Date: Thu, 13 Nov 2008 14:23:34 -0600 Reply-To: Troy DawsonSender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for seamonkey on SL3.x, SL4.x i386/x86_64 Comments: To: "scientific-linux-errata@fnal.gov" Synopsis: Critical: seamonkey security update Issue date: 2008-11-12 CVE Names: CVE-2008-0017 CVE-2008-5012 CVE-2008-5013 CVE-2008-5014 CVE-2008-5016 CVE-2008-5017 CVE-2008-5018 CVE-2008-5019 CVE-2008-5021 CVE-2008-5022 CVE-2008-5023 CVE-2008-5024 Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. (CVE-2008-0017, CVE-2008-5013, CVE-2008-5014, CVE-2008-5016, CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021) Several flaws were found in the way malformed content was processed. A web site containing specially-crafted content could potentially trick a SeaMonkey user into surrendering sensitive information. (CVE-2008-5012, CVE-2008-5022, CVE-2008-5023, CVE-2008-5024) SL 3.0.x SRPMS: seamonkey-1.0.9-0.25.el3.src.rpm i386: seamonkey-1.0.9-0.25.el3.i386.rpm seamonkey-chat-1.0.9-0.25.el3.i386.rpm seamonkey-devel-1.0.9-0.25.el3.i386.rpm seamonkey-dom-inspector-1.0.9-0.25.el3.i386.rpm seamonkey-js-debugger-1.0.9-0.25.el3.i386.rpm seamonkey-mail-1.0.9-0.25.el3.i386.rpm seamonkey-nspr-1.0.9-0.25.el3.i386.rpm seamonkey-nspr-devel-1.0.9-0.25.el3.i386.rpm seamonkey-nss-1.0.9-0.25.el3.i386.rpm seamonkey-nss-devel-1.0.9-0.25.el3.i386.rpm x86seamonkey-1.0.9-0.25.el3.i386.rpm seamonkey-1.0.9-0.25.el3.x86_64.rpm seamonkey-chat-1.0.9-0.25.el3.i386.rpm seamonkey-chat-1.0.9-0.25.el3.x86_64.rpm seamonkey-devel-1.0.9-0.25.el3.x86_64.rpm seamonkey-dom-inspector-1.0.9-0.25.el3.i386.rpm seamonkey-dom-inspector-1.0.9-0.25.el3.x86_64.rpm seamonkey-js-debugger-1.0.9-0.25.el3.i386.rpm seamonkey-js-debugger-1.0.9-0.25.el3.x86_64.rpm seamonkey-mail-1.0.9-0.25.el3.i386.rpm seamonkey-mail-1.0.9-0.25.el3.x86_64.rpm seamonkey-nspr-1.0.9-0.25.el3.i386.rpm seamonkey-nspr-1.0.9-0.25.el3.x86_64.rpm seamonkey-nspr-devel-1.0.9-0.25.el3.x86_64.rpm seamonkey-nss-1.0.9-0.25.el3.i386.rpm seamonkey-nss-1.0.9-0.25.el3.x86_64.rpm seamonkey-nss-devel-1.0.9-0.25.el3.x86_64.rpm _64: SL 4.x SRPMS: seamonkey-1.0.9-28.el4.src.rpm i386: firefox-3.0.4-1.el4.i386.rpm nss-3.12.1.1-3.el4.i386.rpm nss-devel-3.12.1.1-3.el4.i386.rpm seamonkey-1.0.9-28.el4.i386.rpm seamonkey-chat-1.0.9-28.el4.i386.rpm seamonkey-devel-1.0.9-28.el4.i386.rpm seamonkey-dom-inspector-1.0.9-28.el4.i386.rpm seamonkey-js-debugger-1.0.9-28.el4.i386.rpm seamonkey-mail-1.0.9-28.el4.i386.rpm x86_64: seamonkey-1.0.9-28.el4.i386.rpm seamonkey-1.0.9-28.el4.x86_64.rpm seamonkey-chat-1.0.9-28.el4.i386.rpm seamonkey-chat-1.0.9-28.el4.x86_64.rpm seamonkey-devel-1.0.9-28.el4.x86_64.rpm seamonkey-dom-inspector-1.0.9-28.el4.i386.rpm seamonkey-dom-inspector-1.0.9-28.el4.x86_64.rpm seamonkey-js-debugger-1.0.9-28.el4.i386.rpm seamonkey-js-debugger-1.0.9-28.el4.x86_64.rpm seamonkey-mail-1.0.9-28.el4.i386.rpm seamonkey-mail-1.0.9-28.el4.x86_64.rpm -Connie Sieh -Troy Dawson