[USN-717-1] Firefox and Xulrunner vulnerabilities

Wed Feb 11 01:41:21 UTC 2009

===========================================================
Ubuntu Security Notice USN-717-1          February 10, 2009
firefox-3.0, xulrunner-1.9 vulnerabilities
CVE-2009-0352, CVE-2009-0353, CVE-2009-0354, CVE-2009-0355,
CVE-2009-0357, CVE-2009-0358
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 8.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  firefox-3.0                     3.0.6+nobinonly-0ubuntu0.8.04.1
  xulrunner-1.9                   1.9.0.6+nobinonly-0ubuntu0.8.04.1

Ubuntu 8.10:
  abrowser                        3.0.6+nobinonly-0ubuntu0.8.10.1
  firefox-3.0                     3.0.6+nobinonly-0ubuntu0.8.10.1
  xulrunner-1.9                   1.9.0.6+nobinonly-0ubuntu0.8.10.1

After a standard system upgrade you need to restart Firefox and any
applications that use xulrunner, such as Epiphany, to effect the necessary
changes.

Details follow:

Several flaws were discovered in the browser engine. These problems could allow
an attacker to crash the browser and possibly execute arbitrary code with user
privileges. (CVE-2009-0352, CVE-2009-0353)

A flaw was discovered in the JavaScript engine. An attacker could bypass the
same-origin policy in Firefox by utilizing a chrome XBL method and execute
arbitrary JavaScript within the context of another website. (CVE-2009-0354)

A flaw was discovered in the browser engine when restoring closed tabs. If a
user were tricked into restoring a tab to a malicious website with form input
controls, an attacker could steal local files on the user's system.
(CVE-2009-0355)

Wladimir Palant discovered that Firefox did not restrict access to cookies in
HTTP response headers. If a user were tricked into opening a malicious web
page, a remote attacker could view sensitive information. (CVE-2009-0357)

Paul Nel discovered that Firefox did not honor certain Cache-Control HTTP
directives. A local attacker could exploit this to view private data in
improperly cached pages of another user. (CVE-2009-0358)

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.04.1.diff.gz
      Size/MD5:   105962 9d1dd815f6901881c9d0c7e02ba4a75b
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.04.1.dsc
      Size/MD5:     2711 61ba06fa21dae6e6828921f22540d243
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly.orig.tar.gz
      Size/MD5: 11180629 f7306d068c261f95c284fba5a75a6c71
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.04.1.diff.gz
      Size/MD5:    77638 2173124c73ad3095d97bf8960ec855a5
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.04.1.dsc
      Size/MD5:     2776 a3dcb8b8fd26e1d802e9971a46e7e1f3
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly.orig.tar.gz
      Size/MD5: 41504221 c3b32d6f68af24a75e4c902cb2ddbc09

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-dev_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65864 9dc2bf09e6fc28741544c4bfc5904738
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-gnome-support_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65876 8e290cff0732bac4b1ce1728b06f028b
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-granparadiso-dev_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65840 30c689f5ecf7ec430353d713057cd971
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-trunk-dev_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65818 0cdaaf28707b274a5f73a54d8b1fa965
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65978 f962ffb3ed9dd6573956304e7cf1a4df
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-3.0-dom-inspector_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65890 322b798cd164a5ce68de2866e1dc1162
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-3.0-venkman_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65836 0a000e41e94f5e60a83ded055748296a
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-dom-inspector_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:     8968 61ba17d1e482222ac49f5f5a7d5d3913
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-granparadiso-dom-inspector_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:     8964 2ad2759d85a104116cb36831b028ce07
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-granparadiso-gnome-support_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65870 aac931ab3ca46e329a4955a5bf6e76a3
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-granparadiso_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65828 a62f716f84713ecfa1a33408e3872bd2
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-libthai_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65818 10dc6e5214d80b1624114c37bb86f738
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-trunk-dom-inspector_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:     8946 c8fb67a942b0d7d77aae0222f5e29887
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-trunk-gnome-support_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65844 5b4ed7aa2e26b77b6c95bb44d3869750
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-trunk-venkman_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:     8934 ec245ae15b0ba68b501af7a188e20c78
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-trunk_3.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:    65806 726700c8e49d8e2ece5c84262ab82849
    http://security.ubuntu.com/ubuntu/pool/universe/x/xulrunner-1.9/xulrunner-1.9-dom-inspector_1.9.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:   125468 591ac192642c55dd439ee6dd1d4a1a62
    http://security.ubuntu.com/ubuntu/pool/universe/x/xulrunner-1.9/xulrunner-1.9-venkman_1.9.0.6+nobinonly-0ubuntu0.8.04.1_all.deb
      Size/MD5:   235298 194d01564975da1065f994fda7ec9c3a

