Date: Thu, 11 Oct 2012 15:39:00 +0200
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDVSA-2012:163 ] firefox

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2012:163
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : firefox
 Date    : October 11, 2012
 Affected: Enterprise Server 5.0
 _______________________________________________________________________

 Problem Description:

 Security issues were identified and fixed in mozilla firefox:
 
 Mozilla developers identified and fixed several memory safety
 bugs in the browser engine used in Firefox and other Mozilla-based
 products. Some of these bugs showed evidence of memory corruption under
 certain circumstances, and we presume that with enough effort at least
 some of these could be exploited to run arbitrary code (CVE-2012-3982).
 
 Mozilla developer Johnny Stenback discovered that several methods
 of a feature used for testing (DOMWindowUtils) are not protected by
 existing security checks, allowing these methods to be called through
 script by web pages. This was addressed by adding the existing security
 checks to these methods (CVE-2012-3986).
 
 Security researcher Soroush Dalili reported that a combination of
 invoking full screen mode and navigating backwards in history could,
 in some circumstances, cause a hang or crash due to a timing dependent
 use-after-free pointer reference. This crash may be potentially
 exploitable (CVE-2012-3988).
 
 Mozilla community member Alice White reported that when the GetProperty
 function is invoked through JSAPI, security checking can be bypassed
 when getting cross-origin properties. This potentially allowed for
 arbitrary code execution (CVE-2012-3991).
 
 Security researcher Mariusz Mlynski reported that the location property
 can be accessed by binary plugins through top.location and top can be
 shadowed by Object.defineProperty as well. This can allow for possible
 cross-site scripting (XSS) attacks through plugins (CVE-2012-3994).
 
 Security researcher Mariusz Mlynski reported that when InstallTrigger
 fails, it throws an error wrapped in a Chrome Object Wrapper (COW)
 that fails to specify exposed properties. These can then be added
 to the resulting object by an attacker, allowing access to chrome
 privileged functions through script.
 
 While investigating this issue, Mozilla security researcher
 moz_bug_r_a4 found that COW did not disallow accessing of properties
 from a standard prototype in some situations, even when the original
 issue had been fixed (CVE-2012-3993, CVE-2012-4184).
 
 Security researcher Mariusz Mlynski reported an issue with spoofing of
 the location property. In this issue, writes to location.hash can be
 used in concert with scripted history navigation to cause a specific
 website to be loaded into the history object. The baseURI can then
 be changed to this stored site, allowing an attacker to inject a
 script or intercept posted data posted to a location specified with
 a relative path (CVE-2012-3992).
 
 Security researcher Abhishek Arya (Inferno) of the Google Chrome
 Security Team discovered a series of use-after-free, buffer overflow,
 and out of bounds read issues using the Address Sanitizer tool in
 shipped software. These issues are potentially exploitable, allowing
 for remote code execution. We would also like to thank Abhishek
 for reporting two additional use-after-free flaws introduced
 during Firefox 16 development and fixed before general release
 (CVE-2012-3995, CVE-2012-4179, CVE-2012-4180, CVE-2012-4181,
 CVE-2012-4182, CVE-2012-4183).
 
 Security researcher Atte Kettunen from OUSPG reported several heap
 memory corruption issues found using the Address Sanitizer tool. These
 issues are potentially exploitable, allowing for remote code execution
 (CVE-2012-4185, CVE-2012-4186, CVE-2012-4187, CVE-2012-4188).
 
 Security researcher miaubiz used the Address Sanitizer tool to discover
 a use-after-free in the IME State Manager code. This could lead to
 a potentially exploitable crash (CVE-2012-3990).
 
 The mozilla firefox packages has been upgraded to the latest version
 which is unaffected by these security flaws.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3982
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3986
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3988
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3991
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3994
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3993
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4184
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3992
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3995
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4179
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4180
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4181
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4182
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4183
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4185
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4186
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4187
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4188
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3990
 http://www.mozilla.org/security/announce/2012/mfsa2012-74.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-77.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-79.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-81.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-82.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-83.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-84.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-85.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-86.html
 http://www.mozilla.org/security/announce/2012/mfsa2012-87.html
 _______________________________________________________________________

 Updated Packages:

