SECURINFOS.INFO - Bulletins de sécurité informatique, Alertes et Protection Référence Secunia : SA21324 Risque : Critique. Niveau 4 sur 5.  Impact : Contournement de la Sécurité, Cross Site Scripting, Accès au système Lieu : A distance Solutions : Correctif de l'éditeur OS : Debian GNU/Linux 3.1 Debian GNU/Linux instable alias sid Référence CVE : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1942 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2775 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2776 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2777 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2778 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2779 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2780 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2781 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2782 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2783 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2784 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2785 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2786 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2787 Description : Debian a réalisé une mise à jour pour mozilla-thunderbird. Cela corrige quelques vulnérabilités, qui pourraient être exploitées par des personnes malintentionnées pour passer outre certaines restrictions de sécurité, conduire des attaques cross-site scripting et HTTP response smuggling, et potentiellement compromettre le système d'un utilisateur. Solutions : Appliquez les paquetages mis à jour. -- Debian GNU/Linux 3.1 alias sarge -- Archives sources : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a.dsc Taille/checksum MD5: 999 a7547d54f6c987d16db915709bc5fe44 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a.diff.gz Taille/checksum MD5: 453026 eb2d71ba5d15fe803784950a13a47563 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2.orig.tar.gz Taille/checksum MD5: 33288906 806175393a226670aa66060452d31df4 Architecture Alpha : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_alpha.deb Taille/checksum MD5: 12842296 fa614356eb934f90ae45fa3ed9dd1539 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_alpha.deb Taille/checksum MD5: 3278130 4cb654733bfccea8cd3c0df00b5def8c http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_alpha.deb Taille/checksum MD5: 151082 c07a4daabd1c05a637520f9a094dc074 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_alpha.deb Taille/checksum MD5: 32502 80579d205020032c49770ce3fc7141f6 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_alpha.deb Taille/checksum MD5: 88350 3b3e525e54326e8e2d9af8b69904c3a8 Architecture AMD64 : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_amd64.deb Taille/checksum MD5: 12251804 deb4396f8cd09c132ff78052ff534f8a http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_amd64.deb Taille/checksum MD5: 3279014 7d2f64aba52ea20a7b8cf16a66fff252 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_amd64.deb Taille/checksum MD5: 150050 77fdbefdcd0aedbdbccac24e7c81f943 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_amd64.deb Taille/checksum MD5: 32488 867701a09fd5bbac7acc1865fbe064b8 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_amd64.deb Taille/checksum MD5: 88190 5bdde29214cc86cf4340ed9dd43c68d3 Architecture ARM : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_arm.deb Taille/checksum MD5: 10339868 a60a1c13491b2a0771c8e3517cd25dd8 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_arm.deb Taille/checksum MD5: 3270162 22724283f230b50cf6a173520c420fc1 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_arm.deb Taille/checksum MD5: 142198 7008892dc0bb9bca14978a7e1f09fde9 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_arm.deb Taille/checksum MD5: 32512 3ac5306abd8ecbdd9ba981df3d61db68 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_arm.deb Taille/checksum MD5: 80218 5514acae240f08b8a061176131d2fdb8 Architecture Intel IA-32 : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_i386.deb Taille/checksum MD5: 11565160 23e9aaa2f8f1a62bf43efb7bc815fdcf http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_i386.deb Taille/checksum MD5: 3506098 169af4eda4ae283d48a0b1523b05bdd7 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_i386.deb Taille/checksum MD5: 145716 e63141ba6a893db986bd0e9cbcc575e9 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_i386.deb Taille/checksum MD5: 32480 2d23870e404431d77f83601ec81a7fda http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_i386.deb Taille/checksum MD5: 86962 ea63c9a6e99a6895ad7eb1fe70363b22 Architecture Intel IA-64 : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_ia64.deb Taille/checksum MD5: 14618962 f0ae93cc731f61beb0599fac54445460 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_ia64.deb Taille/checksum MD5: 3290490 2d16d23f8042bad1273b992861011349 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_ia64.deb Taille/checksum MD5: 154412 1b39804a27f4b7dae90e92d7a39d4bb9 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_ia64.deb Taille/checksum MD5: 32490 818339f4a6d9e98182975f9d1a834939 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_ia64.deb Taille/checksum MD5: 106058 6b1214ef1b42a53af54389da726fd478 Architecture HP Precision : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_hppa.deb Taille/checksum MD5: 13561594 b7eb45b4c8829370a58b2d870021024e http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_hppa.deb Taille/checksum MD5: 3283714 f65b93a3a73a3dfc62d6f024c259a1db http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_hppa.deb Taille/checksum MD5: 152280 06e23e82444cacea77afdc87699f5773 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_hppa.deb Taille/checksum MD5: 32496 06a10d18ef8a1bc84b89b3cc50e8cad5 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_hppa.deb Taille/checksum MD5: 96308 076063aee6cf91541585b08fdf73a801 Architecture Motorola 680x0 : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_m68k.deb Taille/checksum MD5: 10786352 e5c9c4cb536f92fc2cab024541460b8f http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_m68k.deb Taille/checksum MD5: 3269592 909c5464deba45d965f5a0612f04becd http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_m68k.deb Taille/checksum MD5: 143968 6e45eef4d3241039abe41a638e9f34df http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_m68k.deb Taille/checksum MD5: 32522 494885109459853538c84e47c21635ec http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_m68k.deb Taille/checksum MD5: 81442 c978cb34ab778b06385814cd4ad51056 Architecture Big endian MIPS : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_mips.deb Taille/checksum MD5: 11941536 ddf753469c129bf3fd2681a9bbc5e81a http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_mips.deb Taille/checksum MD5: 3277166 1f3efa2d140a400ad98b73ba33f6e35c http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_mips.deb Taille/checksum MD5: 146966 a5e221ce8c30ee3a12c1a3d6603c52dd http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_mips.deb Taille/checksum MD5: 32496 05e84094b89573c4aafac9b414bb0d34 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_mips.deb Taille/checksum MD5: 83704 a1006bc20c63a7d51607cc3249a88677 Architecture Little endian MIPS : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_mipsel.deb Taille/checksum MD5: 11806560 dccdeef719f40ee45b6ea11a2e1d5675 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_mipsel.deb Taille/checksum MD5: 3278332 12657ea860ed91f17750e30458526dc9 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_mipsel.deb Taille/checksum MD5: 146522 b528200933d5bcb366959bfb21015b1b http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_mipsel.deb Taille/checksum MD5: 32496 5956a48e052e31695346398197734eef http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_mipsel.deb Taille/checksum MD5: 83552 a0a0035eadfb314ebd90a21f4e888275 Architecture PowerPC : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_powerpc.deb Taille/checksum MD5: 10903816 1590ee6c726500d5cb4f037d29e0a8f8 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_powerpc.deb Taille/checksum MD5: 3268272 67789b6af42f2b76d578377cc4ff9f3d http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_powerpc.deb Taille/checksum MD5: 144024 3617dbb5b65f5c1d4317b09626f0be5f http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_powerpc.deb Taille/checksum MD5: 32500 5807e7e4389796a8dd1b79c9ae07f051 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_powerpc.deb Taille/checksum MD5: 80232 5f4d117d2108a7c0ab683e6b2756a701 Architecture IBM S/390 : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_s390.deb Taille/checksum MD5: 12697106 ba9085a2f7203579f62e288e3f1dd7ee http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_s390.deb Taille/checksum MD5: 3278522 7b17ff2d80845368acdf7263c1affc50 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_s390.deb Taille/checksum MD5: 150324 943c02d94e672ec2fe94c1303ee2679d http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_s390.deb Taille/checksum MD5: 32484 2cbf34e4da8492fe773465378e069ca6 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_s390.deb Taille/checksum MD5: 88194 e7ccfa32631e9acd0e96146f9c49a176 Architecture Sun Sparc : http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_sparc.deb Taille/checksum MD5: 11167620 d493999d1fe3f28b0adef98731003ad7 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.2-2.sarge1.0.8a_sparc.deb Taille/checksum MD5: 3273616 2e75bfd4a38e0e92de802c7ed5560f90 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.2-2.sarge1.0.8a_sparc.deb Taille/checksum MD5: 143680 402f90dc28004eb5c6777d1e13946c55 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.2-2.sarge1.0.8a_sparc.deb Taille/checksum MD5: 32500 0534fcca42cbc508c633ec090b875bb1 http://security.debian.org/pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.2-2.sarge1.0.8a_sparc.deb Taille/checksum MD5: 82040 ca4a06228ba6980a44b8df8c37b94b0c -- Debian GNU/Linux instable alias sid -- Fixé en version 1.5.0.4-1 et xulrunner 1.5.0.4-1 pour galeon et epiphany. Référence : http://www.us.debian.org/security/2006/dsa-1134 Autres références : SA19698: http://secunia.com/advisories/19698/ SA20376: http://secunia.com/advisories/20376/ SA20382: http://secunia.com/advisories/20382/ Veuillez noter : L'information, sur laquelle est basé ce bulletin Secunia, provient d'un tiers sans mention du contraire. Les noms, marques et enseignes cités sur ce site sont la propriété de leurs déposants respectifs. |
SECURINFOS