Message-Id: <E1N6D3Y-0000EI-7l@titan.mandriva.com>
Date: Fri, 06 Nov 2009 01:52:00 +0100
From: security@...driva.com
To: bugtraq@...urityfocus.com
Subject: [ MDVSA-2009:294 ] firefox


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2009:294
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : firefox
 Date    : November 5, 2009
 Affected: 2010.0
 _______________________________________________________________________

 Problem Description:

 Security issues were identified and fixed in firefox 3.5.x:
 
 Security researcher Alin Rad Pop of Secunia Research reported a
 heap-based buffer overflow in Mozilla's string to floating point
 number conversion routines. Using this vulnerability an attacker
 could craft some malicious JavaScript code containing a very long
 string to be converted to a floating point number which would result
 in improper memory allocation and the execution of an arbitrary memory
 location. This vulnerability could thus be leveraged by the attacker
 to run arbitrary code on a victim's computer (CVE-2009-1563).
 
 Security researcher Jeremy Brown reported that the file naming scheme
 used for downloading a file which already exists in the downloads
 folder is predictable. If an attacker had local access to a victim's
 computer and knew the name of a file the victim intended to open
 through the Download Manager, he could use this vulnerability to
 place a malicious file in the world-writable directory used to save
 temporary downloaded files and cause the browser to choose the
 incorrect file when opening it. Since this attack requires local
 access to the victim's machine, the severity of this vulnerability
 was determined to be low (CVE-2009-3274).
 
 Security researcher Paul Stone reported that a user's form history,
 both from web content as well as the smart location bar, was vulnerable
 to theft. A malicious web page could synthesize events such as mouse
 focus and key presses on behalf of the victim and trick the browser
 into auto-filling the form fields with history entries and then
 reading the entries (CVE-2009-3370).
 
 Security researcher Orlando Berrera of Sec Theory reported that
 recursive creation of JavaScript web-workers can be used to create a
 set of objects whose memory could be freed prior to their use. These
 conditions often result in a crash which could potentially be
 used by an attacker to run arbitrary code on a victim's computer
 (CVE-2009-3371).
 
 Security researcher Marco C. reported a flaw in the parsing of regular
 expressions used in Proxy Auto-configuration (PAC) files. In certain
 cases this flaw could be used by an attacker to crash a victim's
 browser and run arbitrary code on their computer. Since this
 vulnerability requires the victim to have PAC configured in their
 environment with specific regular expresssions which can trigger
 the crash, the severity of the issue was determined to be moderate
 (CVE-2009-3372).
 
 Security research firm iDefense reported that researcher regenrecht
 discovered a heap-based buffer overflow in Mozilla's GIF image
 parser. This vulnerability could potentially be used by an attacker
 to crash a victim's browser and run arbitrary code on their computer
 (CVE-2009-3373).
 
 Mozilla security researcher moz_bug_r_a4 reported that the XPCOM
 utility XPCVariant::VariantDataToJS unwrapped doubly-wrapped objects
 before returning them to chrome callers. This could result in chrome
 privileged code calling methods on an object which had previously been
 created or modified by web content, potentially executing malicious
 JavaScript code with chrome privileges (CVE-2009-3374).
 
 Security researcher Gregory Fleischer reported that text within a
 selection on a web page can be read by JavaScript in a different domain
 using the document.getSelection function, violating the same-origin
 policy. Since this vulnerability requires user interaction to exploit,
 its severity was determined to be moderate (CVE-2009-3375).
 
 Mozilla security researchers Jesse Ruderman and Sid Stamm reported
 that when downloading a file containing a right-to-left override
 character (RTL) in the filename, the name displayed in the dialog
 title bar conflicts with the name of the file shown in the dialog
 body. An attacker could use this vulnerability to obfuscate the name
 and file extension of a file to be downloaded and opened, potentially
 causing a user to run an executable file when they expected to open
 a non-executable file (CVE-2009-3376).
 
 Mozilla upgraded several third party libraries used in media rendering
 to address multiple memory safety and stability bugs identified by
 members of the Mozilla community. Some of the bugs discovered could
 potentially be used by an attacker to crash a victim's browser and
 execute arbitrary code on their computer. liboggz, libvorbis, and
 liboggplay were all upgraded to address these issues (CVE-2009-3377,
 CVE-2009-3379, CVE-2009-3378).
 
 Mozilla developers and community members identified and fixed
 several stability bugs in the browser engine used in Firefox and
 other Mozilla-based products. Some of these crashes showed evidence
 of memory corruption under certain circumstances and we presume that
 with enough effort at least some of these could be exploited to run
 arbitrary code (CVE-2009-3380).
 
 Additionally, some packages which require so, have been rebuilt and
 are being provided as updates.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1563
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3274
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3370
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3371
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3372
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3373
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3374
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3375
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3377
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3378
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3379
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3380
 http://www.mozilla.org/security/known-vulnerabilities/firefox35.html#firefox3.5.4
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2010.0:
 5de02057b925d2a7540fb7e1ef7bb58e  2010.0/i586/beagle-0.3.9-19.1mdv2010.0.i586.rpm
 865eb64b3d9edb5058b2cd6091a76b26  2010.0/i586/beagle-crawl-system-0.3.9-19.1mdv2010.0.i586.rpm
 80d4b43e92ab00663080cb3d03c01d08  2010.0/i586/beagle-doc-0.3.9-19.1mdv2010.0.i586.rpm
 fcd585d9f9f626053a08426aac2461ef  2010.0/i586/beagle-evolution-0.3.9-19.1mdv2010.0.i586.rpm
 a2449685a7248fbce0c362579a394078  2010.0/i586/beagle-gui-0.3.9-19.1mdv2010.0.i586.rpm
 2ca9f8a2bfeb574803bf9f599cef94da  2010.0/i586/beagle-gui-qt-0.3.9-19.1mdv2010.0.i586.rpm
 9fc8164351344251674264408e320cdc  2010.0/i586/beagle-libs-0.3.9-19.1mdv2010.0.i586.rpm
 c97703819ed2d81d61ce462b8387a8e3  2010.0/i586/epiphany-2.28.1-1.1mdv2010.0.i586.rpm
 65352aeee9a6611e1aaa2507aee6310f  2010.0/i586/epiphany-devel-2.28.1-1.1mdv2010.0.i586.rpm
 56e6935dd870279da4835c62e82e9824  2010.0/i586/epiphany-extensions-2.28.1-1.1mdv2010.0.i586.rpm
 636599b8e9ff5d069579f44db228bf53  2010.0/i586/firefox-3.5.4-0.1mdv2010.0.i586.rpm
 669ef8146179d7c082d305084cfd2821  2010.0/i586/firefox-af-3.5.4-0.1mdv2010.0.i586.rpm
 7e02a83877cd5783e64fe9647c5127cc  2010.0/i586/firefox-ar-3.5.4-0.1mdv2010.0.i586.rpm
 73ec239fbaf304b8bc82827457249939  2010.0/i586/firefox-be-3.5.4-0.1mdv2010.0.i586.rpm
 ead410c9f6e3f6377ce6de3bbda32bf1  2010.0/i586/firefox-bg-3.5.4-0.1mdv2010.0.i586.rpm
 32a3eaaf1beba37607c64f41f18bcbc3  2010.0/i586/firefox-bn-3.5.4-0.1mdv2010.0.i586.rpm
 2d5ee5d61e5cb6cd33a136a94499d222  2010.0/i586/firefox-ca-3.5.4-0.1mdv2010.0.i586.rpm
 e19a9e3564ccae55a454a1e69aa05568  2010.0/i586/firefox-cs-3.5.4-0.1mdv2010.0.i586.rpm
 ec525fa06852579aa7c487d707c82ae3  2010.0/i586/firefox-cy-3.5.4-0.1mdv2010.0.i586.rpm
 9d3c264145fc6779e460c3bc1e835eaf  2010.0/i586/firefox-da-3.5.4-0.1mdv2010.0.i586.rpm
 64e92b919e6b95a8767f918851e54caf  2010.0/i586/firefox-de-3.5.4-0.1mdv2010.0.i586.rpm
 20cecdc52af9590a5b45280527a6a703  2010.0/i586/firefox-devel-3.5.4-0.1mdv2010.0.i586.rpm
 e4ebb0fc55f84da2b523cfeed277f6fe  2010.0/i586/firefox-el-3.5.4-0.1mdv2010.0.i586.rpm
 bbee65d2c8c290254626c5a01136092b  2010.0/i586/firefox-en_GB-3.5.4-0.1mdv2010.0.i586.rpm
 0ed0007b43a472adaa9d15268ef0e22d  2010.0/i586/firefox-eo-3.5.4-0.1mdv2010.0.i586.rpm
 c2b311a8781b2decd7dbd1cbb8a0018f  2010.0/i586/firefox-es_AR-3.5.4-0.1mdv2010.0.i586.rpm
 5247e58309d1833229d509e044705fc5  2010.0/i586/firefox-es_ES-3.5.4-0.1mdv2010.0.i586.rpm
 a5dec68281f893658e5ac6695c8c4e59  2010.0/i586/firefox-et-3.5.4-0.1mdv2010.0.i586.rpm
 eb45f50d7c57ea62e63aba9c8df8cbb3  2010.0/i586/firefox-eu-3.5.4-0.1mdv2010.0.i586.rpm
 8b52f85f885db5d8bc80f62dee83bf1b  2010.0/i586/firefox-ext-beagle-0.3.9-19.1mdv2010.0.i586.rpm
 790b1ccafd787ce7ac8fb5ef022769d4  2010.0/i586/firefox-ext-blogrovr-1.1.804-6.1mdv2010.0.i586.rpm
 d6c45867a70152941b4e98709971a1ae  2010.0/i586/firefox-ext-foxmarks-2.7.2-2.1mdv2010.0.i586.rpm
 ffaf1990715b2667ad06d7d0da92c9a6  2010.0/i586/firefox-ext-mozvoikko-1.0-6.1mdv2010.0.i586.rpm
 51cfa5ee0b74ba1e1364dbb890f17059  2010.0/i586/firefox-ext-plasmanotify-0.3.0-6.1mdv2010.0.i586.rpm
 14184994a466647561caebf282868951  2010.0/i586/firefox-ext-r-kiosk-0.7.2-9.1mdv2010.0.i586.rpm
 05df49753c7be071e7fd30301f8e1e21  2010.0/i586/firefox-ext-scribefire-3.4.5-1.1mdv2010.0.i586.rpm