 Mandriva Enterprise Server 5:
 18b4958fa1973f702cbed84b9f20159c  mes5/i586/firefox-10.0.8-0.1mdvmes5.2.i586.rpm
 2647f6b7ad8f48070a427583916ad32a  mes5/i586/firefox-af-10.0.8-0.1mdvmes5.2.i586.rpm
 f4b347adeb27ed23b86d5db6a206a3af  mes5/i586/firefox-ar-10.0.8-0.1mdvmes5.2.i586.rpm
 586df4b276be9436d53ef9fbd5fa5ed5  mes5/i586/firefox-be-10.0.8-0.1mdvmes5.2.i586.rpm
 626cbcf39f47055c0699ec84788818e3  mes5/i586/firefox-bg-10.0.8-0.1mdvmes5.2.i586.rpm
 0daca37b722b654b84d991d607edd450  mes5/i586/firefox-bn-10.0.8-0.1mdvmes5.2.i586.rpm
 dc8815fb6be57e3dcc1d4b9882835d9b  mes5/i586/firefox-ca-10.0.8-0.1mdvmes5.2.i586.rpm
 f1aed3384b2496bf7db1dc1ed93dbf39  mes5/i586/firefox-cs-10.0.8-0.1mdvmes5.2.i586.rpm
 424f954bd6cf5201bc18a8c14d891964  mes5/i586/firefox-cy-10.0.8-0.1mdvmes5.2.i586.rpm
 e404fd8b2e77ddfc3e0cec73ce66558b  mes5/i586/firefox-da-10.0.8-0.1mdvmes5.2.i586.rpm
 d6df89a166f04e7f0d8d5092caeb416e  mes5/i586/firefox-de-10.0.8-0.1mdvmes5.2.i586.rpm
 564cc55029db0f3abd6477b784d545be  mes5/i586/firefox-devel-10.0.8-0.1mdvmes5.2.i586.rpm
 93ab5d7347369e61ccacfe39430127d9  mes5/i586/firefox-el-10.0.8-0.1mdvmes5.2.i586.rpm
 26045064a52588b84caeea6630b40ea6  mes5/i586/firefox-en_GB-10.0.8-0.1mdvmes5.2.i586.rpm
 911d31127d57ed6fc43e1c997d4e012f  mes5/i586/firefox-eo-10.0.8-0.1mdvmes5.2.i586.rpm
 247336e3fa7a13b944d7b97dc00ec234  mes5/i586/firefox-es_AR-10.0.8-0.1mdvmes5.2.i586.rpm
 df718458acb2846aa3e4c2db500d61b5  mes5/i586/firefox-es_ES-10.0.8-0.1mdvmes5.2.i586.rpm
 fb300c3216dfbc1de89374965cfc32a6  mes5/i586/firefox-et-10.0.8-0.1mdvmes5.2.i586.rpm
 51f9c5d47f6f88b4ebf1abf565de599b  mes5/i586/firefox-eu-10.0.8-0.1mdvmes5.2.i586.rpm
 16b2ade910ccc3a0d5b7fff3c714b9e0  mes5/i586/firefox-fi-10.0.8-0.1mdvmes5.2.i586.rpm
 53ccc7e83d96fd9c93de5c3c604f6bb0  mes5/i586/firefox-fr-10.0.8-0.1mdvmes5.2.i586.rpm
 f5a90820225a51076c77ee3b42696e47  mes5/i586/firefox-fy-10.0.8-0.1mdvmes5.2.i586.rpm
 bef5299da948e97be351deafe721370e  mes5/i586/firefox-ga_IE-10.0.8-0.1mdvmes5.2.i586.rpm
 5438439ac7afa1a625700d6eff790acb  mes5/i586/firefox-gl-10.0.8-0.1mdvmes5.2.i586.rpm
 7a75e4a2f2d496a435f3d264cf3302ab  mes5/i586/firefox-gu_IN-10.0.8-0.1mdvmes5.2.i586.rpm
 c54843a324535ae7de0af6b5432448a0  mes5/i586/firefox-he-10.0.8-0.1mdvmes5.2.i586.rpm
 22dad8f088aa2790db88c7cdcd6c17e3  mes5/i586/firefox-hi-10.0.8-0.1mdvmes5.2.i586.rpm
 71b0341b69f1ba7b062df4b8831b07cf  mes5/i586/firefox-hu-10.0.8-0.1mdvmes5.2.i586.rpm
