Search:

July 2007

3273 - Several Debian Security Advisories

ID: 3273
Date: 26 July 2007 11:58

Title: 3273 - Several Debian Security Advisories
Abstract: Details of several Debian security advisories
Vendors affected:Debian
Applications affected:gimp, mozilla-firefox,xulrunner, iceweasel, icceape, clamav, bind9
Warning Status: Imminent
Availability of fix: Available
Type of fix: Patch
Source: Debian
Reliability of source: Known
Source URL: http://security.debian.org/

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1335-1                    security@debian.org
http://www.debian.org/security/                         Moritz Muehlenhoff
July 18th, 2007                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : gimp
Vulnerability : several
Problem-Type   : local(remote)
Debian-specific: no
CVE ID         : CVE-2006-4519 CVE-2007-2949

Several remote vulnerabilities have been discovered in Gimp, the GNU Image Manipulation Program, which might lead to the execution of arbitrary code.
The Common Vulnerabilities and Exposures project identifies the following
problems:

CVE-2006-4519

    Sean Larsson discovered several integer overflows in the processing
    code for DICOM, PNM, PSD, RAS, XBM and XWD images, which might lead
    to the execution of arbitrary code if a user is tricked into opening
    such a malformed media file.

CVE-2007-2949

    Stefan Cornelius discovered an integer overflow in the processing
    code for PSD images, which might lead to the execution of arbitrary
    code if a user is tricked into opening such a malformed media file.

For the oldstable distribution (sarge) these problems have been fixed in version 2.2.6-1sarge4. Packages for mips and mipsel are not yet available.

For the stable distribution (etch) these problems have been fixed in version 2.2.13-1etch4. Packages for mips are not yet available.

For the unstable distribution (sid) these problems have been fixed in version 2.2.17-1.

We recommend that you upgrade your gimp packages.

Upgrade Instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given below:

apt-get update
will update the internal database apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 3.1 alias sarge
- --------------------------------

Source archives:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4.dsc
      Size/MD5 checksum:     1089 344f1d886ca3e9d1c9667a82d3bfe5c8
    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4.diff.gz
      Size/MD5 checksum:    33037 d311b98590cfc013a797b634d218cd70
    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6.orig.tar.gz
      Size/MD5 checksum: 20496404 a6450200858c59bb46ace6987f1fc6ee

Architecture independent components:

    http://security.debian.org/pool/updates/main/g/gimp/gimp-data_2.2.6-1sarge4_all.deb
      Size/MD5 checksum: 6276298 3fb6080d9ae6e19ab433f8dedda6b998
    http://security.debian.org/pool/updates/main/g/gimp/gimp1.2_2.2.6-1sarge4_all.deb
      Size/MD5 checksum:    31856 485fe214852413df46436416a690e4c9
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-doc_2.2.6-1sarge4_all.deb
      Size/MD5 checksum:   515094 66bbc311d11232cf5b445cada1a1b78a

Alpha architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_alpha.deb
      Size/MD5 checksum: 3892160 c82b24236425fde06cb0c637be2e6255
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_alpha.deb
      Size/MD5 checksum:    45364 0b6bc7fef786373f1bb69d3dbbe4ee91
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_alpha.deb
      Size/MD5 checksum:   127204 2db0f7923864de7445943114ad849e3f
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_alpha.deb
      Size/MD5 checksum:    45162 ae941c83c93a8f90a37462ddf285b8b2
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_alpha.deb
      Size/MD5 checksum:   577106 f662b5fecd51821f51f2d890e481ae76
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_alpha.deb
      Size/MD5 checksum:    99256 74c769611be9a5b8f26cc15d6912fe76

AMD64 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_amd64.deb
      Size/MD5 checksum: 3268176 62c840774d113ecf009d24eb928f092f
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_amd64.deb
      Size/MD5 checksum:    43898 953d58ebf20c56f15290655e562ef360
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_amd64.deb
      Size/MD5 checksum:   122184 4121ee3d5953b430207fad46542cf8eb
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_amd64.deb
      Size/MD5 checksum:    43646 f9004008612ffe6238eac0fbc8b994b1
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_amd64.deb
      Size/MD5 checksum:   543996 95741b9ea838a33f3db6cee5658d4672
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_amd64.deb
      Size/MD5 checksum:    98434 e04ef4ce3ae063940908e396f6bf9d74

ARM architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_arm.deb
      Size/MD5 checksum: 2940312 2493d55605cfc6658d5aa3cc8c030ed0
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_arm.deb
      Size/MD5 checksum:    42112 d6314e21d289b262504237162bea5ff6
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_arm.deb
      Size/MD5 checksum:   114212 f8d53f138e916ba33fca401aeb0ad02d
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_arm.deb
      Size/MD5 checksum:    42458 d9d252d1c1cfbe1ca9e3c65f27b4068c
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_arm.deb
      Size/MD5 checksum:   507900 a73ff8bb7a989343e905133c63ffd1e9
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_arm.deb
      Size/MD5 checksum:    98598 08ab629c6deb1ead4cf335f0ded999b7

HP Precision architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_hppa.deb
      Size/MD5 checksum: 3470636 e7de1e4d1ec5bc9718af90549d9744e2
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_hppa.deb
      Size/MD5 checksum:    43566 f3f38b7ce093d53c2a4915382a12ceae
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_hppa.deb
      Size/MD5 checksum:   125852 41638214f7c8acd34af3d8034d7b3500
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_hppa.deb
      Size/MD5 checksum:    43892 08151f6d298e5741a586b6052c5ef03e
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_hppa.deb
      Size/MD5 checksum:   583230 a8088b3cb18abb2547e72d4f71d08363
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_hppa.deb
      Size/MD5 checksum:    98498 19d31834218921f77a8ba8e16dc088b7

Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_i386.deb
      Size/MD5 checksum: 3089518 b473d9f9280b725d567ae96ebd082f34
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_i386.deb
      Size/MD5 checksum:    42880 784cc603f0c3d6ad709780b1aae0b151
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_i386.deb
      Size/MD5 checksum:   117196 2f695d3a2b9dec8cc125a591aae725a7
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_i386.deb
      Size/MD5 checksum:    43434 664262c600381bf091aa69088f6ad3da
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_i386.deb
      Size/MD5 checksum:   521946 25ffbded4a587c00d1b17a9afb9cef77
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_i386.deb
      Size/MD5 checksum:    98488 23fc02e84e4f1b7598caf0a71bc316a7

Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_ia64.deb
      Size/MD5 checksum: 4585190 e38c9123c056ffc323bab598eb479875
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_ia64.deb
      Size/MD5 checksum:    46774 4b2bf244587c1bdce7d470453eb9408e
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_ia64.deb
      Size/MD5 checksum:   135982 a0e6ac478432aea34f74a2e3db6f3860
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_ia64.deb
      Size/MD5 checksum:    47034 c2bc3cdff704cb23e692786f974d9116
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_ia64.deb
      Size/MD5 checksum:   632496 ace8aa10d26a79fa1badcbeaedd7dc2e
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_ia64.deb
      Size/MD5 checksum:    98426 50b40fe8def3ac3f4fd8973a207cacc4

Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_m68k.deb
      Size/MD5 checksum: 2699532 17c29208f228b8351321c3a98d561291
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_m68k.deb
      Size/MD5 checksum:    42492 9b97613be40d9eb9d55699005a56ed87
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_m68k.deb
      Size/MD5 checksum:   118584 5ef40a973b3d098b2da89252778be55d
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_m68k.deb
      Size/MD5 checksum:    42320 cb17d1f2e81926211723b23805895a4f
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_m68k.deb
      Size/MD5 checksum:   520286 46775f63f758ddfb629d2d0f18802e84
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_m68k.deb
      Size/MD5 checksum:    98800 79b8ae5f55fd7ac1273af0e5c318480a