 8f7fa7986d9c2b782d239dbd5781477c  2010.0/i586/firefox-fi-3.5.4-0.1mdv2010.0.i586.rpm
 a2bcd0e119d154ba8e3e67894b2137d2  2010.0/i586/firefox-fr-3.5.4-0.1mdv2010.0.i586.rpm
 62bf45805a274ad09232a1c0d44e2a94  2010.0/i586/firefox-fy-3.5.4-0.1mdv2010.0.i586.rpm
 b01ad90d97640e1c99d8c6005f115d84  2010.0/i586/firefox-ga_IE-3.5.4-0.1mdv2010.0.i586.rpm
 34d7af747ccabd875dfcce48ad864fe9  2010.0/i586/firefox-gl-3.5.4-0.1mdv2010.0.i586.rpm
 008fc8b17095af333b493dae107cd71a  2010.0/i586/firefox-gu_IN-3.5.4-0.1mdv2010.0.i586.rpm
 087f2eda2fb46c58258a18a660868226  2010.0/i586/firefox-he-3.5.4-0.1mdv2010.0.i586.rpm
 ab0edfc6ffc3349bdc5a1a8c6aaa8b34  2010.0/i586/firefox-hi-3.5.4-0.1mdv2010.0.i586.rpm
 6fe05824fa866c0ee352d37c7bc346eb  2010.0/i586/firefox-hu-3.5.4-0.1mdv2010.0.i586.rpm
 bc1cd175b78a59bcdd6e55dffac9086f  2010.0/i586/firefox-id-3.5.4-0.1mdv2010.0.i586.rpm
 d45bffce0787f8d3afa52083ff63d4f9  2010.0/i586/firefox-is-3.5.4-0.1mdv2010.0.i586.rpm
 f6f9d47069c2a276c6ad234809fa6c13  2010.0/i586/firefox-it-3.5.4-0.1mdv2010.0.i586.rpm
 5fc95fca7b987a5996c4c74af61d0499  2010.0/i586/firefox-ja-3.5.4-0.1mdv2010.0.i586.rpm
 74911a09777dea47be4a69fd46700f15  2010.0/i586/firefox-ka-3.5.4-0.1mdv2010.0.i586.rpm
 0f7c75529ad3def515e546c3aa7e27e5  2010.0/i586/firefox-kn-3.5.4-0.1mdv2010.0.i586.rpm
 ae29bd59f6f93ef072ba3a2b08d63a89  2010.0/i586/firefox-ko-3.5.4-0.1mdv2010.0.i586.rpm
 468f7c938b7d771456e9b477653948ee  2010.0/i586/firefox-ku-3.5.4-0.1mdv2010.0.i586.rpm
 489d116d042bd5802f0068de9383c5d1  2010.0/i586/firefox-lt-3.5.4-0.1mdv2010.0.i586.rpm
 9be68106945017527a62c983031361e0  2010.0/i586/firefox-lv-3.5.4-0.1mdv2010.0.i586.rpm
 0f3175726b5d1994a37c7b035270e5d0  2010.0/i586/firefox-mk-3.5.4-0.1mdv2010.0.i586.rpm
 8b231f4d919586cf55990e026be6aecd  2010.0/i586/firefox-mn-3.5.4-0.1mdv2010.0.i586.rpm
 f981e93ff57a1e8472698ada26dd363f  2010.0/i586/firefox-mr-3.5.4-0.1mdv2010.0.i586.rpm
 8eadff91b007302e6ec3cdc2ec1241ba  2010.0/i586/firefox-nb_NO-3.5.4-0.1mdv2010.0.i586.rpm
 2841ff68c6d850220e4d8aaa062753a0  2010.0/i586/firefox-nl-3.5.4-0.1mdv2010.0.i586.rpm
 753237032819c85ab3b405bcf4082b5f  2010.0/i586/firefox-nn_NO-3.5.4-0.1mdv2010.0.i586.rpm
 193191bb1d7b43288584660f478d8b7b  2010.0/i586/firefox-oc-3.5.4-0.1mdv2010.0.i586.rpm
 408e98a77b5ad0a47dbf44f55dbd4077  2010.0/i586/firefox-pa_IN-3.5.4-0.1mdv2010.0.i586.rpm
 a782d15600b0466ab88c467ea7458721  2010.0/i586/firefox-pl-3.5.4-0.1mdv2010.0.i586.rpm
 52515a5f52bb6c46dca0b2003529a3e3  2010.0/i586/firefox-pt_BR-3.5.4-0.1mdv2010.0.i586.rpm
 81b6ce7fb332d0c32d4dcb1a60e43bea  2010.0/i586/firefox-pt_PT-3.5.4-0.1mdv2010.0.i586.rpm
 be670b306d4595c6095b04c86d2b4440  2010.0/i586/firefox-ro-3.5.4-0.1mdv2010.0.i586.rpm
 cfab5f72fc2f8985114fbe574b7e9ed3  2010.0/i586/firefox-ru-3.5.4-0.1mdv2010.0.i586.rpm
 3815771bf31f0df06d3c72a16c832273  2010.0/i586/firefox-si-3.5.4-0.1mdv2010.0.i586.rpm
 cdc811c47d76aa33712f24c93d40a0d7  2010.0/i586/firefox-sk-3.5.4-0.1mdv2010.0.i586.rpm
 862187e580b0a1b488b3dd924439f17b  2010.0/i586/firefox-sl-3.5.4-0.1mdv2010.0.i586.rpm
 f2cef85a6f4d9811e09b507026343190  2010.0/i586/firefox-sq-3.5.4-0.1mdv2010.0.i586.rpm
 99a3afc95764543f0ed81bfb89fc3231  2010.0/i586/firefox-sr-3.5.4-0.1mdv2010.0.i586.rpm
 a36788ab581f0a0e4b5ad679bb5b7106  2010.0/i586/firefox-sv_SE-3.5.4-0.1mdv2010.0.i586.rpm
 049a9e750fefc62ad61db53bf05ec6bd  2010.0/i586/firefox-te-3.5.4-0.1mdv2010.0.i586.rpm
 8d8ca3d39c424a56ef5b93d1e20dbde5  2010.0/i586/firefox-th-3.5.4-0.1mdv2010.0.i586.rpm
 7ee41c0c33da530f31fedd42f9534939  2010.0/i586/firefox-theme-kde4ff-0.14-18.1mdv2010.0.i586.rpm
 de5596d85162d52e2440e7e4f52b1b1c  2010.0/i586/firefox-tr-3.5.4-0.1mdv2010.0.i586.rpm
 902b0470dae73a54b7dc4406c76d91c9  2010.0/i586/firefox-uk-3.5.4-0.1mdv2010.0.i586.rpm
 33138d6a153bb4bcd0638255da2006a8  2010.0/i586/firefox-zh_CN-3.5.4-0.1mdv2010.0.i586.rpm
 acc67139d138e98d110c4aaa4ddbe8bb  2010.0/i586/firefox-zh_TW-3.5.4-0.1mdv2010.0.i586.rpm
 caee546f9710d7acdd6b816f951c5efd  2010.0/i586/gnome-python-extras-2.25.3-10.1mdv2010.0.i586.rpm
 53cc683aad8630f2052e4ebd965e5da2  2010.0/i586/gnome-python-gda-2.25.3-10.1mdv2010.0.i586.rpm
 55239ec23c37457cf9ef7744e9e311bc  2010.0/i586/gnome-python-gda-devel-2.25.3-10.1mdv2010.0.i586.rpm
 2c595010a046da1fa461c3e0cc6ad468  2010.0/i586/gnome-python-gdl-2.25.3-10.1mdv2010.0.i586.rpm
 7f4f7a400e54da7ea06baf5b8c12d399  2010.0/i586/gnome-python-gtkhtml2-2.25.3-10.1mdv2010.0.i586.rpm
 cba87f860c7a2bd9af64738e78f31b97  2010.0/i586/gnome-python-gtkmozembed-2.25.3-10.1mdv2010.0.i586.rpm
 3e12f0b123e58c0410c1bc9da1678ef6  2010.0/i586/gnome-python-gtkspell-2.25.3-10.1mdv2010.0.i586.rpm
 ed8ecee81e90e1b23924aca98960e67b  2010.0/i586/google-gadgets-common-0.11.1-2.1mdv2010.0.i586.rpm
 226f082af8f0dbc2b222e25b372fcfe4  2010.0/i586/google-gadgets-gtk-0.11.1-2.1mdv2010.0.i586.rpm
 e0e463fb97df0206a2ff3357e4f409d6  2010.0/i586/google-gadgets-qt-0.11.1-2.1mdv2010.0.i586.rpm
 0607442b0252c2f7ad89a88f407a1e18  2010.0/i586/libggadget1.0_0-0.11.1-2.1mdv2010.0.i586.rpm
 4c19a97a9d30ac6d6ed92c1914eb86a8  2010.0/i586/libggadget-dbus1.0_0-0.11.1-2.1mdv2010.0.i586.rpm
 308e97be73ba593653f207287f528702  2010.0/i586/libggadget-gtk1.0_0-0.11.1-2.1mdv2010.0.i586.rpm
 b1023ad523da8ba3d632367372052f5c  2010.0/i586/libggadget-js1.0_0-0.11.1-2.1mdv2010.0.i586.rpm
 fa694a3e378bd97ecae4fa8221e3ae45  2010.0/i586/libggadget-npapi1.0_0-0.11.1-2.1mdv2010.0.i586.rpm
 ec0a4dbf8e68baa45433ba293cff9fa7  2010.0/i586/libggadget-qt1.0_0-0.11.1-2.1mdv2010.0.i586.rpm
 4501a4d57a5eb5359c45271562845723  2010.0/i586/libggadget-webkitjs0-0.11.1-2.1mdv2010.0.i586.rpm
 5ecfe2a3534b50d08260dde62450cf18  2010.0/i586/libggadget-xdg1.0_0-0.11.1-2.1mdv2010.0.i586.rpm
 b0f8a03057d0409111366685dbb56a9c  2010.0/i586/libgoogle-gadgets-devel-0.11.1-2.1mdv2010.0.i586.rpm
 1ab5bc0b7b00823a5cdf815fac145245  2010.0/i586/libopensc2-0.11.9-1.1mdv2010.0.i586.rpm
 49dceab2ebd208914644be69f2915168  2010.0/i586/libopensc-devel-0.11.9-1.1mdv2010.0.i586.rpm
 43032aac7d930c8be3ad8547838b5da1  2010.0/i586/libxulrunner1.9.1.4-1.9.1.4-0.1mdv2010.0.i586.rpm
 e3fda1726c577c44abd17ed3e43aa37f  2010.0/i586/libxulrunner-devel-1.9.1.4-0.1mdv2010.0.i586.rpm
 5cb4ce59c5696e07d46a268b496ce1cc  2010.0/i586/mozilla-plugin-opensc-0.11.9-1.1mdv2010.0.i586.rpm
 404c94bb7ac9764b89986309b9e8b8b8  2010.0/i586/mozilla-thunderbird-beagle-0.3.9-19.1mdv2010.0.i586.rpm
 4695f41439abb22fff405ceea609718d  2010.0/i586/opensc-0.11.9-1.1mdv2010.0.i586.rpm
 769aea3fa1ecfe8fadc145f96595337f  2010.0/i586/python-xpcom-1.9.1.4-0.1mdv2010.0.i586.rpm
 d281a0a5bb6ee6989c3e6e5db9f5673c  2010.0/i586/xulrunner-1.9.1.4-0.1mdv2010.0.i586.rpm
 a4314cad9a7dbe6e98e3188c1af82c75  2010.0/i586/yelp-2.28.0-1.1mdv2010.0.i586.rpm 
 11002834e306ad2599e115787b57ece9  2010.0/SRPMS/beagle-0.3.9-19.1mdv2010.0.src.rpm
 f35067064a0c78edff8b036ca67774f3  2010.0/SRPMS/epiphany-2.28.1-1.1mdv2010.0.src.rpm
 bc04de1e6d7b2fd083a1206c4482fb7b  2010.0/SRPMS/epiphany-extensions-2.28.1-1.1mdv2010.0.src.rpm
 f0b0c517ec14c9d5e47647f9bf08fc78  2010.0/SRPMS/firefox-3.5.4-0.1mdv2010.0.src.rpm
 166554e926dcaab7ff2631817ee2b097  2010.0/SRPMS/firefox-ext-blogrovr-1.1.804-6.1mdv2010.0.src.rpm
 6432321af955bb76f1314dcf7598d4bd  2010.0/SRPMS/firefox-ext-foxmarks-2.7.2-2.1mdv2010.0.src.rpm
 0bfe93a46ccd200f974236740da44032  2010.0/SRPMS/firefox-ext-mozvoikko-1.0-6.1mdv2010.0.src.rpm
 912dabafc0eedd8374b77bf19863f8b4  2010.0/SRPMS/firefox-ext-plasmanotify-0.3.0-6.1mdv2010.0.src.rpm
 ef882f13ad9f95334e87b4e4d1d062c2  2010.0/SRPMS/firefox-ext-r-kiosk-0.7.2-9.1mdv2010.0.src.rpm
 8ecfa71225dd0500c8c4fdaaafe4fe22  2010.0/SRPMS/firefox-ext-scribefire-3.4.5-1.1mdv2010.0.src.rpm
 0df78b1b0f21b07d00706d72296490b3  2010.0/SRPMS/firefox-l10n-3.5.4-0.1mdv2010.0.src.rpm
 7a94ab5e7c21d73c1f8e074825fe93cd  2010.0/SRPMS/firefox-theme-kde4ff-0.14-18.1mdv2010.0.src.rpm
 a2906a74b07316a233c08eeaa09a827f  2010.0/SRPMS/gnome-python-extras-2.25.3-10.1mdv2010.0.src.rpm
 5ca44eee599e669d3936c2d8074dbdf1  2010.0/SRPMS/google-gadgets-0.11.1-2.1mdv2010.0.src.rpm
 3443a0354ae3c165243413cf2bd1a7dc  2010.0/SRPMS/opensc-0.11.9-1.1mdv2010.0.src.rpm
 e52f1e0b12809b71673467beef0e156f  2010.0/SRPMS/xulrunner-1.9.1.4-0.1mdv2010.0.src.rpm
 df7c1f2b4d6ee86a54319b934c717d39  2010.0/SRPMS/yelp-2.28.0-1.1mdv2010.0.src.rpm

