----------------------------------------------------------------------


  Secunia CSI
+ Microsoft SCCM
-----------------------
= Extensive Patch Management

http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/


----------------------------------------------------------------------

TITLE:
Ubuntu update for nss

SECUNIA ADVISORY ID:
SA39278

VERIFY ADVISORY:
http://secunia.com/advisories/39278/

DESCRIPTION:
Ubuntu has issued an update for nss. This fixes a vulnerability,
which can be exploited by malicious people to manipulate certain
data.

For more information:
SA38400

SOLUTION:
Apply updated packages (also apply updated thunderbird packages to
fix a regression).

-- Ubuntu 9.10 --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.6-0ubuntu0.9.10.2.diff.gz
Size/MD5: 36659 1c82d002115ed4a76dc98d33ef5c839c
http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.6-0ubuntu0.9.10.2.dsc
Size/MD5: 1651 41544d2843858123ad5852de1587744c
http://security.ubuntu.com/ubuntu/pool/main/n/nss/nss_3.12.6.orig.tar.gz
Size/MD5: 5947630 da42596665f226de5eb3ecfc1ec57cd1

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.6-0ubuntu0.9.10.2_amd64.deb
Size/MD5: 3235700 8227d9d710a9784750fc541f82d85101
http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.6-0ubuntu0.9.10.2_amd64.deb
Size/MD5: 1234558 f8db18eb4fec7df4387e5e546ea99871
http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.6-0ubuntu0.9.10.2_amd64.deb
Size/MD5: 263208 692167e64c00a9990af72a28299b4fbb
http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-0d_3.12.6-0ubuntu0.9.10.2_amd64.deb
Size/MD5: 17854 f9fa214108ab20d8fe4d61567a86d7c0
http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.6-0ubuntu0.9.10.2_amd64.deb
Size/MD5: 313212 4ae57dcb06572bcdc1e311977a965c55

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d-dbg_3.12.6-0ubuntu0.9.10.2_i386.deb
Size/MD5: 3178422 4a141b3f01631497184c0bb260a212f3
http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-1d_3.12.6-0ubuntu0.9.10.2_i386.deb
Size/MD5: 1119994 8e4bfbd067aa051603306ce57949ce51
http://security.ubuntu.com/ubuntu/pool/main/n/nss/libnss3-dev_3.12.6-0ubuntu0.9.10.2_i386.deb
Size/MD5: 260530 c61feb6f65d7419f93f355a5f0755917
http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-0d_3.12.6-0ubuntu0.9.10.2_i386.deb
Size/MD5: 17856 05ac21be0089e816c076f8707d41d21b
http://security.ubuntu.com/ubuntu/pool/universe/n/nss/libnss3-tools_3.12.6-0ubuntu0.9.10.2_i386.deb
Size/MD5: 299834 26d317dc29710b27dd0d0b7a36b6c2a1

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.6-0ubuntu0.9.10.2_lpia.deb
Size/MD5: 3216556 9230b137f92129c304dddfc5c67853fe
http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.6-0ubuntu0.9.10.2_lpia.deb
Size/MD5: 1095892 9566ecb3416bd99ba0e6288505626fe9
http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.6-0ubuntu0.9.10.2_lpia.deb
Size/MD5: 259484 0236cb25267ac3ca1b3bfd586d14d26d
http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.6-0ubuntu0.9.10.2_lpia.deb
Size/MD5: 17858 ecb362aec61c87f1cfc4e86cd2dec5cb
http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.6-0ubuntu0.9.10.2_lpia.deb
Size/MD5: 298510 2977f41a1b2fcf7ca25b331336f7dc8f

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.6-0ubuntu0.9.10.2_powerpc.deb
Size/MD5: 3325490 ac9caf32bab4d4b911d1c54112583b65
http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.6-0ubuntu0.9.10.2_powerpc.deb
Size/MD5: 1207122 99b17d40842c1804ee23d19e4a7ffaa0
http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.6-0ubuntu0.9.10.2_powerpc.deb
Size/MD5: 261820 f46b59e90bf4ff07ca79b5d404f372ed
http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.6-0ubuntu0.9.10.2_powerpc.deb
Size/MD5: 17858 dca2efb9e1426ff39c55008eaf942926
http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.6-0ubuntu0.9.10.2_powerpc.deb
Size/MD5: 311022 da3a483c19347cd667c11d8a989d15aa

