Debian: New iceape packages fix several vulnerabilities

    Date04 Aug 2007
    CategoryDebian
    2867
    Posted ByLinuxSecurity Advisories
    Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite. The Common Vulnerabilities and Exposures project identifies the security flaws. "moz_bug_r_a4" discovered that a regression in the handling of "about:blank" windows used by addons may lead to an attacker being able to modify the content of web sites.
    - --------------------------------------------------------------------------
    Debian Security Advisory DSA 1346-1                    This email address is being protected from spambots. You need JavaScript enabled to view it.
    http://www.debian.org/security/                         Moritz Muehlenhoff
    August 4th, 2007                        http://www.debian.org/security/faq
    - --------------------------------------------------------------------------
    
    Package        : iceape
    Vulnerability  : several
    Problem-Type   : remote
    Debian-specific: no
    CVE ID         : CVE-2007-3844 CVE-2007-3845
    
    Several remote vulnerabilities have been discovered in the Iceape internet
    suite, an unbranded version of the Seamonkey Internet Suite. The Common
    Vulnerabilities and Exposures project identifies the following problems:
    
    CVE-2007-3844
    
        "moz_bug_r_a4" discovered that a regression in the handling of
        "about:blank" windows used by addons may lead to an attacker being
        able to modify the content of web sites.
    
    CVE-2007-3845
    
        Jesper Johansson discovered that missing sanitising of double-quotes
        and spaces in URIs passed to external programs may allow an attacker
        to pass arbitrary arguments to the helper program if the user is
        tricked into opening a malformed web page.
    
    The Mozilla products in the oldstable distribution (sarge) are no longer
    supported with with security updates.
    
    For the stable distribution (etch) these problems have been fixed in version
    1.0.10~pre070720-0etch3.
    
    For the unstable distribution (sid) these problems have been fixed in version
    1.1.3-2.
    
    We recommend that you upgrade your iceape packages.
    
    
    Upgrade Instructions
    - --------------------
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    
    Debian GNU/Linux 4.0 alias etch
    - -------------------------------
    
      Source archives:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.10~pre070720-0etch3.dsc
          Size/MD5 checksum:     1436 66da445dd4b97ad09509205d9c95cb91
        http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.10~pre070720-0etch3.diff.gz
          Size/MD5 checksum:   270276 c15adacbf5473e5088c4f86c24723f90
        http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.10~pre070720.orig.tar.gz
          Size/MD5 checksum: 43473332 245a8a7774ff47ef91177724130f8ea4
    
      Architecture independent components:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-chatzilla_1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:   278862 e4bc75a794055347e6d783753ce15686
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dev_1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:  3660096 6368fe33d6695c463723a0d779dbbf68
        http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    27976 eb5c9c2fe5656ad05dbf1bbe61fd1400
        http://security.debian.org/pool/updates/main/i/iceape/mozilla-browser_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    27512 0270d732726aa2fbc42636df4f53fe82
        http://security.debian.org/pool/updates/main/i/iceape/mozilla-calendar_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    26582 1ba43b858739aadc4a72caff8ad6a352
        http://security.debian.org/pool/updates/main/i/iceape/mozilla-chatzilla_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    26598 79cf169ca98208457d7836987ec6ff2a
        http://security.debian.org/pool/updates/main/i/iceape/mozilla-dev_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    26710 8c8d9a876c911ee6c13a7584adb17f70
        http://security.debian.org/pool/updates/main/i/iceape/mozilla-dom-inspector_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    26624 e9fed3b1ba4a5599a94766870558a491
        http://security.debian.org/pool/updates/main/i/iceape/mozilla-js-debugger_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    26614 d935253d3d6d08e97f417f4920fc79df
        http://security.debian.org/pool/updates/main/i/iceape/mozilla-mailnews_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    26598 285a27b44dd417d238495bb93da923a6
        http://security.debian.org/pool/updates/main/i/iceape/mozilla-psm_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    26586 c29d3a05295a95d6aefba315d988f120
        http://security.debian.org/pool/updates/main/i/iceape/mozilla_1.8+1.0.10~pre070720-0etch3_all.deb
          Size/MD5 checksum:    26570 9be19c8b022e56b5c5c1fbafba3f61a9
    
      Alpha architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_alpha.deb
          Size/MD5 checksum: 12871490 29796a3ab6f29f7d2a31bc211d1a3b38
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_alpha.deb
          Size/MD5 checksum:   625596 ce4437c9fbabfa7f4fe553626524d481
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_alpha.deb
          Size/MD5 checksum: 60581292 0b0789d0cbee8e46fd78d3e01b84674b
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_alpha.deb
          Size/MD5 checksum:   197156 632847a3944ebbffee5bae33ad7f48f9
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_alpha.deb
          Size/MD5 checksum:    53392 0a98fe620b0b49eafd4055926741afa5
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_alpha.deb
          Size/MD5 checksum:  2282124 74d9e8b8fc063d9a2c0c1bea1d4daac9
    
      AMD64 architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_amd64.deb
          Size/MD5 checksum: 11649922 598b82ffb6bf8efd8fa831bedbb9ff6b
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_amd64.deb
          Size/MD5 checksum:   608826 10ecf3acf60df3afd0aab632d2da18f8
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_amd64.deb
          Size/MD5 checksum: 59572054 8bcb5249b318a29f3d893e76f8562e3c
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_amd64.deb
          Size/MD5 checksum:   194242 8d266d5d6efcf0ee4ce55a01d1849327
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_amd64.deb
          Size/MD5 checksum:    52854 4548aa9e07c47ba2e0cea1983aed22cb
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_amd64.deb
          Size/MD5 checksum:  2090946 2b4b2ce133068921c92ea527341af22d
    
