Date:         Wed, 16 Jul 2008 15:54:02 -0500
Reply-To:     Troy Dawson 
Sender:       Security Errata for Scientific Linux
              
From:         Troy Dawson 
Subject:      Security ERRATA for seamonkey on SL3.x i386/x86_64
Comments: To: "scientific-linux-errata@fnal.gov"
          

Synopsis:       Critical: seamonkey security update
Issue date:     2008-07-16
CVE Names:      CVE-2008-2785

An integer overflow flaw was found in the way SeaMonkey displayed certain
web content. A malicious web site could cause SeaMonkey to crash or execute
arbitrary code with the permissions of the user running SeaMonkey.
(CVE-2008-2785)

SL 3.0.x

     SRPMS:
seamonkey-1.0.9-0.22.el3.src.rpm
     i386:
seamonkey-1.0.9-0.22.el3.i386.rpm
seamonkey-chat-1.0.9-0.22.el3.i386.rpm
seamonkey-devel-1.0.9-0.22.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.22.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.22.el3.i386.rpm
seamonkey-mail-1.0.9-0.22.el3.i386.rpm
seamonkey-nspr-1.0.9-0.22.el3.i386.rpm
seamonkey-nspr-devel-1.0.9-0.22.el3.i386.rpm
seamonkey-nss-1.0.9-0.22.el3.i386.rpm
seamonkey-nss-devel-1.0.9-0.22.el3.i386.rpm
     x86_64:
seamonkey-1.0.9-0.22.el3.i386.rpm
seamonkey-1.0.9-0.22.el3.x86_64.rpm
seamonkey-chat-1.0.9-0.22.el3.i386.rpm
seamonkey-chat-1.0.9-0.22.el3.x86_64.rpm
seamonkey-devel-1.0.9-0.22.el3.x86_64.rpm
seamonkey-dom-inspector-1.0.9-0.22.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.22.el3.x86_64.rpm
seamonkey-js-debugger-1.0.9-0.22.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.22.el3.x86_64.rpm
seamonkey-mail-1.0.9-0.22.el3.i386.rpm
seamonkey-mail-1.0.9-0.22.el3.x86_64.rpm
seamonkey-nspr-1.0.9-0.22.el3.i386.rpm
seamonkey-nspr-1.0.9-0.22.el3.x86_64.rpm
seamonkey-nspr-devel-1.0.9-0.22.el3.x86_64.rpm
seamonkey-nss-1.0.9-0.22.el3.i386.rpm
seamonkey-nss-1.0.9-0.22.el3.x86_64.rpm
seamonkey-nss-devel-1.0.9-0.22.el3.x86_64.rpm

-Connie Sieh
-Troy Dawson

SciLinux: CVE-2008-2785 seamonkey SL3.x i386/x86_64

Critical: seamonkey security update

Summary

Date:         Wed, 16 Jul 2008 15:54:02 -0500Reply-To:     Troy Dawson Sender:       Security Errata for Scientific Linux              From:         Troy Dawson Subject:      Security ERRATA for seamonkey on SL3.x i386/x86_64Comments: To: "scientific-linux-errata@fnal.gov"          Synopsis:       Critical: seamonkey security updateIssue date:     2008-07-16CVE Names:      CVE-2008-2785An integer overflow flaw was found in the way SeaMonkey displayed certainweb content. A malicious web site could cause SeaMonkey to crash or executearbitrary code with the permissions of the user running SeaMonkey.(CVE-2008-2785)SL 3.0.x     SRPMS:seamonkey-1.0.9-0.22.el3.src.rpm     i386:seamonkey-1.0.9-0.22.el3.i386.rpmseamonkey-chat-1.0.9-0.22.el3.i386.rpmseamonkey-devel-1.0.9-0.22.el3.i386.rpmseamonkey-dom-inspector-1.0.9-0.22.el3.i386.rpmseamonkey-js-debugger-1.0.9-0.22.el3.i386.rpmseamonkey-mail-1.0.9-0.22.el3.i386.rpmseamonkey-nspr-1.0.9-0.22.el3.i386.rpmseamonkey-nspr-devel-1.0.9-0.22.el3.i386.rpmseamonkey-nss-1.0.9-0.22.el3.i386.rpmseamonkey-nss-devel-1.0.9-0.22.el3.i386.rpm     x86_64:seamonkey-1.0.9-0.22.el3.i386.rpmseamonkey-1.0.9-0.22.el3.x86_64.rpmseamonkey-chat-1.0.9-0.22.el3.i386.rpmseamonkey-chat-1.0.9-0.22.el3.x86_64.rpmseamonkey-devel-1.0.9-0.22.el3.x86_64.rpmseamonkey-dom-inspector-1.0.9-0.22.el3.i386.rpmseamonkey-dom-inspector-1.0.9-0.22.el3.x86_64.rpmseamonkey-js-debugger-1.0.9-0.22.el3.i386.rpmseamonkey-js-debugger-1.0.9-0.22.el3.x86_64.rpmseamonkey-mail-1.0.9-0.22.el3.i386.rpmseamonkey-mail-1.0.9-0.22.el3.x86_64.rpmseamonkey-nspr-1.0.9-0.22.el3.i386.rpmseamonkey-nspr-1.0.9-0.22.el3.x86_64.rpmseamonkey-nspr-devel-1.0.9-0.22.el3.x86_64.rpmseamonkey-nss-1.0.9-0.22.el3.i386.rpmseamonkey-nss-1.0.9-0.22.el3.x86_64.rpmseamonkey-nss-devel-1.0.9-0.22.el3.x86_64.rpm-Connie Sieh-Troy Dawson



Security Fixes

Severity