 Mandriva Linux 2010.0/X86_64:
 c4dd2bea9eef7bf7147588a55983cc3c  2010.0/x86_64/beagle-0.3.9-19.1mdv2010.0.x86_64.rpm
 611d637f1939cee8b3f25ff045410bed  2010.0/x86_64/beagle-crawl-system-0.3.9-19.1mdv2010.0.x86_64.rpm
 a3937170bf9b478cf52c5007d3456669  2010.0/x86_64/beagle-doc-0.3.9-19.1mdv2010.0.x86_64.rpm
 97440e5e123b4034e1c4bd66c903951c  2010.0/x86_64/beagle-evolution-0.3.9-19.1mdv2010.0.x86_64.rpm
 c3cb89e9c55dd3d09ecea0a1c8dead17  2010.0/x86_64/beagle-gui-0.3.9-19.1mdv2010.0.x86_64.rpm
 77ce56c06f51ffbbb180bd150e6526a8  2010.0/x86_64/beagle-gui-qt-0.3.9-19.1mdv2010.0.x86_64.rpm
 a8a8c984d22cf423677eaa06bf721a3c  2010.0/x86_64/beagle-libs-0.3.9-19.1mdv2010.0.x86_64.rpm
 de42c43851ee3fad1e9dd523676b4413  2010.0/x86_64/epiphany-2.28.1-1.1mdv2010.0.x86_64.rpm
 c992d4f71691f9b827d8411b089268b1  2010.0/x86_64/epiphany-devel-2.28.1-1.1mdv2010.0.x86_64.rpm
 239b64d2fa822a62d37b41e075ed29b5  2010.0/x86_64/epiphany-extensions-2.28.1-1.1mdv2010.0.x86_64.rpm
 8b532a94bb920ae17b87b30cd990025e  2010.0/x86_64/firefox-3.5.4-0.1mdv2010.0.x86_64.rpm
 058b94a3752d94a93ff7edfe5c6287e1  2010.0/x86_64/firefox-af-3.5.4-0.1mdv2010.0.x86_64.rpm
 19d57df8172a8d58349aa4e833bb4807  2010.0/x86_64/firefox-ar-3.5.4-0.1mdv2010.0.x86_64.rpm
 478d8d6ea0aba868ca1b4d388623d2ca  2010.0/x86_64/firefox-be-3.5.4-0.1mdv2010.0.x86_64.rpm
 d948d2f95b9952e9ce6226f32c2d45ca  2010.0/x86_64/firefox-bg-3.5.4-0.1mdv2010.0.x86_64.rpm
 508acd7ca804e502d2f21c81cff71987  2010.0/x86_64/firefox-bn-3.5.4-0.1mdv2010.0.x86_64.rpm
 200100baa6a85324cb59a0b5c4034cf0  2010.0/x86_64/firefox-ca-3.5.4-0.1mdv2010.0.x86_64.rpm
 f351af7e6a2987804878564e2bdb517f  2010.0/x86_64/firefox-cs-3.5.4-0.1mdv2010.0.x86_64.rpm
 b886d5ad21bd4f259abce9c72ca74530  2010.0/x86_64/firefox-cy-3.5.4-0.1mdv2010.0.x86_64.rpm
 937529a9d48a8421eb37fcd2dacfbf63  2010.0/x86_64/firefox-da-3.5.4-0.1mdv2010.0.x86_64.rpm
 5041b8cd1267706e1c74019df7245ffa  2010.0/x86_64/firefox-de-3.5.4-0.1mdv2010.0.x86_64.rpm
 ddad78036a99f8aa644147c52d4ab30d  2010.0/x86_64/firefox-devel-3.5.4-0.1mdv2010.0.x86_64.rpm
 d077816f443afb553cded01108542a81  2010.0/x86_64/firefox-el-3.5.4-0.1mdv2010.0.x86_64.rpm
 e295f0e12e20e80dd6d4cd7845988961  2010.0/x86_64/firefox-en_GB-3.5.4-0.1mdv2010.0.x86_64.rpm
 851fb3fe10a91c799575c19b30432df7  2010.0/x86_64/firefox-eo-3.5.4-0.1mdv2010.0.x86_64.rpm
 06aa7ac8447680a7f67fd49731cb2912  2010.0/x86_64/firefox-es_AR-3.5.4-0.1mdv2010.0.x86_64.rpm
 1c7a9e0342f736f22a305a29b2b17ca8  2010.0/x86_64/firefox-es_ES-3.5.4-0.1mdv2010.0.x86_64.rpm
 b8aa7b12e4d28bf80dd88471e3882beb  2010.0/x86_64/firefox-et-3.5.4-0.1mdv2010.0.x86_64.rpm
 29dec4973342d83c122ff48e22dbec14  2010.0/x86_64/firefox-eu-3.5.4-0.1mdv2010.0.x86_64.rpm
 4c76579a01ff2ffa1162b0650b36912f  2010.0/x86_64/firefox-ext-beagle-0.3.9-19.1mdv2010.0.x86_64.rpm
 29334af2ff1b753040090a0b93a0bf91  2010.0/x86_64/firefox-ext-blogrovr-1.1.804-6.1mdv2010.0.x86_64.rpm
 e4edb4283f8c13288fdd85b36b6dcfc5  2010.0/x86_64/firefox-ext-foxmarks-2.7.2-2.1mdv2010.0.x86_64.rpm
