-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                       MDVSA-2010:070-1
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : firefox
 Date    : April 20, 2010
 Affected: 2009.0
 _______________________________________________________________________

 Problem Description:

 Security issues were identified and fixed in firefox:
 
 Security researcher regenrecht reported (via TippingPoint's Zero Day
 Initiative) a potential reuse of a deleted image frame in Firefox 3.6's
 handling of multipart/x-mixed-replace images. Although no exploit was
 shown, re-use of freed memory has led to exploitable vulnerabilities
 in the past (CVE-2010-0164).
 
 Mozilla developers identified and fixed several stability bugs in the
 browser engine used in Firefox and other Mozilla-based products. Some
 of these crashes showed evidence of memory corruption under certain
 circumstances and we presume that with enough effort at least some
 of these could be exploited to run arbitrary code (CVE-2010-0165,
 CVE-2010-0167).
 
 Mozilla developer Josh Soref of Nokia reported that documents
 failed to call certain security checks when attempting to preload
 images. Although the image content is not available to the page, it
 is possible to specify protocols that are normally not allowed in a
 web page such as file:. This includes internal schemes implemented
 by add-ons that might perform privileged actions resulting in
 something like a Cross-Site Request Forgery (CSRF) attack against
 the add-on. Potential severity would depend on the add-ons installed
 (CVE-2010-0168).
 
 Mozilla developer Blake Kaplan reported that the window.location object
 was made a normal overridable JavaScript object in the Firefox 3.6
 browser engine (Gecko 1.9.2) because new mechanisms were developed
 to enforce the same-origin policy between windows and frames. This
 object is unfortunately also used by some plugins to determine the page
 origin used for access restrictions. A malicious page could override
 this object to fool a plugin into granting access to data on another
 site or the local file system. The behavior of older Firefox versions
 has been restored (CVE-2010-0170).
 
 Mozilla developer Justin Dolske reported that the new asynchronous
 Authorization Prompt (HTTP username and password) was not always
 attached to the correct window. Although we have not demonstrated
 this, it may be possible for a malicious page to convince a user
 to open a new tab or popup to a trusted service and then have the
 HTTP authorization prompt from the malicious page appear to be the
 login prompt for the trusted page. This potential attack is greatly
 mitigated by the fact that very few web sites use HTTP authorization,
 preferring instead to use web forms and cookies (CVE-2010-0172).
 
 Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.8 allows
 remote attackers to cause a denial of service (memory corruption and
 application crash) and possibly have unknown other impact via vectors
 that might involve compressed data, a different vulnerability than
 CVE-2010-1028 (CVE-2010-1122).
 
 Mozilla developers identified and fixed several stability bugs in the
 browser engine used in Firefox and other Mozilla-based products. Some
 of these crashes showed evidence of memory corruption under certain
 circumstances, and we presume that with enough effort at least some
 of these could be exploited to run arbitrary code (CVE-2010-0173,
 CVE-2010-0174)
 
 Security researcher regenrecht reported via TippingPoint's Zero Day
 Initiative that a select event handler for XUL tree items could be
 called after the tree item was deleted. This results in the execution
 of previously freed memory which an attacker could use to crash a
 victim's browser and run arbitrary code on the victim's computer
 (CVE-2010-0175).
 
 Security researcher regenrecht reported via TippingPoint's Zero Day
 Initiative an error in the way <option> elements are inserted into
 a XUL tree <optgroup>. In certain cases, the number of references
 to an <option> element is under-counted so that when the element is
 deleted, a live pointer to its old location is kept around and may
 later be used. An attacker could potentially use these conditions to
 run arbitrary code on a victim's computer (CVE-2010-0176).
 
 Security researcher regenrecht reported via TippingPoint's
 Zero Day Initiative an error in the implementation of the
 window.navigator.plugins object. When a page reloads, the plugins array
 would reallocate all of its members without checking for existing
 references to each member. This could result in the deletion of
 objects for which valid pointers still exist. An attacker could use
 this vulnerability to crash a victim's browser and run arbitrary code
 on the victim's machine (CVE-2010-0177).
 
 Security researcher Paul Stone reported that a browser applet could
 be used to turn a simple mouse click into a drag-and-drop action,
 potentially resulting in the unintended loading of resources in a
 user's browser. This behavior could be used twice in succession to
 first load a privileged chrome: URL in a victim's browser, then load
 a malicious javascript: URL on top of the same document resulting in
 arbitrary script execution with chrome privileges (CVE-2010-0178).
 
 Mozilla security researcher moz_bug_r_a4 reported that the
 XMLHttpRequestSpy module in the Firebug add-on was exposing
 an underlying chrome privilege escalation vulnerability. When
 the XMLHttpRequestSpy object was created, it would attach various
 properties of itself to objects defined in web content, which were not
 being properly wrapped to prevent their exposure to chrome privileged
 objects. This could result in an attacker running arbitrary JavaScript
 on a victim's machine, though it required the victim to have Firebug
 installed, so the overall severity of the issue was determined to be
 High (CVE-2010-0179).
 
 phpBB developer Henry Sudhof reported that when an image tag points to
 a resource that redirects to a mailto: URL, the external mail handler
 application is launched. This issue poses no security threat to users
 but could create an annoyance when browsing a site that allows users
 to post arbitrary images (CVE-2010-0181).
 