 54a578b6c9bdffac785c42e2fcbe0752  mes5/i586/firefox-id-10.0.8-0.1mdvmes5.2.i586.rpm
 c7bac88f81d74a3e6bb84d6e53530114  mes5/i586/firefox-is-10.0.8-0.1mdvmes5.2.i586.rpm
 6b0a05fe207de1cb70ede2bdc08a4fe6  mes5/i586/firefox-it-10.0.8-0.1mdvmes5.2.i586.rpm
 2a5f7c384e6e8b604960e371ecc0994d  mes5/i586/firefox-ja-10.0.8-0.1mdvmes5.2.i586.rpm
 c1a4d25f413532867f88ce512d8518cf  mes5/i586/firefox-ka-10.0.8-0.1mdvmes5.2.i586.rpm
 92cb841c8a4ff36d466486529e52e9b0  mes5/i586/firefox-kn-10.0.8-0.1mdvmes5.2.i586.rpm
 7e7e48d65c67e701fe7e9520cef5b879  mes5/i586/firefox-ko-10.0.8-0.1mdvmes5.2.i586.rpm
 00e266a86115a996be3729110f2c55fb  mes5/i586/firefox-ku-10.0.8-0.1mdvmes5.2.i586.rpm
 8204ae0e260820b38ab41512040e74e9  mes5/i586/firefox-lt-10.0.8-0.1mdvmes5.2.i586.rpm
 277e5bcebb58210f58eca0260c9f0d7d  mes5/i586/firefox-lv-10.0.8-0.1mdvmes5.2.i586.rpm
 e8875c4546bbc9ea23412bfb6d0d6d05  mes5/i586/firefox-mk-10.0.8-0.1mdvmes5.2.i586.rpm
 b4dc97b4578e0f5867d5e1d631a6935f  mes5/i586/firefox-mr-10.0.8-0.1mdvmes5.2.i586.rpm
 a908016d1d790cc3730de8dd43d752df  mes5/i586/firefox-nb_NO-10.0.8-0.1mdvmes5.2.i586.rpm
 3db355e81b5d5a08cf40fec9516095dc  mes5/i586/firefox-nl-10.0.8-0.1mdvmes5.2.i586.rpm
 f4b80bc1df63cc65600374da4d725b97  mes5/i586/firefox-nn_NO-10.0.8-0.1mdvmes5.2.i586.rpm
 73a717cb9578ddf6da09419dcfd9b93e  mes5/i586/firefox-oc-10.0.8-0.1mdvmes5.2.i586.rpm
 570422becfa4a851c6e95040f2a5779b  mes5/i586/firefox-pa_IN-10.0.8-0.1mdvmes5.2.i586.rpm
 f8c0bdc02309778de67ca878d60a557d  mes5/i586/firefox-pl-10.0.8-0.1mdvmes5.2.i586.rpm
 077f52791e93c41ba5db8353dd37dfe6  mes5/i586/firefox-pt_BR-10.0.8-0.1mdvmes5.2.i586.rpm
 e68c00ba970f2a3eb07eae58a90d1513  mes5/i586/firefox-pt_PT-10.0.8-0.1mdvmes5.2.i586.rpm
 3b72179b06cb64f42658dee91eaf8340  mes5/i586/firefox-ro-10.0.8-0.1mdvmes5.2.i586.rpm
 c9aa2ea8cc85c88f7e5e56e249c7e7a6  mes5/i586/firefox-ru-10.0.8-0.1mdvmes5.2.i586.rpm
 fab410d8b6655dcdfe01deab8b67a64f  mes5/i586/firefox-si-10.0.8-0.1mdvmes5.2.i586.rpm
 eb46c19ebc307ccce7e91e4d2f3c133b  mes5/i586/firefox-sk-10.0.8-0.1mdvmes5.2.i586.rpm
 18001364ee5341328bb68a49cce08b95  mes5/i586/firefox-sl-10.0.8-0.1mdvmes5.2.i586.rpm
 ff85462fd1eb970303b0eeeaf063157f  mes5/i586/firefox-sq-10.0.8-0.1mdvmes5.2.i586.rpm
 c3b247291050d5ca28693e42a95a467e  mes5/i586/firefox-sr-10.0.8-0.1mdvmes5.2.i586.rpm
 2df9b8518aa5189d18bc67f781e2583b  mes5/i586/firefox-sv_SE-10.0.8-0.1mdvmes5.2.i586.rpm
 84774cda3b0c0f6c9f761c4e7798c980  mes5/i586/firefox-te-10.0.8-0.1mdvmes5.2.i586.rpm
