WINDOWS CENTER: ubuntu-security-announce Digest, Vol 48, Issue 7

Send ubuntu-security-announce mailing list submissions to
ubuntu-security-announce@lists.ubuntu.com

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
or, via email, send a message with subject or body 'help' to
ubuntu-security-announce-request@lists.ubuntu.com

You can reach the person managing the list at
ubuntu-security-announce-owner@lists.ubuntu.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of ubuntu-security-announce digest..."

Today's Topics:

1. [USN-645-1] Firefox and xulrunner vulnerabilities
(Jamie Strandboge)

----------------------------------------------------------------------

Message: 1
Date: Wed, 24 Sep 2008 05:26:58 -0500
From: Jamie Strandboge <jamie@canonical.com>
Subject: [USN-645-1] Firefox and xulrunner vulnerabilities
To: ubuntu-security-announce@lists.ubuntu.com
Cc: full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com
Message-ID: <20080924102658.GE8986@severus.strandboge.com>
Content-Type: text/plain; charset="us-ascii"

===========================================================
Ubuntu Security Notice USN-645-1 September 24, 2008
firefox, firefox-3.0, xulrunner-1.9 vulnerabilities
CVE-2008-0016, CVE-2008-3835, CVE-2008-3836, CVE-2008-3837,
CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, CVE-2008-4061,
CVE-2008-4062, CVE-2008-4063, CVE-2008-4064, CVE-2008-4065,
CVE-2008-4066, CVE-2008-4067, CVE-2008-4068, CVE-2008-4069
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 7.04
Ubuntu 7.10
Ubuntu 8.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 7.04:
firefox 2.0.0.17+0nobinonly-0ubuntu0.7.4

Ubuntu 7.10:
firefox 2.0.0.17+1nobinonly-0ubuntu0.7.10

Ubuntu 8.04 LTS:
firefox-3.0 3.0.2+build6+nobinonly-0ubuntu0.8.04.1
xulrunner-1.9 1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1

After a standard system upgrade you need to restart Firefox and any
applications that use xulrunner, such as Epiphany, to effect the
necessary changes.

Details follow:

Justin Schuh, Tom Cross and Peter Williams discovered errors in the
Firefox URL parsing routines. If a user were tricked into opening a
crafted hyperlink, an attacker could overflow a stack buffer and
execute arbitrary code. (CVE-2008-0016)

It was discovered that the same-origin check in Firefox could be
bypassed. If a user were tricked into opening a malicious website,
an attacker may be able to execute JavaScript in the context of a
different website. (CVE-2008-3835)

Several problems were discovered in the JavaScript engine. This
could allow an attacker to execute scripts from page content with
chrome privileges. (CVE-2008-3836)

Paul Nickerson discovered Firefox did not properly process mouse
click events. If a user were tricked into opening a malicious web
page, an attacker could move the content window, which could
potentially be used to force a user to perform unintended drag and
drop operations. (CVE-2008-3837)

Several problems were discovered in the browser engine. This could
allow an attacker to execute code with chrome privileges.
(CVE-2008-4058, CVE-2008-4059, CVE-2008-4060)

Drew Yao, David Maciejak and other Mozilla developers found several
problems in the browser engine of Firefox. If a user were tricked
into opening a malicious web page, an attacker could cause a denial
of service or possibly execute arbitrary code with the privileges
of the user invoking the program. (CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064)

Dave Reed discovered a flaw in the JavaScript parsing code when
processing certain BOM characters. An attacker could exploit this
to bypass script filters and perform cross-site scripting attacks.
(CVE-2008-4065)

Gareth Heyes discovered a flaw in the HTML parser of Firefox. If a
user were tricked into opening a malicious web page, an attacker
could bypass script filtering and perform cross-site scripting
attacks. (CVE-2008-4066)

Boris Zbarsky and Georgi Guninski independently discovered flaws in
the resource: protocol. An attacker could exploit this to perform
directory traversal, read information about the system, and prompt
the user to save information in a file. (CVE-2008-4067,
CVE-2008-4068)

Billy Hoffman discovered a problem in the XBM decoder. If a user were
tricked into opening a malicious web page or XBM file, an attacker
may be able to cause a denial of service via application crash.
(CVE-2008-4069)

Updated packages for Ubuntu 7.04:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+0nobinonly-0ubuntu0.7.4.diff.gz
Size/MD5: 316696 fcc877d67c4c479221bbf3c4a3d7eb6d
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+0nobinonly-0ubuntu0.7.4.dsc
Size/MD5: 2330 b5027c93757b9fec8eda43ee3b93c227
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+0nobinonly.orig.tar.gz
Size/MD5: 48478465 eb9ca16ce2bd6073cf9cdf1298388ede