      ARM architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_arm.deb
          Size/MD5 checksum: 10388778 91db8be09bc2644647994501dd4e9f94
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_arm.deb
          Size/MD5 checksum:   582276 f5084bb84bcee566ca6cdc3031f0115b
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_arm.deb
          Size/MD5 checksum: 58736630 7be68d5adf5869815fe126b32aa2780d
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_arm.deb
          Size/MD5 checksum:   188318 ecb4535d6a70879e5cf3b40e91c3feba
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_arm.deb
          Size/MD5 checksum:    47546 2245934b83783b9ce219ede8d24e8685
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_arm.deb
          Size/MD5 checksum:  1907286 b3c092e8321386b382d40ced0a9656ee
    
      Intel IA-32 architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_i386.deb
          Size/MD5 checksum: 10458656 39010ec6c30a9de7839047382f1b410e
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_i386.deb
          Size/MD5 checksum:   588168 afd7de7e03cf0c48fa7f3e5452775d09
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_i386.deb
          Size/MD5 checksum: 58650042 adb7d80b3b9953647cb220cfe80e8628
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_i386.deb
          Size/MD5 checksum:   188950 3c30bf530070b2a8c676a2be126a89b4
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_i386.deb
          Size/MD5 checksum:    47928 48e2e91f605b7acc76cae0f6ec3b64e0
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_i386.deb
          Size/MD5 checksum:  1889960 12b3fee32c72f4d820fb3bb69bbfafa3
    
      Intel IA-64 architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_ia64.deb
          Size/MD5 checksum: 15768358 87221c7a15933a1d33d6aaec573edecd
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_ia64.deb
          Size/MD5 checksum:   661030 2c2838943b8eb3ecc818e7031f372c25
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_ia64.deb
          Size/MD5 checksum: 59850658 53354ad4f8c5abc614e724907259e324
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_ia64.deb
          Size/MD5 checksum:   203906 b9d1918e0bfb6d8122e12ce94892e0de
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_ia64.deb
          Size/MD5 checksum:    61424 833205aabbf5d43d7aa37be16191e7db
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_ia64.deb
          Size/MD5 checksum:  2815984 cd1d559271c3be01cf992b54781f475f
    
      Little endian MIPS architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_mipsel.deb
          Size/MD5 checksum: 10896410 48d9112257bfe46d49873d48e9a978d9
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_mipsel.deb
          Size/MD5 checksum:   595110 8befb8dde48b2c26ef35a24e5941c6ea
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_mipsel.deb
          Size/MD5 checksum: 59789352 2ba792d018a5d4aa018d2f8cb4ec1701
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_mipsel.deb
          Size/MD5 checksum:   190420 cf969199ea40531e7e1f78c2623474cf
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_mipsel.deb
          Size/MD5 checksum:    49222 2721ccffcbc295cd4833fea0ffffb110
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_mipsel.deb
          Size/MD5 checksum:  1940716 a68d1d02af83dc2ec221c29b34733411
    
      PowerPC architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_powerpc.deb
          Size/MD5 checksum: 11296084 21422a619f4c19e27c3a83fcd05df7e8
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_powerpc.deb
          Size/MD5 checksum:   595570 7a54ea060357043d238b7f6f0f2950ac
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_powerpc.deb
          Size/MD5 checksum: 61574438 2758cdb970409d44f9679f15f377559c
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_powerpc.deb
          Size/MD5 checksum:   191292 e32d670d121005099e31bdb600fd823b
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_powerpc.deb
          Size/MD5 checksum:    48856 c9a3281ab7d456a0fccd756a3f41ea7f
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_powerpc.deb
          Size/MD5 checksum:  2005666 cfec107045392dbadffc0694735ec670
    
      IBM S/390 architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_s390.deb
          Size/MD5 checksum: 12271986 f3449eea99beebf302ef531e319e0d9d
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_s390.deb
          Size/MD5 checksum:   610992 1fb0e07075f063c74b7697007b99dbb7
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_s390.deb
          Size/MD5 checksum: 60330846 5853467308184dd3b4bc4f57d0d7b96f
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_s390.deb
          Size/MD5 checksum:   196098 634f4353e389c2b0bc322981f0be9f3c
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_s390.deb
          Size/MD5 checksum:    53438 a1cca7e4b89cdd2869480b7ad5426848
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_s390.deb
          Size/MD5 checksum:  2184940 66189e26fe37accc875c5464f186f340
    
      Sun Sparc architecture:
    
        http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1.0.10~pre070720-0etch3_sparc.deb
          Size/MD5 checksum: 10642440 711f992794dbce40c041b6523d25efc8
        http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_1.0.10~pre070720-0etch3_sparc.deb
          Size/MD5 checksum:   584580 b051c601a46ab372fb55010664604631
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.10~pre070720-0etch3_sparc.deb
          Size/MD5 checksum: 58473150 b88be50b4d70ffdd13b6bc3b7a4cb211
        http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspector_1.0.10~pre070720-0etch3_sparc.deb
          Size/MD5 checksum:   188878 b35ef540f8c377f8d00c391dddea72cb
        http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-support_1.0.10~pre070720-0etch3_sparc.deb
          Size/MD5 checksum:    47512 23735ff78cb04ce1da6b8be26df047dc
        http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_1.0.10~pre070720-0etch3_sparc.deb
          Size/MD5 checksum:  1894918 c145962558e653604fe6024d6d86eb9b
    
    
      These files will probably be moved into the stable distribution on
      its next update.
    
    - ---------------------------------------------------------------------------------
    For apt-get: deb http://security.debian.org/ stable/updates main
    For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"14","type":"x","order":"1","pct":53.85,"resources":[]},{"id":"88","title":"Should be more technical","votes":"4","type":"x","order":"2","pct":15.38,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"8","type":"x","order":"3","pct":30.77,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.