Issued:
2012-02-16
Updated:
2012-02-16

RHSA-2012:0141 - Security Advisory

Synopsis

Critical: seamonkey security update

Type/Severity

Security Advisory: Critical

Topic

Updated seamonkey packages that fix one security issue are now available
for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having critical
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

SeaMonkey is an open source web browser, e-mail and newsgroup client, IRC
chat client, and HTML editor.

A heap-based buffer overflow flaw was found in the way SeaMonkey handled
PNG (Portable Network Graphics) images. A web page containing a malicious
PNG image could cause SeaMonkey to crash or, possibly, execute arbitrary
code with the privileges of the user running SeaMonkey. (CVE-2011-3026)

All SeaMonkey users should upgrade to these updated packages, which correct
this issue. After installing the update, SeaMonkey must be restarted for
the changes to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

  • BZ - 790737 - CVE-2011-3026 libpng: Heap-buffer-overflow in png_decompress_chunk

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
seamonkey-1.0.9-79.el4.src.rpm SHA-256: 621bb8c6aa7f356dbba8a15f2e8556df3719d6903d43da56c794eae75c32604e
x86_64
seamonkey-1.0.9-79.el4.x86_64.rpm SHA-256: 0e275ebb6fd891cd92551ada9b64a65ead6a4a74b972539c3710142a2614dbaf
seamonkey-1.0.9-79.el4.x86_64.rpm SHA-256: 0e275ebb6fd891cd92551ada9b64a65ead6a4a74b972539c3710142a2614dbaf
seamonkey-chat-1.0.9-79.el4.x86_64.rpm SHA-256: cdf1cc520fa4b863f86d8ccd79da9e546d8f0ca7e7fecb66769e31b59ab786b7
seamonkey-chat-1.0.9-79.el4.x86_64.rpm SHA-256: cdf1cc520fa4b863f86d8ccd79da9e546d8f0ca7e7fecb66769e31b59ab786b7
seamonkey-devel-1.0.9-79.el4.x86_64.rpm SHA-256: eb1ef7f2bc8d3cd85281ecbf7fdb5f96eadcb39fa0bc85d79fc17045ff734496
seamonkey-devel-1.0.9-79.el4.x86_64.rpm SHA-256: eb1ef7f2bc8d3cd85281ecbf7fdb5f96eadcb39fa0bc85d79fc17045ff734496
seamonkey-dom-inspector-1.0.9-79.el4.x86_64.rpm SHA-256: f29c9b9f70b54c9d373c03d051f25765d3ffe5063d650ca2cc63c5e5e2b5211a
seamonkey-dom-inspector-1.0.9-79.el4.x86_64.rpm SHA-256: f29c9b9f70b54c9d373c03d051f25765d3ffe5063d650ca2cc63c5e5e2b5211a
seamonkey-js-debugger-1.0.9-79.el4.x86_64.rpm SHA-256: f905612d7a28259a162368ad82a05052ba0512dfad052cfcc6165b39ec90b932
seamonkey-js-debugger-1.0.9-79.el4.x86_64.rpm SHA-256: f905612d7a28259a162368ad82a05052ba0512dfad052cfcc6165b39ec90b932
seamonkey-mail-1.0.9-79.el4.x86_64.rpm SHA-256: 16f12c4825a4faff2c6a16ff605e6f204e1a7f4b0a120046445c9ef3caad47f9
seamonkey-mail-1.0.9-79.el4.x86_64.rpm SHA-256: 16f12c4825a4faff2c6a16ff605e6f204e1a7f4b0a120046445c9ef3caad47f9
ia64
seamonkey-1.0.9-79.el4.ia64.rpm SHA-256: 4cfb6933805a6e8d0a414063c8ac0ab290c97187c1a2ceef7a2397d42df6d82d
seamonkey-1.0.9-79.el4.ia64.rpm SHA-256: 4cfb6933805a6e8d0a414063c8ac0ab290c97187c1a2ceef7a2397d42df6d82d
seamonkey-chat-1.0.9-79.el4.ia64.rpm SHA-256: bfa7a88adba941e4d3b8b50079fab1e3f8520663c5b55181c81d96e87fbe5ef3
seamonkey-chat-1.0.9-79.el4.ia64.rpm SHA-256: bfa7a88adba941e4d3b8b50079fab1e3f8520663c5b55181c81d96e87fbe5ef3
seamonkey-devel-1.0.9-79.el4.ia64.rpm SHA-256: e73c8be9146f756c81e1eb6eb4abccf79b04e81521812d8f761bcfaef5e7b9b5
seamonkey-devel-1.0.9-79.el4.ia64.rpm SHA-256: e73c8be9146f756c81e1eb6eb4abccf79b04e81521812d8f761bcfaef5e7b9b5
seamonkey-dom-inspector-1.0.9-79.el4.ia64.rpm SHA-256: 5e9713fdd137d91946d28ddb09c337635214320ebffa07fb4c04530f546d4fb2
seamonkey-dom-inspector-1.0.9-79.el4.ia64.rpm SHA-256: 5e9713fdd137d91946d28ddb09c337635214320ebffa07fb4c04530f546d4fb2
seamonkey-js-debugger-1.0.9-79.el4.ia64.rpm SHA-256: 5bf8baef55e769cf887ddd3274b5152128053f858d51226c4c05ad0828e6eef6
seamonkey-js-debugger-1.0.9-79.el4.ia64.rpm SHA-256: 5bf8baef55e769cf887ddd3274b5152128053f858d51226c4c05ad0828e6eef6
seamonkey-mail-1.0.9-79.el4.ia64.rpm SHA-256: ab2a000939392bfe19a05766e388e26becd6fe09d6f60a3cada67bbf24d4ff96
seamonkey-mail-1.0.9-79.el4.ia64.rpm SHA-256: ab2a000939392bfe19a05766e388e26becd6fe09d6f60a3cada67bbf24d4ff96
i386
seamonkey-1.0.9-79.el4.i386.rpm SHA-256: abc5b779a45c65a031800d7ccc596bf8cb761ed449fb7dcda6a955458e45049b
seamonkey-1.0.9-79.el4.i386.rpm SHA-256: abc5b779a45c65a031800d7ccc596bf8cb761ed449fb7dcda6a955458e45049b
seamonkey-chat-1.0.9-79.el4.i386.rpm SHA-256: 5ec13ef84969e99c558685198f8d358ecb741358e8dc725c24879357cd971bed
seamonkey-chat-1.0.9-79.el4.i386.rpm SHA-256: 5ec13ef84969e99c558685198f8d358ecb741358e8dc725c24879357cd971bed
seamonkey-devel-1.0.9-79.el4.i386.rpm SHA-256: bd2d6da204ea549a8f85f8fe85872f7763ff818a81a5d249fdb6b6f419110e68
seamonkey-devel-1.0.9-79.el4.i386.rpm SHA-256: bd2d6da204ea549a8f85f8fe85872f7763ff818a81a5d249fdb6b6f419110e68
seamonkey-dom-inspector-1.0.9-79.el4.i386.rpm SHA-256: 540dec816402d965b9ea659c8d54ecfb484dd3052229ebdd49c86d762bd5e68a
seamonkey-dom-inspector-1.0.9-79.el4.i386.rpm SHA-256: 540dec816402d965b9ea659c8d54ecfb484dd3052229ebdd49c86d762bd5e68a
seamonkey-js-debugger-1.0.9-79.el4.i386.rpm SHA-256: aeef496db6ac946b4b8d45279f39a825ad1903eaaef8ee8bac394e42b4106b50
seamonkey-js-debugger-1.0.9-79.el4.i386.rpm SHA-256: aeef496db6ac946b4b8d45279f39a825ad1903eaaef8ee8bac394e42b4106b50
seamonkey-mail-1.0.9-79.el4.i386.rpm SHA-256: d14d88164ee9be170fa4b1abf45a82a17d214925119bb93a0166d4c938a8fcd6
seamonkey-mail-1.0.9-79.el4.i386.rpm SHA-256: d14d88164ee9be170fa4b1abf45a82a17d214925119bb93a0166d4c938a8fcd6

Red Hat Enterprise Linux Workstation 4

SRPM
seamonkey-1.0.9-79.el4.src.rpm SHA-256: 621bb8c6aa7f356dbba8a15f2e8556df3719d6903d43da56c794eae75c32604e
x86_64
seamonkey-1.0.9-79.el4.x86_64.rpm SHA-256: 0e275ebb6fd891cd92551ada9b64a65ead6a4a74b972539c3710142a2614dbaf
seamonkey-chat-1.0.9-79.el4.x86_64.rpm SHA-256: cdf1cc520fa4b863f86d8ccd79da9e546d8f0ca7e7fecb66769e31b59ab786b7
seamonkey-devel-1.0.9-79.el4.x86_64.rpm SHA-256: eb1ef7f2bc8d3cd85281ecbf7fdb5f96eadcb39fa0bc85d79fc17045ff734496
seamonkey-dom-inspector-1.0.9-79.el4.x86_64.rpm SHA-256: f29c9b9f70b54c9d373c03d051f25765d3ffe5063d650ca2cc63c5e5e2b5211a
seamonkey-js-debugger-1.0.9-79.el4.x86_64.rpm SHA-256: f905612d7a28259a162368ad82a05052ba0512dfad052cfcc6165b39ec90b932
seamonkey-mail-1.0.9-79.el4.x86_64.rpm SHA-256: 16f12c4825a4faff2c6a16ff605e6f204e1a7f4b0a120046445c9ef3caad47f9
ia64
seamonkey-1.0.9-79.el4.ia64.rpm SHA-256: 4cfb6933805a6e8d0a414063c8ac0ab290c97187c1a2ceef7a2397d42df6d82d
seamonkey-chat-1.0.9-79.el4.ia64.rpm SHA-256: bfa7a88adba941e4d3b8b50079fab1e3f8520663c5b55181c81d96e87fbe5ef3
seamonkey-devel-1.0.9-79.el4.ia64.rpm SHA-256: e73c8be9146f756c81e1eb6eb4abccf79b04e81521812d8f761bcfaef5e7b9b5
seamonkey-dom-inspector-1.0.9-79.el4.ia64.rpm SHA-256: 5e9713fdd137d91946d28ddb09c337635214320ebffa07fb4c04530f546d4fb2
seamonkey-js-debugger-1.0.9-79.el4.ia64.rpm SHA-256: 5bf8baef55e769cf887ddd3274b5152128053f858d51226c4c05ad0828e6eef6
seamonkey-mail-1.0.9-79.el4.ia64.rpm SHA-256: ab2a000939392bfe19a05766e388e26becd6fe09d6f60a3cada67bbf24d4ff96
i386
seamonkey-1.0.9-79.el4.i386.rpm SHA-256: abc5b779a45c65a031800d7ccc596bf8cb761ed449fb7dcda6a955458e45049b
seamonkey-chat-1.0.9-79.el4.i386.rpm SHA-256: 5ec13ef84969e99c558685198f8d358ecb741358e8dc725c24879357cd971bed
seamonkey-devel-1.0.9-79.el4.i386.rpm SHA-256: bd2d6da204ea549a8f85f8fe85872f7763ff818a81a5d249fdb6b6f419110e68
seamonkey-dom-inspector-1.0.9-79.el4.i386.rpm SHA-256: 540dec816402d965b9ea659c8d54ecfb484dd3052229ebdd49c86d762bd5e68a
seamonkey-js-debugger-1.0.9-79.el4.i386.rpm SHA-256: aeef496db6ac946b4b8d45279f39a825ad1903eaaef8ee8bac394e42b4106b50
seamonkey-mail-1.0.9-79.el4.i386.rpm SHA-256: d14d88164ee9be170fa4b1abf45a82a17d214925119bb93a0166d4c938a8fcd6

Red Hat Enterprise Linux Desktop 4

SRPM
seamonkey-1.0.9-79.el4.src.rpm SHA-256: 621bb8c6aa7f356dbba8a15f2e8556df3719d6903d43da56c794eae75c32604e
x86_64
seamonkey-1.0.9-79.el4.x86_64.rpm SHA-256: 0e275ebb6fd891cd92551ada9b64a65ead6a4a74b972539c3710142a2614dbaf
seamonkey-chat-1.0.9-79.el4.x86_64.rpm SHA-256: cdf1cc520fa4b863f86d8ccd79da9e546d8f0ca7e7fecb66769e31b59ab786b7
seamonkey-devel-1.0.9-79.el4.x86_64.rpm SHA-256: eb1ef7f2bc8d3cd85281ecbf7fdb5f96eadcb39fa0bc85d79fc17045ff734496
seamonkey-dom-inspector-1.0.9-79.el4.x86_64.rpm SHA-256: f29c9b9f70b54c9d373c03d051f25765d3ffe5063d650ca2cc63c5e5e2b5211a
seamonkey-js-debugger-1.0.9-79.el4.x86_64.rpm SHA-256: f905612d7a28259a162368ad82a05052ba0512dfad052cfcc6165b39ec90b932
seamonkey-mail-1.0.9-79.el4.x86_64.rpm SHA-256: 16f12c4825a4faff2c6a16ff605e6f204e1a7f4b0a120046445c9ef3caad47f9
i386
seamonkey-1.0.9-79.el4.i386.rpm SHA-256: abc5b779a45c65a031800d7ccc596bf8cb761ed449fb7dcda6a955458e45049b
seamonkey-chat-1.0.9-79.el4.i386.rpm SHA-256: 5ec13ef84969e99c558685198f8d358ecb741358e8dc725c24879357cd971bed
seamonkey-devel-1.0.9-79.el4.i386.rpm SHA-256: bd2d6da204ea549a8f85f8fe85872f7763ff818a81a5d249fdb6b6f419110e68
seamonkey-dom-inspector-1.0.9-79.el4.i386.rpm SHA-256: 540dec816402d965b9ea659c8d54ecfb484dd3052229ebdd49c86d762bd5e68a
seamonkey-js-debugger-1.0.9-79.el4.i386.rpm SHA-256: aeef496db6ac946b4b8d45279f39a825ad1903eaaef8ee8bac394e42b4106b50
seamonkey-mail-1.0.9-79.el4.i386.rpm SHA-256: d14d88164ee9be170fa4b1abf45a82a17d214925119bb93a0166d4c938a8fcd6