 523a30b0824d0fa8549c28099a398aa9  mes5/i586/firefox-th-10.0.8-0.1mdvmes5.2.i586.rpm
 85cf36694236dc9812c642e6835968de  mes5/i586/firefox-tr-10.0.8-0.1mdvmes5.2.i586.rpm
 57b2c12673884904e041d881d7013f82  mes5/i586/firefox-uk-10.0.8-0.1mdvmes5.2.i586.rpm
 4723206853faa1d6eee539649665d213  mes5/i586/firefox-zh_CN-10.0.8-0.1mdvmes5.2.i586.rpm
 bcdc27fcc1ebdfa52c6ff340b35198b8  mes5/i586/firefox-zh_TW-10.0.8-0.1mdvmes5.2.i586.rpm
 a90b6acf7e9ae7cb41cd9f0e8f65a35f  mes5/i586/libxulrunner10.0.8-10.0.8-0.1mdvmes5.2.i586.rpm
 cf53e5f6eb711b41791ca45834d8409f  mes5/i586/libxulrunner-devel-10.0.8-0.1mdvmes5.2.i586.rpm
 b8ffef485233d97bdb77f18f022aa9e8  mes5/i586/xulrunner-10.0.8-0.1mdvmes5.2.i586.rpm 
 6b5849f56718fddb19c22391919c6caf  mes5/SRPMS/firefox-10.0.8-0.1mdvmes5.2.src.rpm
 5f9f856717ec26737700be8ac851b2aa  mes5/SRPMS/firefox-l10n-10.0.8-0.1mdvmes5.2.src.rpm
 849d8b54de62cd1716ceeef8c36ee0e7  mes5/SRPMS/xulrunner-10.0.8-0.1mdvmes5.2.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 0883a9f9de1db56f55296d7b8905c3d9  mes5/x86_64/firefox-10.0.8-0.1mdvmes5.2.x86_64.rpm
 728177ae72a24b5631edae618bf1f29d  mes5/x86_64/firefox-af-10.0.8-0.1mdvmes5.2.x86_64.rpm
 80d65f878a19d6af07ea2090c78fb609  mes5/x86_64/firefox-ar-10.0.8-0.1mdvmes5.2.x86_64.rpm
 8f55497903c4db05888415acc1aba830  mes5/x86_64/firefox-be-10.0.8-0.1mdvmes5.2.x86_64.rpm
 3eece7dc190cfbf26514b7216afa81b8  mes5/x86_64/firefox-bg-10.0.8-0.1mdvmes5.2.x86_64.rpm
 c3d70e1661ea6532013d94b7a8ae5b33  mes5/x86_64/firefox-bn-10.0.8-0.1mdvmes5.2.x86_64.rpm
 de69ce78464063544a83d21bd58ad349  mes5/x86_64/firefox-ca-10.0.8-0.1mdvmes5.2.x86_64.rpm
 6980ac75c0e8a332401cbe65053c4bb3  mes5/x86_64/firefox-cs-10.0.8-0.1mdvmes5.2.x86_64.rpm
 0904a7326bb39230f441bbed04bb04a0  mes5/x86_64/firefox-cy-10.0.8-0.1mdvmes5.2.x86_64.rpm
 e6443a05c458defa2dd5615a7efe58c3  mes5/x86_64/firefox-da-10.0.8-0.1mdvmes5.2.x86_64.rpm
 aa6c761b14752eb1e77199cd6e4f4db7  mes5/x86_64/firefox-de-10.0.8-0.1mdvmes5.2.x86_64.rpm
 a86aa716be097d55f0b377729d03e2d1  mes5/x86_64/firefox-devel-10.0.8-0.1mdvmes5.2.x86_64.rpm
 5b57f19ff04195a6ed7db74d4d4b0c97  mes5/x86_64/firefox-el-10.0.8-0.1mdvmes5.2.x86_64.rpm
 c52cbbbb3dce82117db33db89a25b7e3  mes5/x86_64/firefox-en_GB-10.0.8-0.1mdvmes5.2.x86_64.rpm
 fbfe8900e210c473f6f2a012ef939c96  mes5/x86_64/firefox-eo-10.0.8-0.1mdvmes5.2.x86_64.rpm
 561ae14e68dbaec1d0c156c8006fefec  mes5/x86_64/firefox-es_AR-10.0.8-0.1mdvmes5.2.x86_64.rpm
