概要

Critical: seamonkey security update

タイプ/重大度

Security Advisory: Critical

トピック

Updated seamonkey packages that fix two security issues are now available
for Red Hat Enterprise Linux 2.1, 3, and 4.

This update has been rated as having critical security impact by the Red
Hat Security Response Team.

説明

SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

A memory corruption flaw was discovered in the way SeaMonkey handles XML
files containing an XSLT transform. A remote attacker could use this flaw
to crash SeaMonkey or, potentially, execute arbitrary code as the user
running SeaMonkey. (CVE-2009-1169)

A flaw was discovered in the way SeaMonkey handles certain XUL garbage
collection events. A remote attacker could use this flaw to crash SeaMonkey
or, potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-1044)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.

解決法

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

影響を受ける製品

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server - Extended Update Support 4.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 4.7 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 4.7 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7 ppc

修正

• BZ - 492211 - CVE-2009-1169 Firefox XSLT memory corruption issue
• BZ - 492212 - CVE-2009-1044 Firefox XUL garbage collection issue (cansecwest pwn2own)

CVE

• CVE-2009-1044
• CVE-2009-1169

参考資料

• http://www.redhat.com/security/updates/classification/#critical

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390
seamonkey-1.0.9-40.el4.s390.rpm	SHA-256: a6735c091c4545e6fb1061289958034b504fc292bde927bac09960f8da53fdce
seamonkey-chat-1.0.9-40.el4.s390.rpm	SHA-256: ec2ea093bf728f4addc27a1c8e86a0f67f64d08642c2be066dc5f53bac3f549f
seamonkey-devel-1.0.9-40.el4.s390.rpm	SHA-256: fe7cc7cf937a1d23d039f84cfecc6aaac4e7fc038bfb29589401a1ee370375b1
seamonkey-dom-inspector-1.0.9-40.el4.s390.rpm	SHA-256: b2e120976188091f953b1b39b85c351e9de44fcc47f4c47dcf881f81e7bb349a
seamonkey-js-debugger-1.0.9-40.el4.s390.rpm	SHA-256: 4666501a0583fdee7cc99bcd243459ae5c82028f008b5cd88507c947dcb3f740
seamonkey-mail-1.0.9-40.el4.s390.rpm	SHA-256: 132124436b91cdd3798db6c33ad3f6b00a6556b47101def07e147b94f9bf2e2c

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7

SRPM
s390
seamonkey-1.0.9-40.el4.s390.rpm	SHA-256: a6735c091c4545e6fb1061289958034b504fc292bde927bac09960f8da53fdce
seamonkey-chat-1.0.9-40.el4.s390.rpm	SHA-256: ec2ea093bf728f4addc27a1c8e86a0f67f64d08642c2be066dc5f53bac3f549f
seamonkey-devel-1.0.9-40.el4.s390.rpm	SHA-256: fe7cc7cf937a1d23d039f84cfecc6aaac4e7fc038bfb29589401a1ee370375b1
seamonkey-dom-inspector-1.0.9-40.el4.s390.rpm	SHA-256: b2e120976188091f953b1b39b85c351e9de44fcc47f4c47dcf881f81e7bb349a
seamonkey-js-debugger-1.0.9-40.el4.s390.rpm	SHA-256: 4666501a0583fdee7cc99bcd243459ae5c82028f008b5cd88507c947dcb3f740
seamonkey-mail-1.0.9-40.el4.s390.rpm	SHA-256: 132124436b91cdd3798db6c33ad3f6b00a6556b47101def07e147b94f9bf2e2c