English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 143769 CVE descriptions
and 71225 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

===========================================================
Ubuntu Security Notice USN-1106-1            April 06, 2011
nss vulnerabilities
https://launchpad.net/bugs/741729
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 9.10
Ubuntu 10.04 LTS
Ubuntu 10.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  libnss3-1d                      3.12.9+ckbi-1.82-0ubuntu0.8.04.1

Ubuntu 9.10:
  libnss3-1d                      3.12.9+ckbi-1.82-0ubuntu0.9.10.1

Ubuntu 10.04 LTS:
  libnss3-1d                      3.12.9+ckbi-1.82-0ubuntu0.10.04.1

Ubuntu 10.10:
  libnss3-1d                      3.12.9+ckbi-1.82-0ubuntu0.10.10.1

After a standard system update you need to restart any applications that
use NSS, such as Thunderbird or Evolution, to make all the necessary
changes.

Details follow:

It was discovered that several invalid HTTPS certificates were issued and
revoked. An attacker could exploit these to perform a man in the middle
attack to view sensitive information or alter encrypted communications.
These certificates were marked as explicitly not trusted to prevent their
misuse.


Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82-0ubuntu0.8.04.1.diff.gz
      Size/MD5:    38160 26e5fa8be2dd46b9509b6ba4c14d9a41
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82-0ubuntu0.8.04.1.dsc
      Size/MD5:     1431 feaffe0aa70f65d08d8c53fe4488644a
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82.orig.tar.gz
      Size/MD5:  6013564 58419debd698638b4660d87eb995df91

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:    19128 7835438a608760273498dc9c025b1f6b
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:  3250536 b15290e124b2c5ad3ae84a36792602d8
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:  1207114 d9b4facc2777c5a125416743314e68e8
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:   265546 72c7edd8b7e95999c75b78f726f1fca2
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_amd64.deb
      Size/MD5:   312970 2c8b3e17cd4ae994cebd31e884717f4b

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_i386.deb
      Size/MD5:    19034 f923001ad66ac3729049aba3c6827d63
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_i386.deb
      Size/MD5:  3095986 fa05a1f129134baecd7b8de9358ab1c7
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_i386.deb
      Size/MD5:  1093834 890eb1d3b54a3a427245c7e4cc2ae9a5
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_i386.deb
      Size/MD5:   262908 235d9c2cf8a860fda38f5f2cc96bb4ab
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_i386.deb
      Size/MD5:   295252 4ac8424e4e242f0380620e69b598f34c

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:    19022 574e05c6f3b9df360c7e2f1db6fa7b67
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:  3130522 4986362b65eb97ca5b78ad241435ded2
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:  1072310 0a146aed92e8f2adbf993c02985a3982
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:   261740 0fcd7826f1b508a336ec9546e98f37d1
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_lpia.deb
      Size/MD5:   292912 bda78213ea3697534ed1d25f21a376ae

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:    21494 09fe7f661019003de1e29fb39fe55be0
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:  3212436 aa8a97c5c614d397b178fb1df09696bd
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:  1202502 25fc900cc643800e24434a3b4d220d0b
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:   264538 4ee43fa1bb56038a557f558045094784
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_powerpc.deb
      Size/MD5:   326282 a8e875ba7d469936ceac630cf9706b5a

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_sparc.deb
      Size/MD5:    19122 5094405c0918b7f1108572543c1615c8
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_sparc.deb
      Size/MD5:  2918668 9958c56cffb06f26dc2d998a315af778
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_sparc.deb
      Size/MD5:  1074630 cbebc9ee8e720869cb5bab808d5c705e
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_sparc.deb
      Size/MD5:   260062 d851ab32c443409e67d077fa1421074e
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.8.04.1_sparc.deb
      Size/MD5:   300778 93a5cb47a2e14b188830ccd7bbc2a12c

Updated packages for Ubuntu 9.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82-0ubuntu0.9.10.1.diff.gz
      Size/MD5:    37983 5557210562e3968b80d14837cad43b09
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82-0ubuntu0.9.10.1.dsc
      Size/MD5:     1431 f699592d8fb10216053d60ced7aa0527
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82.orig.tar.gz
      Size/MD5:  6013564 58419debd698638b4660d87eb995df91

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_amd64.deb
      Size/MD5:  3272970 f10aa5b300e800fac8716f448d5e1b27
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_amd64.deb
      Size/MD5:  1258574 f125e5089df66313ea9968c248d34751
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_amd64.deb
      Size/MD5:   266052 92d5e3e512c299a06297cd1b83684b4c
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_amd64.deb
      Size/MD5:    18244 5b6b15ce5ce9d5d1c33732e4cece815d
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_amd64.deb
      Size/MD5:   312992 490ba7dad2c9b3105297bd6b3aaa894e

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_i386.deb
      Size/MD5:  3218852 b02470d9c90ac0390fb90f8911e69411
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_i386.deb
      Size/MD5:  1144322 214c689a25d1d450a3daa789d486f8f5
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_i386.deb
      Size/MD5:   263394 0323bd29e456919226d779c79960b0c9
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_i386.deb
      Size/MD5:    18236 61a19cbff6c281f62fb7b2769f662c6b
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_i386.deb
      Size/MD5:   299112 ea0bbae7997b40c133ca2e5b1dee014e

  armel architecture (ARM Architecture):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_armel.deb
      Size/MD5:  3201002 52ad7be13472d785f7c4fae4c27bd208
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_armel.deb
      Size/MD5:  1125624 7ea1797bf6074c079dc8a1f6f7736684
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_armel.deb
      Size/MD5:   265860 aa9527e3776bfe7163b16f61c1b13e49
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_armel.deb
      Size/MD5:    18250 99757d9b6b8700a1ca7d62b8a2786c29
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_armel.deb
      Size/MD5:   295292 c38b53749bde3f1d6a560c08d3a86f54

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_lpia.deb
      Size/MD5:  3260120 6978f195450eb764fe824aeade0f9730
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_lpia.deb
      Size/MD5:  1120508 fbbe2f6b43ece55aa135eb7320d8580a
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_lpia.deb
      Size/MD5:   262360 d54add562444c6a7790bf2f2ea13a186
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_lpia.deb
      Size/MD5:    18236 1cbd94ee0c868b5324070ec7cdaf991a
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_lpia.deb
      Size/MD5:   297544 10199da0f2ba7eaaf5226490848ab948

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_powerpc.deb
      Size/MD5:  3364262 0f6fe59a8b366a825894640e91726f61
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_powerpc.deb
      Size/MD5:  1229690 5967b23c17071002724464aab949a7b9
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_powerpc.deb
      Size/MD5:   264660 1e4a510980d6783edf5b561478c750b7
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_powerpc.deb
      Size/MD5:    18236 9f26f1fd50dcccf267e091cbafc829d4
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_powerpc.deb
      Size/MD5:   310066 2b7b2d094c43358f3e7002d34c432d7e

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_sparc.deb
      Size/MD5:  2999856 4afce16c98e0dd28b4120dca8a6e0c43
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_sparc.deb
      Size/MD5:  1096410 6cc85cfe54aa1e05e2cadbc9a23b0a76
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_sparc.deb
      Size/MD5:   260540 98e0914f67ace7a7b43b276f6d88ad9c
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_sparc.deb
      Size/MD5:    18242 4d73604d5b087f9d4ecfb4ff01a8fc33
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.9.10.1_sparc.deb
      Size/MD5:   299400 f01cf0866426e2644eb164debb3c869c

Updated packages for Ubuntu 10.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82-0ubuntu0.10.04.1.diff.gz
      Size/MD5:    38055 dea20b8e851a879c6290b5466c937a48
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82-0ubuntu0.10.04.1.dsc
      Size/MD5:     1435 9e7036689bfcecd4a366be7af70fce6c
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82.orig.tar.gz
      Size/MD5:  6013564 58419debd698638b4660d87eb995df91

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_amd64.deb
      Size/MD5:  3274494 c108cc7e80cee86f3fe708cf0e625f95
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_amd64.deb
      Size/MD5:  1258500 b081ca382fcace882cfa7f7a87811265
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_amd64.deb
      Size/MD5:   266078 24e6c44b3d60a96a54fae31be656678d
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_amd64.deb
      Size/MD5:    18366 fcc18745d82bff6445cc4c27fcf502f0
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_amd64.deb
      Size/MD5:   313202 d86dc7d39ea92bc4dcabcd41dab2017a

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_i386.deb
      Size/MD5:  3217902 a535eec6a2be630a7a8a1855232af1dc
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_i386.deb
      Size/MD5:  1144946 94ad91a01878dc5e4b72ae77b7c0a241
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_i386.deb
      Size/MD5:   266966 503e44d18e075f9b6dea427785079717
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_i386.deb
      Size/MD5:    18380 2d6087c960480213ad875081fdbae02e
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_i386.deb
      Size/MD5:   298490 835b71e236996c9f694f8d9d7d9af98a

  armel architecture (ARM Architecture):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_armel.deb
      Size/MD5:  3324502 909df1b9af55ae8658a188372fa2c154
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_armel.deb
      Size/MD5:  1072542 452d9d62c3960f91499f9e9754b16070
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_armel.deb
      Size/MD5:   264574 804e62f3bc7325dc6a69b3760ea71230
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_armel.deb
      Size/MD5:    18380 df5bd94df281827cbaa7563bfc7f9a50
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_armel.deb
      Size/MD5:   289206 18346c06f6e61aeace3f7325bc43a692

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_powerpc.deb
      Size/MD5:  3364664 cf525cf29c52a7cd3a4ed0de2ac586f2
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_powerpc.deb
      Size/MD5:  1221510 e2d988c52bd008edb6ee64be9a183053
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_powerpc.deb
      Size/MD5:   264814 bf3f96a4e05e830c9cff24e0f02d4885
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_powerpc.deb
      Size/MD5:    18368 33c6fe6b62251c2c8a70870394ee5f37
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_powerpc.deb
      Size/MD5:   310244 d736a7f5076c5ec79c76eea6bae7dbb2

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_sparc.deb
      Size/MD5:  3028292 75defea29c1663f13d4ba367ee8956d8
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_sparc.deb
      Size/MD5:  1136438 423ab727f3246e3e1e6422edf7a6455b
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_sparc.deb
      Size/MD5:   261160 09a343bea327aad48bf3111d38f93e61
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_sparc.deb
      Size/MD5:    18370 f01923e7a3856e5f386e51a3635db895
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.04.1_sparc.deb
      Size/MD5:   305688 9744f756009cd4b732c25cd16148574f

Updated packages for Ubuntu 10.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82-0ubuntu0.10.10.1.diff.gz
      Size/MD5:    38193 d741a486cafc332cc55b62f3d7d2f1e3
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82-0ubuntu0.10.10.1.dsc
      Size/MD5:     1435 afc20c3bb86a444db575857145c66d07
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.9+ckbi-1.82.orig.tar.gz
      Size/MD5:  6013564 58419debd698638b4660d87eb995df91

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_amd64.deb
      Size/MD5:  3274982 0022a0db51b8c9d315851f342c259db9
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_amd64.deb
      Size/MD5:  1253100 ec835d735db4d371fabfe12c9c382b10
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_amd64.deb
      Size/MD5:   266180 de8073c7e0e061852ee1b343ce446140
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_amd64.deb
      Size/MD5:    18446 97e570d8d1ed942143a5c34bc6b738d6
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_amd64.deb
      Size/MD5:   310300 7dc52627f62664c819e8c23fc9685604