 b2b7ba697f7bb1806c41485c39c04262  2010.0/x86_64/firefox-ext-mozvoikko-1.0-6.1mdv2010.0.x86_64.rpm
 7f8dbdf8ab09c3ac1a219043d7b2c241  2010.0/x86_64/firefox-ext-plasmanotify-0.3.0-6.1mdv2010.0.x86_64.rpm
 2a8cc514420eaf1375f306417ea264fa  2010.0/x86_64/firefox-ext-r-kiosk-0.7.2-9.1mdv2010.0.x86_64.rpm
 dca7f6aede51ca5fe6913144d3ded0aa  2010.0/x86_64/firefox-ext-scribefire-3.4.5-1.1mdv2010.0.x86_64.rpm
 eb7527d596188d4b71e1f715c8909ae7  2010.0/x86_64/firefox-fi-3.5.4-0.1mdv2010.0.x86_64.rpm
 89bbfa9bb890007506f2adc9746a1995  2010.0/x86_64/firefox-fr-3.5.4-0.1mdv2010.0.x86_64.rpm
 b407524ae9d37866b31876ba7f33be96  2010.0/x86_64/firefox-fy-3.5.4-0.1mdv2010.0.x86_64.rpm
 d23825fd661749644c1ed2cc8f4cfd10  2010.0/x86_64/firefox-ga_IE-3.5.4-0.1mdv2010.0.x86_64.rpm
 cf8e596f053643a363b3e126dc8c11b3  2010.0/x86_64/firefox-gl-3.5.4-0.1mdv2010.0.x86_64.rpm
 04ee9bcb1f384c64638dfd7a91d4d5a7  2010.0/x86_64/firefox-gu_IN-3.5.4-0.1mdv2010.0.x86_64.rpm
 733afb9c93c3fc927dcdffe77f006537  2010.0/x86_64/firefox-he-3.5.4-0.1mdv2010.0.x86_64.rpm
 a9b8e240c8336ca0369d37d6f32ea468  2010.0/x86_64/firefox-hi-3.5.4-0.1mdv2010.0.x86_64.rpm
 3b5141d5592e0050822e1d09fb270c4d  2010.0/x86_64/firefox-hu-3.5.4-0.1mdv2010.0.x86_64.rpm
 71b9eaaca5847681a847a3bac4ef524f  2010.0/x86_64/firefox-id-3.5.4-0.1mdv2010.0.x86_64.rpm
 fe571af67b87fe2c1727967f556782bf  2010.0/x86_64/firefox-is-3.5.4-0.1mdv2010.0.x86_64.rpm
 0facab9a567c9dc25ae992d7dabd8ff4  2010.0/x86_64/firefox-it-3.5.4-0.1mdv2010.0.x86_64.rpm
 90ca903597fcf4dcabace089815be542  2010.0/x86_64/firefox-ja-3.5.4-0.1mdv2010.0.x86_64.rpm
 0503d174b8f8b5f3ccbd95ceea62ec49  2010.0/x86_64/firefox-ka-3.5.4-0.1mdv2010.0.x86_64.rpm
 1b296a68cd92389aad1dc8ae48e3eccd  2010.0/x86_64/firefox-kn-3.5.4-0.1mdv2010.0.x86_64.rpm
 60acc7bfc71ac9bed9c1e50f05a34e75  2010.0/x86_64/firefox-ko-3.5.4-0.1mdv2010.0.x86_64.rpm
 374cbbdb5f7ae83c1823fe4a83aade16  2010.0/x86_64/firefox-ku-3.5.4-0.1mdv2010.0.x86_64.rpm
 b20fd95c5c31ba12fbf1ed348aeb8e8e  2010.0/x86_64/firefox-lt-3.5.4-0.1mdv2010.0.x86_64.rpm
 34b732a363c4dc7ecd991d0951ad3aa6  2010.0/x86_64/firefox-lv-3.5.4-0.1mdv2010.0.x86_64.rpm
 16f9ef1afe6c2399d331b238cf8eb03f  2010.0/x86_64/firefox-mk-3.5.4-0.1mdv2010.0.x86_64.rpm
 c7f743f422e2409d222fa117ac291929  2010.0/x86_64/firefox-mn-3.5.4-0.1mdv2010.0.x86_64.rpm
 aa783ae7775d062c7358de7171da7994  2010.0/x86_64/firefox-mr-3.5.4-0.1mdv2010.0.x86_64.rpm
 71a0654691200f8d49d48a34687c7893  2010.0/x86_64/firefox-nb_NO-3.5.4-0.1mdv2010.0.x86_64.rpm
 8923eb8cff924e61e1d58a7f86ea82f4  2010.0/x86_64/firefox-nl-3.5.4-0.1mdv2010.0.x86_64.rpm
 ddabbf7813a196c86a9f12790f154530  2010.0/x86_64/firefox-nn_NO-3.5.4-0.1mdv2010.0.x86_64.rpm
 d51e459880c2cb8caebeed2f4b5f30a0  2010.0/x86_64/firefox-oc-3.5.4-0.1mdv2010.0.x86_64.rpm
 222288c908e4109cf20ebd1ba5051e2f  2010.0/x86_64/firefox-pa_IN-3.5.4-0.1mdv2010.0.x86_64.rpm
 343a3e700320b1e8b013875e1c963764  2010.0/x86_64/firefox-pl-3.5.4-0.1mdv2010.0.x86_64.rpm
 f4acf1e3094834b9e8b8730e5781e3d2  2010.0/x86_64/firefox-pt_BR-3.5.4-0.1mdv2010.0.x86_64.rpm
