Issued:
2011-08-16
Updated:
2011-08-16

RHSA-2011:1167 - Security Advisory

Synopsis

Critical: seamonkey security update

Type/Severity

Security Advisory: Critical

Topic

Updated seamonkey packages that fix several security issues are now
available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having critical
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Description

SeaMonkey is an open source web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2011-2982)

A flaw was found in the way SeaMonkey handled malformed JavaScript. A web
page containing malicious JavaScript could cause SeaMonkey to access
already freed memory, causing SeaMonkey to crash or, potentially, execute
arbitrary code with the privileges of the user running SeaMonkey.
(CVE-2011-2983)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

  • BZ - 730518 - CVE-2011-2982 Mozilla: Miscellaneous memory safety hazards
  • BZ - 730523 - CVE-2011-2983 Mozilla: Private data leakage using RegExp.input

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
seamonkey-1.0.9-72.el4.src.rpm SHA-256: e10f0cd2d887e3ee73d4d3394ce921f96c21f7bac7f51f3d5f12fe6e901a6914
x86_64
seamonkey-1.0.9-72.el4.x86_64.rpm SHA-256: 0b69470ad63e140c5ca670b9372007a3a8bfd60abe66a37540632c08fc77ef68
seamonkey-1.0.9-72.el4.x86_64.rpm SHA-256: 0b69470ad63e140c5ca670b9372007a3a8bfd60abe66a37540632c08fc77ef68
seamonkey-chat-1.0.9-72.el4.x86_64.rpm SHA-256: ee244ebd3001833851a8c95e3aa6dfbfd211872952a1fab28dac943ade3ec4d9
seamonkey-chat-1.0.9-72.el4.x86_64.rpm SHA-256: ee244ebd3001833851a8c95e3aa6dfbfd211872952a1fab28dac943ade3ec4d9
seamonkey-devel-1.0.9-72.el4.x86_64.rpm SHA-256: 8264fa21dc79ae5637cee9f875a68849b9563a53e727daa2d8930838bc5ea365
seamonkey-devel-1.0.9-72.el4.x86_64.rpm SHA-256: 8264fa21dc79ae5637cee9f875a68849b9563a53e727daa2d8930838bc5ea365
seamonkey-dom-inspector-1.0.9-72.el4.x86_64.rpm SHA-256: 6613e66c89d0f54703d9880b89a45bb8fbf245f1df8ee69ff6076cab84d54bd2
seamonkey-dom-inspector-1.0.9-72.el4.x86_64.rpm SHA-256: 6613e66c89d0f54703d9880b89a45bb8fbf245f1df8ee69ff6076cab84d54bd2
seamonkey-js-debugger-1.0.9-72.el4.x86_64.rpm SHA-256: 00923f028428cec6100645e56623626b16d266bf71d4c098f4af9839a0eeac0e
seamonkey-js-debugger-1.0.9-72.el4.x86_64.rpm SHA-256: 00923f028428cec6100645e56623626b16d266bf71d4c098f4af9839a0eeac0e
seamonkey-mail-1.0.9-72.el4.x86_64.rpm SHA-256: 973b48c5893fdac5fcb0bd2d6e452df4ad662e21f814db72f917e8e83f8df40c
seamonkey-mail-1.0.9-72.el4.x86_64.rpm SHA-256: 973b48c5893fdac5fcb0bd2d6e452df4ad662e21f814db72f917e8e83f8df40c
ia64
seamonkey-1.0.9-72.el4.ia64.rpm SHA-256: a52043875957dd79af8297b900f96b408e48400ebb0dea91faaca6bee266ad86
seamonkey-1.0.9-72.el4.ia64.rpm SHA-256: a52043875957dd79af8297b900f96b408e48400ebb0dea91faaca6bee266ad86
seamonkey-chat-1.0.9-72.el4.ia64.rpm SHA-256: 411995cd9b55ccfbe6c802c89814afc9b74fe65ee1a123bdd33c3773231aeda8
seamonkey-chat-1.0.9-72.el4.ia64.rpm SHA-256: 411995cd9b55ccfbe6c802c89814afc9b74fe65ee1a123bdd33c3773231aeda8
seamonkey-devel-1.0.9-72.el4.ia64.rpm SHA-256: b8b3d12a5cf60ef33a48bf7307b71915cb8135ff098950848a4c74c9fb107ba1
seamonkey-devel-1.0.9-72.el4.ia64.rpm SHA-256: b8b3d12a5cf60ef33a48bf7307b71915cb8135ff098950848a4c74c9fb107ba1
seamonkey-dom-inspector-1.0.9-72.el4.ia64.rpm SHA-256: 84aad000fe1b84c116b025adbbae335c8116c56733f92c1c63b2ef7e5e84773e
seamonkey-dom-inspector-1.0.9-72.el4.ia64.rpm SHA-256: 84aad000fe1b84c116b025adbbae335c8116c56733f92c1c63b2ef7e5e84773e
seamonkey-js-debugger-1.0.9-72.el4.ia64.rpm SHA-256: 2142ae4fe7ebddf0f05b9e0a8e4584fb96fa22f066bc01391972a7d191ef44aa
seamonkey-js-debugger-1.0.9-72.el4.ia64.rpm SHA-256: 2142ae4fe7ebddf0f05b9e0a8e4584fb96fa22f066bc01391972a7d191ef44aa
seamonkey-mail-1.0.9-72.el4.ia64.rpm SHA-256: 7792fa2cf02f675f9e6fca763ee10eec99895dcd34ae0ca4ca82ef22ac2e26e7
seamonkey-mail-1.0.9-72.el4.ia64.rpm SHA-256: 7792fa2cf02f675f9e6fca763ee10eec99895dcd34ae0ca4ca82ef22ac2e26e7
i386
seamonkey-1.0.9-72.el4.i386.rpm SHA-256: 78b03cf7765e84c3fcd638b173df88f788d1fa49d250ee67f00ed66f0343bcd6
seamonkey-1.0.9-72.el4.i386.rpm SHA-256: 78b03cf7765e84c3fcd638b173df88f788d1fa49d250ee67f00ed66f0343bcd6
seamonkey-chat-1.0.9-72.el4.i386.rpm SHA-256: 268a5765a9f390a5605d232e80a5b0cd1b3217db92c24ae943f63cdfea49d9f4
seamonkey-chat-1.0.9-72.el4.i386.rpm SHA-256: 268a5765a9f390a5605d232e80a5b0cd1b3217db92c24ae943f63cdfea49d9f4
seamonkey-devel-1.0.9-72.el4.i386.rpm SHA-256: 76e724f34bc9feaa8d7a1d6f2e034db3729d9af59b16ef48a8d1c7bd7f4e2dfb
seamonkey-devel-1.0.9-72.el4.i386.rpm SHA-256: 76e724f34bc9feaa8d7a1d6f2e034db3729d9af59b16ef48a8d1c7bd7f4e2dfb
seamonkey-dom-inspector-1.0.9-72.el4.i386.rpm SHA-256: 53e6287fe5feed18198be62fffe7cf421cde89d9e7045dd2f75b1fc0d1d2c378
seamonkey-dom-inspector-1.0.9-72.el4.i386.rpm SHA-256: 53e6287fe5feed18198be62fffe7cf421cde89d9e7045dd2f75b1fc0d1d2c378
seamonkey-js-debugger-1.0.9-72.el4.i386.rpm SHA-256: 84c53120964958556f407a5daa790e6a56f379a7f769395c2378686f9322e775
seamonkey-js-debugger-1.0.9-72.el4.i386.rpm SHA-256: 84c53120964958556f407a5daa790e6a56f379a7f769395c2378686f9322e775
seamonkey-mail-1.0.9-72.el4.i386.rpm SHA-256: c7d0c3b949c07cb3755f6b6d73739eb56744620aa2f4b0f22f405426277cb735
seamonkey-mail-1.0.9-72.el4.i386.rpm SHA-256: c7d0c3b949c07cb3755f6b6d73739eb56744620aa2f4b0f22f405426277cb735

