Date:         Fri, 12 Jun 2009 15:24:12 -0500
Reply-To:     Troy Dawson 
Sender:       Security Errata for Scientific Linux
              
From:         Troy Dawson 
Subject:      Security ERRATA Critical: seamonkey on SL3.x, SL4.x i386/x86_64
Comments: To: "scientific-linux-errata@fnal.gov"
          

Synopsis:	Critical: seamonkey security update
Issue date:	2009-06-11
CVE Names:	CVE-2009-1392 CVE-2009-1833 CVE-2009-1835
                 CVE-2009-1838 CVE-2009-1841


Several flaws were found in the processing of malformed web content. A 
web page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-1392, CVE-2009-1833, CVE-2009-1838, CVE-2009-1841)

A flaw was found in the processing of malformed, local file content. If 
a user loaded malicious, local content via the file:// URL, it was 
possible for that content to access other local data. (CVE-2009-1835)

After installing the update, SeaMonkey must be restarted for the changes 
to take effect.

SL 3.0.x

      SRPMS:
seamonkey-1.0.9-0.38.el3.src.rpm
      i386:
seamonkey-1.0.9-0.38.el3.i386.rpm
seamonkey-chat-1.0.9-0.38.el3.i386.rpm
seamonkey-devel-1.0.9-0.38.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.38.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.38.el3.i386.rpm
seamonkey-mail-1.0.9-0.38.el3.i386.rpm
seamonkey-nspr-1.0.9-0.38.el3.i386.rpm
seamonkey-nspr-devel-1.0.9-0.38.el3.i386.rpm
seamonkey-nss-1.0.9-0.38.el3.i386.rpm
seamonkey-nss-devel-1.0.9-0.38.el3.i386.rpm
      x86_64:
seamonkey-1.0.9-0.38.el3.i386.rpm
seamonkey-1.0.9-0.38.el3.x86_64.rpm
seamonkey-chat-1.0.9-0.38.el3.i386.rpm
seamonkey-chat-1.0.9-0.38.el3.x86_64.rpm
seamonkey-devel-1.0.9-0.38.el3.x86_64.rpm
seamonkey-dom-inspector-1.0.9-0.38.el3.i386.rpm
seamonkey-dom-inspector-1.0.9-0.38.el3.x86_64.rpm
seamonkey-js-debugger-1.0.9-0.38.el3.i386.rpm
seamonkey-js-debugger-1.0.9-0.38.el3.x86_64.rpm
seamonkey-mail-1.0.9-0.38.el3.i386.rpm
seamonkey-mail-1.0.9-0.38.el3.x86_64.rpm
seamonkey-nspr-1.0.9-0.38.el3.i386.rpm
seamonkey-nspr-1.0.9-0.38.el3.x86_64.rpm
seamonkey-nspr-devel-1.0.9-0.38.el3.x86_64.rpm
seamonkey-nss-1.0.9-0.38.el3.i386.rpm
seamonkey-nss-1.0.9-0.38.el3.x86_64.rpm
seamonkey-nss-devel-1.0.9-0.38.el3.x86_64.rpm

SL 4.x

      SRPMS:
seamonkey-1.0.9-43.el4_8.src.rpm
      i386:
seamonkey-1.0.9-43.el4_8.i386.rpm
seamonkey-chat-1.0.9-43.el4_8.i386.rpm
seamonkey-devel-1.0.9-43.el4_8.i386.rpm
seamonkey-dom-inspector-1.0.9-43.el4_8.i386.rpm
seamonkey-js-debugger-1.0.9-43.el4_8.i386.rpm
seamonkey-mail-1.0.9-43.el4_8.i386.rpm
      x86_64:
seamonkey-1.0.9-43.el4_8.i386.rpm
seamonkey-1.0.9-43.el4_8.x86_64.rpm
seamonkey-chat-1.0.9-43.el4_8.i386.rpm
seamonkey-chat-1.0.9-43.el4_8.x86_64.rpm
seamonkey-devel-1.0.9-43.el4_8.x86_64.rpm
seamonkey-dom-inspector-1.0.9-43.el4_8.i386.rpm
seamonkey-dom-inspector-1.0.9-43.el4_8.x86_64.rpm
seamonkey-js-debugger-1.0.9-43.el4_8.i386.rpm
seamonkey-js-debugger-1.0.9-43.el4_8.x86_64.rpm
seamonkey-mail-1.0.9-43.el4_8.i386.rpm
seamonkey-mail-1.0.9-43.el4_8.x86_64.rpm


-Connie Sieh
-Troy Dawson