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:     9028 a575ef97892b265117c921490478c749
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:    29740 49d84b67f840254959132b1568ae46be
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:  1091924 5eb7c34ffbc5cac1ec3428fb6ff81daa
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:  4450518 8268133a51caf767e6bd3b7974e9c6f2
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:    48682 da2d1192a88c460a80fee528be093d73
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:  9062436 75bb3c5a7a40c2c09832a5db61c5f320

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.04.1_i386.deb
      Size/MD5:     9026 dcb3ffe9961637a24f4a92900bf506cb
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.04.1_i386.deb
      Size/MD5:    25686 5c83329675e0bec00f0e1f6fa263be35
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.04.1_i386.deb
      Size/MD5:  1071068 4d6756aa7b216b50e8357dd6469147f5
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.04.1_i386.deb
      Size/MD5:  4437824 3285afec7e972337675f9771f64ed668
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.04.1_i386.deb
      Size/MD5:    38588 44673073b942d11924cdf56ba3df690b
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.04.1_i386.deb
      Size/MD5:  7813284 273b331b31de831a4a39d25a49d999a4

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:     9024 795d386d153f97be00bb1a426fc15330
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:    25304 de597f7551e871e1f57fe7e1a31774a3
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:  1069414 9851027bd003573746541269877bb84d
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:  4428972 a940da665b7b409066cf234921180a97
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:    37546 16eb7adda58ba8ac943b7815ef7a3871
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:  7696132 9283cdb44b3215147e0abdc0620ec4d3

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:     9030 891e46ef9a1aef332d3df52dcfb8d19c
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:    27506 72d42ec8e4060dc2d642810b84be4077
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:  1084224 96e261886e771af178fb932dc7f269b8
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:  4028840 ff6de6d173949cc34bafcd2fa4b64b84
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:    43668 ce09a7ed59b34d9ac1a227dc1f7cff8a
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:  8616998 a18d048f4b68e41a60044f3804044ab9

Updated packages for Ubuntu 8.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.10.1.diff.gz
      Size/MD5:   123854 5eb9af8cc607c980d141364a77065c17
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.10.1.dsc
      Size/MD5:     2766 99c48d12708f9cf8ca1255ab0d2a39ef
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly.orig.tar.gz
      Size/MD5: 11180629 f7306d068c261f95c284fba5a75a6c71
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.10.1.diff.gz
      Size/MD5:   251224 fa9a4f293ca4d0d5045f9680d53d5c96
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.10.1.dsc
      Size/MD5:     2794 c42552247a5657a41d07d7ce5203ecc1
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly.orig.tar.gz
      Size/MD5: 41504221 c3b32d6f68af24a75e4c902cb2ddbc09

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/abrowser_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68878 ed90d727a49bbadd3503458c4d1bd922
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-dev_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68782 87ffabc6b89b467f305649830ffa9c82
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-gnome-support_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68792 78dd805c6027aeac6d99d87487e67d08
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-granparadiso-dev_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68756 8394edd832cb58014187941a43999ef5
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-trunk-dev_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68742 9537b48d032b9cd82856940efc0964a4
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68872 2b3bc01c0502214b21069538107d727b
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-3.0-dom-inspector_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68800 ea0d87d1e8f07f08ba34d3562a31c4c6
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-3.0-venkman_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68752 27d56b3630cbd6b3fa79e9da1cce611a
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-dom-inspector_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:     8968 67da562edf4df7832aeb222a56a2c0d9
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-granparadiso-dom-inspector_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:     8958 2644e20ea755ee36e04e271c9d1ba1bc
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-granparadiso-gnome-support_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68772 ceceabc7ab558738da2323a66f8897e8
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-granparadiso_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68744 dc3fee0726ee341fbb6ddfcd9ec1f1cf
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-libthai_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68732 b00be3635032695f79604b02c57c8faa
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-trunk-dom-inspector_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:     8944 6db5ec69884f667e8369fbcc49cc8304
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-trunk-gnome-support_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68760 454aca37921589c3b74a2448a4073ff7
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-trunk-venkman_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:     8934 f1bcff624ea0c0386c55062bff9c9e68
    http://security.ubuntu.com/ubuntu/pool/universe/f/firefox-3.0/firefox-trunk_3.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:    68726 9436faf6054364b44eebf32c559f950a
    http://security.ubuntu.com/ubuntu/pool/universe/x/xulrunner-1.9/xulrunner-1.9-dom-inspector_1.9.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:   127760 c8126a5db486c695e71b428b9c571ad1
    http://security.ubuntu.com/ubuntu/pool/universe/x/xulrunner-1.9/xulrunner-1.9-venkman_1.9.0.6+nobinonly-0ubuntu0.8.10.1_all.deb
      Size/MD5:   237822 b440b3b72dc00feb81657173c73984ca