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
seamonkey-1.0.9-79.el4.src.rpm SHA-256: 621bb8c6aa7f356dbba8a15f2e8556df3719d6903d43da56c794eae75c32604e
s390x
seamonkey-1.0.9-79.el4.s390x.rpm SHA-256: a65911ee2bd6c273a5b98139091801cc1c529934ee2814a59e9771496b47553f
seamonkey-chat-1.0.9-79.el4.s390x.rpm SHA-256: 434615138889d06f8aa11a293ffed3006075f01a95672f9f338f6ba40b38707f
seamonkey-devel-1.0.9-79.el4.s390x.rpm SHA-256: 112539e4cc646340e24cb4ddb19efde34285134e3934ee64f60a657361e8228a
seamonkey-dom-inspector-1.0.9-79.el4.s390x.rpm SHA-256: 8b9f62c278c546a16df2cb3e7684ada2e201b2f9995d95fd26c9ae545c2e5c01
seamonkey-js-debugger-1.0.9-79.el4.s390x.rpm SHA-256: 10ae2c03d6404f0dcc7abffce6f27d8dcc2bb2861b2fd8967d0ee4efc18ddc88
seamonkey-mail-1.0.9-79.el4.s390x.rpm SHA-256: 739216124c5b1781bcc284dbf56e4bbe2b471e3cccd6df64d11a5e8d6739d871
s390
seamonkey-1.0.9-79.el4.s390.rpm SHA-256: cb5423f5367d5c1cef75ffaa7a0d362d3a31a9fef5e7c4e6b4f47d3965b26c0d
seamonkey-chat-1.0.9-79.el4.s390.rpm SHA-256: 9d89fd0f0373250511badc9a689bfe7a1f8fdb72be0153d66e12dbc995f8a108
seamonkey-devel-1.0.9-79.el4.s390.rpm SHA-256: 96a0d7c9a949e28b569dfece753c3244fd8e822f3a59f9cfa66b774aa1601b6a
seamonkey-dom-inspector-1.0.9-79.el4.s390.rpm SHA-256: d68c4ef117de06d5aebea11231cafd82b058354ac218b94ec9c97e19e7783283
seamonkey-js-debugger-1.0.9-79.el4.s390.rpm SHA-256: a520579048bda3da80f1552a4e2b224be934312e4c9bcb8267b42c57adf0aa6c
seamonkey-mail-1.0.9-79.el4.s390.rpm SHA-256: 77e22932fbda8c49c831bed79f7acd7619450bd9b5ec982f3c7588ac90ba8a74

Red Hat Enterprise Linux for Power, big endian 4

SRPM
seamonkey-1.0.9-79.el4.src.rpm SHA-256: 621bb8c6aa7f356dbba8a15f2e8556df3719d6903d43da56c794eae75c32604e
ppc
seamonkey-1.0.9-79.el4.ppc.rpm SHA-256: 40e323f92c2a0124e22ca436049314e5566cb26c04e40183df8a34403866724f
seamonkey-chat-1.0.9-79.el4.ppc.rpm SHA-256: 1b109e78a4dc7532c2f3c1b13d34a8a03ccaba16a33eb5fecda69020ca5c0e59
seamonkey-devel-1.0.9-79.el4.ppc.rpm SHA-256: fb3fd56d9e0f2c6c4113895d345865e7d11faf9a24b68bac4ef249c25e51ff0e
seamonkey-dom-inspector-1.0.9-79.el4.ppc.rpm SHA-256: 03f4d4a81b769e90d4f997ff6fa418f4b0e3af1d3032c65f947a40b6352b36bc
seamonkey-js-debugger-1.0.9-79.el4.ppc.rpm SHA-256: 5bcb665f84e2c1c8e8aa9c84217476ac7bd8f8059d596260871dadd5996394db
seamonkey-mail-1.0.9-79.el4.ppc.rpm SHA-256: 4f692617f01fbe33bcc1802a726a8d33846dc2caa5e077819ff01106981721b9

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.