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom-inspector_2.0.0.17+0nobinonly-0ubuntu0.7.4_all.deb
Size/MD5: 243550 c27985a28b56d42f853f614b1329792f
http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/mozilla-firefox-dev_2.0.0.17+0nobinonly-0ubuntu0.7.4_all.deb
Size/MD5: 58896 6617ca36bca4b8f4039a0201548da883
http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/mozilla-firefox-dom-inspector_2.0.0.17+0nobinonly-0ubuntu0.7.4_all.deb
Size/MD5: 58992 330db0a6f2247bc95308f45849f6c347
http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/mozilla-firefox-gnome-support_2.0.0.17+0nobinonly-0ubuntu0.7.4_all.deb
Size/MD5: 59004 de6dddee9f8f3b426f3f92486ec688f4
http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/mozilla-firefox_2.0.0.17+0nobinonly-0ubuntu0.7.4_all.deb
Size/MD5: 59808 b5d3575dac4397435b35577ef2231ba2

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

Updated packages for Ubuntu 7.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+1nobinonly-0ubuntu0.7.10.diff.gz
Size/MD5: 193456 41e5fd9a5b264d59a7a19c4652135fa2
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+1nobinonly-0ubuntu0.7.10.dsc
Size/MD5: 2297 241e87103d61cf94617968e58eae5e49
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+1nobinonly.orig.tar.gz
Size/MD5: 37705770 d50c621116c9c6446ae8cc44b50e4422

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom-inspector_2.0.0.17+1nobinonly-0ubuntu0.7.10_all.deb
Size/MD5: 200850 dd0a6864ed156408ad302ae826014651

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dbg_2.0.0.17+1nobinonly-0ubuntu0.7.10_amd64.deb
Size/MD5: 78081002 406b5786d9a9d596bbb5a239f9521838
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dev_2.0.0.17+1nobinonly-0ubuntu0.7.10_amd64.deb
Size/MD5: 3198548 6467de3e926c81469d7b8a8663e30de4
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-gnome-support_2.0.0.17+1nobinonly-0ubuntu0.7.10_amd64.deb
Size/MD5: 98188 bd03eb6af24cd4742bcf7e9d3259b5e3
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-libthai_2.0.0.17+1nobinonly-0ubuntu0.7.10_amd64.deb
Size/MD5: 67214 f940933f974226a0b368e0b186195877
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+1nobinonly-0ubuntu0.7.10_amd64.deb
Size/MD5: 10466910 1c6763f8560faa2db02dc5541334d2eb

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dbg_2.0.0.17+1nobinonly-0ubuntu0.7.10_i386.deb
Size/MD5: 77223978 0fec264e30c0a1cea0bec1b574a741f1
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dev_2.0.0.17+1nobinonly-0ubuntu0.7.10_i386.deb
Size/MD5: 3186190 10869a4be34712ef088fd82bb24666a2
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-gnome-support_2.0.0.17+1nobinonly-0ubuntu0.7.10_i386.deb
Size/MD5: 91912 a45101ff4b6e34c0641a787b9e55e568
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-libthai_2.0.0.17+1nobinonly-0ubuntu0.7.10_i386.deb
Size/MD5: 66500 c17d657e5a5ed8646dcabc5483884336
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+1nobinonly-0ubuntu0.7.10_i386.deb
Size/MD5: 9206920 e9d44cb1e42ffdad0627eb4e955b444c

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/f/firefox/firefox-dbg_2.0.0.17+1nobinonly-0ubuntu0.7.10_lpia.deb
Size/MD5: 77504940 f75594b281a77f3446cde6d443336610
http://ports.ubuntu.com/pool/main/f/firefox/firefox-dev_2.0.0.17+1nobinonly-0ubuntu0.7.10_lpia.deb
Size/MD5: 3183726 8072b22b2a997f7bb9ebde38879f7a75
http://ports.ubuntu.com/pool/main/f/firefox/firefox-gnome-support_2.0.0.17+1nobinonly-0ubuntu0.7.10_lpia.deb
Size/MD5: 91558 3a4e9336d0c1320fff0f3455f8626b94
http://ports.ubuntu.com/pool/main/f/firefox/firefox-libthai_2.0.0.17+1nobinonly-0ubuntu0.7.10_lpia.deb
Size/MD5: 66442 8f479619754f754d344ce2f06cadbaa1
http://ports.ubuntu.com/pool/main/f/firefox/firefox_2.0.0.17+1nobinonly-0ubuntu0.7.10_lpia.deb
Size/MD5: 9067072 a8aea6c6ebf0f054abfdd224f2aeda21

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dbg_2.0.0.17+1nobinonly-0ubuntu0.7.10_powerpc.deb
Size/MD5: 80698898 80bf457d9eff4ccdac1db166b4cb34f9
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dev_2.0.0.17+1nobinonly-0ubuntu0.7.10_powerpc.deb
Size/MD5: 3202070 f4141fb98b2fad1aa6cea594aaa0836e
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-gnome-support_2.0.0.17+1nobinonly-0ubuntu0.7.10_powerpc.deb
Size/MD5: 96238 1c58383b83012e2433e7e94d1fd692a4
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-libthai_2.0.0.17+1nobinonly-0ubuntu0.7.10_powerpc.deb
Size/MD5: 67488 3d364e7fe31efbaefe48e42e7eb149a1
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+1nobinonly-0ubuntu0.7.10_powerpc.deb
Size/MD5: 10309836 b8fc060b7717ca09f0c9b6032aaadc73

