981 devel optional xulrunner_1.8.0.15~pre080614i-0etch1.dsc
82b3061f947787bf267a36513a6bd2dd 43320191 devel optional xulrunner_1.8.0.15~pre080614i.orig.tar.gz
73ec26e81ce6e401845eb070aa26d909 971 devel optional xulrunner_1.8.0.15~pre080614i-0etch1.diff.gz
d6685b7c5a83eb2fc383ad2284e0c300 208008 libdevel optional libnspr4-dev_1.8.0.15~pre080614i-0etch1_all.deb
03d96486a1cb92ca65b39376add42232 176532 libdevel optional libmozjs-dev_1.8.0.15~pre080614i-0etch1_all.deb
033e412379eab51f4608530af659596a 37402 libs optional libsmjs1_1.8.0.15~pre080614i-0etch1_all.deb
a668ef6417fe2f868964b2e1f1cd9028 37436 libdevel optional libsmjs-dev_1.8.0.15~pre080614i-0etch1_all.deb
9935f278d06c5256a1cb6d34f6b43777 1052120 libs optional libxul-common_1.8.0.15~pre080614i-0etch1_all.deb
f4c9fed2489696b18ecedf945729ffa7 2638014 libdevel optional libxul-dev_1.8.0.15~pre080614i-0etch1_all.deb
f692e056f6eccb9633771a1b5d56d115 231436 libdevel optional libnss3-dev_1.8.0.15~pre080614i-0etch1_all.deb
b8277c4699e9f2edc9131c525c72ac2a 1032570 libdevel extra libmozillainterfaces-java_1.8.0.15~pre080614i-0etch1_all.deb
b7f981650c4b20db874b70a2bd6bc059 279116 devel optional xulrunner_1.8.0.15~pre080614i-0etch1_amd64.deb
4825855bdb9b5a8bb2c62436fde8ad7c 69626 devel optional xulrunner-gnome-support_1.8.0.15~pre080614i-0etch1_amd64.deb
19ab1c22cd55db2bc8ee33be7fff759b 149212 libs optional libnspr4-0d_1.8.0.15~pre080614i-0etch1_amd64.deb
4855bb5ffe73a231bb2a0d701616e7eb 305094 libdevel extra libnspr4-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
dbec2df715586df57acd7228a3175ef9 356260 libs optional libmozjs0d_1.8.0.15~pre080614i-0etch1_amd64.deb
af22a3727a03e9bda037a329ee21df65 756112 libdevel extra libmozjs0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
5d946fe8bf84c2e5514f0114ce77ac71 53664 interpreters optional spidermonkey-bin_1.8.0.15~pre080614i-0etch1_amd64.deb
f975d16444059b3b9ae1b43c1a9c0cda 6345322 libs optional libxul0d_1.8.0.15~pre080614i-0etch1_amd64.deb
2aba2e701aac5639822ce0e6ed911948 45243162 libdevel extra libxul0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
5493e297887f037ed4cdd9c2150e68ed 810610 libs optional libnss3-0d_1.8.0.15~pre080614i-0etch1_amd64.deb
269e0391c1bffea6f26c283457fdb5a3 671242 admin optional libnss3-tools_1.8.0.15~pre080614i-0etch1_amd64.deb
ba7dcb523f47170cf40f8d07f078ff38 3180000 libdevel extra libnss3-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
76ebe8f1cc4eb9a881fdea16732c2674 126976 python extra python-xpcom_1.8.0.15~pre080614i-0etch1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)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=Znzp
-----END PGP SIGNATURE-----
Accepted:
libmozillainterfaces-java_1.8.0.15~pre080614i-0etch1_all.deb
to pool/main/x/xulrunner/libmozillainterfaces-java_1.8.0.15~pre080614i-0etch1_all.deb
libmozjs-dev_1.8.0.15~pre080614i-0etch1_all.deb
to pool/main/x/xulrunner/libmozjs-dev_1.8.0.15~pre080614i-0etch1_all.deb
libmozjs0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libmozjs0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
libmozjs0d_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libmozjs0d_1.8.0.15~pre080614i-0etch1_amd64.deb
libnspr4-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libnspr4-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
libnspr4-0d_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libnspr4-0d_1.8.0.15~pre080614i-0etch1_amd64.deb
libnspr4-dev_1.8.0.15~pre080614i-0etch1_all.deb
to pool/main/x/xulrunner/libnspr4-dev_1.8.0.15~pre080614i-0etch1_all.deb
libnss3-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libnss3-0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
libnss3-0d_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libnss3-0d_1.8.0.15~pre080614i-0etch1_amd64.deb
libnss3-dev_1.8.0.15~pre080614i-0etch1_all.deb
to pool/main/x/xulrunner/libnss3-dev_1.8.0.15~pre080614i-0etch1_all.deb
libnss3-tools_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libnss3-tools_1.8.0.15~pre080614i-0etch1_amd64.deb
libsmjs-dev_1.8.0.15~pre080614i-0etch1_all.deb
to pool/main/x/xulrunner/libsmjs-dev_1.8.0.15~pre080614i-0etch1_all.deb
libsmjs1_1.8.0.15~pre080614i-0etch1_all.deb
to pool/main/x/xulrunner/libsmjs1_1.8.0.15~pre080614i-0etch1_all.deb
libxul-common_1.8.0.15~pre080614i-0etch1_all.deb
to pool/main/x/xulrunner/libxul-common_1.8.0.15~pre080614i-0etch1_all.deb
libxul-dev_1.8.0.15~pre080614i-0etch1_all.deb
to pool/main/x/xulrunner/libxul-dev_1.8.0.15~pre080614i-0etch1_all.deb
libxul0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libxul0d-dbg_1.8.0.15~pre080614i-0etch1_amd64.deb
libxul0d_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/libxul0d_1.8.0.15~pre080614i-0etch1_amd64.deb
python-xpcom_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/python-xpcom_1.8.0.15~pre080614i-0etch1_amd64.deb
spidermonkey-bin_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/spidermonkey-bin_1.8.0.15~pre080614i-0etch1_amd64.deb
xulrunner-gnome-support_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/xulrunner-gnome-support_1.8.0.15~pre080614i-0etch1_amd64.deb
xulrunner_1.8.0.15~pre080614i-0etch1.diff.gz
to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614i-0etch1.diff.gz
xulrunner_1.8.0.15~pre080614i-0etch1.dsc
to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614i-0etch1.dsc
xulrunner_1.8.0.15~pre080614i-0etch1_amd64.deb
to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614i-0etch1_amd64.deb
xulrunner_1.8.0.15~pre080614i.orig.tar.gz
to pool/main/x/xulrunner/xulrunner_1.8.0.15~pre080614i.orig.tar.gz
Reply to: