Oval Definition:	oval:com.redhat.rhsa:def:20070722
Revision Date: 2007-07-19 Version: 636 Title: RHSA-2007:0722: seamonkey security update (Critical) Description: SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the way SeaMonkey processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause SeaMonkey to crash or potentially execute arbitrary code as the user running SeaMonkey. (CVE-2007-3734, CVE-2007-3735, CVE-2007-3737, CVE-2007-3738) Several content injection flaws were found in the way SeaMonkey handled certain JavaScript code. A web page containing malicious JavaScript code could inject arbitrary content into other web pages. (CVE-2007-3736, CVE-2007-3089) A flaw was found in the way SeaMonkey cached web pages on the local disk. A malicious web page may be able to inject arbitrary HTML into a browsing session if the user reloads a targeted site. (CVE-2007-3656) Users of SeaMonkey are advised to upgrade to these erratum packages, which contain backported patches that correct these issues. Family: unix Class: patch Status: Reference(s): CVE-2007-3089 CVE-2007-3656 CVE-2007-3734 CVE-2007-3735 CVE-2007-3736 CVE-2007-3737 CVE-2007-3738 RHSA-2007:0722 RHSA-2007:0722-02 RHSA-2007:0722-02 Platform(s): Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 3 is installed AND seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3 AND seamonkey-js-debugger is signed with Red Hat master key seamonkey-devel is earlier than 0:1.0.9-0.3.el3 AND seamonkey-devel is signed with Red Hat master key seamonkey-chat is earlier than 0:1.0.9-0.3.el3 AND seamonkey-chat is signed with Red Hat master key seamonkey-nss is earlier than 0:1.0.9-0.3.el3 AND seamonkey-nss is signed with Red Hat master key seamonkey is earlier than 0:1.0.9-0.3.el3 AND seamonkey is signed with Red Hat master key seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3 AND seamonkey-dom-inspector is signed with Red Hat master key seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3 AND seamonkey-nspr-devel is signed with Red Hat master key seamonkey-mail is earlier than 0:1.0.9-0.3.el3 AND seamonkey-mail is signed with Red Hat master key seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3 AND seamonkey-nss-devel is signed with Red Hat master key seamonkey-nspr is earlier than 0:1.0.9-0.3.el3 AND seamonkey-nspr is signed with Red Hat master key OR Package Information Red Hat Enterprise Linux 4 is installed AND seamonkey-chat is earlier than 0:1.0.9-4.el4 AND seamonkey-chat is signed with Red Hat master key seamonkey-devel is earlier than 0:1.0.9-4.el4 AND seamonkey-devel is signed with Red Hat master key seamonkey-js-debugger is earlier than 0:1.0.9-4.el4 AND seamonkey-js-debugger is signed with Red Hat master key seamonkey is earlier than 0:1.0.9-4.el4 AND seamonkey is signed with Red Hat master key seamonkey-mail is earlier than 0:1.0.9-4.el4 AND seamonkey-mail is signed with Red Hat master key seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4 AND seamonkey-dom-inspector is signed with Red Hat master key Definition Synopsis Release Information Red Hat Enterprise Linux 3 is installed AND seamonkey is earlier than 0:1.0.9-0.3.el3 AND seamonkey is signed with Red Hat master key seamonkey-chat is earlier than 0:1.0.9-0.3.el3 AND seamonkey-chat is signed with Red Hat master key seamonkey-devel is earlier than 0:1.0.9-0.3.el3 AND seamonkey-devel is signed with Red Hat master key seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3 AND seamonkey-dom-inspector is signed with Red Hat master key seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3 AND seamonkey-js-debugger is signed with Red Hat master key seamonkey-mail is earlier than 0:1.0.9-0.3.el3 AND seamonkey-mail is signed with Red Hat master key seamonkey-nspr is earlier than 0:1.0.9-0.3.el3 AND seamonkey-nspr is signed with Red Hat master key seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3 AND seamonkey-nspr-devel is signed with Red Hat master key seamonkey-nss is earlier than 0:1.0.9-0.3.el3 AND seamonkey-nss is signed with Red Hat master key seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3 AND seamonkey-nss-devel is signed with Red Hat master key OR Package Information Red Hat Enterprise Linux 4 is installed AND seamonkey is earlier than 0:1.0.9-4.el4 AND seamonkey is signed with Red Hat master key seamonkey-chat is earlier than 0:1.0.9-4.el4 AND seamonkey-chat is signed with Red Hat master key seamonkey-devel is earlier than 0:1.0.9-4.el4 AND seamonkey-devel is signed with Red Hat master key seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4 AND seamonkey-dom-inspector is signed with Red Hat master key seamonkey-js-debugger is earlier than 0:1.0.9-4.el4 AND seamonkey-js-debugger is signed with Red Hat master key seamonkey-mail is earlier than 0:1.0.9-4.el4 AND seamonkey-mail is signed with Red Hat master key seamonkey-nspr is earlier than 0:1.0.9-4.el4 AND seamonkey-nspr is signed with Red Hat master key seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4 AND seamonkey-nspr-devel is signed with Red Hat master key seamonkey-nss is earlier than 0:1.0.9-4.el4 AND seamonkey-nss is signed with Red Hat master key seamonkey-nss-devel is earlier than 0:1.0.9-4.el4 AND seamonkey-nss-devel is signed with Red Hat master key Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 4 is installed AND seamonkey is earlier than 0:1.0.9-4.el4 AND seamonkey is signed with Red Hat redhatrelease2 key seamonkey-chat is earlier than 0:1.0.9-4.el4 AND seamonkey-chat is signed with Red Hat redhatrelease2 key seamonkey-devel is earlier than 0:1.0.9-4.el4 AND seamonkey-devel is signed with Red Hat redhatrelease2 key seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4 AND seamonkey-dom-inspector is signed with Red Hat redhatrelease2 key seamonkey-js-debugger is earlier than 0:1.0.9-4.el4 AND seamonkey-js-debugger is signed with Red Hat redhatrelease2 key seamonkey-mail is earlier than 0:1.0.9-4.el4 AND seamonkey-mail is signed with Red Hat redhatrelease2 key
BACK