Date:         Thu, 13 Nov 2008 14:23:34 -0600
Reply-To:     Troy Dawson 
Sender:       Security Errata for Scientific Linux
              
From:         Troy Dawson 
Subject:      Security ERRATA for seamonkey on SL3.x, SL4.x i386/x86_64
Comments: To: "scientific-linux-errata@fnal.gov"
          

Synopsis:	Critical: seamonkey security update
Issue date:	2008-11-12
CVE Names:	CVE-2008-0017 CVE-2008-5012 CVE-2008-5013
                   CVE-2008-5014 CVE-2008-5016 CVE-2008-5017
                   CVE-2008-5018 CVE-2008-5019 CVE-2008-5021
                   CVE-2008-5022 CVE-2008-5023 CVE-2008-5024

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-0017, CVE-2008-5013, CVE-2008-5014, CVE-2008-5016,
CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021)

Several flaws were found in the way malformed content was processed. A web
site containing specially-crafted content could potentially trick a
SeaMonkey user into surrendering sensitive information. (CVE-2008-5012,
CVE-2008-5022, CVE-2008-5023, CVE-2008-5024)

SL 3.0.x

     SRPMS:
seamonkey-1.0.9-0.25.el3.src.rpm
     i386:
seamonkey-1.0.9-0.25.el3.i386.rpm
seamonkey-chat-1.0.9-0.25.el3.i386.rpm
seamonkey-devel-1.0.9-0.25.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.25.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.25.el3.i386.rpm
seamonkey-mail-1.0.9-0.25.el3.i386.rpm
seamonkey-nspr-1.0.9-0.25.el3.i386.rpm
seamonkey-nspr-devel-1.0.9-0.25.el3.i386.rpm
seamonkey-nss-1.0.9-0.25.el3.i386.rpm
seamonkey-nss-devel-1.0.9-0.25.el3.i386.rpm
     x86seamonkey-1.0.9-0.25.el3.i386.rpm
seamonkey-1.0.9-0.25.el3.x86_64.rpm
seamonkey-chat-1.0.9-0.25.el3.i386.rpm
seamonkey-chat-1.0.9-0.25.el3.x86_64.rpm
seamonkey-devel-1.0.9-0.25.el3.x86_64.rpm
seamonkey-dom-inspector-1.0.9-0.25.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.25.el3.x86_64.rpm
seamonkey-js-debugger-1.0.9-0.25.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.25.el3.x86_64.rpm
seamonkey-mail-1.0.9-0.25.el3.i386.rpm
seamonkey-mail-1.0.9-0.25.el3.x86_64.rpm
seamonkey-nspr-1.0.9-0.25.el3.i386.rpm
seamonkey-nspr-1.0.9-0.25.el3.x86_64.rpm
seamonkey-nspr-devel-1.0.9-0.25.el3.x86_64.rpm
seamonkey-nss-1.0.9-0.25.el3.i386.rpm
seamonkey-nss-1.0.9-0.25.el3.x86_64.rpm
seamonkey-nss-devel-1.0.9-0.25.el3.x86_64.rpm
_64:

SL 4.x

     SRPMS:
seamonkey-1.0.9-28.el4.src.rpm
     i386:
firefox-3.0.4-1.el4.i386.rpm
nss-3.12.1.1-3.el4.i386.rpm
nss-devel-3.12.1.1-3.el4.i386.rpm
seamonkey-1.0.9-28.el4.i386.rpm
seamonkey-chat-1.0.9-28.el4.i386.rpm
seamonkey-devel-1.0.9-28.el4.i386.rpm
seamonkey-dom-inspector-1.0.9-28.el4.i386.rpm
seamonkey-js-debugger-1.0.9-28.el4.i386.rpm
seamonkey-mail-1.0.9-28.el4.i386.rpm
     x86_64:
seamonkey-1.0.9-28.el4.i386.rpm
seamonkey-1.0.9-28.el4.x86_64.rpm
seamonkey-chat-1.0.9-28.el4.i386.rpm
seamonkey-chat-1.0.9-28.el4.x86_64.rpm
seamonkey-devel-1.0.9-28.el4.x86_64.rpm
seamonkey-dom-inspector-1.0.9-28.el4.i386.rpm
seamonkey-dom-inspector-1.0.9-28.el4.x86_64.rpm
seamonkey-js-debugger-1.0.9-28.el4.i386.rpm
seamonkey-js-debugger-1.0.9-28.el4.x86_64.rpm
seamonkey-mail-1.0.9-28.el4.i386.rpm
seamonkey-mail-1.0.9-28.el4.x86_64.rpm


-Connie Sieh
-Troy Dawson

SciLinux: CVE-2008-0017 seamonkey SL3.x, SL4.x i386/x86_64

Critical: seamonkey security update

Summary

Date:         Thu, 13 Nov 2008 14:23:34 -0600Reply-To:     Troy Dawson Sender:       Security Errata for Scientific Linux              From:         Troy Dawson Subject:      Security ERRATA for seamonkey on SL3.x, SL4.x i386/x86_64Comments: To: "scientific-linux-errata@fnal.gov"          Synopsis:	Critical: seamonkey security updateIssue date:	2008-11-12CVE Names:	CVE-2008-0017 CVE-2008-5012 CVE-2008-5013                   CVE-2008-5014 CVE-2008-5016 CVE-2008-5017                   CVE-2008-5018 CVE-2008-5019 CVE-2008-5021                   CVE-2008-5022 CVE-2008-5023 CVE-2008-5024Several flaws were found in the processing of malformed web content. A webpage containing malicious content could cause SeaMonkey to crash or,potentially, execute arbitrary code as the user running SeaMonkey.(CVE-2008-0017, CVE-2008-5013, CVE-2008-5014, CVE-2008-5016,CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021)Several flaws were found in the way malformed content was processed. A website containing specially-crafted content could potentially trick aSeaMonkey user into surrendering sensitive information. (CVE-2008-5012,CVE-2008-5022, CVE-2008-5023, CVE-2008-5024)SL 3.0.x     SRPMS:seamonkey-1.0.9-0.25.el3.src.rpm     i386:seamonkey-1.0.9-0.25.el3.i386.rpmseamonkey-chat-1.0.9-0.25.el3.i386.rpmseamonkey-devel-1.0.9-0.25.el3.i386.rpmseamonkey-dom-inspector-1.0.9-0.25.el3.i386.rpmseamonkey-js-debugger-1.0.9-0.25.el3.i386.rpmseamonkey-mail-1.0.9-0.25.el3.i386.rpmseamonkey-nspr-1.0.9-0.25.el3.i386.rpmseamonkey-nspr-devel-1.0.9-0.25.el3.i386.rpmseamonkey-nss-1.0.9-0.25.el3.i386.rpmseamonkey-nss-devel-1.0.9-0.25.el3.i386.rpm     x86seamonkey-1.0.9-0.25.el3.i386.rpmseamonkey-1.0.9-0.25.el3.x86_64.rpmseamonkey-chat-1.0.9-0.25.el3.i386.rpmseamonkey-chat-1.0.9-0.25.el3.x86_64.rpmseamonkey-devel-1.0.9-0.25.el3.x86_64.rpmseamonkey-dom-inspector-1.0.9-0.25.el3.i386.rpmseamonkey-dom-inspector-1.0.9-0.25.el3.x86_64.rpmseamonkey-js-debugger-1.0.9-0.25.el3.i386.rpmseamonkey-js-debugger-1.0.9-0.25.el3.x86_64.rpmseamonkey-mail-1.0.9-0.25.el3.i386.rpmseamonkey-mail-1.0.9-0.25.el3.x86_64.rpmseamonkey-nspr-1.0.9-0.25.el3.i386.rpmseamonkey-nspr-1.0.9-0.25.el3.x86_64.rpmseamonkey-nspr-devel-1.0.9-0.25.el3.x86_64.rpmseamonkey-nss-1.0.9-0.25.el3.i386.rpmseamonkey-nss-1.0.9-0.25.el3.x86_64.rpmseamonkey-nss-devel-1.0.9-0.25.el3.x86_64.rpm_64:SL 4.x     SRPMS:seamonkey-1.0.9-28.el4.src.rpm     i386:firefox-3.0.4-1.el4.i386.rpmnss-3.12.1.1-3.el4.i386.rpmnss-devel-3.12.1.1-3.el4.i386.rpmseamonkey-1.0.9-28.el4.i386.rpmseamonkey-chat-1.0.9-28.el4.i386.rpmseamonkey-devel-1.0.9-28.el4.i386.rpmseamonkey-dom-inspector-1.0.9-28.el4.i386.rpmseamonkey-js-debugger-1.0.9-28.el4.i386.rpmseamonkey-mail-1.0.9-28.el4.i386.rpm     x86_64:seamonkey-1.0.9-28.el4.i386.rpmseamonkey-1.0.9-28.el4.x86_64.rpmseamonkey-chat-1.0.9-28.el4.i386.rpmseamonkey-chat-1.0.9-28.el4.x86_64.rpmseamonkey-devel-1.0.9-28.el4.x86_64.rpmseamonkey-dom-inspector-1.0.9-28.el4.i386.rpmseamonkey-dom-inspector-1.0.9-28.el4.x86_64.rpmseamonkey-js-debugger-1.0.9-28.el4.i386.rpmseamonkey-js-debugger-1.0.9-28.el4.x86_64.rpmseamonkey-mail-1.0.9-28.el4.i386.rpmseamonkey-mail-1.0.9-28.el4.x86_64.rpm-Connie Sieh-Troy Dawson



Security Fixes

Severity