 cb295d044f7c33152fc6acf6dbef0f20  mes5/x86_64/firefox-es_ES-10.0.8-0.1mdvmes5.2.x86_64.rpm
 070c54ec44bdd92ce15e0dd4a8f8d632  mes5/x86_64/firefox-et-10.0.8-0.1mdvmes5.2.x86_64.rpm
 0bbeb506fa06563d4342b961a94e46dd  mes5/x86_64/firefox-eu-10.0.8-0.1mdvmes5.2.x86_64.rpm
 ba9089fae63396324c43e1e39735c01a  mes5/x86_64/firefox-fi-10.0.8-0.1mdvmes5.2.x86_64.rpm
 1460f5530b00b2885cccf72a823c5a46  mes5/x86_64/firefox-fr-10.0.8-0.1mdvmes5.2.x86_64.rpm
 ad94002972b598af90e58aba84f70855  mes5/x86_64/firefox-fy-10.0.8-0.1mdvmes5.2.x86_64.rpm
 cdbc3d8e32ec144db1812f5a2aeab5bb  mes5/x86_64/firefox-ga_IE-10.0.8-0.1mdvmes5.2.x86_64.rpm
 056b5b3b7a8cacc319041c0012e7ad4b  mes5/x86_64/firefox-gl-10.0.8-0.1mdvmes5.2.x86_64.rpm
 cf0d943ecfdcd674f92c1395a28a5cbe  mes5/x86_64/firefox-gu_IN-10.0.8-0.1mdvmes5.2.x86_64.rpm
 2ca267ddb695bef714352bb0e57feb27  mes5/x86_64/firefox-he-10.0.8-0.1mdvmes5.2.x86_64.rpm
 e016aa204927dfa1011ea450a5e4feaa  mes5/x86_64/firefox-hi-10.0.8-0.1mdvmes5.2.x86_64.rpm
 551681f2abc572eaa256f64237f7c677  mes5/x86_64/firefox-hu-10.0.8-0.1mdvmes5.2.x86_64.rpm
 245f7b0a90d9fe5dd9b0c706cda6eb2f  mes5/x86_64/firefox-id-10.0.8-0.1mdvmes5.2.x86_64.rpm
 77bf660ff93973d6090be707d4e09b28  mes5/x86_64/firefox-is-10.0.8-0.1mdvmes5.2.x86_64.rpm
 150bdd42557bcbdf7022d13976d38b35  mes5/x86_64/firefox-it-10.0.8-0.1mdvmes5.2.x86_64.rpm
 517e28cc738785c4402f4d0afe7203a9  mes5/x86_64/firefox-ja-10.0.8-0.1mdvmes5.2.x86_64.rpm
 6438f7ba42be63c5efc9d0e1e8bde089  mes5/x86_64/firefox-ka-10.0.8-0.1mdvmes5.2.x86_64.rpm
 795974bc965caaba283f8e78d3722f41  mes5/x86_64/firefox-kn-10.0.8-0.1mdvmes5.2.x86_64.rpm
 0b1186e2a195bcd9074031c4bbce79f4  mes5/x86_64/firefox-ko-10.0.8-0.1mdvmes5.2.x86_64.rpm
 fd371a84eddf0bd6a11b9229304967cd  mes5/x86_64/firefox-ku-10.0.8-0.1mdvmes5.2.x86_64.rpm
 4865d702388379da81085e5ba1f5fd5a  mes5/x86_64/firefox-lt-10.0.8-0.1mdvmes5.2.x86_64.rpm
 57f79f47919b7cae7180a43d809944f6  mes5/x86_64/firefox-lv-10.0.8-0.1mdvmes5.2.x86_64.rpm
 d4ce166e82f27b41846f2a3404bd407b  mes5/x86_64/firefox-mk-10.0.8-0.1mdvmes5.2.x86_64.rpm
 357082d898ae70e8d2abec9da7f6d3ec  mes5/x86_64/firefox-mr-10.0.8-0.1mdvmes5.2.x86_64.rpm
 0e61d6a2f26dd11fc3c531e044a21402  mes5/x86_64/firefox-nb_NO-10.0.8-0.1mdvmes5.2.x86_64.rpm
 5c39340673283f52a2c268207a221fa4  mes5/x86_64/firefox-nl-10.0.8-0.1mdvmes5.2.x86_64.rpm
 e8989e4b71f9e761db1a5eb2ab5ba772  mes5/x86_64/firefox-nn_NO-10.0.8-0.1mdvmes5.2.x86_64.rpm