PowerPC architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_powerpc.deb
      Size/MD5 checksum: 3343462 79b8a7e0910ae9fc973e8fff4b695fa2
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_powerpc.deb
      Size/MD5 checksum:    44110 74f74f9cf0a1d76badc99b7b56f6c77b
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_powerpc.deb
      Size/MD5 checksum:   118374 2a5e90f27e3c5c79aeb1d461c9cf0817
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_powerpc.deb
      Size/MD5 checksum:    44496 60078805dc7d6a7c389f7886e720cb33
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_powerpc.deb
      Size/MD5 checksum:   539680 bcb8da84b8ee954f3ed31605d0745c42
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_powerpc.deb
      Size/MD5 checksum:    98462 72848784cc2f1a7f0b199998ff1cef26

IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_s390.deb
      Size/MD5 checksum: 3135354 83173a0c68154ed5721eb9d55858d463
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_s390.deb
      Size/MD5 checksum:    44078 4ccaa516d9575c8b1c5baf86f1e52776
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_s390.deb
      Size/MD5 checksum:   124092 189cab70a7a0e4bc2054d0e806fd1473
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_s390.deb
      Size/MD5 checksum:    43694 2759a8e54806525d3277be6dd2140bce
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_s390.deb
      Size/MD5 checksum:   555680 012596aeb64bf598d989d97d4fd02781
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_s390.deb
      Size/MD5 checksum:    98424 041750d88d93e72eb7af01a220a0525e

Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge4_sparc.deb
      Size/MD5 checksum: 2930854 eed7a101771b1db48951a96bffd351b5
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge4_sparc.deb
      Size/MD5 checksum:    42422 a4a2ed8e81beb480747c23a4a9a6f812
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge4_sparc.deb
      Size/MD5 checksum:   116596 8f35f18d3254f1914e4e668e1b92c685
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge4_sparc.deb
      Size/MD5 checksum:    42620 8c78a5e81327ef350fd139e60459fa4f
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge4_sparc.deb
      Size/MD5 checksum:   527586 88012ea10fc33b2e04c661599fc65a03
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge4_sparc.deb
      Size/MD5 checksum:    98508 4ccd0cec811f0c0dc65c98715a93a423

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4.dsc
      Size/MD5 checksum:     1269 0596a7c11c1d70e55ba5590a225d3d5a
    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4.diff.gz
      Size/MD5 checksum:   125338 44ec8d280b8e086c69ef028efc4d920b
    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13.orig.tar.gz
      Size/MD5 checksum: 18816434 20c3cd6b730c11da4d70671ed047f803

Architecture independent components:

    http://security.debian.org/pool/updates/main/g/gimp/gimp-data_2.2.13-1etch4_all.deb
      Size/MD5 checksum: 6754588 5a4d383bdd68ff44a61de72ed9c51250
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-doc_2.2.13-1etch4_all.deb
      Size/MD5 checksum:   556382 4913e9c4e8e0e55f35c9de72465511e3

Alpha architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_alpha.deb
      Size/MD5 checksum: 3676040 50304f3a0da75b5f7e3d34645c76eba6
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_alpha.deb
      Size/MD5 checksum: 8302590 d5ffe3abf9edfdfd4d8fce47f60cd136
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_alpha.deb
      Size/MD5 checksum:    66302 6ab98691c5dade22b848a21aadfa54fd
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_alpha.deb
      Size/MD5 checksum:   148510 d36c93836e3e40514a26c6b2cd9a0d96
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_alpha.deb
      Size/MD5 checksum:    66706 463194d470bbd99c9f0a4519ef610f97
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_alpha.deb
      Size/MD5 checksum:   605170 b1f3f4b1029744e20123503ee9893f5f
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_alpha.deb
      Size/MD5 checksum:   120014 33819b44f9a51043e9aea671f1278cb3

AMD64 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_amd64.deb
      Size/MD5 checksum: 3223048 7790f925fd51e43cfb65259dd47cadfb
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_amd64.deb
      Size/MD5 checksum: 8388544 f2adc19ac6418c550b2f9e8a1805021f
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_amd64.deb
      Size/MD5 checksum:    64970 075509e7aac52204e669edee0a98777b
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_amd64.deb
      Size/MD5 checksum:   145760 985698d84cea9038c81fe7c0b9a429d4
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_amd64.deb
      Size/MD5 checksum:    65190 7a44fd97bd80e82e0b906a8bdc0e8306
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_amd64.deb
      Size/MD5 checksum:   574488 1b0756695599bee7718af646cdffdb52
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_amd64.deb
      Size/MD5 checksum:   119556 9d630b9492be0ffd4dfa75978ca1495f

ARM architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_arm.deb
      Size/MD5 checksum: 2950052 2fef032b294422ea5f8542d710426814
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_arm.deb
      Size/MD5 checksum: 7985794 71994163262a31d834e6f6bf672f26c2
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_arm.deb
      Size/MD5 checksum:    63376 0c1b57927839172a25279ce302f56c3b
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_arm.deb
      Size/MD5 checksum:   137348 ac2a5d8b88759a73b4620107a2f69576
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_arm.deb
      Size/MD5 checksum:    64066 9e066f44626fcdeb072650f046e6c0de
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_arm.deb
      Size/MD5 checksum:   535542 2186220b55dfb47930aea58a63279911
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_arm.deb
      Size/MD5 checksum:   119762 80f49af1823c96a3983f8fba38bf0ba4

HP Precision architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_hppa.deb
      Size/MD5 checksum: 3482258 cf283dfeadb58c89305947f29dd36d15
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_hppa.deb
      Size/MD5 checksum: 7989724 42213931370d96182daa27797c37e994
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_hppa.deb
      Size/MD5 checksum:    65120 4397a44052c2368f3440834cd26214d7
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_hppa.deb
      Size/MD5 checksum:   150190 444fa222be9458e3038fd49b20c8f143
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_hppa.deb
      Size/MD5 checksum:    65628 b780260cdff279fc3f307d52b573398d
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_hppa.deb
      Size/MD5 checksum:   606218 9dc70700ffe03cd3b926b333c8d756ea
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_hppa.deb
      Size/MD5 checksum:   119620 9fbd3bd17be5f8aefd1fa2b86f5e02f0

Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_i386.deb
      Size/MD5 checksum: 3069206 b0af23173d88f8fd5b88b2af4c2fce14
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_i386.deb
      Size/MD5 checksum: 7781816 b66e02681ca7785997d85302752b9e92
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_i386.deb
      Size/MD5 checksum:    64264 04a4e8c43f1a6363ea2670a35248662c
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_i386.deb
      Size/MD5 checksum:   139964 d7feadabc45564c2fd0a2c300a3ad42f
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_i386.deb
      Size/MD5 checksum:    64892 43bc0ccf10bd8dd4a9e3d03235112575
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_i386.deb
      Size/MD5 checksum:   547192 d22f64b9f76d890574f3ef6f3b29ce0a
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_i386.deb
      Size/MD5 checksum:   119598 a96aa6a76a31ba306e0e59ec934beaae

Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_ia64.deb
      Size/MD5 checksum: 4801200 0e5927e3e3b23dba11a392ced2dfc384
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_ia64.deb
      Size/MD5 checksum: 8080924 5cbb57470b81a943ec1421e1d22fab9c
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_ia64.deb
      Size/MD5 checksum:    69698 8e7699d911747ed965587d2bf36707d2
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_ia64.deb
      Size/MD5 checksum:   162930 390622d0466fd4ee1d645ff24a486241
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_ia64.deb
      Size/MD5 checksum:    69726 ceb2833f35e0b2dd6df42c5b6f7a0924
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_ia64.deb
      Size/MD5 checksum:   674080 02d6349aa77a9598ce6c7ef538ce2d0f
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_ia64.deb
      Size/MD5 checksum:   119572 fa64c57058122edcf0f1c413d21557cb

Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_mipsel.deb
      Size/MD5 checksum: 3316782 65ebad651b17863a9a7def60032e4672
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_mipsel.deb
      Size/MD5 checksum: 8368926 443e53afe7639aa6c3d159b6499218b4
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_mipsel.deb
      Size/MD5 checksum:    64718 1278a55f7345cefaf0bbde156a01852b
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_mipsel.deb
      Size/MD5 checksum:   138848 708f79acae6cda1521d1ac5c4f2f5e2e
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_mipsel.deb
      Size/MD5 checksum:    65306 1dcd3cb4aa8e75fc21517d034297e5e7
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_mipsel.deb
      Size/MD5 checksum:   552706 a44da4d486e01cadfb7d2f305be3be24
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_mipsel.deb
      Size/MD5 checksum:   119612 d13cbaeb0562086ca97cd33ac5b55f68

PowerPC architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_powerpc.deb
      Size/MD5 checksum: 3322580 34f0de0fa34506224ad8f0d4bb134da4
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_powerpc.deb
      Size/MD5 checksum: 8576426 a92e2a144d4bc2007c4426de63f53c9a
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_powerpc.deb
      Size/MD5 checksum:    65354 d82e9a5f80edbc335db4543b76368070
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_powerpc.deb
      Size/MD5 checksum:   141868 579bcf537af8b4160125cd9e37556a7b
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_powerpc.deb
      Size/MD5 checksum:    65918 58e71799fdee25a691e8a90d5da13401
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_powerpc.deb
      Size/MD5 checksum:   568094 b9165bf4d4629833de591e9c310e0ae9
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_powerpc.deb
      Size/MD5 checksum:   119582 2677fc64c5ff0daeb1661127cbccc0e0

IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_s390.deb
      Size/MD5 checksum: 3153684 3111fdb75c87d140bde2c84867547e02
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_s390.deb
      Size/MD5 checksum: 8067256 e7e8921bba628e7e664eb74ccbb65798
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_s390.deb
      Size/MD5 checksum:    65318 543771b863775a0e5c8399a8bdadc478
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_s390.deb
      Size/MD5 checksum:   147020 88beac981ba8419b758f8ed062f47923
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_s390.deb
      Size/MD5 checksum:    65130 8c2d3e9740521f5b864e14e58ca99b78
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_s390.deb
      Size/MD5 checksum:   579226 5a386add556e7fe707c50a875134cbb6
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_s390.deb
      Size/MD5 checksum:   119550 0d8676805ac085717ec189e8c156a3f0

Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.13-1etch4_sparc.deb
      Size/MD5 checksum: 2913146 938eb0705a8214f68ca74deb46fa585d
    http://security.debian.org/pool/updates/main/g/gimp/gimp-dbg_2.2.13-1etch4_sparc.deb
      Size/MD5 checksum: 7783506 ae99e650842552c3af62e1af49eecc81
    http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.13-1etch4_sparc.deb
      Size/MD5 checksum:    63802 f7b381f9dd5da63857bb0a1e4703d8a0
    http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.13-1etch4_sparc.deb
      Size/MD5 checksum:   139670 5098cba15eee1a2536bb6ce37237f22f
    http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.13-1etch4_sparc.deb
      Size/MD5 checksum:    64348 0f47f65a9d0edcec71e8c7024bf978c3
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.13-1etch4_sparc.deb
      Size/MD5 checksum:   549708 9a5bd7f989b9bc838d46cb401aeab400
    http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.13-1etch4_sparc.deb
      Size/MD5 checksum:   119602 761f5e951f018375b8eaad8a7c52984d

These files will probably be moved into the stable distribution on
its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg> -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGnopDXm3vHE4uyloRAoT9AJ9OaxGjxH8EtwDvh2qxMXrUhnlWvQCeJ++Q
YvuufGg53j283ES6nWIfUAM=
=J2DR
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1336-1                    security@debian.org
http://www.debian.org/security/                         Moritz Muehlenhoff
July 22nd, 2007                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : mozilla-firefox
Vulnerability : several
Problem-Type   : remote
Debian-specific: no
CVE ID         : CVE-2007-1282 CVE-2007-0994 CVE-2007-0995 CVE-2007-0996 CVE-2007-0981 CVE-2007-0008 CVE-2007-0009 CVE-2007-0775 CVE-2007-0778 CVE-2007-0045 CVE-2006-6077

Several remote vulnerabilities have been discovered in Mozilla Firefox.

This will be the last security update of Mozilla-based products for the oldstable (sarge) distribution of Debian. We recommend to upgrade to stable (etch) as soon as possible.

The Common Vulnerabilities and Exposures project identifies the following
vulnerabilities:

CVE-2007-1282

It was discovered that an integer overflow in text/enhanced message
parsing allows the execution of arbitrary code.

CVE-2007-0994

It was discovered that a regression in the Javascript engine allows
the execution of Javascript with elevated privileges.

CVE-2007-0995

It was discovered that incorrect parsing of invalid HTML characters
allows the bypass of content filters.

CVE-2007-0996

It was discovered that insecure child frame handling allows cross-site
scripting.

CVE-2007-0981

It was discovered that Firefox handles URI withs a null byte in the
hostname insecurely.

CVE-2007-0008

It was discovered that a buffer overflow in the NSS code allows the
execution of arbitrary code.

CVE-2007-0009

It was discovered that a buffer overflow in the NSS code allows the
execution of arbitrary code.

CVE-2007-0775

It was discovered that multiple programming errors in the layout engine
allow the execution of arbitrary code.

CVE-2007-0778

It was discovered that the page cache calculates hashes in an insecure
manner.

CVE-2006-6077

It was discovered that the password manager allows the disclosure of
passwords.

For the oldstable distribution (sarge) these problems have been fixed in version 1.0.4-2sarge17. You should upgrade to etch as soon as possible.

The stable distribution (etch) isn't affected. These vulnerabilities have been fixed prior to the release of Debian etch.

The unstable distribution (sid) no longer contains mozilla-firefox. Iceweasel is already fixed.

Upgrade Instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given below:

apt-get update
will update the internal database apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 3.1 alias sarge
- --------------------------------

Source archives:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17.dsc
      Size/MD5 checksum:     1641 36715bb647cb3b7cd117edee90a34bfd
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17.diff.gz
      Size/MD5 checksum:   553311 4ba992e60e5c6b156054c5105b1134ae
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4.orig.tar.gz
      Size/MD5 checksum: 40212297 8e4ba81ad02c7986446d4e54e978409d

Alpha architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_alpha.deb
      Size/MD5 checksum: 11221890 5d8d1de73d162edf8ddbaa40844bb454
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_alpha.deb
      Size/MD5 checksum:   172696 42d5c31ec7a2e3163846c347f04773df
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_alpha.deb
      Size/MD5 checksum:    63574 238529b9d4ae396dc01d786d4fb843b4

AMD64 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_amd64.deb
      Size/MD5 checksum: 9429140 8394fcd85a7218db784160702efc5249
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_amd64.deb
      Size/MD5 checksum:   166496 795a8ec3e1aa1b0a718ad6f4439670ef
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_amd64.deb
      Size/MD5 checksum:    62022 ef315cc90c3780ff151cd2271e913859