 Mozilla community member Wladimir Palant reported that XML documents
 were failing to call certain security checks when loading new
 content. This could result in certain resources being loaded that
 would otherwise violate security policies set by the browser or
 installed add-ons (CVE-2010-0182).
 
 Note that to benefit from the fix for CVE-2009-3555 added
 in nss-3.12.6, Firefox 3.6 users will need to set their
 security.ssl.require_safe_negotiation preference to true. In Mandriva
 the default setting is false due to problems with some common sites.
 
 Since firefox-3.0.19 is the last 3.0.x release Mandriva
 opted to provide the latest 3.6.3 version for Mandriva Linux
 2008.0/2009.0/2009.1/MES5/2010.0.
 
 Packages for 2008.0 and 2009.0 are provided due to the Extended
 Maintenance Program for those products.
 
 Additionally, some packages which require so, have been rebuilt and
 are being provided as updates.

 Update:

 Packages for 2009.0 are provided due to the Extended Maintenance
 Program.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0164
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0165
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0167
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0168
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0170
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0172
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1122
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182
 http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.3
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2009.0:
 c010232ec13300d13a09321fd53ab206  2009.0/i586/beagle-0.3.8-13.19mdv2009.0.i586.rpm
 266c876250ff5406a82d0215596c4d13  2009.0/i586/beagle-crawl-system-0.3.8-13.19mdv2009.0.i586.rpm
 c6d7e2452846fecfc6b3a071c5b22ce7  2009.0/i586/beagle-doc-0.3.8-13.19mdv2009.0.i586.rpm
 152b2987738620c04d985efc70f93deb  2009.0/i586/beagle-epiphany-0.3.8-13.19mdv2009.0.i586.rpm
 4d90e5e91d6fb74d1226d72aaa3d5c82  2009.0/i586/beagle-evolution-0.3.8-13.19mdv2009.0.i586.rpm
 c0364126890604b6767052aae75c6e33  2009.0/i586/beagle-gui-0.3.8-13.19mdv2009.0.i586.rpm
 570b286a25c85fa69457cbfb9b92c3a4  2009.0/i586/beagle-gui-qt-0.3.8-13.19mdv2009.0.i586.rpm
 0cf57200876cd2d2396746139763e25f  2009.0/i586/beagle-libs-0.3.8-13.19mdv2009.0.i586.rpm
 3171b8cbd0d1686c02a25dc6dfe73449  2009.0/i586/devhelp-0.21-3.13mdv2009.0.i586.rpm
 2762fd987c8b7c858032db59e9650038  2009.0/i586/devhelp-plugins-0.21-3.13mdv2009.0.i586.rpm
 1dc367c339853a8394fb0a8dd7defd3d  2009.0/i586/epiphany-2.24.3-0.1mdv2009.0.i586.rpm
 a79b5b45d9a2115822b161b8b4fa8b0e  2009.0/i586/epiphany-devel-2.24.3-0.1mdv2009.0.i586.rpm
 9ba9059fddf3e3dc91a7fd1edcc3c93e  2009.0/i586/firefox-3.6.3-0.2mdv2009.0.i586.rpm
 a9784b1c11867fcb022bcb61f091a39e  2009.0/i586/firefox-af-3.6.3-0.1mdv2009.0.i586.rpm
 6719a68cd54602337185026bfa075fb0  2009.0/i586/firefox-ar-3.6.3-0.1mdv2009.0.i586.rpm
 e7c8e52c44198f50b5e4d9b7ba332eca  2009.0/i586/firefox-be-3.6.3-0.1mdv2009.0.i586.rpm
 a0acbf770a2252fe68d225216fcde862  2009.0/i586/firefox-bg-3.6.3-0.1mdv2009.0.i586.rpm
 03579a6cd3378c1f5a589e92c4590cfb  2009.0/i586/firefox-bn-3.6.3-0.1mdv2009.0.i586.rpm
 3bb4310f4e7eaf367130e6b9ed21e481  2009.0/i586/firefox-ca-3.6.3-0.1mdv2009.0.i586.rpm
 c1d8fbe3d2760a9ecccc72249255991e  2009.0/i586/firefox-cs-3.6.3-0.1mdv2009.0.i586.rpm
 966cde689e1858e00a6088c25cb737aa  2009.0/i586/firefox-cy-3.6.3-0.1mdv2009.0.i586.rpm
 a8bb0f98e29f08d08d09c73525d7f0fe  2009.0/i586/firefox-da-3.6.3-0.1mdv2009.0.i586.rpm
 e8bd212e342aaf67410a317bdef90f96  2009.0/i586/firefox-de-3.6.3-0.1mdv2009.0.i586.rpm
 9ba8957caff7d084c9b768393dd9ad8f  2009.0/i586/firefox-devel-3.6.3-0.2mdv2009.0.i586.rpm
 8b203803d02699cfd97a27ddfe4a5cc2  2009.0/i586/firefox-el-3.6.3-0.1mdv2009.0.i586.rpm