 0cdf48db846c7744e37cedc1b562806d  mes5/x86_64/firefox-oc-10.0.8-0.1mdvmes5.2.x86_64.rpm
 96da7ef1509716a8ecd89398de5c7cc8  mes5/x86_64/firefox-pa_IN-10.0.8-0.1mdvmes5.2.x86_64.rpm
 ba8ee24d071fb52cea5c1b2a550aa70b  mes5/x86_64/firefox-pl-10.0.8-0.1mdvmes5.2.x86_64.rpm
 e692fc3231c443faf2e17f79333b735c  mes5/x86_64/firefox-pt_BR-10.0.8-0.1mdvmes5.2.x86_64.rpm
 afa8d2ee0e1af4f066a48fc39149110e  mes5/x86_64/firefox-pt_PT-10.0.8-0.1mdvmes5.2.x86_64.rpm
 f4ad6008159c2927efe3b19fd4512315  mes5/x86_64/firefox-ro-10.0.8-0.1mdvmes5.2.x86_64.rpm
 54d3c7b448c3c25ab861873d936987b7  mes5/x86_64/firefox-ru-10.0.8-0.1mdvmes5.2.x86_64.rpm
 c905a26289fb94cc2dafb606f57f890e  mes5/x86_64/firefox-si-10.0.8-0.1mdvmes5.2.x86_64.rpm
 32d9b6865b5b6d558ab97b36d8719d45  mes5/x86_64/firefox-sk-10.0.8-0.1mdvmes5.2.x86_64.rpm
 232ad0abe4270616befb65f0b2004482  mes5/x86_64/firefox-sl-10.0.8-0.1mdvmes5.2.x86_64.rpm
 8ea61f2759c003713f2b9e504260d981  mes5/x86_64/firefox-sq-10.0.8-0.1mdvmes5.2.x86_64.rpm
 8f4fdbd663bd27c4d5ab42411347a4a4  mes5/x86_64/firefox-sr-10.0.8-0.1mdvmes5.2.x86_64.rpm
 f83702a0a59009633d10251c19c3d926  mes5/x86_64/firefox-sv_SE-10.0.8-0.1mdvmes5.2.x86_64.rpm
 3805edda674577f2e609f889ec57068b  mes5/x86_64/firefox-te-10.0.8-0.1mdvmes5.2.x86_64.rpm
 981974d5861ece6999832b94026288b5  mes5/x86_64/firefox-th-10.0.8-0.1mdvmes5.2.x86_64.rpm
 799e5c4479f9e4078395f17255c9d395  mes5/x86_64/firefox-tr-10.0.8-0.1mdvmes5.2.x86_64.rpm
 4ddfcf42ff77710b44ad927c8e165a04  mes5/x86_64/firefox-uk-10.0.8-0.1mdvmes5.2.x86_64.rpm
 e9873026b2a5731c3f02e3bd6207cc61  mes5/x86_64/firefox-zh_CN-10.0.8-0.1mdvmes5.2.x86_64.rpm
 4e80e8eae6e165bd3b9de77f56355e18  mes5/x86_64/firefox-zh_TW-10.0.8-0.1mdvmes5.2.x86_64.rpm
 7399b9d40787e878941d927b2099cfd4  mes5/x86_64/lib64xulrunner10.0.8-10.0.8-0.1mdvmes5.2.x86_64.rpm
 350953ef50ace31a4bdf0aac88ef26f9  mes5/x86_64/lib64xulrunner-devel-10.0.8-0.1mdvmes5.2.x86_64.rpm
 3b728cc723a0d37366f7efb1055f68a1  mes5/x86_64/xulrunner-10.0.8-0.1mdvmes5.2.x86_64.rpm 
 6b5849f56718fddb19c22391919c6caf  mes5/SRPMS/firefox-10.0.8-0.1mdvmes5.2.src.rpm
 5f9f856717ec26737700be8ac851b2aa  mes5/SRPMS/firefox-l10n-10.0.8-0.1mdvmes5.2.src.rpm
 849d8b54de62cd1716ceeef8c36ee0e7  mes5/SRPMS/xulrunner-10.0.8-0.1mdvmes5.2.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFQdp/zmqjQ0CJFipgRAoLvAJ418KmxlFghV0dHucmHAinnbYB7+wCg43rk
+dRrxPXJ7+lTD3pZcdL5gu0=
=dLD8
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists