-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                         ESB-2006.0331 -- [Debian]
             New Mozilla packages fix arbitrary code execution
                                10 May 2006

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           mozilla
Publisher:         Debian
Operating System:  Debian GNU/Linux 3.1
Impact:            Execute Arbitrary Code/Commands
Access:            Remote/Unauthenticated
CVE Names:         CVE-2006-1993

Ref:               AL-2006.0032

Original Bulletin: http://www.debian.org/security/2006/dsa-1053

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------------
Debian Security Advisory DSA 1053-1                    security@debian.org
http://www.debian.org/security/                             Martin Schulze
May 9th, 2006                           http://www.debian.org/security/faq
- - --------------------------------------------------------------------------

Package        : mozilla
Vulnerability  : programming error
Problem type   : remote
Debian-specific: no
CVE ID         : CVE-2006-1993
CERT advisory  : VU#866300
BugTraq ID     : 17671

Martijn Wargers and Nick Mott described crashes of Mozilla due to the
use of a deleted controller context.  In theory this could be abused to
execute malicious code.

For the stable distribution (sarge) this problem has been fixed in
version 1.7.8-1sarge6.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your mozilla packages.


Upgrade Instructions
- - --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.1 alias sarge
- - --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6.dsc
      Size/MD5 checksum:     1123 46496c13d9bbf31e70a30a75c7c036c5
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6.diff.gz
      Size/MD5 checksum:   473137 2558004214b55808e0b0fe068b65848d
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8.orig.tar.gz
      Size/MD5 checksum: 30589520 13c0f0331617748426679e8f2e9f537a

  Alpha architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   168072 fd51a6032a4038644185ba42d76612cd
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   146398 99802c860372f1144c96b82025352f50
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   184934 7a7fff15ff1cc8baa45010da2bf5d806
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   856004 e409a2fe8da3f0215ffe3637adfdbfbe
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:     1034 2cb3fd1f941e797f8adfd14ad9e7e1d6
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum: 11477506 f5360780f7f66e9f6ba9eecc3af988c9
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   403270 55f1e5834e4135c2aff95d6fe650a9dc
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   158334 15707b9920fd1231d8e3c24558c5ac1e
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:  3357278 9e9ea74c8c227f387062ce356ca058cb
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   122288 c332dc61330339af10c92de993c2fd4f
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   204150 36b4a2719823507b9bb058299e3e053e
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:  1937080 51e2db56a854c04d2b6fa0fb3285c528
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_alpha.deb
      Size/MD5 checksum:   212400 6044a9f0baa8723ee74e82eb170d1939

  AMD64 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   168076 d9afd6f232ed5c716dd4a0c2e771a355
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   145530 c162ca0375ff9316bd4e9fc9158e6483
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   184942 5cdc83d3c9b6cfa39100736aab2a5cb5
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   714382 0f002b28b068e483fd31e3ea54540e6b
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:     1038 ad8d53c0e52ebb58a430a743ffb4f2b5
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum: 10945894 9fa739e52dee0153b376cd2d5c8844e9
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   403286 a2245c4e556b3f17623bc830d44061d7
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   158326 3dedb0e836b39da2504d907c5ffdbd3d
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:  3351334 a6e589be976a34845954d988c57dda5b
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   121186 88a81d81454871acdabe23c83642821b
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   204154 1d9a676728b24b50657af17620bd904e
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:  1936016 f00575de568e089909a57d19ae6c165d
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_amd64.deb
      Size/MD5 checksum:   204346 32e7a762c21f5e649ba41c1cdc36f0a1

  ARM architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   168074 1e5df434f469fa0c069ebf4542de9181
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   123890 e232f965819d40d1d9466d1f942706a1
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   184960 0565cf1cdf465d01a5d4384a865ef133
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   631594 274eb11303d3cc9679b2296895bb6177
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:     1034 248191bf66bc183f4197855d2dd51441
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:  9206762 4dff840978b6a8aaf9b9c18a8ac3d312
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   403310 173d3e4bff6c5d8469fb4eaa7de5c633
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   158346 f5984d5da46a0bb547ad1b76824279cc
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:  3340792 6a7e72da2379a3c189739a6d92cf4c8e
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   112682 8979756e8d46faa7753bdc9ec87d08fb
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   204154 3a3e87e18613d570bc1e9da12d637d86
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:  1604408 35dec28401469095d9d17f13b2e40c60
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_arm.deb
      Size/MD5 checksum:   168868 b5205334331c55a7cccd1f3604f1832f

