==========================================================Ubuntu Security Notice USN-740-1             March 17, 2009
nss, firefox vulnerability
CVE-2004-2761
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 7.10
Ubuntu 8.04 LTS
Ubuntu 8.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libnss3                         1.5.dfsg+1.5.0.15~prepatch080614k-0ubuntu2

Ubuntu 7.10:
  libnss3-0d                      3.11.5-3ubuntu0.7.10.2

Ubuntu 8.04 LTS:
  libnss3-0d                      3.12.0.3-0ubuntu0.8.04.5
  libnss3-1d                      3.12.0.3-0ubuntu0.8.04.5

Ubuntu 8.10:
  libnss3-1d                      3.12.0.3-0ubuntu5.8.10.1

After a standard system upgrade you need to restart your session to
effect the necessary changes.

Details follow:

The MD5 algorithm is known not to be collision resistant. This update
blacklists the proof of concept rogue certificate authority as discussed
in https://marc-stevens.nl/research/hashclash/rogue-ca/


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   188837 84bf6c0e34576e50daab0284028533bb
          Size/MD5:     2389 abbe8becc260777f55315eb565f8d732
          Size/MD5: 48504132 171958941a2ca0562039add097278245

  Architecture independent packages:

          Size/MD5:    53898 025eab1318c7a90e48fb0a927bbbd433
          Size/MD5:    53014 87135a54ac04ea95a0a3c7dccb8a4d4e

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5: 47681092 19a313089bf1da267950c8f5b8d2d2df
          Size/MD5:  2859292 f6a4b48f0e0e3250d83f0bf4183836f7
          Size/MD5:    86270 0bd3983f76c7474d37018f26eee721f4
          Size/MD5:  9494334 91c75d6baf740531224bed258c6622b9
          Size/MD5:   222572 2779237df4dc1c30d8d2c01623eef1e3
          Size/MD5:   166118 862f4a02164840c1d94228a396c2688c
          Size/MD5:   248116 183208d5e43c3ddc117d6cbefc54a472
          Size/MD5:   826574 2ff813a52cac4b3392f056b145129821
          Size/MD5:   218858 2fcc1d909f4fdafaced1b1f737f83bf1

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5: 44228668 5a244b5b731d0d703cb573e2db10b74b
          Size/MD5:  2859256 274033babbff1131a391ca71c19a6e6b
          Size/MD5:    78600 3e86ec8d1b73b8f7b822f12aaa56451a
          Size/MD5:  7997718 56cb9f85d34aa86721dcc36414b8f0e9
          Size/MD5:   222564 14edfb722d08b49930b901114b841c81
          Size/MD5:   150606 fa56606c4d002559ee41e965299b523a
          Size/MD5:   248106 58139d67e47359f9cb056ad29292d06d
          Size/MD5:   717824 ce294179ee0e0fcdea589e751548f04e
          Size/MD5:   212058 b3874b6f769aeafedce238b9a15e7b09

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5: 49085684 a4ea3920e8120e9dc7138cf8e8595aa4
          Size/MD5:  2859352 dac458ed9e848ba8c64d0e18071149f8
          Size/MD5:    81686 228d420fc876cb95b6edad70d58c2c48
          Size/MD5:  9113232 7ba2b92dad312ca9d2186dac6380d638
          Size/MD5:   222564 9e89e2cc261f1c1b43e0b765e140d3d5
          Size/MD5:   163310 3ddb28abafbffe0943e25f48267df5f1
          Size/MD5:   248128 94da18de9bba74798a5ae257e85d882b
          Size/MD5:   817522 eb53d37dea9fce55780abda44b94ca89
          Size/MD5:   215556 779f90ccb4534487d2274536ac9279dd

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5: 45629214 b30a5365e327c4366ae3ea2b393e1d78
          Size/MD5:  2859296 c7f225dc39717d6156b9163c7a8ddda0
          Size/MD5:    80180 51ca826844fa46702feb9bbeb5c6e999
          Size/MD5:  8499070 ee1fd111aa113ac50e5ea42dc85e1e77
          Size/MD5:   222590 6a5621015d57ffbd93f92a8552d98e54
          Size/MD5:   153210 b7c4a9074a678fcaf70a4db7bcb8fd5d
          Size/MD5:   248150 1273ab06f98bf861e4e66985add8685a
          Size/MD5:   728698 cd5ba0f693710a604274d327d4724c88
          Size/MD5:   213030 fe7a017cd7f4a8a9064372e51f903263

Updated packages for Ubuntu 7.10:

  Source archives:

          Size/MD5:    23735 2c3b55fe3f316790d2174a56709723ad
          Size/MD5:     1925 9d9a2fa42ff8dcb452761d66e3238ef6
          Size/MD5:  3696893 1add44e6a41dbf5091cfd000f19ad6b9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  3143890 dad0155f293aff8a59d42086cef022c3
          Size/MD5:   799588 70d491944efd2ce20cb839da11030b0e
          Size/MD5:   241342 567c357ea31e0e1729db4738822aa7b0
          Size/MD5:   656372 a6868f642b5c295236c7df01dbc3f2d9

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  2995870 d4ea291de433c1768148f35a4f40e596
          Size/MD5:   723166 81b970c37e37b2bfe13bf8edf8b8c2df
          Size/MD5:   238436 a901d3b0431faa6bfd4d8b732fc6b8ed
          Size/MD5:   605568 f7a02ba6c2e65c2e3644f81e2e5add33

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  3213428 32f032e4c5ebc8383d334e2de5b1e0b5
          Size/MD5:   709556 606d9ee62127ecad6620ce6ee2a351c1
          Size/MD5:   237148 526eb9b27871cee224d480ce8483d015
          Size/MD5:   596394 35c4ef7f97a6934947760236b119d1f1

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  3168400 13560d02da9c481147177504476a3f21
          Size/MD5:   807892 5a0232d184bb4d87811974d61a902e17
          Size/MD5:   240514 9cfb4b3bace2f033b7c55ba571d0c4a1
          Size/MD5:   645362 ccd118c24941759b0c2e758ae60b4ba5

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  2834042 f884524281d9521e07b60c8bf9aa8074
          Size/MD5:   718096 906896f0101a88bd6cb78ffdb103fe0e
          Size/MD5:   235222 f679c8d076c15860a41c1e16b1d69ded
          Size/MD5:   576390 75811d5dc9ddd1eca108bc50ffe3e911

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:    38918 6fda80e067b0f84e323b3556b5f9dd18
          Size/MD5:     2001 e9365c71192c0e568d5dd9891708e436
          Size/MD5:  5161407 9e96418400e073f982e83c235718c4e9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    17910 7933180f37ce55969719730463fef4cb
          Size/MD5:  4511304 1a241985ee6673075b8610bbb2be2902
          Size/MD5:  1135226 fcc9b7555aac5a0ef0260aa639b7421a
          Size/MD5:   256738 992898a7cce94822e29a3e0d5d318e46
          Size/MD5:   813730 542b82a7837b4a43191fd5862a97699e

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    17894 3ea3554784b1242ce89f96bb631d0c4d
          Size/MD5:  4294520 d7eb7d334bd821d887e24d76d8e2804f
          Size/MD5:  1017710 7afd17b32bc5ce80babf2405488997e8
          Size/MD5:   253724 f7f8ad3723f384a657907016b8476c35
          Size/MD5:   741278 ed53c68732f059a90a35310b68c4be88

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:    17874 5e1a506010c923ba8a41129fef693344
          Size/MD5:  4322188 cd5765f42aaffa32e20b0ac0510d9b6c
          Size/MD5:   993934 313d088bd4a0a44fe05b762e33ef927d
          Size/MD5:   252500 dcaf82868eaa0e3162a6a49fb6f512be
          Size/MD5:   719648 8e422c9ee3dd5a062f547d36d6e2725c

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    20352 144b270c8fc23407e1da27112151c952
          Size/MD5:  4440132 f89a7f34a199abd8e0d840bb011ca5bf
          Size/MD5:  1115852 d88c0295406e468f7ac1c087edb661dd
          Size/MD5:   255446 4eef63577fbaa5b611b0d9064c47ac6c
          Size/MD5:   777064 83ad19b301d2c1eceef6682cbad5a00d

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    17976 c763ceebcc3bf6371477809a8589cebf
          Size/MD5:  4038136 bbb4ff75f73844f33727fada2ca730b4
          Size/MD5:   995598 2785d368bbb6665eee586ac3fc3e453e
          Size/MD5:   250450 a972e1131466d149480a574a57537c37
          Size/MD5:   702432 d16a1353ba80d7104820f97c4f712334

Updated packages for Ubuntu 8.10:

  Source archives:

          Size/MD5:    38881 8be9f8eb187a657a743e115f58dbb58b
          Size/MD5:     2001 88381f73650cd5c2c369f387638ec40d
          Size/MD5:  5161407 9e96418400e073f982e83c235718c4e9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  4696732 5e2844909ee8896f71548c37f7ab711f
          Size/MD5:  1182642 6f73554c7970e2c0e3da7dcddf8d4d7f
          Size/MD5:   256520 808f5ff374081b1fd7f981699e267828
          Size/MD5:    17962 63411a0d50d9fa340f688c7a5cec33ae
          Size/MD5:   824382 367bbe2bf29f17c4fa5b085142e0bc8f

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  4450042 bb8560c5208a6f4d2a121a93d7ff7bac
          Size/MD5:  1054914 1f7cbdc5e0776b8c2fc92241776bd96e
          Size/MD5:   253554 c1cc8fff73ef7b34dadc6fea411bc7db
          Size/MD5:    17940 b3577f334ed9f5a95c6fdbdd4de83ef4
          Size/MD5:   752462 703f7bd356efc312f216e361209ef3a7

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  4482980 c27f13a5f5aba10c93b2dda917c1ba31
          Size/MD5:  1029092 3b2805f79d61b595907187846da18a54
          Size/MD5:   252140 06b18884a6e275a5fc9a73abd1464875
          Size/MD5:    17914 28d1eeaac6ba2f9c17da9a9a6ea35fdd
          Size/MD5:   730786 e1497e0cbdf8d7c3ac4c6e80e86837bf

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  4659468 ceb162226c93c950c71d2f0236b9d53e
          Size/MD5:  1137358 f61287d145339ece156686d86a971480
          Size/MD5:   255312 d7787174c0d6b25467b0f1262306be06
          Size/MD5:    20352 082622bc3e21161a1085695bd4f8f961
          Size/MD5:   775316 78ca70e113bd97d42f62e19e0ac8fdb1

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  4168250 b9f3c0b8eab76476c9bb057b43d9df40
          Size/MD5:  1015340 5dd83c288df733b6a84247b48d945647
          Size/MD5:   250138 f6a1dd454cc44a4684ab288e9eadde56
          Size/MD5:    18068 27f0453909db6eda6d8ffd3ef35454c9
          Size/MD5:   703524 e87fca0b128626aebf5bce77473ee8e0