ARM architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_arm.deb
      Size/MD5 checksum: 8244544 71eaf9cb5418a77410ff12c7f36eb32b
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_arm.deb
      Size/MD5 checksum:   157966 5e2e22d04a33ccbc0e6b19b4c4d43492
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_arm.deb
      Size/MD5 checksum:    57358 6f34a7a02114e48cadc6860b86f75130

HP Precision architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_hppa.deb
      Size/MD5 checksum: 10301620 3700a0b7dcb0ab061b3521e2a3f232f9
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_hppa.deb
      Size/MD5 checksum:   169432 387b8fa52d406dfdd26c3adc3ccac615
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_hppa.deb
      Size/MD5 checksum:    62500 80addaf2d87b6952fdc9104c5fc9dfde

Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_i386.deb
      Size/MD5 checksum: 8919924 8fc67257357687c8611b3e4e5389aee4
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_i386.deb
      Size/MD5 checksum:   161684 6c989c4276e34c6031b6185418a8ddb1
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_i386.deb
      Size/MD5 checksum:    58896 7e48aa697c8c17f7d22de860a17e7dfd

Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_ia64.deb
      Size/MD5 checksum: 11664142 aa008699700ba3c8b45d3a8961e99192
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_ia64.deb
      Size/MD5 checksum:   172030 e79af50f04490de310cda7f6ce652d44
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_ia64.deb
      Size/MD5 checksum:    66718 8cabdbf0919ac447c5d492ef6227d9af

Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_m68k.deb
      Size/MD5 checksum: 8196148 e3544446b371fd7ed4b79e53f69b556a
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_m68k.deb
      Size/MD5 checksum:   160556 0164d4c0f675a020643ccedf94a55eb8
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_m68k.deb
      Size/MD5 checksum:    58168 b429907e69e8daa7d51e45552659da27

Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_mips.deb
      Size/MD5 checksum: 9954006 0eb0513fc950e7cd8abcae9666b24a7b
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_mips.deb
      Size/MD5 checksum:   159496 ca0585a663a5470d3a62ae0786864beb
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_mips.deb
      Size/MD5 checksum:    59170 22ea96156de56d046a7afd73d4857419

Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_mipsel.deb
      Size/MD5 checksum: 9831728 dda6865c7290fce658847f0909617c73
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_mipsel.deb
      Size/MD5 checksum:   159060 e7a7c4db0f5df82f84ceef6827df2bea
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_mipsel.deb
      Size/MD5 checksum:    58984 b0b02ac1c62041db8d377a7ff40c013c

PowerPC architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge15_powerpc.deb
      Size/MD5 checksum: 8587718 8d219ce9e684b86babfe31db9d7d9658
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge15_powerpc.deb
      Size/MD5 checksum:   159762 41f3707945d5edae6ee1ac90bdef5cab
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge15_powerpc.deb
      Size/MD5 checksum:    60936 1a79408acd12828a3710393e05d99914

IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_s390.deb
      Size/MD5 checksum: 9667078 5838d957637b4d4c2c19afea0dd68db5
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_s390.deb
      Size/MD5 checksum:   167092 4dd6de7299014d5e0c13da8e480a7f3c
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_s390.deb
      Size/MD5 checksum:    61472 64d10c667ed4c6c12947c49f5cca8ff6

Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge17_sparc.deb
      Size/MD5 checksum: 8680322 241cddabdf91eb14b0a6529ffc84a51d
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge17_sparc.deb
      Size/MD5 checksum:   160304 7887081b85d3ead3994a997608bbe22a
    http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge17_sparc.deb
      Size/MD5 checksum:    57718 4a4eeeb0815cb03d51f74965403911ad

These files will probably be moved into the oldstable distribution on
its next update.

iD8DBQFGo5b7Xm3vHE4uyloRAsdgAKDTo6NxeylHh30syJpFeyF5/Yr/XwCdH188
NdI5zd36oN5mVqIDUsqYC3o=
=/qY/
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1337-1                    security@debian.org
http://www.debian.org/security/                         Moritz Muehlenhoff
July 22nd, 2007                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : xulrunner
Vulnerability : several
Problem-Type   : remote
Debian-specific: no
CVE ID         : CVE-2007-3089 CVE-2007-3285 CVE-2007-3656 CVE-2007-3734 CVE-2007-3735 CVE-2007-3736 CVE-2007-3737 CVE-2007-3738

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems:

CVE-2007-3089

Ronen Zilberman and Michal Zalewski discovered that a timing race
allows the injection of content into about:blank frames.

CVE-2007-3656

Michal Zalewski discovered that same-origin policies for wyciwyg://
documents are insufficiently enforced.

CVE-2007-3734

    Bernd Mielke, Boris Zbarsky, David Baron, Daniel Veditz, Jesse Ruderman,
    Lukas Loehrer, Martijn Wargers, Mats Palmgren, Olli Pettay, Paul
    Nickerson and Vladimir Sukhoy discovered crashes in the layout engine,
    which might allow the execution of arbitrary code.

CVE-2007-3735

Asaf Romano, Jesse Ruderman and Igor Bukanov discovered crashes in the
javascript engine, which might allow the execution of arbitrary code.

CVE-2007-3736

"moz_bug_r_a4" discovered that the addEventListener() and setTimeout()
functions allow cross-site scripting.

CVE-2007-3737

"moz_bug_r_a4" discovered that a programming error in event handling
allows privilege escalation.

CVE-2007-3738

"shutdown" and "moz_bug_r_a4" discovered that the XPCNativeWrapper allows
the execution of arbitrary code.

The oldstable distribution (sarge) doesn't include xulrunner.

For the stable distribution (etch) these problems have been fixed in version 1.8.0.13~pre070720-0etch1. A build for the mips architecture is not yet available, it will be provided later.

For the unstable distribution (sid) these problems have been fixed in version 1.8.1.5-1.

We recommend that you upgrade your xulrunner packages.

Upgrade Instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given below:

apt-get update
will update the internal database apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

    http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.13~pre070720-0etch1.dsc
      Size/MD5 checksum:     1343 a37a2616fb763e235c302c9447130812
    http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.13~pre070720-0etch1.diff.gz
      Size/MD5 checksum:   142519 da13edae4972a96bbde266c42a4080b5
    http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.8.0.13~pre070720.orig.tar.gz
      Size/MD5 checksum: 41410770 e30ab38e9926b780baf7b500fb6201ab

Architecture independent components:

    http://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.8.0.13~pre070720-0etch1_all.deb
      Size/MD5 checksum: 1025740 1bed1974e10bc6a292c22be8dd819fd1
    http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.8.0.13~pre070720-0etch1_all.deb
      Size/MD5 checksum:   175032 12d259d28f639b20cc6c1a96dd645d45
    http://security.debian.org/pool/updates/main/x/xulrunner/libnspr4-dev_1.8.0.13~pre070720-0etch1_all.deb
      Size/MD5 checksum:   206146 a7949a4cf99cba9f089dc7d303dbad84
    http://security.debian.org/pool/updates/main/x/xulrunner/libnss3-dev_1.8.0.13~pre070720-0etch1_all.deb
      Size/MD5 checksum:   229660 30268c95ecffd8cfb4c897245a7705e3
    http://security.debian.org/pool/updates/main/x/xulrunner/libsmjs-dev_1.8.0.13~pre070720-0etch1_all.deb
      Size/MD5 checksum:    34914 49bd1763b6490ff9eb2ceabaf8d3dc6b
    http://security.debian.org/pool/updates/main/x/xulrunner/libsmjs1_1.8.0.13~pre070720-0etch1_all.deb
      Size/MD5 checksum:    34880 e70de907f7cbc32e087b85a86854d37e
    http://security.debian.org/pool/updates/main/x/xulrunner/libxul-common_1.8.0.13~pre070720-0etch1_all.deb
      Size/MD5 checksum: 1047844 34c67cfdd585938584649af591864a1a
    http://security.debian.org/pool/updates/main/x/xulrunner/libxul-dev_1.8.0.13~pre070720-0etch1_all.deb
      Size/MD5 checksum: 2677434 729ad3cda351343ba59870966ef78310

Alpha architecture:

AMD64 architecture:

ARM architecture:

HP Precision architecture:

Intel IA-32 architecture:

Intel IA-64 architecture:

Big endian MIPS architecture:

Little endian MIPS architecture:

PowerPC architecture:

IBM S/390 architecture:

Sun Sparc architecture:

These files will probably be moved into the stable distribution on
its next update.

iD8DBQFGo61TXm3vHE4uyloRAi61AKCX1cJh5J65lkppA4PTmxrMhftDUQCgu+aw
C7cr/aeoRI7t8i74QaiguIU=
=l7SR
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1338-1                    security@debian.org
http://www.debian.org/security/                         Moritz Muehlenhoff
July 23rd, 2007                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : iceweasel
Vulnerability : several
Problem-Type   : remote
Debian-specific: no
CVE ID         : CVE-2007-3089 CVE-2007-3656 CVE-2007-3734 CVE-2007-3735 CVE-2007-3736 CVE-2007-3737 CVE-2007-3738

Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems:

CVE-2007-3089

Ronen Zilberman and Michal Zalewski discovered that a timing race
allows the injection of content into about:blank frames.

CVE-2007-3656

Michal Zalewski discovered that same-origin policies for wyciwyg://
documents are insufficiently enforced.

CVE-2007-3734

    Bernd Mielke, Boris Zbarsky, David Baron, Daniel Veditz, Jesse Ruderman,
    Lukas Loehrer, Martijn Wargers, Mats Palmgren, Olli Pettay, Paul
    Nickerson,and Vladimir Sukhoy discovered crashes in the layout engine,
    which might allow the execution of arbitrary code.

CVE-2007-3735

Asaf Romano, Jesse Ruderman and Igor Bukanov discovered crashes in the
javascript engine, which might allow the execution of arbitrary code.

CVE-2007-3736

"moz_bug_r_a4" discovered that the addEventListener() and setTimeout()
functions allow cross-site scripting.

CVE-2007-3737

"moz_bug_r_a4" discovered that a programming error in event handling
allows privilege escalation.

CVE-2007-3738

"shutdown" and "moz_bug_r_a4" discovered that the XPCNativeWrapper allows
the execution of arbitrary code.

The Mozilla products in the oldstable distribution (sarge) are no longer supported with with security updates. You're strongly encouraged to upgrade to stable as soon as possible.

For the stable distribution (etch) these problems have been fixed in version 2.0.0.5-0etch1. Builds for alpha and mips are not yet available, they will be provided later.

For the unstable distribution (sid) these problems have been fixed in version 2.0.0.5-1.

We recommend that you upgrade your iceweasel packages.

Upgrade Instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given below:

apt-get update
will update the internal database apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1.dsc
      Size/MD5 checksum:     1286 59238f560ecb32cdbc56a63ddb209e55
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1.diff.gz
      Size/MD5 checksum:   185146 6524cf51c9e4b107d72600123967d6ef
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5.orig.tar.gz
      Size/MD5 checksum: 43667811 06e1bbe4d44d5b3333cabf8584844ca0

Architecture independent components:

    http://security.debian.org/pool/updates/main/i/iceweasel/firefox-dom-inspector_2.0.0.5-0etch1_all.deb
      Size/MD5 checksum:    53580 934bffd016c2040ae56d1701ab9ef8b0
    http://security.debian.org/pool/updates/main/i/iceweasel/firefox-gnome-support_2.0.0.5-0etch1_all.deb
      Size/MD5 checksum:    53548 01ec3b09cb5305f60952e8e7c8ac775f
    http://security.debian.org/pool/updates/main/i/iceweasel/firefox_2.0.0.5-0etch1_all.deb
      Size/MD5 checksum:    53702 d3ecadf21b84c62c473a658892510d73
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dom-inspector_2.0.0.5-0etch1_all.deb
      Size/MD5 checksum:   234160 bcf465cec9f922ad5e28c434cc9bce9a
    http://security.debian.org/pool/updates/main/i/iceweasel/mozilla-firefox-dom-inspector_2.0.0.5-0etch1_all.deb
      Size/MD5 checksum:    53432 cd14d22874e960c485e4cec1e559ef20
    http://security.debian.org/pool/updates/main/i/iceweasel/mozilla-firefox-gnome-support_2.0.0.5-0etch1_all.deb
      Size/MD5 checksum:    53428 b2d685e70ff5a9c0be04c24efe8cd660
    http://security.debian.org/pool/updates/main/i/iceweasel/mozilla-firefox_2.0.0.5-0etch1_all.deb
      Size/MD5 checksum:    54232 72be77489c8bc90232f09c3e4a37d2a8

AMD64 architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_amd64.deb
      Size/MD5 checksum: 10131746 6509776fdd7f65552627b22b7f0e5d5f
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_amd64.deb
      Size/MD5 checksum: 50034750 34db9be3f1aacd877fabacf163a716cf
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_amd64.deb
      Size/MD5 checksum:    87376 42ac4a2436251a5023a4122234a9b433

ARM architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_arm.deb
      Size/MD5 checksum: 9172536 d5a6afa28d7202a28151791944c6cbe4
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_arm.deb
      Size/MD5 checksum: 49133408 d8bfcda8c8f3675bbf4dfc2f84f88fb0
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_arm.deb
      Size/MD5 checksum:    80786 547a41d33735a51c539fd93f8584ca8c

HP Precision architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_hppa.deb
      Size/MD5 checksum: 11038942 73a12aae1df5a9ff435fdbf111641271
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_hppa.deb
      Size/MD5 checksum: 50416604 d1dd0fa25fac83208fbee1e5016bea40
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_hppa.deb
      Size/MD5 checksum:    88872 33dce9b617f9772f706ad4d711ccbacf

Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_i386.deb
      Size/MD5 checksum: 9104036 31bd4e0e97fc842cfb36332222227701
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_i386.deb
      Size/MD5 checksum: 49439820 c7760fc3be07338899256b1bf00883e7
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_i386.deb
      Size/MD5 checksum:    81298 b9479b0ba634c0456301effa7f69ef14

Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_ia64.deb
      Size/MD5 checksum: 14134080 497b02f80092d16b883a0fe5543e865a
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_ia64.deb
      Size/MD5 checksum: 50396004 1eefae991deb0610dfee10f5fc25929a
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_ia64.deb
      Size/MD5 checksum:    99638 ab6b8c85a7d7f796f6aa83c567d81f7a

Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_mipsel.deb
      Size/MD5 checksum: 10744354 de1cb2892c1a5f2474301c967002db40
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_mipsel.deb
      Size/MD5 checksum: 52394050 8c57505e91c9ee8137d7f596de85cb20
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_mipsel.deb
      Size/MD5 checksum:    82468 624046892b6bc835db7ad352a58193b1

PowerPC architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_powerpc.deb
      Size/MD5 checksum: 9918324 b55975975e333962fbe7700f394e4efc
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_powerpc.deb
      Size/MD5 checksum: 51849604 a382e26d5f81f3cba80d3c74c803bfba
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_powerpc.deb
      Size/MD5 checksum:    82998 5b3f148c7e5115779efb9eab5f7ec085

IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_s390.deb
      Size/MD5 checksum: 10343876 392bd7c3b4498f16a18af4f33433cdec
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_s390.deb
      Size/MD5 checksum: 50714240 4fcb5751ac1f74858e77ec55511ebfe3
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_s390.deb
      Size/MD5 checksum:    87386 78d93550b19df51bb0ecde33117dc657

Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel_2.0.0.5-0etch1_sparc.deb
      Size/MD5 checksum: 9125776 96b405d93d02e5a80933fba0658c18d3
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-dbg_2.0.0.5-0etch1_sparc.deb
      Size/MD5 checksum: 49052276 615dac8bcaeb9a4c5cdb6500fe519f8a
    http://security.debian.org/pool/updates/main/i/iceweasel/iceweasel-gnome-support_2.0.0.5-0etch1_sparc.deb
      Size/MD5 checksum:    81150 63d0482567e238eae0d201b43696ca02

These files will probably be moved into the stable distribution on
its next update.

iD8DBQFGpOTIXm3vHE4uyloRAv+8AKC05/P7bBqBBc0uHLkpPPwhHYG4RACdFEXQ
ctLOPU4DkXtE5veonKQZoI4=
=oobc
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1339-1                    security@debian.org
http://www.debian.org/security/                         Moritz Muehlenhoff
July 23rd, 2007                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : iceape
Vulnerability : several
Problem-Type   : remote
Debian-specific: no
CVE ID         : CVE-2007-3089 CVE-2007-3656 CVE-2007-3734 CVE-2007-3735 CVE-2007-3736 CVE-2007-3737 CVE-2007-3738

Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite. The Common Vulnerabilities and Exposures project identifies the following problems:

CVE-2007-3089

Ronen Zilberman and Michal Zalewski discovered that a timing race
allows the injection of content into about:blank frames.

CVE-2007-3656

Michal Zalewski discovered that same-origin policies for wyciwyg://
documents are insufficiently enforced.

CVE-2007-3734

CVE-2007-3735

Asaf Romano, Jesse Ruderman and Igor Bukanov discovered crashes in the
javascript engine, which might allow the execution of arbitrary code.

CVE-2007-3736

"moz_bug_r_a4" discovered that the addEventListener() and setTimeout()
functions allow cross-site scripting.

CVE-2007-3737

"moz_bug_r_a4" discovered that a programming error in event handling
allows privilege escalation.

CVE-2007-3738

"shutdown" and "moz_bug_r_a4" discovered that the XPCNativeWrapper allows
the execution of arbitrary code.

The Mozilla products in the oldstable distribution (sarge) are no longer supported with security updates. You're strongly encouraged to upgrade to stable as soon as possible.

For the stable distribution (etch) these problems have been fixed in version 1.0.10~pre070720-0etch1. A build for the mips architecture is not yet available, it will be provided later.

For the unstable distribution (sid) these problems have been fixed in version 1.1.3-1.

We recommend that you upgrade your iceape packages.

Upgrade Instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given below:

apt-get update
will update the internal database apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

    http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.10~pre070720-0etch1.dsc
      Size/MD5 checksum:     1436 a5ddcea94b97d0eb7d88da94a72ca627
    http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.10~pre070720-0etch1.diff.gz
      Size/MD5 checksum:   267008 018274eb404a0e83606ce0d21e87ad01
    http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.10~pre070720.orig.tar.gz
      Size/MD5 checksum: 43473332 245a8a7774ff47ef91177724130f8ea4

Architecture independent components:

Alpha architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_alpha.deb
      Size/MD5 checksum: 12890534 11930d8d5ba846c22095362a46a3ff74
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_alpha.deb
      Size/MD5 checksum:   625330 05c5e03df278bc31932846e1d30a00f9
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_alpha.deb
      Size/MD5 checksum: 60600154 5741efb22728c62acf22154c8a1f3e86
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_alpha.deb
      Size/MD5 checksum:   196866 c64af9533b850bbbd57f9bb87685f9ca
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_alpha.deb
      Size/MD5 checksum:    53100 7193be3a3787964216f4bfa83c7b2789
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_alpha.deb
      Size/MD5 checksum: 2281920 46540cf88b15c9e7455fce6389be88ed

AMD64 architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_amd64.deb
      Size/MD5 checksum: 11668032 c3b8626d19c52f840fe80b39232b0cd7
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_amd64.deb
      Size/MD5 checksum:   608632 f198d453bbbee84201acc69dd9fa5a1a
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_amd64.deb
      Size/MD5 checksum: 59611854 900bf6f48f9df4d30dfd8313b127cfb3
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_amd64.deb
      Size/MD5 checksum:   194016 5adc494eaac9ba8f09c16441c5213318
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_amd64.deb
      Size/MD5 checksum:    52592 4dab2583ccce4830b516fc68ef90bfbd
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_amd64.deb
      Size/MD5 checksum: 2090564 2ad1c710c8f3d7e1a5aa4f8b29b469e7

ARM architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_arm.deb
      Size/MD5 checksum: 10404318 a3d00ba7cfe0c715fb15bedf1015e601
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_arm.deb
      Size/MD5 checksum:   582112 b0b849a2ffcf26a9441ace8ccdc8e398
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_arm.deb
      Size/MD5 checksum: 58762556 1a0f50dcbd272bc05c34d254d4507a4b
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_arm.deb
      Size/MD5 checksum:   188056 c0b5504ff4183a9e1fef78983a929e67
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_arm.deb
      Size/MD5 checksum:    47298 3c45d2f04093d8a0c5fc41a42251ec73
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_arm.deb
      Size/MD5 checksum: 1907106 b7918528c3b9213502f528adc95c58ab

HP Precision architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_hppa.deb
      Size/MD5 checksum: 12968358 ea1453f3ffa54ee3120ac58cfb293a10
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_hppa.deb
      Size/MD5 checksum:   614490 83b15ddde3c3b657ad44447802c18261
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_hppa.deb
      Size/MD5 checksum: 60467066 e26575d92f3d6d34e98bd8bab228a010
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_hppa.deb
      Size/MD5 checksum:   197064 7d50bb4f9866918e3ef4981c738e650b
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_hppa.deb
      Size/MD5 checksum:    53686 442e54332b114ea0a63fec012912d164
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_hppa.deb
      Size/MD5 checksum: 2338858 47f729c72d8843241cb88407e2e99e47

Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_i386.deb
      Size/MD5 checksum: 10477338 deab48630b8aeb248bfa9397e88fd489
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_i386.deb
      Size/MD5 checksum:   587938 2f19c0f151b456a0c0e84b0812cb0dc6
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_i386.deb
      Size/MD5 checksum: 58688874 8e26e07fc8e55d38cde9091093e8ff08
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_i386.deb
      Size/MD5 checksum:   188700 2b399a919d4ee6ee8c5cf22db90e741c
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_i386.deb
      Size/MD5 checksum:    47678 a85d86cd967b44370ec1b3329b9728a5
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_i386.deb
      Size/MD5 checksum: 1889676 66d798529d1f56ce668f8d7eda66abd6

Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_ia64.deb
      Size/MD5 checksum: 15794104 7cce099248b412a4189ad2d3243ed7b7
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_ia64.deb
      Size/MD5 checksum:   660672 c7a44faa5e50d8e9c4613c482d4815cd
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_ia64.deb
      Size/MD5 checksum: 59877166 2fe2866b66428866cfed2ab068829bf0
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_ia64.deb
      Size/MD5 checksum:   203708 775d91256820711eb33d3b4af4c1cfbb
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_ia64.deb
      Size/MD5 checksum:    61198 5f258d8b03704153bc66d2114d60fe55
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_ia64.deb
      Size/MD5 checksum: 2815616 ff8fbcd7ba8273161a4db64af91dd950

Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_mipsel.deb
      Size/MD5 checksum: 10913650 a40d4caf40bf9b5d989b0cdbf12e9479
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_mipsel.deb
      Size/MD5 checksum:   594990 bf9e81b7f1498d5c60b673b08ba283a7
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_mipsel.deb
      Size/MD5 checksum: 59826020 60a3a22c5a6e42da3c3981ff89fd40ee
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_mipsel.deb
      Size/MD5 checksum:   190212 bad4a1f57643aa25603d6a1fdf85f83f
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_mipsel.deb
      Size/MD5 checksum:    48982 ec96058415e4b33329b6fc5d481f8c56
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_mipsel.deb
      Size/MD5 checksum: 1940378 3a1182500597f8f8d6db4671f187afd2

PowerPC architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_powerpc.deb
      Size/MD5 checksum: 11312338 4f853beb774f7aecaca500031c0e182e
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_powerpc.deb
      Size/MD5 checksum:   595304 4ff550a168faee0f2dffd96b3839c097
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_powerpc.deb
      Size/MD5 checksum: 61603172 37d3070543aae6795d1f95eb1d97b1b1
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_powerpc.deb
      Size/MD5 checksum:   191070 c11775a74df72fe1965aeb50f0f5e2e7
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_powerpc.deb
      Size/MD5 checksum:    48634 031194e9c64f17085308d05dc47de49f
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_powerpc.deb
      Size/MD5 checksum: 2005522 2c4907581d26e19441faed3a2a76a87e

IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_s390.deb
      Size/MD5 checksum: 12291720 be79de8e773f1cbf83d34f837f0d3637
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_s390.deb
      Size/MD5 checksum:   610698 4f6e4f45769b6cf87a498b7dece5157c
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_s390.deb
      Size/MD5 checksum: 60372220 a25f1221df24b6d51d66b5f3d4751210
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_s390.deb
      Size/MD5 checksum:   195860 25f6e1809320a9b0d111908cec8e309a
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_s390.deb
      Size/MD5 checksum:    53194 754ae50a15664184d0e70de39cee22b5
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_s390.deb
      Size/MD5 checksum: 2184640 8dffbcd81a31d460d94243fab5ce8049

Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch1_sparc.deb
      Size/MD5 checksum: 10657254 83e7468e55d66d7f36d6903f5bb25fcd
    http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch1_sparc.deb
      Size/MD5 checksum:   584296 8a64241ccc10cda38927ad6f15af34ce
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch1_sparc.deb
      Size/MD5 checksum: 58501456 3e53e44bd0b33aaed55a6feab1839fc5
    http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch1_sparc.deb
      Size/MD5 checksum:   188616 4807d32457222d895b243cd44e390328
    http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch1_sparc.deb
      Size/MD5 checksum:    47260 3b1cf8ec9939812c886ba3378554e73a
    http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch1_sparc.deb
      Size/MD5 checksum: 1894688 b8a4207b5edc44f0e24e362db96a6ff7

These files will probably be moved into the stable distribution on
its next update.

iD8DBQFGpUB+Xm3vHE4uyloRAtK+AKCFyK4tO8NzTFh/dsfPkCjMt+kYmgCg52na
gYCMrox+ckaLZhG90jKyiXM=
=OOIl
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1340-1                    security@debian.org
http://www.debian.org/security/                             Martin Schulze
July 24th, 2007                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : clamav
Vulnerability : null pointer dereference
Problem type   : local (remote)
Debian-specific: no
CVE ID         : CVE-2007-3725

A NULL pointer dereference has been discovered in the RAR VM of Clam Antivirus (ClamAV) which allows user-assisted remote attackers to cause a denial of service via a specially crafted RAR archives.

We are currently unable to provide fixed packages for the MIPS architectures. Those packages will be installed in the security archive when they become available.

The old stable distribution (sarge) is not affected by this problem.

For the stable distribution (etch) this problem has been fixed in version 0.90.1-3etch4.

For the unstable distribution (sid) this problem has been fixed in version 0.91-1.

We recommend that you upgrade your clamav packages.

Upgrade Instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given at the end of this advisory:

apt-get update
will update the internal database apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4.dsc
      Size/MD5 checksum:      886 4322482c1fb82b108aa43cb9db54efd1
    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4.diff.gz
      Size/MD5 checksum:   201403 a5c2bfc45cc81fd1f85c3bfca605c2eb
    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1.orig.tar.gz
      Size/MD5 checksum: 11643310 cd11c05b5476262eaea4fa3bd7dc25bf

Architecture independent components:

    http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90.1-3etch4_all.deb
      Size/MD5 checksum:   201448 cf1df37f823c25b62bb341da58b13cb9
    http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90.1-3etch4_all.deb
      Size/MD5 checksum: 1003244 fda3003977260e1b5cea1547167d492c
    http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles_0.90.1-3etch4_all.deb
      Size/MD5 checksum:   157626 548abf569b73b094e3807888f2f5038d

Alpha architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_alpha.deb
      Size/MD5 checksum:   863288 10878c8e050e17086aeea82678293c08
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_alpha.deb
      Size/MD5 checksum:   184482 cc5eca7ca9f6c3d7c9cb64557b975d8b
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_alpha.deb
      Size/MD5 checksum:   644222 71b240e73b41ea5a62a2e481c3ed3147
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_alpha.deb
      Size/MD5 checksum: 9303578 91aa4799771e9f6a366a84f8be4a0154
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_alpha.deb
      Size/MD5 checksum:   179638 16cb1cdf55b0f6cc983ef3c224b6ad42
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_alpha.deb
      Size/MD5 checksum:   510846 dfd5016fdaa269c808d1585eeb29b682
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_alpha.deb
      Size/MD5 checksum:   406172 76b0ab23e443a074b089e23f63c1b996

AMD64 architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_amd64.deb
      Size/MD5 checksum:   856292 ae79ee69acb68b7edc2938e74df07572
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_amd64.deb
      Size/MD5 checksum:   178250 919ffe6a6d8f087f7c64f561de240dcb
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_amd64.deb
      Size/MD5 checksum:   637868 96df7a341a13a1dcfa3726da88270285
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_amd64.deb
      Size/MD5 checksum: 9301706 97194c4ceb5cc69c897becba8509f5c6
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_amd64.deb
      Size/MD5 checksum:   176744 e9870bb2dbb4cae1415e7da8043f6d83
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_amd64.deb
      Size/MD5 checksum:   386328 cb0f86bd159db1925ec39157c345f20e
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_amd64.deb
      Size/MD5 checksum:   367102 f79837717dee7f6a9aaa9c1817fed77e

ARM architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_arm.deb
      Size/MD5 checksum:   851824 9fc5cd7039da4dde8f570720c08fdc99
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_arm.deb
      Size/MD5 checksum:   173452 ce3d61f700ed0607ebb71307928976da
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_arm.deb
      Size/MD5 checksum:   597194 f38f065738f1cafba9a3c42922223709
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_arm.deb
      Size/MD5 checksum: 9299488 10799147def77a149669c56346cc287a
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_arm.deb
      Size/MD5 checksum:   174552 e16ae0c225af49669e082239fc39a76c
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_arm.deb
      Size/MD5 checksum:   366682 8a95f23f368df1453b461a3da2c7e23c
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_arm.deb
      Size/MD5 checksum:   362572 39aba5c87cc8a8023c512926f095611b

HP Precision architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_hppa.deb
      Size/MD5 checksum:   857062 5fa4607f52271c43e9f277c69ea934f6
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_hppa.deb
      Size/MD5 checksum:   177964 17e85986371220f8bb54a9cd8368309a
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_hppa.deb
      Size/MD5 checksum:   617892 c27423a2aa54314d371cd517f52b0c61
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_hppa.deb
      Size/MD5 checksum: 9303060 034452cd5c442565ec7d150ed5b46e06
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_hppa.deb
      Size/MD5 checksum:   176816 27a3c13573a79dc97e7aea6a79c53ef4
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_hppa.deb
      Size/MD5 checksum:   432748 96afeaa27862183bea23b961600d93fe
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_hppa.deb
      Size/MD5 checksum:   404838 0573b674780cbc47d19ac0ddcf183496

Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_i386.deb
      Size/MD5 checksum:   853720 51d46ae39ed2a720e584b5b52b2d3409
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_i386.deb
      Size/MD5 checksum:   174618 d07358cba9e467fdf2159739016d00a7
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_i386.deb
      Size/MD5 checksum:   603774 2987ddb46e82447f8e6e20d33080aa37
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_i386.deb
      Size/MD5 checksum: 9300044 d9f5a5d77235452c19669d71a6a13a93
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_i386.deb
      Size/MD5 checksum:   174752 c863d6372b97823c5cd052b22ade00b0
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_i386.deb
      Size/MD5 checksum:   367668 b1380aa6e0fe222916605f08a89c16f9
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_i386.deb
      Size/MD5 checksum:   365686 156a20aba1b91eb24f8a8b668e3a46cd

Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_ia64.deb
      Size/MD5 checksum:   878298 2a2420da2db40f69e7654689845fa2b0
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_ia64.deb
      Size/MD5 checksum:   201470 70a6f87e38268e27afd74951851eca94
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_ia64.deb
      Size/MD5 checksum:   656106 f92e7ef6ab087b48e264e4628b87a785
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_ia64.deb
      Size/MD5 checksum: 9315074 f72f2a6a7445f23a2ab5652ac79237bc
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_ia64.deb
      Size/MD5 checksum:   191134 f79c94fa3326f59a37546f6e49a25303
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_ia64.deb
      Size/MD5 checksum:   521332 c5a2c75acf87f4e41160ec1e9fd3af72
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_ia64.deb
      Size/MD5 checksum:   474822 b5c2e4e6a30d056e05677055d220c283

PowerPC architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_powerpc.deb
      Size/MD5 checksum:   857106 5da0964bfba1524143595c0ea23dfde9
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_powerpc.deb
      Size/MD5 checksum:   181682 9805bff29a56e84a23a904ef1604723c
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_powerpc.deb
      Size/MD5 checksum:   636886 5a2a9d659d39f9363b0faa092f0ae32f
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_powerpc.deb
      Size/MD5 checksum: 9302070 0d906d48dd85f6ea63263e0580e55de8
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_powerpc.deb
      Size/MD5 checksum:   175854 2cc7ed815f9882cd268112c4ac8e0aa1
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_powerpc.deb
      Size/MD5 checksum:   405626 aa7a50f217ddb1a2637c79a3e83aad4a
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_powerpc.deb
      Size/MD5 checksum:   378180 a14d2b513f173bfbf3ce486b45d383bb

IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_s390.deb
      Size/MD5 checksum:   855060 bbf174ba8e4b8185f093a368a4fd3068
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_s390.deb
      Size/MD5 checksum:   176256 08b08bf7eccd915ced8b284af52e2c0b
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_s390.deb
      Size/MD5 checksum:   627908 2453d58f7113081a6ba90f45c6448dc0
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_s390.deb
      Size/MD5 checksum: 9300764 19ab312ca93be29295380d0f0f965c97
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_s390.deb
      Size/MD5 checksum:   176424 c2ed7fde9ba790fb495428f318a4c6a7
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_s390.deb
      Size/MD5 checksum:   401622 18ea76e737dfa67aebfd7b62b68dbd94
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_s390.deb
      Size/MD5 checksum:   391172 795d593d6bdfcf5cbf16ba692fc54395

Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1-3etch4_sparc.deb
      Size/MD5 checksum:   851152 110dd04af9f54ee83c7312e096cd9201
    http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0.90.1-3etch4_sparc.deb
      Size/MD5 checksum:   171902 53ce9d7055da42e07f28685a03a52592
    http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90.1-3etch4_sparc.deb
      Size/MD5 checksum:   584004 c859bae90ea21251b8faa4114eb7b9df
    http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam_0.90.1-3etch4_sparc.deb
      Size/MD5 checksum: 9298608 de87f85e9dd4e74fb3f1b3d85bcb53c0
    http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0.90.1-3etch4_sparc.deb
      Size/MD5 checksum:   173534 9cca508f4a123f194872d6c6f8b5af0b
    http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0.90.1-3etch4_sparc.deb
      Size/MD5 checksum:   389104 5432b26c75aa4ba4579d0c0eaaa42fdd
    http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90.1-3etch4_sparc.deb
      Size/MD5 checksum:   377310 0ecb88683024a0cc7ec48f715419cd0e

These files will probably be moved into the stable distribution on
its next update.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGpakUW5ql+IAeqTIRAqbvAJ9vOXlEgRCXOoveSIztfNE3alRAUwCeN6/Z
ycgTsKuTI/fIPW5ekwqtGGU=
=w//P
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 1341-1                    security@debian.org
http://www.debian.org/security/                         Moritz Muehlenhoff
July 25th, 2007                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : bind9
Vulnerability : design error
Problem-Type   : remote
Debian-specific: no
CVE ID         : CVE-2007-2926

Amit Klein discovered that the BIND name server generates predictable DNS query IDs, which may lead to cache poisoning attacks.

An update for the oldstable distribution (sarge) is in preparation. It will be released soon.

For the stable distribution (etch) this problem has been fixed in version 9.3.4-2etch1. An update for mips is not yet available, it will be released soon.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your BIND packages.

Upgrade Instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given below:

apt-get update
will update the internal database apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

    http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch1.dsc
      Size/MD5 checksum:      758 428b3a45636c78046dbb77d9335a9973
    http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch1.diff.gz
      Size/MD5 checksum:   287783 47a34c979ee9db072b37e2ae0ad0bdec
    http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4.orig.tar.gz
      Size/MD5 checksum: 4043577 198181d47c58a0a9c0265862cd5557b0

Architecture independent components:

http://security.debian.org/pool/updates/main/b/bind9/bind9-doc_9.3.4-2etch1_all.deb
Size/MD5 checksum: 186546 3ac7d54f57348ac941d5e0812ccc12f5

Alpha architecture:

AMD64 architecture:

HP Precision architecture:

Intel IA-32 architecture:

Intel IA-64 architecture:

Little endian MIPS architecture:

PowerPC architecture:

IBM S/390 architecture:

Sun Sparc architecture:

These files will probably be moved into the stable distribution on
its next update.

iD8DBQFGp7yHXm3vHE4uyloRAmPkAJ0d9LV4wpLbtbYfVvg599mOZGgPagCeIleR
7/s4k59bitmpC29AHyMI5VE=
=1VmY
-----END PGP SIGNATURE-----

This advisory contains information released by the original author. Some of the information may have changed since it was released. If the issue affects you, it may be prudent to retrieve the advisory from the site of the original source to ensure that you receive the most current information concerning that problem. Reference to any specific commercial product, process, or service by trade name, trademark manufacturer, or otherwise, does not constitute or imply its endorsement, recommendation, or favouring by CPNI.

The views and opinions of authors expressed within this notice shall not be used for advertising or product endorsement purposes. CPNI shall not accept responsibility for any errors or omissions contained within this advisory. In particular, they shall not be liable for any loss or damage whatsoever, arising from or in connection with the usage of information contained within this advisory.

CSIRTUK is a member of the Forum of Incident Response and Security Teams (FIRST) and has contacts with other international Incident Response Teams (IRTs) in order to foster cooperation and coordination in incident prevention, to prompt rapid reaction to incidents, and to promote information sharing amongst its members and the community at large.