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d-dbg_3.12.6-0ubuntu0.9.10.2_sparc.deb
Size/MD5: 2967780 e3456024e64ee1d14b5b754a93840ac7
http://ports.ubuntu.com/pool/main/n/nss/libnss3-1d_3.12.6-0ubuntu0.9.10.2_sparc.deb
Size/MD5: 1074620 202e630d20824b2d4e2614d11d86c2c4
http://ports.ubuntu.com/pool/main/n/nss/libnss3-dev_3.12.6-0ubuntu0.9.10.2_sparc.deb
Size/MD5: 257422 fa69b29c59fe334d65d433ab11febbed
http://ports.ubuntu.com/pool/universe/n/nss/libnss3-0d_3.12.6-0ubuntu0.9.10.2_sparc.deb
Size/MD5: 17856 287ae523a22a8049d3d1c802d5760b83
http://ports.ubuntu.com/pool/universe/n/nss/libnss3-tools_3.12.6-0ubuntu0.9.10.2_sparc.deb
Size/MD5: 299970 ed1b8755bc1e9da16a08c82ebfecf0fd

Updated thunderbird packages:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2.diff.gz
Size/MD5: 134402 4f55d904c22d00c1423fcdf778237df3
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2.dsc
Size/MD5: 2362 5fbf0ab8c09988462ffad652d5724ec1
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.24+build1+nobinonly.orig.tar.gz
Size/MD5: 36467375 a952c9895cc90b89f160c4b3694de834

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_all.deb
Size/MD5: 62220 92dafa6f0a04d064a0c96199ce9faef6
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_all.deb
Size/MD5: 62208 0e785915e1142f3bb25573651cd2a76b

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_amd64.deb
Size/MD5: 3738538 5d00b51452f0a5ada7aa859d4e073536
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_amd64.deb
Size/MD5: 62562 5f4e424d427833b1490f28ec3a5073e5
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_amd64.deb
Size/MD5: 12558830 ea6aea8f8aea5a22927a33fa3d49e69a

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_i386.deb
Size/MD5: 3722604 00383caa32265845d431ba1c41370e51
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_i386.deb
Size/MD5: 62562 72a659110cc3ce2a8321c0a2f9475de6
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_i386.deb
Size/MD5: 11177860 de57f8a625ed43983853b3f1f1bbf567

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_lpia.deb
Size/MD5: 3720600 dd62f203c661fdf8da663f6c5d53445e
http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_lpia.deb
Size/MD5: 62564 79e32137bc4bc26ab33b3fd9c8db6067
http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_lpia.deb
Size/MD5: 11025166 649235af94da5615278de12fd8ea4005

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_powerpc.deb
Size/MD5: 3729730 a90d7dd672e198674a46a4c0f9e9dba1
http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_powerpc.deb
Size/MD5: 62562 6137b40f8bf9012911479830602ef04d
http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_powerpc.deb
Size/MD5: 12297146 45dae3dadc5ab90e41dc8e61ca30f67b

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_sparc.deb
Size/MD5: 3725800 0e080e766d6631585cd3d3569e4c1d56
http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_sparc.deb
Size/MD5: 62568 f4ad15ef0907e0a3efa47595a9e6f33f
http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.2_sparc.deb
Size/MD5: 11193490 9eae6654fbe5ff0a7b3bbc5521c4f60e

ORIGINAL ADVISORY:
USN-927-1:
https://lists.ubuntu.com/archives/ubuntu-security-announce/2010-April/001075.html

USN-927-2:
https://lists.ubuntu.com/archives/ubuntu-security-announce/2010-April/001078.html

USN-927-3:
https://lists.ubuntu.com/archives/ubuntu-security-announce/2010-April/001079.html

OTHER REFERENCES:
SA38400:
http://secunia.com/advisories/38400/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------