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/abrowser-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:   198336 6361e539637def42f67396cd216c49c3
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:   201764 8536462b9963d3f0cb07c31e3894adc6
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:    68838 e1e9d7e140bb2c79997cbf2f1fa30bbd
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:    88232 fa2bdb12ff9a8d7e8c754888e4bb8f3b
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:   906364 da574c215590f93a8bd1b9e455ec9e2f
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:  4984526 634e691770102d04f85a6cf6db487304
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:    47064 c8af5dafb7823bae2fee3fa801dd3105
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:  8733332 1c85a4e3e06ac189438341268439bf61
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_amd64.deb
      Size/MD5:    22494 735532b1360ede105f56598f41cb8a70

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/abrowser-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:   203608 ea24117110d1cfff534ab76f3ca862b5
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:   202138 076232931f266edb189416e974266a98
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:    68840 ef9f3612a61220022a280e370f527b16
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:    84282 acc9e8b502808b65d5a30be04be42302
    http://security.ubuntu.com/ubuntu/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:   885350 6665202fe8c152f48cbf1591ebed93f3
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:  4954618 d73cb09470917f27e4d1e8b8eacb79ce
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:    39454 0f044675aab70caa5e0f610c829f687d
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:  7563740 61a5e2807bbe5caba44968ac181ef140
    http://security.ubuntu.com/ubuntu/pool/main/x/xulrunner-1.9/xulrunner-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_i386.deb
      Size/MD5:    22498 42b3898fefda9a5c6098b2a22d859f4f

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/f/firefox-3.0/abrowser-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:   198084 7ff37decf8a4a57940785671c7c4707c
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:   201306 32cc39b567f1d22cd023481779c246cd
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:    68778 4c271575af18ed49ca16bd7999eca2ad
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:    84300 056ad9092a7f0a270edcad48141af0d8
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:   884652 56d9c0316fa92c8ccf74fea4250c41b0
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:  4955706 560a919e63e36fc4b3fb52208e291d93
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:    38452 6da3195179b5a5379e2fb7c4fa74eee1
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:  7464230 f81a06670d47cde0eaa511cfb47cac06
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_lpia.deb
      Size/MD5:    22312 d4aba0c381a3fb4fecfbc0d71aa01b95

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/f/firefox-3.0/abrowser-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:   203610 25bc60c85ae5e082a0c4f3b2f37f4255
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:   201974 df219ab232cc417f097bb845a73f6a62
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:    68844 72965f097fd6d0f6fd6b3d8b5c8b9aec
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:    85698 a5f825d00ec30299aa30d042ae4932a6
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:   898222 add6ae49c0b4118adaf6b21ba632c66d
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:  4533050 47146ffecd0b0db849497637b0a0bb6b
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:    42408 0b6c4c6e1591a7e45d40760947fe64b6
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:  8273998 5c8b6e55a9a4cf2af73299279619fd5e
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_powerpc.deb
      Size/MD5:    22500 3823abc3a2f63be4d1ba8c0deb264836

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/f/firefox-3.0/abrowser-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:   203600 21e5f298ce9eebf6961ed5df9c492d4c
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-branding_3.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:   201972 fb3fcbf79a27708ab8e0a76140f07c79
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-dev_3.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:    68842 94c43c32c310476e8c0168c694b783ce
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0-gnome-support_3.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:    83394 531ccc5cf4f71116ab32b6baca072e72
    http://ports.ubuntu.com/pool/main/f/firefox-3.0/firefox-3.0_3.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:   886646 481460e1a6a961fe08b7144845ae86bc
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:  4519408 a545337a375ebc4d9eb4ec1115a7b8b1
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9-gnome-support_1.9.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:    37870 ce67b9084164ebfdb2fea7f76b19af79
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-1.9_1.9.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:  8092686 5cdd2e017bb05cb2d2ec424752a770d0
    http://ports.ubuntu.com/pool/main/x/xulrunner-1.9/xulrunner-dev_1.9.0.6+nobinonly-0ubuntu0.8.10.1_sparc.deb
      Size/MD5:    22504 d7d84e7d9443d8fc01822bdfd3035872

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20090210/d8cb96df/attachment.sig>