Issued:
2008-04-16
Updated:
2008-04-16

RHSA-2008:0223 - Security Advisory

Synopsis

Critical: seamonkey security update

Type/Severity

Security Advisory: Critical

Topic

Updated seamonkey packages that fix a security issues are now
available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux
3, and Red Hat Enterprise Linux 4.

This update has been rated as having critical security impact by the
Red Hat Security Response Team.

Description

SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

A flaw was found in the processing of malformed JavaScript content. A web
page containing such malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-1380)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6 ppc

Fixes

  • BZ - 440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash

CVEs

References

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
seamonkey-nspr-1.0.9-16.el4.s390.rpm SHA-256: 90464dcf284378f46743fc54e0db052759c3b3392420d29d43a9e01203d403bf
seamonkey-nss-1.0.9-16.el4.s390.rpm SHA-256: 777c2850c7ab1379d3b658307cbfdb15d12d4bd1a0425d36c586f9509e487f43
s390
seamonkey-1.0.9-16.el4.s390.rpm SHA-256: dff1d71e9fc990e9f5656d2b6f76bdc84a3fd64fc6bbcb469a6faa0d23015000
seamonkey-chat-1.0.9-16.el4.s390.rpm SHA-256: 538b793d9f234fde9b4b79c1b2a5e706fb09a7a89ab3329fc85faa7b0f5cb3ec
seamonkey-devel-1.0.9-16.el4.s390.rpm SHA-256: aa135ed22b09712b1ba6b64f589c3a81f965dbbd5b2044866a2cacbc8c6acf82
seamonkey-dom-inspector-1.0.9-16.el4.s390.rpm SHA-256: 3b48f95c38c583d82dfa21cdfc0ab9b98bb6e6a1dd2f6a00d3d9ea996f835770
seamonkey-js-debugger-1.0.9-16.el4.s390.rpm SHA-256: 52eba0dc6f368979bf0c8d79d5a5f07a50207ce79992dad4833786748ea68c03
seamonkey-mail-1.0.9-16.el4.s390.rpm SHA-256: 45711bc8e7b4b86bf7c028ad7778e33a0d9442cb978e9caf13b1bf4d72ebcf5e
seamonkey-nspr-1.0.9-16.el4.s390.rpm SHA-256: 90464dcf284378f46743fc54e0db052759c3b3392420d29d43a9e01203d403bf
seamonkey-nspr-devel-1.0.9-16.el4.s390.rpm SHA-256: 43afa3fb58aeb74d9f68850b32603b1964f1ea5bc1ab0a740a7929b1534cd208
seamonkey-nss-1.0.9-16.el4.s390.rpm SHA-256: 777c2850c7ab1379d3b658307cbfdb15d12d4bd1a0425d36c586f9509e487f43
seamonkey-nss-devel-1.0.9-16.el4.s390.rpm SHA-256: 5978b7ea110e62c6a2169aeed6b4400ea2fe56cbace326370ca154dae7d15cd7

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6

SRPM
s390x
seamonkey-nspr-1.0.9-16.el4.s390.rpm SHA-256: 90464dcf284378f46743fc54e0db052759c3b3392420d29d43a9e01203d403bf
seamonkey-nss-1.0.9-16.el4.s390.rpm SHA-256: 777c2850c7ab1379d3b658307cbfdb15d12d4bd1a0425d36c586f9509e487f43
s390
seamonkey-1.0.9-16.el4.s390.rpm SHA-256: dff1d71e9fc990e9f5656d2b6f76bdc84a3fd64fc6bbcb469a6faa0d23015000
seamonkey-chat-1.0.9-16.el4.s390.rpm SHA-256: 538b793d9f234fde9b4b79c1b2a5e706fb09a7a89ab3329fc85faa7b0f5cb3ec
seamonkey-devel-1.0.9-16.el4.s390.rpm SHA-256: aa135ed22b09712b1ba6b64f589c3a81f965dbbd5b2044866a2cacbc8c6acf82
seamonkey-dom-inspector-1.0.9-16.el4.s390.rpm SHA-256: 3b48f95c38c583d82dfa21cdfc0ab9b98bb6e6a1dd2f6a00d3d9ea996f835770
seamonkey-js-debugger-1.0.9-16.el4.s390.rpm SHA-256: 52eba0dc6f368979bf0c8d79d5a5f07a50207ce79992dad4833786748ea68c03
seamonkey-mail-1.0.9-16.el4.s390.rpm SHA-256: 45711bc8e7b4b86bf7c028ad7778e33a0d9442cb978e9caf13b1bf4d72ebcf5e
seamonkey-nspr-1.0.9-16.el4.s390.rpm SHA-256: 90464dcf284378f46743fc54e0db052759c3b3392420d29d43a9e01203d403bf
seamonkey-nspr-devel-1.0.9-16.el4.s390.rpm SHA-256: 43afa3fb58aeb74d9f68850b32603b1964f1ea5bc1ab0a740a7929b1534cd208
seamonkey-nss-1.0.9-16.el4.s390.rpm SHA-256: 777c2850c7ab1379d3b658307cbfdb15d12d4bd1a0425d36c586f9509e487f43
seamonkey-nss-devel-1.0.9-16.el4.s390.rpm SHA-256: 5978b7ea110e62c6a2169aeed6b4400ea2fe56cbace326370ca154dae7d15cd7

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.