 3977a8351e3561623eb40a530e0c330e  2009.0/i586/firefox-en_GB-3.6.3-0.1mdv2009.0.i586.rpm
 62ea90acb1dd64bd17b4ea468a20edcd  2009.0/i586/firefox-eo-3.6.3-0.1mdv2009.0.i586.rpm
 c064df467bb014f83feca1de548fdadc  2009.0/i586/firefox-es_AR-3.6.3-0.1mdv2009.0.i586.rpm
 ab5c67b3a161aa885b65eae4d1ffdc86  2009.0/i586/firefox-es_ES-3.6.3-0.1mdv2009.0.i586.rpm
 c64c95501b1e995e14e0c405385eee54  2009.0/i586/firefox-et-3.6.3-0.1mdv2009.0.i586.rpm
 47021232cbf2a6a11645de96d8319d03  2009.0/i586/firefox-eu-3.6.3-0.1mdv2009.0.i586.rpm
 c404b6038d61ffd47f5468fff769c6b6  2009.0/i586/firefox-ext-beagle-0.3.8-13.19mdv2009.0.i586.rpm
 a419c35964176a21dbd2d5e8b895cfa8  2009.0/i586/firefox-ext-blogrovr-1.1.804-0.1mdv2009.0.i586.rpm
 176a42a89e23a62dddfea862719c76c8  2009.0/i586/firefox-ext-mozvoikko-1.0-0.1mdv2009.0.i586.rpm
 080765d3d288e772bbb3ea15125c8f38  2009.0/i586/firefox-ext-scribefire-3.5.1-0.1mdv2009.0.i586.rpm
 c7bbb49b1b42dd4947a721338971146a  2009.0/i586/firefox-ext-xmarks-3.5.10-0.1mdv2009.0.i586.rpm
 445acb52bc111620104bf8cf5a55be94  2009.0/i586/firefox-fi-3.6.3-0.1mdv2009.0.i586.rpm
 e84c0560240d616fc243893b49628884  2009.0/i586/firefox-fr-3.6.3-0.1mdv2009.0.i586.rpm
 c2efcf63fcb58df1cb6b60a902117490  2009.0/i586/firefox-fy-3.6.3-0.1mdv2009.0.i586.rpm
 ece53c927f1ef6c83b9eb42cc840aac6  2009.0/i586/firefox-ga_IE-3.6.3-0.1mdv2009.0.i586.rpm
 ef915a175c190717992af7ff7f270683  2009.0/i586/firefox-gl-3.6.3-0.1mdv2009.0.i586.rpm
 7436d05728b9dbaabd49cbfb821339b3  2009.0/i586/firefox-gu_IN-3.6.3-0.1mdv2009.0.i586.rpm
 c0be81db6c415fa67b7e5375767e0a1c  2009.0/i586/firefox-he-3.6.3-0.1mdv2009.0.i586.rpm
 4f6eb984905f583e3f4f7e350a5ad560  2009.0/i586/firefox-hi-3.6.3-0.1mdv2009.0.i586.rpm
 cd57cd4f55a2e7303c1995d26addf862  2009.0/i586/firefox-hu-3.6.3-0.1mdv2009.0.i586.rpm
 89f13bdc12a9c3212a873f0df61a253f  2009.0/i586/firefox-id-3.6.3-0.1mdv2009.0.i586.rpm
 3e0053f19d1d17bea8a740f70ff9801e  2009.0/i586/firefox-is-3.6.3-0.1mdv2009.0.i586.rpm
 74f43311f53fc13e4dda057995f8ad67  2009.0/i586/firefox-it-3.6.3-0.1mdv2009.0.i586.rpm
 b3b17965b3e9a4559722a68a3e9af618  2009.0/i586/firefox-ja-3.6.3-0.1mdv2009.0.i586.rpm
 6e45f809bdb6ea515669b8155bbcdf15  2009.0/i586/firefox-kn-3.6.3-0.1mdv2009.0.i586.rpm
 e05d70fad3858edcbf917508f421443e  2009.0/i586/firefox-ko-3.6.3-0.1mdv2009.0.i586.rpm
 6a4733f07a757012738a920d31fb9e6a  2009.0/i586/firefox-lt-3.6.3-0.1mdv2009.0.i586.rpm
 9d5d79c9ea3dcb87396ba5d6654dc20b  2009.0/i586/firefox-lv-3.6.3-0.1mdv2009.0.i586.rpm
 074a46d8f2cb3fc370fda83ab1d9f279  2009.0/i586/firefox-mk-3.6.3-0.1mdv2009.0.i586.rpm
 40377c79638b0ecf7d7647209a22ca8c  2009.0/i586/firefox-mr-3.6.3-0.1mdv2009.0.i586.rpm
 80ad0cdbeb4e8645cec5978e2c8ea52a  2009.0/i586/firefox-nb_NO-3.6.3-0.1mdv2009.0.i586.rpm
 d08440a3c934bce4a41ebd17e1e08798  2009.0/i586/firefox-nl-3.6.3-0.1mdv2009.0.i586.rpm
 bf64bafaf9838e2506dc3d267665006a  2009.0/i586/firefox-nn_NO-3.6.3-0.1mdv2009.0.i586.rpm
 814433a4668a173843d9bbb3c4d207a0  2009.0/i586/firefox-pa_IN-3.6.3-0.1mdv2009.0.i586.rpm
 ce53ddfa3b7ec301c074b533ac6a57d1  2009.0/i586/firefox-pl-3.6.3-0.1mdv2009.0.i586.rpm
 87a3ffe46281fdae60d2f86016105895  2009.0/i586/firefox-pt_BR-3.6.3-0.1mdv2009.0.i586.rpm
 368eea6749c8064a42c525341e170ffa  2009.0/i586/firefox-pt_PT-3.6.3-0.1mdv2009.0.i586.rpm
 ee1e0c5fd5ab246c32e46c5f581486cf  2009.0/i586/firefox-ro-3.6.3-0.1mdv2009.0.i586.rpm
 cfd8897583871005116db79831cc6270  2009.0/i586/firefox-ru-3.6.3-0.1mdv2009.0.i586.rpm
 46d633f669aa0654a2cacbfabf0b4258  2009.0/i586/firefox-si-3.6.3-0.1mdv2009.0.i586.rpm
 27f71e05393a0f87e488315b1639ace4  2009.0/i586/firefox-sk-3.6.3-0.1mdv2009.0.i586.rpm
 d0d8adf3a4fe7abb2ca0ec508fccc1fb  2009.0/i586/firefox-sl-3.6.3-0.1mdv2009.0.i586.rpm
 35a1dc6e50a902f548dc2a8e51156c88  2009.0/i586/firefox-sq-3.6.3-0.1mdv2009.0.i586.rpm
 b82061ef747654762ea1a3e9fa2c604d  2009.0/i586/firefox-sv_SE-3.6.3-0.1mdv2009.0.i586.rpm