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_i386.deb
      Size/MD5:  3217478 5ee5a883306bb37f0bd0fa6ebe887662
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_i386.deb
      Size/MD5:  1138148 e0e80a5ac1d11182e66d0c10be0f71c8
    http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_i386.deb
      Size/MD5:   263540 87d19074d8ce5ad821a93ad953f8125c
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_i386.deb
      Size/MD5:    18448 8ae4d8201a7f927b28a30600db0a1561
    http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_i386.deb
      Size/MD5:   296126 8e8b7dc7013c3b77f648349b019fa86c

  armel architecture (ARM Architecture):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_armel.deb
      Size/MD5:  3299628 533ad71adc41ad833312fa91aeed3f97
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_armel.deb
      Size/MD5:  1134058 a354ae78ca59f3d188a5581a15072729
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_armel.deb
      Size/MD5:   265974 5929cb8b6a03513244f16bdda5663736
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_armel.deb
      Size/MD5:    18458 ce699284348433de50e5142b94b01798
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_armel.deb
      Size/MD5:   301332 86856705e5eefbbb200fdfc1b3cb9c98

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_powerpc.deb
      Size/MD5:  3363324 30dbf2985d99e13e2f5504977f72da20
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_powerpc.deb
      Size/MD5:  1211628 6108995eb1754feb090cb27db51b8346
    http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_powerpc.deb
      Size/MD5:   264906 8b115b3cc243df21ae59f1441caae35c
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_powerpc.deb
      Size/MD5:    18452 7d9562cfd3cdd7ade1d69f68ac57f7f5
    http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.9+ckbi-1.82-0ubuntu0.10.10.1_powerpc.deb
      Size/MD5:   306866 aa0796a7509c4e33ccf5fb70d3d7be11





--------------enig385930DFBE0190FDEA466C58
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk2cnhMACgkQTniv4aqX/Vk/cACbBp9RjGL1T2mnqqEy/jcIq9GN
ktUAnRwai9vG4xgHchgII+wN//6afArF
=5Rfc
-----END PGP SIGNATURE-----

--------------enig385930DFBE0190FDEA466C58--

From - Wed Apr  6 20:10:50 2011
X-Account-Key: account7
X-UIDL: 4d7faa1e00014d8c
X-Mozilla-Status: 0000
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-Path: <bugtraq-return-46529-lists=securityspace.com@securityfocus.com>
X-Original-To: lists@securityspace.com
Delivered-To: lists@securityspace.com
Received: from outgoing2.securityfocus.com (outgoing.securityfocus.com [205.206.231.26])
by mx.securityspace.com (Postfix) with ESMTP id 6B4C8ED1A9
for <lists@securityspace.com>; Wed,  6 Apr 2011 15:21:11 -0400 (EDT)
Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20])
by outgoing2.securityfocus.com (Postfix) with QMQP
id 3E596143ACF; Wed,  6 Apr 2011 12:55:55 -0600 (MDT)
Mailing-List: contact bugtraq-help@securityfocus.com; run by ezmlm
Precedence: bulk
List-Id: <bugtraq.list-id.securityfocus.com>
List-Post: <mailto:bugtraq@securityfocus.com>
List-Help: <mailto:bugtraq-help@securityfocus.com>
List-Unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
List-Subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
Delivered-To: mailing list bugtraq@securityfocus.com
Delivered-To: moderator for bugtraq@securityfocus.com
Received: (qmail 10876 invoked from network); 6 Apr 2011 17:28:42 -0000
Message-ID: <4D9CA2BC.3070608@apache.org>
Date: Wed, 06 Apr 2011 18:28:28 +0100
From: Mark Thomas <markt@apache.org>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-GB; rv:1.9.2.15) Gecko/20110303 Thunderbird/3.1.9
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Cc: Tomcat Developers List <dev@tomcat.apache.org>,
Tomcat Announce List <announce@tomcat.apache.org>,
announce@apache.org, full-disclosure@lists.grok.org.uk,
bugtraq@securityfocus.com
Subject: [SECURITY] CVE-2011-1183 Apache Tomcat security constraint bypass
X-Enigmail-Version: 1.1.1
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Status: RO

CVE-2011-1183 Apache Tomcat security constraint bypass

Severity: Important

Vendor: The Apache Software Foundation

Versions Affected:
- Tomcat 7.0.11
- Earlier versions are not affected

Description:
A regression in the fix for CVE-2011-1088 meant that security
constraints were ignored when no login configuration was present in the
web.xml and the web application was marked as meta-data complete.

Mitigation:
Users of affected versions should apply one of the following mitigations:
- Upgrade to a Tomcat 7.0.12 or later
- Ensure a login configuration is defined in web.xml

Credit:
This issue was identified by the Apache Tomcat security team.

References:
http://tomcat.apache.org/security.html
http://tomcat.apache.org/security-7.html

From - Wed Apr  6 20:10:50 2011
X-Account-Key: account7
X-UIDL: 4d7faa1e00014d8d
X-Mozilla-Status: 0000
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-Path: <bugtraq-return-46531-lists=securityspace.com@securityfocus.com>
X-Original-To: lists@securityspace.com
Delivered-To: lists@securityspace.com
Received: from outgoing2.securityfocus.com (outgoing.securityfocus.com [205.206.231.26])
by mx.securityspace.com (Postfix) with ESMTP id 1A6F3EC156
for <lists@securityspace.com>; Wed,  6 Apr 2011 15:27:57 -0400 (EDT)
Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20])
by outgoing2.securityfocus.com (Postfix) with QMQP
id 7F47A143BB6; Wed,  6 Apr 2011 12:56:26 -0600 (MDT)
Mailing-List: contact bugtraq-help@securityfocus.com; run by ezmlm
Precedence: bulk
List-Id: <bugtraq.list-id.securityfocus.com>
List-Post: <mailto:bugtraq@securityfocus.com>
List-Help: <mailto:bugtraq-help@securityfocus.com>
List-Unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
List-Subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
Delivered-To: mailing list bugtraq@securityfocus.com
Delivered-To: moderator for bugtraq@securityfocus.com
Received: (qmail 13756 invoked from network); 6 Apr 2011 18:44:05 -0000
Subject: [USN-1107-1] x11-xserver-utils vulnerability
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: ubuntu-security-announce@lists.ubuntu.com
Cc: bugtraq@securityfocus.com, full-disclosure@lists.grok.org.uk
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-vcvL/YuM3Um/fqb3DOgj"
Date: Wed, 06 Apr 2011 14:43:58 -0400
Message-ID: <1302115438.4215.40.camel@mdlinux>
Mime-Version: 1.0
X-Mailer: Evolution 2.32.2 
Status: RO


--=-vcvL/YuM3Um/fqb3DOgj
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

===========================================================
Ubuntu Security Notice USN-1107-1            April 06, 2011
x11-xserver-utils vulnerability
CVE-2011-0465
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 9.10
Ubuntu 10.04 LTS
Ubuntu 10.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  x11-xserver-utils               7.3+2ubuntu0.1

Ubuntu 9.10:
  x11-xserver-utils               7.4+2ubuntu3.1

Ubuntu 10.04 LTS:
  x11-xserver-utils               7.5+1ubuntu2.1

Ubuntu 10.10:
  x11-xserver-utils               7.5+2ubuntu1.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

Details follow:

Sebastian Krahmer discovered that the xrdb utility incorrectly filtered
crafted hostnames. An attacker could use this flaw with a malicious
DHCP server or with a remote xdmcp login and execute arbitrary code,
resulting in root privilege escalation.


Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.3+2ubuntu0.1.dsc
      Size/MD5:     1855 ed72ba7905552c8ad970eb9b6ea65735
    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.3+2ubuntu0.1.tar.gz
      Size/MD5:  1993520 fbcfdc97544d06d5956b553f154024a9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.3+2ubuntu0.1_amd64.deb
      Size/MD5:   188578 55c51ac356a4c206986993426ef9c89a

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.3+2ubuntu0.1_i386.deb
      Size/MD5:   173526 cff268921d0c6c4b0be4bd053c7a32ca

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.3+2ubuntu0.1_lpia.deb
      Size/MD5:   174206 537c0ee33f027fe77b2d988a19addc98

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.3+2ubuntu0.1_powerpc.deb
      Size/MD5:   223124 32704bc7de76ad266f152cd26a20799c

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.3+2ubuntu0.1_sparc.deb
      Size/MD5:   178220 ef7a7a8d0342e3453b00ee574c7f6f8e

Updated packages for Ubuntu 9.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.4+2ubuntu3.1.dsc
      Size/MD5:     2098 a8f51b5ddeb65b629fb7d3e37921bdb7
    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.4+2ubuntu3.1.tar.gz
      Size/MD5:  2027496 28363c3d291c9f299e40757abbd2ec11

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.4+2ubuntu3.1_amd64.deb
      Size/MD5:   204686 4c3899eabc2a94b9e3885e61aa8b435d

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.4+2ubuntu3.1_i386.deb
      Size/MD5:   187160 a4493402abed14adba7e186e33117d86

  armel architecture (ARM Architecture):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.4+2ubuntu3.1_armel.deb
      Size/MD5:   189234 4d203c561b9c8fe91b50099e8c87cc11

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.4+2ubuntu3.1_lpia.deb
      Size/MD5:   185760 7acee417b2aee7c54ff7f3eed1301a9e

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.4+2ubuntu3.1_powerpc.deb
      Size/MD5:   197428 4e7151586bc4139098c820c1d1b812a3

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.4+2ubuntu3.1_sparc.deb
      Size/MD5:   196292 29e6bf5806bf8a492dbde60e48281fae

Updated packages for Ubuntu 10.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+1ubuntu2.1.dsc
      Size/MD5:     2053 af668fc46b52cbbb8fce94579db91662
    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+1ubuntu2.1.tar.gz
      Size/MD5:  2017972 d68d1519793de89571ed5c78eae9dd1c

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+1ubuntu2.1_amd64.deb
      Size/MD5:   185406 db3596b0abcd26fe8569687bf790d016

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+1ubuntu2.1_i386.deb
      Size/MD5:   170078 7e6ea917d730b4b54bba69e4e3df533c

  armel architecture (ARM Architecture):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+1ubuntu2.1_armel.deb
      Size/MD5:   171114 a3281fd14dea567b7879ebe2c5782087

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+1ubuntu2.1_powerpc.deb
      Size/MD5:   180332 eb5deb911bd3098f6969e4c758bc5a07

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+1ubuntu2.1_sparc.deb
      Size/MD5:   182876 98a7170dd299c3d54b7d1b38f43e1058

Updated packages for Ubuntu 10.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+2ubuntu1.1.dsc
      Size/MD5:     2050 89b42bbb00b6f26578c875da2b0fd26c
    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+2ubuntu1.1.tar.gz
      Size/MD5:  2114046 fd0986fe6eced94861a5b5d012ee5e0b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+2ubuntu1.1_amd64.deb
      Size/MD5:   185918 70308628801d2bca8c67d2941422e4fe

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+2ubuntu1.1_i386.deb
      Size/MD5:   170444 3da72942a1f2351e1f2d9616402b3f9a

  armel architecture (ARM Architecture):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+2ubuntu1.1_armel.deb
      Size/MD5:   180638 dfef48402643a2c0d6d718db0023dcb7

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/x/x11-xserver-utils/x11-xserver-utils_7.5+2ubuntu1.1_powerpc.deb
      Size/MD5:   180626 9e15d1f000b142344835c57179307227



New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe

© 1998-2019 E-Soft Inc. All rights reserved.