 7274cc1214199d7504210c8283df1343  2010.0/x86_64/firefox-pt_PT-3.5.4-0.1mdv2010.0.x86_64.rpm
 aa662296263be468521bf537557b21f0  2010.0/x86_64/firefox-ro-3.5.4-0.1mdv2010.0.x86_64.rpm
 716aca0c4ae31eb610117109497a444d  2010.0/x86_64/firefox-ru-3.5.4-0.1mdv2010.0.x86_64.rpm
 3ace8ea20d892d1dbed78dde6b6b94e9  2010.0/x86_64/firefox-si-3.5.4-0.1mdv2010.0.x86_64.rpm
 ade098bb6c3f1dd2f5b09b0af46d3551  2010.0/x86_64/firefox-sk-3.5.4-0.1mdv2010.0.x86_64.rpm
 23e1fbbc0f7ea19abe452732769d2ff5  2010.0/x86_64/firefox-sl-3.5.4-0.1mdv2010.0.x86_64.rpm
 026f1d875f1a6339c62851548cf1cfec  2010.0/x86_64/firefox-sq-3.5.4-0.1mdv2010.0.x86_64.rpm
 fdd0e6a5269d98828c5cf59115aa4e11  2010.0/x86_64/firefox-sr-3.5.4-0.1mdv2010.0.x86_64.rpm
 2da145818827001b2ea9fd31b68c3468  2010.0/x86_64/firefox-sv_SE-3.5.4-0.1mdv2010.0.x86_64.rpm
 a181ab420d1c61abb1ab7955588c15d3  2010.0/x86_64/firefox-te-3.5.4-0.1mdv2010.0.x86_64.rpm
 3710e05ba538afdbc3630173e384ea94  2010.0/x86_64/firefox-th-3.5.4-0.1mdv2010.0.x86_64.rpm
 6664e778689cfcd1eceee54649ee1f31  2010.0/x86_64/firefox-theme-kde4ff-0.14-18.1mdv2010.0.x86_64.rpm
 11c6c1317bebd5ac10a1853314d8ba27  2010.0/x86_64/firefox-tr-3.5.4-0.1mdv2010.0.x86_64.rpm
 8735da4c6601294c20d447f89f4b6ec0  2010.0/x86_64/firefox-uk-3.5.4-0.1mdv2010.0.x86_64.rpm
 7f9f35ffddcf6e4bf7fb47217f165868  2010.0/x86_64/firefox-zh_CN-3.5.4-0.1mdv2010.0.x86_64.rpm
 6713f99874dab2be6f10fec329f3a410  2010.0/x86_64/firefox-zh_TW-3.5.4-0.1mdv2010.0.x86_64.rpm
 166fb912d4a695c78395710733dbfbca  2010.0/x86_64/gnome-python-extras-2.25.3-10.1mdv2010.0.x86_64.rpm
 e0fd9a9e8e769d42c9cde670ae2005c0  2010.0/x86_64/gnome-python-gda-2.25.3-10.1mdv2010.0.x86_64.rpm
 b4a0ee777d65a3d741df0e50b82a5cdc  2010.0/x86_64/gnome-python-gda-devel-2.25.3-10.1mdv2010.0.x86_64.rpm
 71879d0fea2955a10ee71996b82a5efa  2010.0/x86_64/gnome-python-gdl-2.25.3-10.1mdv2010.0.x86_64.rpm
 5390f476ecbc6b8054a599e2c5a5e790  2010.0/x86_64/gnome-python-gtkhtml2-2.25.3-10.1mdv2010.0.x86_64.rpm
 02acb94939d4bdba1672ac27b090249b  2010.0/x86_64/gnome-python-gtkmozembed-2.25.3-10.1mdv2010.0.x86_64.rpm
 fb9bee1736af40eb3d3d36cc8f547df9  2010.0/x86_64/gnome-python-gtkspell-2.25.3-10.1mdv2010.0.x86_64.rpm
 01b1b3087fedc71a407e026db5227fed  2010.0/x86_64/google-gadgets-common-0.11.1-2.1mdv2010.0.x86_64.rpm
 9e322a7219dff02f0fed2f73275cfda2  2010.0/x86_64/google-gadgets-gtk-0.11.1-2.1mdv2010.0.x86_64.rpm
 0ca671c0bb45f7efeedf0961ef5b9f72  2010.0/x86_64/google-gadgets-qt-0.11.1-2.1mdv2010.0.x86_64.rpm
 db35b9e0859a21485aa2df192e6310e6  2010.0/x86_64/lib64ggadget1.0_0-0.11.1-2.1mdv2010.0.x86_64.rpm
 d21d90fa2cfa5b3e67bb5c49228576b9  2010.0/x86_64/lib64ggadget-dbus1.0_0-0.11.1-2.1mdv2010.0.x86_64.rpm
 7763769602d65367ce3de258bf0ec443  2010.0/x86_64/lib64ggadget-gtk1.0_0-0.11.1-2.1mdv2010.0.x86_64.rpm
 0a897420820ab2e760a36ed593a91039  2010.0/x86_64/lib64ggadget-js1.0_0-0.11.1-2.1mdv2010.0.x86_64.rpm
 82fb87d482a21a8ab47706a1e24e9cde  2010.0/x86_64/lib64ggadget-npapi1.0_0-0.11.1-2.1mdv2010.0.x86_64.rpm
 5bfc44160006ec5837416d54fdf2c9cf  2010.0/x86_64/lib64ggadget-qt1.0_0-0.11.1-2.1mdv2010.0.x86_64.rpm