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   170348 e1bc96a4ddd122975a8f4aaa3cf98173
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   136366 4ed5d5de40d9428451612c5262fbe620
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   187134 17ab055df354df90b4bf70fa9e1556d3
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   661130 4484cdea9f8c86fdadba37a4887dd8d0
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:     1036 5fa7cf89b623e35e5686f9ec49f76742
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum: 10333018 028d1e2fb75728baa620856540e782cb
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   403510 cccbd195c56e7d1935a02e95e1a7c651
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   158352 2f9157bc2301b72aa7c4bbcd97f5db5c
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:  3592516 5b5b42a891ae39581e5f3e66eaf29085
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   116682 e776421a5ea762c1b933f302c45d87bb
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   204166 a6f15974e674118ab0847c121d761f0c
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:  1816048 7a9335c376f3df9b730073e11bea4fe1
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_i386.deb
      Size/MD5 checksum:   192636 dbec79d2e9edb833196c1e6dc8c4ca64

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   168056 5ded9fba54f701543368903b5f8ab563
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   173902 4eb9bab760f09379733393f8689050ac
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   184940 26a6d6f1ed2b5a61fc41e644d5f4d3e9
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   966314 ecfe259cb1c6a47fdd4ff01316c743e7
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:     1034 bc8c91625c1f5256d83a93801792100d
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum: 12942916 667732b8b16db84bc4584f4c91af9519
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   403262 2d17185a555f01eede7e6c96a187403e
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   158326 19cf2fb90d3caa5f15476ae0faf98f8d
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:  3377068 761e0c9161590d030efcef70d4583e1f
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   125590 018d272c97ae4fcbf680966d197cf85b
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   204146 b1784652eef38d2b7affd09537630b39
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:  2302194 5bce4fb8583a8702c3eb2ab81567a882
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_ia64.deb
      Size/MD5 checksum:   242672 1e9a6ee92e76736e3dd0a0da3237f160

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   168076 d604fdbe94f09400aac43c7b0ca1d85e
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   156466 2aaaf6fed027b73b2403f7e808a50b63
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   184940 b88c9e1a659d82959315c2bb43982065
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   754330 c345a7bbbc5b8363c110823e8c1a4cb0
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:     1038 382fcc9b41aa657f7f49f742292f3073
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum: 12163096 ca4c3161cda013934910efbdb24949b0
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   403290 3082c15be3a578867fbd164fe11e4c02
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   158342 5e696aa2191b2fd14bee3a3f2b906fa9
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:  3357748 5ce31c0589fdb05c43cc627e626526cb
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   123524 3c8ea2bfd915bd1a95c37921bbe5a8ef
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   204152 7db51695f6612529f36b5b94a0441388
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:  2135134 cd17baa6b30430e6f22188b43fc35212
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_hppa.deb
      Size/MD5 checksum:   216156 d3f0edc4cfbb6c0b4740800696b3745a

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   168084 2828179c6f90ff81627e886c59e8ce93
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   125556 041d0b731b29dd92b7657ea7cb8700dc
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   184988 c58e6af12d16335b0087b24762da2362
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   599662 e97a96943dec77a3c41c344e511529c4
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:     1042 e3b3b654e4562aca7eb54320aa86f2db
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:  9703552 b0d3087fa3f53fa64ad6b832311ab91a
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   403328 de4624633b94d423dc99997a6b39cc49
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   158386 436b3cb1b221adc10d3f4f91487fb95d
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:  3335452 3e0afe82ab5c85df86c17898b912404d
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   114448 d03b348963414a569222b502560d3b3b
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   204182 ceba6c2491ac7ca1e90a3068781516dd
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:  1683028 9df65956b8aedd47511ca513d9f7c392
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_m68k.deb
      Size/MD5 checksum:   174744 21601ec5747654e997bcf31a9dd5ca62

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   168068 29c3a6d84037031a7e2260f14c582bb0
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   140430 d4d5742d214ef356d92b47f7db08e8b2
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   184944 0b8b31b9ecffb3ebb250842f70fc6c77
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   725406 2fe07024db285b88558c01519186e97c
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:     1036 039c4d29321b32b30da6e17938bacbd4
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum: 10728064 03b0df29956a41290f80999e902a8296
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   403300 3b917495fcbc728d29cc80cb40d8e34e
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   158338 a4a0966a627b0faa510b957b4980fa16
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:  3357314 c844c405881b9780db90aadf12e7c6db
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   117616 cc7b51b151dddc8e9f2167f5b356861a
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   204160 a46d2a84ac1ac355e5f61a18bad6b670
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:  1795496 d4d4aedcba5c7c34a0098796b41703ce
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_mips.deb
      Size/MD5 checksum:   189884 9f44f232b5d5f21e48d26fd64c0966c5

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   168076 0d912618b7df98b61713412291481d16
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   140390 c1c97fa9fd4c2d6f18aba1423d8c1f6e
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   184958 d8ee579e95af3094fd549eeccdc9769c
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   714850 47d195b6c0fc034c9d0fb3b749a21893
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:     1038 b81d1b3b5a657c12a4e1e5930702bcc0
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum: 10603054 043a8b3c3b55a1318797c4e9447b6e1b
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   403306 a3ea4cd5e04b63d76d1d6a15f4828677
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   158356 362126c740ec2bbf84d2d64d7eb9d5b5
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:  3357908 bbb658b5f77111eb36f82ae536f5e290
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   117206 e457c383ca6da670616cf0f53c8d1e97
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   204164 1adab829fb96ecd09b6cd37428b63ea4
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:  1777568 189e91cd5722dbffb02307325d42d933
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_mipsel.deb
      Size/MD5 checksum:   187434 53d610ef976324813135bc014abcf0c7

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   168074 6adc6fc90aa9ed991a3fe0f44ba9cf6b
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   130898 57a336d8e4a99a12bef99dbb0cc29b9f
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   184934 4b4628bf889e47d4f771c219c3699816
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   718600 8f9cd2cb3793558ffcefa81554534c6e
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:     1034 c6f56998ae1a67f12a824c25c710356f
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:  9702898 e640803c722e44bf1893e6adae9594fa
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   403284 03dd1f7da767f52e3cd9687e67b36a65
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   158334 3c1805cf8aff1f18f4bfbc4296e8425e
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:  3339648 dd290b0471fab52733fc0d478be82e1a
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   114588 9665d6ace8e42e6cdaec57b9c2b2ed42
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   204160 619e6806cb2252979deb912081da75e6
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:  1642980 15ad96270ea756471daba8330fbf3aa4
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_powerpc.deb
      Size/MD5 checksum:   175664 0ab0c49b4a261f3b09d190e554a77f67

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   168076 74c3fdfdb043dade2ff387e4fbf312da
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   156208 23c8e2acb419c70aa10d8f5d7c491c33
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   184932 fc38cbadb10990b87f70e069f501cc21
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   798594 cf5a50b4b93384cec5174d262b9c6040
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:     1038 25acca7f96f3bf92c64bbfd94800a05f
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum: 11325218 27197c826f43411d8cc5f7fece043b95
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   403308 65996ca6b43d6b0f0f2c1efd351e4daa
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   158350 e8ff0cee0271ab591822eafec2469a80
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:  3352164 3826b426e54de0471d91292a3f87c1e9
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   121350 e1a7149c57ca36d3f9a00ab95770ca8b
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   204168 11c161fd88b404cb2f30ac9b58d1ded3
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:  1944710 cdc344d61faf3851759e530a5efd6fdb
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_s390.deb
      Size/MD5 checksum:   213436 975ec193e66982ac318c0ba118c3569e

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/m/mozilla/libnspr-dev_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   168072 e6c720a04654e35f44956fb2d391837b
    http://security.debian.org/pool/updates/main/m/mozilla/libnspr4_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   128110 b2e3472a4a47ca88dc13adaa521baf8d
    http://security.debian.org/pool/updates/main/m/mozilla/libnss-dev_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   184960 ffba73ff29a87999295dc32791b25bd5
    http://security.debian.org/pool/updates/main/m/mozilla/libnss3_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   672374 a121a25eb35cc82dd3c073c47556f440
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:     1042 e27bf3a1491eb1b84547c19df1eed336
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-browser_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:  9373052 c1d44b9f7c43734908825b07ac622d4d
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-calendar_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   403274 616c663eb1b55f17e3b4e7e45e535696
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-chatzilla_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   158338 436fa26f8f842fa09ae404c2bfb104d1
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dev_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:  3340712 0ed39d284b2a960ad6e4e6d726411629
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-dom-inspector_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   112516 4586fc8d6dc38b230741f3a4906d06be
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-js-debugger_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   204154 0028c2a21bf254ab510d948d4f73579a
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-mailnews_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:  1583738 d92f8d2a073e45efb6d65dc5b157107c
    http://security.debian.org/pool/updates/main/m/mozilla/mozilla-psm_1.7.8-1sarge6_sparc.deb
      Size/MD5 checksum:   168008 16a730934dd4914ca2a100b81f3ed3f4


  These files will probably be moved into the stable distribution on
  its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFEYFwAW5ql+IAeqTIRAnAIAKCZgE+Fo2tHgm3D7rlqA8Gy+dXjdwCeIcuT
T6PLJADgqEryUnsOCAivjxM=
=IOyt
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBRGFeqih9+71yA2DNAQLPuAP/VVMBhkASvg62SKi9sCGVHFYXllZY9amA
a2HIkP9oHQDAWXwIez/MGoTI3jBr4Aj7oNVMe3ygipp24RI3XBqto2YD4/lVpsIP
T20zJ8sQ1thlIhRKHnNsqCbf5zg6naTVMA88O9u8paT1BlFfu4mbtbo297QdGef2
HyCXnAq56Wg=
=jnLK
-----END PGP SIGNATURE-----