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dbg_2.0.0.17+1nobinonly-0ubuntu0.7.10_sparc.deb
Size/MD5: 78054936 ed5eefdbe626ac14e0224364db000e74
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dev_2.0.0.17+1nobinonly-0ubuntu0.7.10_sparc.deb
Size/MD5: 3183678 78beaf283c45887f46216cd72274f787
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-gnome-support_2.0.0.17+1nobinonly-0ubuntu0.7.10_sparc.deb
Size/MD5: 91674 c873546b0c5cad2e214a3e7590dc8ac2
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-libthai_2.0.0.17+1nobinonly-0ubuntu0.7.10_sparc.deb
Size/MD5: 66576 359f0c5d326f055c9d21f1351ae67087
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_2.0.0.17+1nobinonly-0ubuntu0.7.10_sparc.deb
Size/MD5: 9459810 5fe3f16fd1b97e7a8d898c8408f650e2

Updated packages for Ubuntu 8.04 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.2+build6+nobinonly-0ubuntu0.8.04.1.diff.gz
Size/MD5: 105830 9ae8a004b6fa51d3114802bc8584780d
http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.2+build6+nobinonly-0ubuntu0.8.04.1.dsc
Size/MD5: 2760 4529b30c094bf6473eec8c024ac34b3a
http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.2+build6+nobinonly.orig.tar.gz
Size/MD5: 11112466 2bf9e7a2418a53e260395584269ac643
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1.diff.gz
Size/MD5: 77364 8d90a935a95e33ca9f0f92f22cf5d158
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1.dsc
Size/MD5: 2825 e15190772abc1a4fc6306c6f7623f3f1
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.2+build6+nobinonly.orig.tar.gz
Size/MD5: 40166158 e590b88ee66aacb233093257bda8a2eb

Architecture independent packages:

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_amd64.deb
Size/MD5: 9032 59650e2cf25d56905b9b4cedc32a9c75
http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_amd64.deb
Size/MD5: 29602 6195cca830293f4f1a18385e2359745f
http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_amd64.deb
Size/MD5: 1087296 f3b64a363301666c801d507ee6bef72a
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_amd64.deb
Size/MD5: 4035436 66b97ec71c0b6c83b4b37ed11b5bbf7c
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_amd64.deb
Size/MD5: 48658 74965d6808431e8bbbd9cbf1c6855cac
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_amd64.deb
Size/MD5: 9031564 989c0069101b9df7176a4f10976f5f02

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_i386.deb
Size/MD5: 9034 bc80011d2f5681a685e310e0c444fbce
http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_i386.deb
Size/MD5: 25732 aa9b0318a5b14c27f8a9cb907b82f688
http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_i386.deb
Size/MD5: 1064980 f23fde08f7c01637f60471123dd10449
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_i386.deb
Size/MD5: 4016990 94003a2b828f91e46ba5c6308ef271fd
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_i386.deb
Size/MD5: 38514 4ca9181ccd85900bf20b56548e67be43
http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_i386.deb
Size/MD5: 7763702 c8fe4cf05fcd5f550318333577b4273c

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_lpia.deb
Size/MD5: 9034 29d06ea689d257a6082ab4e16dd7f590
http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_lpia.deb
Size/MD5: 25348 5aa83572c22d30b7758ee424fa001003
http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_lpia.deb
Size/MD5: 1063092 75dddb0dfdc299afc32636de65219025
http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_lpia.deb
Size/MD5: 4012464 efcb2a9ea8c9d3a5781f53884357756e
http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_lpia.deb
Size/MD5: 37608 e42348339291ad26d70e4124ee90bd4a
http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_lpia.deb
Size/MD5: 7650762 b73f0cab903c38b84f42b546a201432c

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
Size/MD5: 9034 195551cfc109865c6ca73c28aa775d76
http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
Size/MD5: 27502 be0223e544c4f81f8426c312a4381790
http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0_3.0.2+build6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
Size/MD5: 1079124 b4cec8b1b8d19d20d6a88f02ec4cd38a
http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
Size/MD5: 4023470 8086afab2b04b9bc5f61c2920d3a931b
http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
Size/MD5: 43678 c4c5d38c50f1c477eb5cb752693ab827
http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.2+build6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
Size/MD5: 8609778 bfd2eb3346f2be06232ea368d1661d16

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20080924/8497bd95/attachment-0001.pgp

------------------------------

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

End of ubuntu-security-announce Digest, Vol 48, Issue 7
*******************************************************

News

Wednesday, September 24, 2008

ubuntu-security-announce Digest, Vol 48, Issue 7

No comments:

WINDOWS CENTER

Blog Archive