 e83c7f97c3048aeca5169110cc388271  2010.0/x86_64/lib64ggadget-webkitjs0-0.11.1-2.1mdv2010.0.x86_64.rpm
 a3427fbe231df6ef7622acbfe4b46059  2010.0/x86_64/lib64ggadget-xdg1.0_0-0.11.1-2.1mdv2010.0.x86_64.rpm
 d15f31cccac4e82d1626dc03d0b3ab1c  2010.0/x86_64/lib64google-gadgets-devel-0.11.1-2.1mdv2010.0.x86_64.rpm
 06e07653747492e8d1ef87e7a067b862  2010.0/x86_64/lib64opensc2-0.11.9-1.1mdv2010.0.x86_64.rpm
 f4c206bf5d1e2eade49831a79fe48264  2010.0/x86_64/lib64opensc-devel-0.11.9-1.1mdv2010.0.x86_64.rpm
 2a2fa2b4bf67b7005d1cf2422bc9309d  2010.0/x86_64/lib64xulrunner1.9.1.4-1.9.1.4-0.1mdv2010.0.x86_64.rpm
 dfa65c7153daab784fbde2c127d1e8df  2010.0/x86_64/lib64xulrunner-devel-1.9.1.4-0.1mdv2010.0.x86_64.rpm
 4c77c1bb1496ad76a5d24f0eb137c648  2010.0/x86_64/mozilla-plugin-opensc-0.11.9-1.1mdv2010.0.x86_64.rpm
 375f4f52a6140af70c43117bcb0406d5  2010.0/x86_64/mozilla-thunderbird-beagle-0.3.9-19.1mdv2010.0.x86_64.rpm
 fcd76aa20c9963cd269b0de026e937b2  2010.0/x86_64/opensc-0.11.9-1.1mdv2010.0.x86_64.rpm
 bb088a24b343e47ce8c6756e0a57c37c  2010.0/x86_64/python-xpcom-1.9.1.4-0.1mdv2010.0.x86_64.rpm
 9ba9eca2c96f0c1e6423dd6af5119f15  2010.0/x86_64/xulrunner-1.9.1.4-0.1mdv2010.0.x86_64.rpm
 a55b9b5568e7618430c07a878e146c50  2010.0/x86_64/yelp-2.28.0-1.1mdv2010.0.x86_64.rpm 
 11002834e306ad2599e115787b57ece9  2010.0/SRPMS/beagle-0.3.9-19.1mdv2010.0.src.rpm
 f35067064a0c78edff8b036ca67774f3  2010.0/SRPMS/epiphany-2.28.1-1.1mdv2010.0.src.rpm
 bc04de1e6d7b2fd083a1206c4482fb7b  2010.0/SRPMS/epiphany-extensions-2.28.1-1.1mdv2010.0.src.rpm
 f0b0c517ec14c9d5e47647f9bf08fc78  2010.0/SRPMS/firefox-3.5.4-0.1mdv2010.0.src.rpm
 166554e926dcaab7ff2631817ee2b097  2010.0/SRPMS/firefox-ext-blogrovr-1.1.804-6.1mdv2010.0.src.rpm
 6432321af955bb76f1314dcf7598d4bd  2010.0/SRPMS/firefox-ext-foxmarks-2.7.2-2.1mdv2010.0.src.rpm
 0bfe93a46ccd200f974236740da44032  2010.0/SRPMS/firefox-ext-mozvoikko-1.0-6.1mdv2010.0.src.rpm
 912dabafc0eedd8374b77bf19863f8b4  2010.0/SRPMS/firefox-ext-plasmanotify-0.3.0-6.1mdv2010.0.src.rpm
 ef882f13ad9f95334e87b4e4d1d062c2  2010.0/SRPMS/firefox-ext-r-kiosk-0.7.2-9.1mdv2010.0.src.rpm
 8ecfa71225dd0500c8c4fdaaafe4fe22  2010.0/SRPMS/firefox-ext-scribefire-3.4.5-1.1mdv2010.0.src.rpm
 0df78b1b0f21b07d00706d72296490b3  2010.0/SRPMS/firefox-l10n-3.5.4-0.1mdv2010.0.src.rpm
 7a94ab5e7c21d73c1f8e074825fe93cd  2010.0/SRPMS/firefox-theme-kde4ff-0.14-18.1mdv2010.0.src.rpm
 a2906a74b07316a233c08eeaa09a827f  2010.0/SRPMS/gnome-python-extras-2.25.3-10.1mdv2010.0.src.rpm
 5ca44eee599e669d3936c2d8074dbdf1  2010.0/SRPMS/google-gadgets-0.11.1-2.1mdv2010.0.src.rpm
 3443a0354ae3c165243413cf2bd1a7dc  2010.0/SRPMS/opensc-0.11.9-1.1mdv2010.0.src.rpm
 e52f1e0b12809b71673467beef0e156f  2010.0/SRPMS/xulrunner-1.9.1.4-0.1mdv2010.0.src.rpm
 df7c1f2b4d6ee86a54319b934c717d39  2010.0/SRPMS/yelp-2.28.0-1.1mdv2010.0.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFK80jzmqjQ0CJFipgRAg3VAJ9fVUjPzaXLeDEqg8r7RSMPft/1BQCg5qgB
tbfeB4dua9AdXiQ1yMlumRA=
=OT9l
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists