Firefox浏览器引擎远程内存破坏漏洞

2010-02-26T00:00:00
ID SSV:19191
Type seebug
Reporter Root
Modified 2010-02-26T00:00:00

Description

BUGTRAQ ID: 38286 CVE ID: CVE-2010-0159

Firefox是一款流行的开源WEB浏览器。

Firefox浏览器引擎的layout/generic/nsBlockFrame.cpp文件中的nsBlockFrame::StealFrame 函数中存在内存破坏漏洞。用户受骗访问了恶意网页就可能触发这个漏洞,导致浏览器崩溃或执行任意代码。

Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla Thunderbird 3.0 Mozilla SeaMonkey 2.0 临时解决方法:

  • 禁用JavaScript。

厂商补丁:

Debian

Debian已经为此发布了一个安全公告(DSA-1999-1)以及相应补丁: DSA-1999-1:New xulrunner packages fix several vulnerabilities 链接:http://www.debian.org/security/2010/dsa-1999

补丁下载:

Source archives:

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.18-1.diff.gz Size/MD5 checksum: 116111 961d458012f83e32e0c3eb153359cc23 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.18.orig.tar.gz Size/MD5 checksum: 44161859 eeb10647fe0fe9a6b20cb725732b79a9 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.18-1.dsc Size/MD5 checksum: 1755 cbbc2a673c56439890e4c75c0062e06a

Architecture independent packages:

http://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.9.0.18-1_all.deb Size/MD5 checksum: 1465392 7874b2aefed84b79736a44ef0589b3e2

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_alpha.deb Size/MD5 checksum: 3666096 3382b0eae2d985ae9bbcf16014806825 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_alpha.deb Size/MD5 checksum: 432294 c2ec2c14cabb28156734e9e6c96c84c5 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_alpha.deb Size/MD5 checksum: 112122 7d0db4c185015b0ec7caeb1e9843216c http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_alpha.deb Size/MD5 checksum: 163800 e31c406c36c7ea503f772dbebc7039ba http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_alpha.deb Size/MD5 checksum: 938384 af22c500dae1c84c661b0afa62b5fc2c http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_alpha.deb Size/MD5 checksum: 72604 4a6d162a104fd021e52e61bffe28d70e http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_alpha.deb Size/MD5 checksum: 223528 ebfeb23f90f207524d2b14c1ab25b742 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_alpha.deb Size/MD5 checksum: 51113942 62902bb1c3c8349090b9055d6efa1482 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_alpha.deb Size/MD5 checksum: 9501180 538eb45320247045794a15c4bd1071ac

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_amd64.deb Size/MD5 checksum: 50351080 62a347648f988e78ca90d1d65be9ed13 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_amd64.deb Size/MD5 checksum: 101614 206328a373e5d2992ccb19ed064c8295 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_amd64.deb Size/MD5 checksum: 70008 41913d4df58730fe256a0bd480308d8e http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_amd64.deb Size/MD5 checksum: 223086 7eeb2da5ef7f96811b88e6cc97181a99 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_amd64.deb Size/MD5 checksum: 374298 b864e663810235886e5880c494043a01 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_amd64.deb Size/MD5 checksum: 890318 6fe29f796873ccdcfef29a98ca623b9c http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_amd64.deb Size/MD5 checksum: 7730124 0ccda6e5dbfac8f7d943b809ea6cb3dd http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_amd64.deb Size/MD5 checksum: 152064 f7f7bc816f78aed6b1afa7a9b42469b4 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_amd64.deb Size/MD5 checksum: 3290046 806026ede74d749bc3a900ff56371f18

arm architecture (ARM)

http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_arm.deb Size/MD5 checksum: 350644 37e691c10c63e6b489e6540cdef420e2 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_arm.deb Size/MD5 checksum: 49307652 46a58ff355717da9e5ff845bcf9981b5 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_arm.deb Size/MD5 checksum: 68334 da39688fccc9ee6e5a166af30995fbde http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_arm.deb Size/MD5 checksum: 222152 8c0347c37daff67429faba68b94d12a3 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_arm.deb Size/MD5 checksum: 83992 85a600ebcf53662d7b43f1b06e3bf86a http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_arm.deb Size/MD5 checksum: 3583634 561e9b19477c0dc7a397fd068bf69230 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_arm.deb Size/MD5 checksum: 815240 8815149ae297fc80b6a6583a87129f71 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_arm.deb Size/MD5 checksum: 6797362 cb6388fb24c282d11557598dc5fdf67c http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_arm.deb Size/MD5 checksum: 140764 11c84fe62069de449a85b88a747ab55b

armel architecture (ARM EABI)