 d338d6fd68fe6b949f5dc7d5be57d729  2009.0/i586/firefox-te-3.6.3-0.1mdv2009.0.i586.rpm
 8e6f2a4f31ae192ccf9fabee3b3ab9e0  2009.0/i586/firefox-th-3.6.3-0.1mdv2009.0.i586.rpm
 b443fb3b6d4b8c275412c5a5d2f60347  2009.0/i586/firefox-theme-kfirefox-0.16-0.1mdv2009.0.i586.rpm
 324030a99e7b8d9df3d52f296c75b7a1  2009.0/i586/firefox-tr-3.6.3-0.1mdv2009.0.i586.rpm
 5db53d4a190bcc3b959e00a1a5012c93  2009.0/i586/firefox-uk-3.6.3-0.1mdv2009.0.i586.rpm
 f65b52812827e96ebb2a7c47cd349712  2009.0/i586/firefox-zh_CN-3.6.3-0.1mdv2009.0.i586.rpm
 f7f66d69e2f941d581306082681bf98d  2009.0/i586/firefox-zh_TW-3.6.3-0.1mdv2009.0.i586.rpm
 458df4a0f9d8ae560671983222f23d4d  2009.0/i586/gnome-python-extras-2.19.1-20.13mdv2009.0.i586.rpm
 59eb47cafbc3cc338082685c10b14b78  2009.0/i586/gnome-python-gda-2.19.1-20.13mdv2009.0.i586.rpm
 3579aa43a44ba292a33377af8dcc0392  2009.0/i586/gnome-python-gda-devel-2.19.1-20.13mdv2009.0.i586.rpm
 090322c61ce38ee4b93a7c3cd8a881f6  2009.0/i586/gnome-python-gdl-2.19.1-20.13mdv2009.0.i586.rpm
 57fab596462f37dc9375982ada297bf1  2009.0/i586/gnome-python-gtkhtml2-2.19.1-20.13mdv2009.0.i586.rpm
 a0dfb244f3bb0192001f4cc6014c8d94  2009.0/i586/gnome-python-gtkmozembed-2.19.1-20.13mdv2009.0.i586.rpm
 211f52f9c377a5bbb9508e5ec9d6bdb7  2009.0/i586/gnome-python-gtkspell-2.19.1-20.13mdv2009.0.i586.rpm
 502c81f17f95f03850e31f58c0860637  2009.0/i586/lemon-3.6.23.1-0.1mdv2009.0.i586.rpm
 b6badf6dc890e49d79af18f041644fbd  2009.0/i586/libdevhelp-1_0-0.21-3.13mdv2009.0.i586.rpm
 dd8f5a416ec4020b90cf6a5f264b4ca0  2009.0/i586/libdevhelp-1-devel-0.21-3.13mdv2009.0.i586.rpm
 81b38c87d799fd04838a4ec0f317e4c9  2009.0/i586/libsqlite3_0-3.6.23.1-0.1mdv2009.0.i586.rpm
 4ee9df528f54ea410410ea7890886523  2009.0/i586/libsqlite3-devel-3.6.23.1-0.1mdv2009.0.i586.rpm
 7c7470631b02f710b9813eefd9e8b959  2009.0/i586/libsqlite3-static-devel-3.6.23.1-0.1mdv2009.0.i586.rpm
 c0a9909050a21de8be5eee71f5dc0e4d  2009.0/i586/libxulrunner1.9.2.3-1.9.2.3-0.2mdv2009.0.i586.rpm
 5c7e2efba88646c6ee2f51523a767e96  2009.0/i586/libxulrunner-devel-1.9.2.3-0.2mdv2009.0.i586.rpm
 207532513315297ab2cf0713e5418699  2009.0/i586/mozilla-thunderbird-beagle-0.3.8-13.19mdv2009.0.i586.rpm
 24075185dd34f652d67ce35a949d2ec7  2009.0/i586/sqlite3-tools-3.6.23.1-0.1mdv2009.0.i586.rpm
 aa658e51a250c9e6c07c235c63cc28f3  2009.0/i586/tcl-sqlite3-3.6.23.1-0.1mdv2009.0.i586.rpm
 a9b44e66baccec725e9e88b466bf437d  2009.0/i586/xulrunner-1.9.2.3-0.2mdv2009.0.i586.rpm
 80034d32b295a0aa28144bbf298a95c6  2009.0/i586/yelp-2.24.0-3.13mdv2009.0.i586.rpm 
 be1deab60f8a725f6b8bfbdb8a238599  2009.0/SRPMS/beagle-0.3.8-13.19mdv2009.0.src.rpm
 958d586e0f51b3eb27c2f8f52e7829db  2009.0/SRPMS/devhelp-0.21-3.13mdv2009.0.src.rpm
 4792b42cbf525647004d34d274d6682d  2009.0/SRPMS/epiphany-2.24.3-0.1mdv2009.0.src.rpm
 7e6b40730ae28d3084d6177fb3403037  2009.0/SRPMS/firefox-3.6.3-0.2mdv2009.0.src.rpm
 4c7598ff3fa6a31f94e709d181ca2f09  2009.0/SRPMS/firefox-ext-blogrovr-1.1.804-0.1mdv2009.0.src.rpm
 025b7f312ccccfd2067f120a810a919a  2009.0/SRPMS/firefox-ext-mozvoikko-1.0-0.1mdv2009.0.src.rpm
 8918fef155fcc90af164c9150baeaaa5  2009.0/SRPMS/firefox-ext-scribefire-3.5.1-0.1mdv2009.0.src.rpm
 227410c21b1116934dd9ea09294625ca  2009.0/SRPMS/firefox-ext-xmarks-3.5.10-0.1mdv2009.0.src.rpm
 07425c1f47917b38e1d0234885e1965f  2009.0/SRPMS/firefox-l10n-3.6.3-0.1mdv2009.0.src.rpm
 3d37604eec701b6cf4af3d1838e909f3  2009.0/SRPMS/firefox-theme-kfirefox-0.16-0.1mdv2009.0.src.rpm
 c7182e1d6cf288efab29adfda90e96f3  2009.0/SRPMS/gnome-python-extras-2.19.1-20.13mdv2009.0.src.rpm
 e6ea77abf2cedcbbfeb7800a35c2caf3  2009.0/SRPMS/sqlite3-3.6.23.1-0.1mdv2009.0.src.rpm
 86f62d2fb87e6ac0839ad62d76528e66  2009.0/SRPMS/xulrunner-1.9.2.3-0.2mdv2009.0.src.rpm
 1b06f8c1ef094dc481bad8e0f43223e6  2009.0/SRPMS/yelp-2.24.0-3.13mdv2009.0.src.rpm

 Mandriva Linux 2009.0/X86_64:
 4030cd99306a14ef5af556b69e810730  2009.0/x86_64/beagle-0.3.8-13.19mdv2009.0.x86_64.rpm
 ff8b44286445fe6c26fbbd233898843f  2009.0/x86_64/beagle-crawl-system-0.3.8-13.19mdv2009.0.x86_64.rpm
 803653b787f41199cb7e0e46be67dbea  2009.0/x86_64/beagle-doc-0.3.8-13.19mdv2009.0.x86_64.rpm
 7195749c6fad30582e2138ec83cd6257  2009.0/x86_64/beagle-epiphany-0.3.8-13.19mdv2009.0.x86_64.rpm
 1af4bd833fa9ca010e41131f838cbbfa  2009.0/x86_64/beagle-evolution-0.3.8-13.19mdv2009.0.x86_64.rpm
 eeb48bc921e2e3091203a18e31e0113d  2009.0/x86_64/beagle-gui-0.3.8-13.19mdv2009.0.x86_64.rpm
 c87ca77b25493fbf5e032b082ae52034  2009.0/x86_64/beagle-gui-qt-0.3.8-13.19mdv2009.0.x86_64.rpm
 861e1e257a359f1c59e5e26368f5139c  2009.0/x86_64/beagle-libs-0.3.8-13.19mdv2009.0.x86_64.rpm
 69d73c982942378a21ee3e98889a0ed5  2009.0/x86_64/devhelp-0.21-3.13mdv2009.0.x86_64.rpm
 a7d732cc0da6c950ef585a85046ed743  2009.0/x86_64/devhelp-plugins-0.21-3.13mdv2009.0.x86_64.rpm
 2d191ac392466c3477c7875e34a9f2da  2009.0/x86_64/epiphany-2.24.3-0.1mdv2009.0.x86_64.rpm
 a6c7a8ca3bcf34e9f3833e6a8b91e3b1  2009.0/x86_64/epiphany-devel-2.24.3-0.1mdv2009.0.x86_64.rpm
 d0e7e3245fa77b5ef8960a79ce21bb06  2009.0/x86_64/firefox-3.6.3-0.2mdv2009.0.x86_64.rpm
 63e520ba7588c1a239f52650a409abe3  2009.0/x86_64/firefox-af-3.6.3-0.1mdv2009.0.x86_64.rpm
 0a0514ae5279278dd543d8e9d5a74ea6  2009.0/x86_64/firefox-ar-3.6.3-0.1mdv2009.0.x86_64.rpm
 b046e1f2e21cfcc0dafcf2d1f2147e8d  2009.0/x86_64/firefox-be-3.6.3-0.1mdv2009.0.x86_64.rpm
 5b3934364b8700447e9d9535e250bd8f  2009.0/x86_64/firefox-bg-3.6.3-0.1mdv2009.0.x86_64.rpm
 6ddd1531777cf7ce67ea9716ba8cfddb  2009.0/x86_64/firefox-bn-3.6.3-0.1mdv2009.0.x86_64.rpm
 40fd81dd4a0149b65ae2966d22ea79cb  2009.0/x86_64/firefox-ca-3.6.3-0.1mdv2009.0.x86_64.rpm
 6dc1fa26932922f2e2fe3b7eafa96278  2009.0/x86_64/firefox-cs-3.6.3-0.1mdv2009.0.x86_64.rpm
 1c8d2e4d63dc840f5ff7336cf9a95f94  2009.0/x86_64/firefox-cy-3.6.3-0.1mdv2009.0.x86_64.rpm
 855f2c7dba3d39b2d18341e0e2b60142  2009.0/x86_64/firefox-da-3.6.3-0.1mdv2009.0.x86_64.rpm
 03a5d24dc0ac395cdb5863ad0d8a08a1  2009.0/x86_64/firefox-de-3.6.3-0.1mdv2009.0.x86_64.rpm
 e15eca0c2cf300641408dcae79dad35d  2009.0/x86_64/firefox-devel-3.6.3-0.2mdv2009.0.x86_64.rpm
 b873681e2b2bcf740ad1922d73c4fc3b  2009.0/x86_64/firefox-el-3.6.3-0.1mdv2009.0.x86_64.rpm
 255836fc16b38a3e9cff98fdec593d72  2009.0/x86_64/firefox-en_GB-3.6.3-0.1mdv2009.0.x86_64.rpm
 9d7f41999589a4ad2b9f3f302c2dadb1  2009.0/x86_64/firefox-eo-3.6.3-0.1mdv2009.0.x86_64.rpm
 34eb9899867ff82b381c0365e810734e  2009.0/x86_64/firefox-es_AR-3.6.3-0.1mdv2009.0.x86_64.rpm
 c04c9699007e522ecec8307222c30a02  2009.0/x86_64/firefox-es_ES-3.6.3-0.1mdv2009.0.x86_64.rpm
 062b0004b51f26ccce27a27653bb2bee  2009.0/x86_64/firefox-et-3.6.3-0.1mdv2009.0.x86_64.rpm
 fd7f4352375a80467def99dfba699e99  2009.0/x86_64/firefox-eu-3.6.3-0.1mdv2009.0.x86_64.rpm
 705f3472e2d3169ec363196510479912  2009.0/x86_64/firefox-ext-beagle-0.3.8-13.19mdv2009.0.x86_64.rpm
 1173a4b4fd3f38dd889af0d9ed59f6d1  2009.0/x86_64/firefox-ext-blogrovr-1.1.804-0.1mdv2009.0.x86_64.rpm
 41d89e33528a880294418ca6261ac2e7  2009.0/x86_64/firefox-ext-mozvoikko-1.0-0.1mdv2009.0.x86_64.rpm
 e6b4bbf44220b013c55cda04d1032b23  2009.0/x86_64/firefox-ext-scribefire-3.5.1-0.1mdv2009.0.x86_64.rpm
 38eff8b6559ebf17b31f4a55954efbf9  2009.0/x86_64/firefox-ext-xmarks-3.5.10-0.1mdv2009.0.x86_64.rpm
 b85b8ac568e02dec7e8b05b0de0ec9e9  2009.0/x86_64/firefox-fi-3.6.3-0.1mdv2009.0.x86_64.rpm
 5198ebe263a2800e0855b5ab1b5daeb9  2009.0/x86_64/firefox-fr-3.6.3-0.1mdv2009.0.x86_64.rpm
 05a37422c185c8b78a927b7046c2cad4  2009.0/x86_64/firefox-fy-3.6.3-0.1mdv2009.0.x86_64.rpm
 fb204ed00d4395e66642c2591e25d886  2009.0/x86_64/firefox-ga_IE-3.6.3-0.1mdv2009.0.x86_64.rpm
 7cde20e5c00181fce1c7ed0804c943fc  2009.0/x86_64/firefox-gl-3.6.3-0.1mdv2009.0.x86_64.rpm
 16d879121afa8fbb5e62fb79380a5c18  2009.0/x86_64/firefox-gu_IN-3.6.3-0.1mdv2009.0.x86_64.rpm
 931dadf42aeeeab516958a1ed007c6ef  2009.0/x86_64/firefox-he-3.6.3-0.1mdv2009.0.x86_64.rpm
 e9b6aa923e51c47616a8017637d5de35  2009.0/x86_64/firefox-hi-3.6.3-0.1mdv2009.0.x86_64.rpm
 6308d8595b6ecaeb1e21158ef6c68e88  2009.0/x86_64/firefox-hu-3.6.3-0.1mdv2009.0.x86_64.rpm
 1f3c56761fc6d167118da0e418b1963c  2009.0/x86_64/firefox-id-3.6.3-0.1mdv2009.0.x86_64.rpm
 b3f7f06b2dc1edca418d0d261f8baf82  2009.0/x86_64/firefox-is-3.6.3-0.1mdv2009.0.x86_64.rpm
 003945e3312360dc940af96f42d92fc7  2009.0/x86_64/firefox-it-3.6.3-0.1mdv2009.0.x86_64.rpm
 92c7a0e85cd1b95dd1d7d5955feac97f  2009.0/x86_64/firefox-ja-3.6.3-0.1mdv2009.0.x86_64.rpm
 197c6e8f4f1bdc3837695bdc041698be  2009.0/x86_64/firefox-kn-3.6.3-0.1mdv2009.0.x86_64.rpm
 119ed791ce67b84b07748ca2f0732b9c  2009.0/x86_64/firefox-ko-3.6.3-0.1mdv2009.0.x86_64.rpm
 b3ff00bb4864619033660a743012c463  2009.0/x86_64/firefox-lt-3.6.3-0.1mdv2009.0.x86_64.rpm
 29930fc9606f24675855adbc8b4b2b6a  2009.0/x86_64/firefox-lv-3.6.3-0.1mdv2009.0.x86_64.rpm
 082522a456ea74880c61bef4c2dcc4db  2009.0/x86_64/firefox-mk-3.6.3-0.1mdv2009.0.x86_64.rpm
 185f51ee26d47112b7d3a722623b1ad7  2009.0/x86_64/firefox-mr-3.6.3-0.1mdv2009.0.x86_64.rpm
 b9740341cfd4122dd60e6d5c9b127e61  2009.0/x86_64/firefox-nb_NO-3.6.3-0.1mdv2009.0.x86_64.rpm
 9624abaf7c0b8c2725c88628cbcb1c96  2009.0/x86_64/firefox-nl-3.6.3-0.1mdv2009.0.x86_64.rpm
 f1439430df34b78d5a0acb9b27577dda  2009.0/x86_64/firefox-nn_NO-3.6.3-0.1mdv2009.0.x86_64.rpm
 232d7f3748d59ff80a584096ec1f4187  2009.0/x86_64/firefox-pa_IN-3.6.3-0.1mdv2009.0.x86_64.rpm
 db9619c8da4b591aed632bbc253024a5  2009.0/x86_64/firefox-pl-3.6.3-0.1mdv2009.0.x86_64.rpm
 7a49d10b6dffc66c0339a2b289bffcf1  2009.0/x86_64/firefox-pt_BR-3.6.3-0.1mdv2009.0.x86_64.rpm
 b3095daf59caab458dcb66d44cf2715d  2009.0/x86_64/firefox-pt_PT-3.6.3-0.1mdv2009.0.x86_64.rpm
 ec2eb386bba46dfc82afc3b9a23c59dc  2009.0/x86_64/firefox-ro-3.6.3-0.1mdv2009.0.x86_64.rpm
 264e54e90afde4d91291f8e9513a35d0  2009.0/x86_64/firefox-ru-3.6.3-0.1mdv2009.0.x86_64.rpm
 d28cbbb51cd8af115d6aa19fdcbc667e  2009.0/x86_64/firefox-si-3.6.3-0.1mdv2009.0.x86_64.rpm
 e4a453357b85ffbc06a68272258d713b  2009.0/x86_64/firefox-sk-3.6.3-0.1mdv2009.0.x86_64.rpm
 0a5ee1c5390c9ad8219264124c740932  2009.0/x86_64/firefox-sl-3.6.3-0.1mdv2009.0.x86_64.rpm
 98dedcba8df7ba5fffe380fe9e42a91c  2009.0/x86_64/firefox-sq-3.6.3-0.1mdv2009.0.x86_64.rpm
 77c4d8206b02b1e3c3a9105db657dba1  2009.0/x86_64/firefox-sv_SE-3.6.3-0.1mdv2009.0.x86_64.rpm
 6d495b355a354f1cc41aa7c09853ff02  2009.0/x86_64/firefox-te-3.6.3-0.1mdv2009.0.x86_64.rpm
 619b1af0add310a0bc8f26af85ac5e4f  2009.0/x86_64/firefox-th-3.6.3-0.1mdv2009.0.x86_64.rpm
 641a6560edb4d3535bdcf5f2a3274ded  2009.0/x86_64/firefox-theme-kfirefox-0.16-0.1mdv2009.0.x86_64.rpm
 93dd62dde6f7acf1d8a005b4f0a125d4  2009.0/x86_64/firefox-tr-3.6.3-0.1mdv2009.0.x86_64.rpm
 063148775c8f70727edd8acc17ebba66  2009.0/x86_64/firefox-uk-3.6.3-0.1mdv2009.0.x86_64.rpm
 53209116b8df0c78b102d33d2bfe2e53  2009.0/x86_64/firefox-zh_CN-3.6.3-0.1mdv2009.0.x86_64.rpm
 e84fc88f0ff0f41466714d2b190dbcd7  2009.0/x86_64/firefox-zh_TW-3.6.3-0.1mdv2009.0.x86_64.rpm
 e94543ceb17503f17b461a176103a7e2  2009.0/x86_64/gnome-python-extras-2.19.1-20.13mdv2009.0.x86_64.rpm
 b63735f07ddc070cf2de9292321cf09e  2009.0/x86_64/gnome-python-gda-2.19.1-20.13mdv2009.0.x86_64.rpm
 e71637f9f5d358d618c7332cf05255d6  2009.0/x86_64/gnome-python-gda-devel-2.19.1-20.13mdv2009.0.x86_64.rpm
 bfed42f6df08ef6ccdad497afecddf2d  2009.0/x86_64/gnome-python-gdl-2.19.1-20.13mdv2009.0.x86_64.rpm
 9dc71957bcf1a93143eee7e3dc39e2d3  2009.0/x86_64/gnome-python-gtkhtml2-2.19.1-20.13mdv2009.0.x86_64.rpm
 fa197ed3a2e7f518d407dc766b792090  2009.0/x86_64/gnome-python-gtkmozembed-2.19.1-20.13mdv2009.0.x86_64.rpm
 5a4ee3b2f453dff90584d13c9017ca19  2009.0/x86_64/gnome-python-gtkspell-2.19.1-20.13mdv2009.0.x86_64.rpm
 8f36eb149978ab777d024e3957326c2e  2009.0/x86_64/lemon-3.6.23.1-0.1mdv2009.0.x86_64.rpm
 73956a58b0e05d086d715d04763163cd  2009.0/x86_64/lib64devhelp-1_0-0.21-3.13mdv2009.0.x86_64.rpm
 132e693099e379bd9640dd509a1a03a9  2009.0/x86_64/lib64devhelp-1-devel-0.21-3.13mdv2009.0.x86_64.rpm
 4ae6a7a7cf956414b89b13c83281044e  2009.0/x86_64/lib64sqlite3_0-3.6.23.1-0.1mdv2009.0.x86_64.rpm
 ee27f0c9e50f1014863bb55d13de33f6  2009.0/x86_64/lib64sqlite3-devel-3.6.23.1-0.1mdv2009.0.x86_64.rpm
 40de413fac8f9cc4852025ddd3c7c1d4  2009.0/x86_64/lib64sqlite3-static-devel-3.6.23.1-0.1mdv2009.0.x86_64.rpm
 b461aaa3bedd440fe64016cc7884c008  2009.0/x86_64/lib64xulrunner1.9.2.3-1.9.2.3-0.2mdv2009.0.x86_64.rpm
 d0a615dffd6f8994c65afb35e903b7cb  2009.0/x86_64/lib64xulrunner-devel-1.9.2.3-0.2mdv2009.0.x86_64.rpm
 725550e9353b2363ac9c2762af7b312d  2009.0/x86_64/mozilla-thunderbird-beagle-0.3.8-13.19mdv2009.0.x86_64.rpm
 bd2b864a41009c5be5f2089b24a23ec2  2009.0/x86_64/sqlite3-tools-3.6.23.1-0.1mdv2009.0.x86_64.rpm
 fcbdb22765c0c97bbc2c564ee830136f  2009.0/x86_64/tcl-sqlite3-3.6.23.1-0.1mdv2009.0.x86_64.rpm
 908aaacd5ab6f41316d7ddf994a8d816  2009.0/x86_64/xulrunner-1.9.2.3-0.2mdv2009.0.x86_64.rpm
 80ca2d23beb4614c6bb2a93d3ce030f7  2009.0/x86_64/yelp-2.24.0-3.13mdv2009.0.x86_64.rpm 
 be1deab60f8a725f6b8bfbdb8a238599  2009.0/SRPMS/beagle-0.3.8-13.19mdv2009.0.src.rpm
 958d586e0f51b3eb27c2f8f52e7829db  2009.0/SRPMS/devhelp-0.21-3.13mdv2009.0.src.rpm
 4792b42cbf525647004d34d274d6682d  2009.0/SRPMS/epiphany-2.24.3-0.1mdv2009.0.src.rpm
 7e6b40730ae28d3084d6177fb3403037  2009.0/SRPMS/firefox-3.6.3-0.2mdv2009.0.src.rpm
 4c7598ff3fa6a31f94e709d181ca2f09  2009.0/SRPMS/firefox-ext-blogrovr-1.1.804-0.1mdv2009.0.src.rpm
 025b7f312ccccfd2067f120a810a919a  2009.0/SRPMS/firefox-ext-mozvoikko-1.0-0.1mdv2009.0.src.rpm
 8918fef155fcc90af164c9150baeaaa5  2009.0/SRPMS/firefox-ext-scribefire-3.5.1-0.1mdv2009.0.src.rpm
 227410c21b1116934dd9ea09294625ca  2009.0/SRPMS/firefox-ext-xmarks-3.5.10-0.1mdv2009.0.src.rpm
 07425c1f47917b38e1d0234885e1965f  2009.0/SRPMS/firefox-l10n-3.6.3-0.1mdv2009.0.src.rpm
 3d37604eec701b6cf4af3d1838e909f3  2009.0/SRPMS/firefox-theme-kfirefox-0.16-0.1mdv2009.0.src.rpm
 c7182e1d6cf288efab29adfda90e96f3  2009.0/SRPMS/gnome-python-extras-2.19.1-20.13mdv2009.0.src.rpm
 e6ea77abf2cedcbbfeb7800a35c2caf3  2009.0/SRPMS/sqlite3-3.6.23.1-0.1mdv2009.0.src.rpm
 86f62d2fb87e6ac0839ad62d76528e66  2009.0/SRPMS/xulrunner-1.9.2.3-0.2mdv2009.0.src.rpm
 1b06f8c1ef094dc481bad8e0f43223e6  2009.0/SRPMS/yelp-2.24.0-3.13mdv2009.0.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFLzcvxmqjQ0CJFipgRAtNGAKDEqh4LRf1/oRYyO5JD1KnyY8XLIgCeMdT4
Jz48CUUPft0pgWj9ornc5zI=
=8WEi
-----END PGP SIGNATURE-----