Red Hat Enterprise Linux Workstation 4

SRPM
seamonkey-1.0.9-72.el4.src.rpm SHA-256: e10f0cd2d887e3ee73d4d3394ce921f96c21f7bac7f51f3d5f12fe6e901a6914
x86_64
seamonkey-1.0.9-72.el4.x86_64.rpm SHA-256: 0b69470ad63e140c5ca670b9372007a3a8bfd60abe66a37540632c08fc77ef68
seamonkey-chat-1.0.9-72.el4.x86_64.rpm SHA-256: ee244ebd3001833851a8c95e3aa6dfbfd211872952a1fab28dac943ade3ec4d9
seamonkey-devel-1.0.9-72.el4.x86_64.rpm SHA-256: 8264fa21dc79ae5637cee9f875a68849b9563a53e727daa2d8930838bc5ea365
seamonkey-dom-inspector-1.0.9-72.el4.x86_64.rpm SHA-256: 6613e66c89d0f54703d9880b89a45bb8fbf245f1df8ee69ff6076cab84d54bd2
seamonkey-js-debugger-1.0.9-72.el4.x86_64.rpm SHA-256: 00923f028428cec6100645e56623626b16d266bf71d4c098f4af9839a0eeac0e
seamonkey-mail-1.0.9-72.el4.x86_64.rpm SHA-256: 973b48c5893fdac5fcb0bd2d6e452df4ad662e21f814db72f917e8e83f8df40c
ia64
seamonkey-1.0.9-72.el4.ia64.rpm SHA-256: a52043875957dd79af8297b900f96b408e48400ebb0dea91faaca6bee266ad86
seamonkey-chat-1.0.9-72.el4.ia64.rpm SHA-256: 411995cd9b55ccfbe6c802c89814afc9b74fe65ee1a123bdd33c3773231aeda8
seamonkey-devel-1.0.9-72.el4.ia64.rpm SHA-256: b8b3d12a5cf60ef33a48bf7307b71915cb8135ff098950848a4c74c9fb107ba1
seamonkey-dom-inspector-1.0.9-72.el4.ia64.rpm SHA-256: 84aad000fe1b84c116b025adbbae335c8116c56733f92c1c63b2ef7e5e84773e
seamonkey-js-debugger-1.0.9-72.el4.ia64.rpm SHA-256: 2142ae4fe7ebddf0f05b9e0a8e4584fb96fa22f066bc01391972a7d191ef44aa
seamonkey-mail-1.0.9-72.el4.ia64.rpm SHA-256: 7792fa2cf02f675f9e6fca763ee10eec99895dcd34ae0ca4ca82ef22ac2e26e7
i386
seamonkey-1.0.9-72.el4.i386.rpm SHA-256: 78b03cf7765e84c3fcd638b173df88f788d1fa49d250ee67f00ed66f0343bcd6
seamonkey-chat-1.0.9-72.el4.i386.rpm SHA-256: 268a5765a9f390a5605d232e80a5b0cd1b3217db92c24ae943f63cdfea49d9f4
seamonkey-devel-1.0.9-72.el4.i386.rpm SHA-256: 76e724f34bc9feaa8d7a1d6f2e034db3729d9af59b16ef48a8d1c7bd7f4e2dfb
seamonkey-dom-inspector-1.0.9-72.el4.i386.rpm SHA-256: 53e6287fe5feed18198be62fffe7cf421cde89d9e7045dd2f75b1fc0d1d2c378
seamonkey-js-debugger-1.0.9-72.el4.i386.rpm SHA-256: 84c53120964958556f407a5daa790e6a56f379a7f769395c2378686f9322e775
seamonkey-mail-1.0.9-72.el4.i386.rpm SHA-256: c7d0c3b949c07cb3755f6b6d73739eb56744620aa2f4b0f22f405426277cb735

Red Hat Enterprise Linux Desktop 4

SRPM
seamonkey-1.0.9-72.el4.src.rpm SHA-256: e10f0cd2d887e3ee73d4d3394ce921f96c21f7bac7f51f3d5f12fe6e901a6914
x86_64
seamonkey-1.0.9-72.el4.x86_64.rpm SHA-256: 0b69470ad63e140c5ca670b9372007a3a8bfd60abe66a37540632c08fc77ef68
seamonkey-chat-1.0.9-72.el4.x86_64.rpm SHA-256: ee244ebd3001833851a8c95e3aa6dfbfd211872952a1fab28dac943ade3ec4d9
seamonkey-devel-1.0.9-72.el4.x86_64.rpm SHA-256: 8264fa21dc79ae5637cee9f875a68849b9563a53e727daa2d8930838bc5ea365
seamonkey-dom-inspector-1.0.9-72.el4.x86_64.rpm SHA-256: 6613e66c89d0f54703d9880b89a45bb8fbf245f1df8ee69ff6076cab84d54bd2
seamonkey-js-debugger-1.0.9-72.el4.x86_64.rpm SHA-256: 00923f028428cec6100645e56623626b16d266bf71d4c098f4af9839a0eeac0e
seamonkey-mail-1.0.9-72.el4.x86_64.rpm SHA-256: 973b48c5893fdac5fcb0bd2d6e452df4ad662e21f814db72f917e8e83f8df40c
i386
seamonkey-1.0.9-72.el4.i386.rpm SHA-256: 78b03cf7765e84c3fcd638b173df88f788d1fa49d250ee67f00ed66f0343bcd6
seamonkey-chat-1.0.9-72.el4.i386.rpm SHA-256: 268a5765a9f390a5605d232e80a5b0cd1b3217db92c24ae943f63cdfea49d9f4
seamonkey-devel-1.0.9-72.el4.i386.rpm SHA-256: 76e724f34bc9feaa8d7a1d6f2e034db3729d9af59b16ef48a8d1c7bd7f4e2dfb
seamonkey-dom-inspector-1.0.9-72.el4.i386.rpm SHA-256: 53e6287fe5feed18198be62fffe7cf421cde89d9e7045dd2f75b1fc0d1d2c378
seamonkey-js-debugger-1.0.9-72.el4.i386.rpm SHA-256: 84c53120964958556f407a5daa790e6a56f379a7f769395c2378686f9322e775
seamonkey-mail-1.0.9-72.el4.i386.rpm SHA-256: c7d0c3b949c07cb3755f6b6d73739eb56744620aa2f4b0f22f405426277cb735

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
seamonkey-1.0.9-72.el4.src.rpm SHA-256: e10f0cd2d887e3ee73d4d3394ce921f96c21f7bac7f51f3d5f12fe6e901a6914
s390x
seamonkey-1.0.9-72.el4.s390x.rpm SHA-256: 5af0b8c09604be549c0d2d132f8ab1460d48890b3f8b03bbb5c6db06d6009ead
seamonkey-chat-1.0.9-72.el4.s390x.rpm SHA-256: 9af6048098e4ed323ebdaf9f8269f5890cc255c511da39bb674091198958c051
seamonkey-devel-1.0.9-72.el4.s390x.rpm SHA-256: d190b3709157e5219dde5a8575dd86673c08618e093efdc58c42ccd37a304331
seamonkey-dom-inspector-1.0.9-72.el4.s390x.rpm SHA-256: 39bf94fb29fdc259047f54c2b435341bcd39552d4871fa5410ba9c81ec776d42
seamonkey-js-debugger-1.0.9-72.el4.s390x.rpm SHA-256: a36c6c8abebe43336ad8116269e8ca6c26e3eb05e5434de43e1a565bc4f3ea2d
seamonkey-mail-1.0.9-72.el4.s390x.rpm SHA-256: f65ed2217a263dfbca221602314939ca9968dc6aca4d2657554a3f420875edec
s390
seamonkey-1.0.9-72.el4.s390.rpm SHA-256: b255e1e85d46b4e4a683f07414eb0892122756d59bb2e6e997e2ed23666bbb4a
seamonkey-chat-1.0.9-72.el4.s390.rpm SHA-256: 702270e287e51be3893e20bb88a6ffcf1cbdb2b8a9d210fdd1138b1a84c23479
seamonkey-devel-1.0.9-72.el4.s390.rpm SHA-256: a481824c04030cd5825c2701a06b72fae74925c1fa68823bc4663bada6378f38
seamonkey-dom-inspector-1.0.9-72.el4.s390.rpm SHA-256: 98274462b691c8b9a3d9c78d36648bc5e4df1dc3fa761cb6c79afa99ae944ab0
seamonkey-js-debugger-1.0.9-72.el4.s390.rpm SHA-256: 59dc435630209f0a61341e9c25041b48cfd888fb206b5d8f5ef7d886a3a431a8
seamonkey-mail-1.0.9-72.el4.s390.rpm SHA-256: 6caf3d49e26ff5d8844d2f6524e75363a6646dc72ca1b6cc040f978dadb38679

Red Hat Enterprise Linux for Power, big endian 4

SRPM
seamonkey-1.0.9-72.el4.src.rpm SHA-256: e10f0cd2d887e3ee73d4d3394ce921f96c21f7bac7f51f3d5f12fe6e901a6914
ppc
seamonkey-1.0.9-72.el4.ppc.rpm SHA-256: 349354a959cfa133e5781247cb7dbb8a2286b824b21afe5397f74c57ee48dfd7
seamonkey-chat-1.0.9-72.el4.ppc.rpm SHA-256: cbabef16e664085519ffd59e9ea69cd5b7046801c23a512ef33136a3e27ccf64
seamonkey-devel-1.0.9-72.el4.ppc.rpm SHA-256: 7f105c042919fff2b57843d3ef6aa52031099d99e13fd3cf9618c6da48bab3f6
seamonkey-dom-inspector-1.0.9-72.el4.ppc.rpm SHA-256: 5b378fb504386d739e71443060f3a5f9b3e5380a6138c9dc3c5bf21707b15dc0
seamonkey-js-debugger-1.0.9-72.el4.ppc.rpm SHA-256: e89b582c030831c4e114e122127c07ab9bce5e773e82f03813742fedbe04f780
seamonkey-mail-1.0.9-72.el4.ppc.rpm SHA-256: 9580a505cb5c0fd3abf4f85b3a7c6dc1d1733eba3ea886df4cd09b5205beb283

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.