http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_armel.deb Size/MD5 checksum: 223466 9ca0da7a2de7faa57d73138f20eb1951 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_armel.deb Size/MD5 checksum: 6957582 15ac2699febcd1aa80eb5777b107f9a1 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_armel.deb Size/MD5 checksum: 50145544 ea9e32f6fdbbb13c6c13ceabd754fe46 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_armel.deb Size/MD5 checksum: 3581130 b848057bc9531db0d45f3e546b9008d2 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_armel.deb Size/MD5 checksum: 352992 88696f63901aad373381a57648ae5b97 http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_armel.deb Size/MD5 checksum: 141322 ffb5f9bd526ae8332796af053ffa443f http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_armel.deb Size/MD5 checksum: 84358 83aa9d77331cacc83d499f051045e5f2 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_armel.deb Size/MD5 checksum: 822052 b1b624be2de8d879031968da29db1204 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_armel.deb Size/MD5 checksum: 69828 bf44c1a8dd3032732a5f095531bb60bc

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_hppa.deb Size/MD5 checksum: 158562 0fc6d96735f5cf70d0c6919a8957b626 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_hppa.deb Size/MD5 checksum: 9515012 6ed8f49f167bb6ed571d69bb6b4e7e80 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_hppa.deb Size/MD5 checksum: 413118 1c44a3840c9d819df841c1364065ae51 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_hppa.deb Size/MD5 checksum: 899168 791aecc32ffad7c9c8a8e262d89e2f4c http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_hppa.deb Size/MD5 checksum: 51229704 feeafa3d9f4c2a019eb6d7d6ed86e384 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_hppa.deb Size/MD5 checksum: 223408 760eebdfd9d75de15598b6942c24ed58 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_hppa.deb Size/MD5 checksum: 72076 4c1af3bdcc34ed60fa67046f8c0f27b6 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_hppa.deb Size/MD5 checksum: 106790 34128b587f9bc4440273f2a9c50c60dd http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_hppa.deb Size/MD5 checksum: 3631216 879fb7d48fac57fb7cbc7b745aefc80a

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_i386.deb Size/MD5 checksum: 6602846 f4a442cd4340401eaf15b3789c6440a3 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_i386.deb Size/MD5 checksum: 221986 f5952c4ff53f23dcbb5e83d4a1dc735a http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_i386.deb Size/MD5 checksum: 68144 aa5b5b1f2bd1dd4dca1d6f23a1e77475 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_i386.deb Size/MD5 checksum: 82650 c92d7cdd88482af8d17372fb206a7771 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_i386.deb Size/MD5 checksum: 49521182 ab05f06480be3fccd20cdf24f3316170 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_i386.deb Size/MD5 checksum: 350912 5d04bea3ead683aa294c3c6a69ca51df http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_i386.deb Size/MD5 checksum: 3569664 9b88aef38d9c9afa92404e5a1aa1858a http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_i386.deb Size/MD5 checksum: 852056 fc6194c645bad45268962040cf2f741f http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_i386.deb Size/MD5 checksum: 140810 8bf780e4cd352063c1db860ba2ce6442

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_ia64.deb Size/MD5 checksum: 3399426 8368a170abe08b475502ffaa8f6ef01a http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_ia64.deb Size/MD5 checksum: 542202 f339fded4d5e1e72ce22a021a2e855c9 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_ia64.deb Size/MD5 checksum: 76590 31997304eef7aee61ff7cce784b64ee5 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_ia64.deb Size/MD5 checksum: 223218 27abf1d33790a29eeeed3ea4b4964a85 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_ia64.deb Size/MD5 checksum: 121604 ebce1c45860953d72149ea62df1c3614 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_ia64.deb Size/MD5 checksum: 811250 c05f1961aa895766395478b83ff2cc3c http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_ia64.deb Size/MD5 checksum: 11311038 012ce2b6d478aff1425ac67d7ab363f1 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_ia64.deb Size/MD5 checksum: 49702958 70229b141f044a4e9f9b59bd6bd76769 http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_ia64.deb Size/MD5 checksum: 180270 33ec97ddc77999747ca8255fe6ca5b1e

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_mips.deb Size/MD5 checksum: 51875290 249aa2adc5bc08d12d15c5ff31bb9677 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_mips.deb Size/MD5 checksum: 223132 c8aaf2d7fae0c056e36e1400d89626a6 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_mips.deb Size/MD5 checksum: 70216 11ff7e521c0a01fe591ccea2f854c983 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_mips.deb Size/MD5 checksum: 3616440 6f9099c4e119ad9417e723d8686d5047 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_mips.deb Size/MD5 checksum: 380320 3b48ef0b7b6fb5099c8289a1d034d66c http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_mips.deb Size/MD5 checksum: 97184 f1ce0ac5d9a06b8df3316679e727f3df http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_mips.deb Size/MD5 checksum: 7676832 f956e5bbe2f0b39127305a61656aed6a http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_mips.deb Size/MD5 checksum: 918340 900ca7652a94f3c85a256bbd1b9e44c3 http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_mips.deb Size/MD5 checksum: 144712 43ea8dbcea280d63a42846dde20811d9

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 378688 823e2e84fb9f476a5362f7efe4e30777 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 69948 31ec842502b7faf5dbecaa80ef2cbee1 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 7379096 e48e59237114483e16f80d99dc76b2ba http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 3310672 c1123f4d6e89997ddb4a09d428bbbf48 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 900496 cda86c575da08ebd21bb6c6001f085cb http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 145096 63bd9568ef5aaf9429c4e5b37b030c27 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 49999804 682d85b71c822db082443d47bfa0dd50 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 96850 23b2c1836a133774cc47868ebd2bf111 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_mipsel.deb Size/MD5 checksum: 223238 13d5d183ba4b9788153f285d67eded79

powerpc architecture (PowerPC)

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 7304358 74dd5ed0d04ececdc6e2918f2f9809ee http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 152670 c96287c675dc73d15e15656996de1bb4 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 3592560 a7e7dcd1332a7de0a851b108454c907d http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 73424 46e45ae58cab7ced9fdea35598c65ec5 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 223230 08d8ae57f6a060087dcdaf26e0680e32 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 888386 db4e4b4915cdf22af9cb0f84ebf85d4d http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 94424 55bf14bf0548eb0e378bd569dc19cb7d http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 51424848 885ebada38e85a1ee012abb7d6eb73e5 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_powerpc.deb Size/MD5 checksum: 363422 320d25d4362871bd739d6612f6cecce2

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_s390.deb Size/MD5 checksum: 3307864 2933d8e82890dd74ede9b9c5146e7dbf http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_s390.deb Size/MD5 checksum: 406776 4ed85a0aff956abc622bc6886604fef9 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_s390.deb Size/MD5 checksum: 72972 57cd33e5a3eb33a193ed5e7b7f7d54eb http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_s390.deb Size/MD5 checksum: 156196 a130564911637e4f646bfc1a4b426210 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_s390.deb Size/MD5 checksum: 909430 287a6be6c2d44da44b5512b1865f05b6 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_s390.deb Size/MD5 checksum: 8396240 63a64bdb1c250679a39ac129e9f51740 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_s390.deb Size/MD5 checksum: 105630 8aae2a1d417e4a99c66fa96878881b62 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_s390.deb Size/MD5 checksum: 51200776 f7c31d337a4a5597637bc2e31e1ec0b7 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_s390.deb Size/MD5 checksum: 223216 cdf974bc762234a45aa5223d775de2c9

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.18-1_sparc.deb Size/MD5 checksum: 143860 091ec390f015be3eba4c522c66ee51e3 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.18-1_sparc.deb Size/MD5 checksum: 821270 330960373dbb626d51d4149a81e24429 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.18-1_sparc.deb Size/MD5 checksum: 49375502 f6bec1eefff555877964ca0d5051ec98 http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.18-1_sparc.deb Size/MD5 checksum: 3574148 98a929f2aa4dab1faee64e38b731ee59 http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.18-1_sparc.deb Size/MD5 checksum: 69840 96c306ae02ba5538beca32315bd92b35 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.18-1_sparc.deb Size/MD5 checksum: 221208 99b117922e86cd870ac0ecd53af0ef2d http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.18-1_sparc.deb Size/MD5 checksum: 83804 7b0485601946739a0da66761c777eb53 http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.18-1_sparc.deb Size/MD5 checksum: 350608 d7bb678be22d7d4e341535bc68ec8d2a http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.18-1_sparc.deb Size/MD5 checksum: 7173326 9cc51c4ca3b567c93e30abd0bdd78dca

补丁安装方法:

  1. 手工安装补丁包:

首先,使用下面的命令来下载补丁软件: # wget url (url是补丁下载链接地址)

然后,使用下面的命令来安装补丁:
# dpkg -i file.deb (file是相应的补丁名)

  1. 使用apt-get自动安装补丁包:

首先,使用下面的命令更新内部数据库: # apt-get update

然后,使用下面的命令安装更新软件包: # apt-get upgrade

Mozilla

目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:

http://www.mozilla.org/

RedHat

RedHat已经为此发布了一个安全公告(RHSA-2010:0112-01)以及相应补丁: RHSA-2010:0112-01:Critical: firefox security update 链接:https://www.redhat.com/support/errata/RHSA-2010-0112.html

Ubuntu

Ubuntu已经为此发布了一个安全公告(USN-895-1)以及相应补丁: USN-895-1:firefox-3.0, xulrunner-1.9 vulnerabilities 链接:http://www.ubuntu.com/usn/USN-895-1