SeaMonkey 1.1.11 Security Release

Message

Greatnessguru · #1 Post by **Greatnessguru** » Wed 16 Jul 2008, 05:40

SeaMonkey 1.1.11 Security Release
http://www.seamonkey-project.org/
"Project News
July 15, 2008
SeaMonkey 1.1.11 Security Release
Today, the SeaMonkey project released a
new version of its all-in-one internet suite.
SeaMonkey 1.1.11 closes
several security vulnerabilities and fixes
several smaller problems found in
previous versions."

"several security vulnerabilities":

"Fixed in SeaMonkey 1.1.11
MFSA 2008-34 Remote code execution by overflowing CSS reference counter

"Fixed in SeaMonkey 1.1.10
MFSA 2008-33 Crash and remote code execution in block reflow
MFSA 2008-32 Remote site run as local file via Windows URL shortcut
MFSA 2008-31 Peer-trusted certs can use alt names to spoof
MFSA 2008-30 File location URL in directory listings not escaped properly
MFSA 2008-29 Faulty .properties file results in uninitialized memory being used
MFSA 2008-28 Arbitrary socket connections with Java LiveConnect on Mac OS X
MFSA 2008-27 Arbitrary file upload via originalTarget and DOM Range
MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript()
MFSA 2008-24 Chrome script loading from fastload file
MFSA 2008-23 Signed JAR tampering
MFSA 2008-22 XSS through JavaScript same-origin violation
MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15)
MFSA 2008-20 Crash in JavaScript garbage collector

"Fixed in SeaMonkey 1.1.9
MFSA 2008-19 XUL popup spoofing variant (cross-tab popups)
MFSA 2008-18 Java socket connection to any local port via LiveConnect
MFSA 2008-17 Privacy issue with SSL Client Authentication
MFSA 2008-16 HTTP Referrer spoofing with malformed URLs
MFSA 2008-15 Crashes with evidence of memory corruption (rv:1.8.1.13)
MFSA 2008-14 JavaScript privilege escalation and arbitrary code execution"

###,
Eddie Maddox
Inwood IA USA

markofkane · #2 Post by **markofkane** » Wed 16 Jul 2008, 10:15

how does one install updated Seamonkey, without breaking Gxine?

If I'm going to update, I don't want to keep the old version.

Caneri · #3 Post by **Caneri** » Wed 16 Jul 2008, 12:08

Hi Greatnessguru,

This is slightly off topic but I have a question about Seamonkey.

Is there any way to get the personal toolbar to accept dragged and dropped links from the nav bar?

Also is there a way to clear private data (cookies,history,cache etc) on closing Seamonkey (like FF can do).

If I can get these two issues solved I will use Seamonkey full time. Firefox seems to have issues with crashes and cpu usage in Puppy and my wife even says there is an issue in XP...hmmm.

Thanks,
Eric

Colonel Panic · #4 Post by **Colonel Panic** » Wed 16 Jul 2008, 17:14

Thanks for this thread. I've downloaded and installed Seamonkey and it seems to work well.

nooby · #5 Post by **nooby** » Wed 16 Jul 2008, 19:38

I downloaded it and installed it and works good.

But one of the page me want to look at requires java.

http://www.stormtracker.se/

I went here http://java.com/en/download/linux_manua ... ava.com:80

But being a noob I don't know which linux me should use and how.

Could anybody explain?

trapster · #6 Post by **trapster** » Wed 16 Jul 2008, 23:13

Is there any way to get the personal toolbar to accept dragged and dropped links from the nav bar?

See Here

nitehawk · #7 Post by **nitehawk** » Wed 16 Jul 2008, 23:48

nooby,..I just went to that "strormtracker" site with the old Seamonkey,....and it loaded and looked just fine (couldn't READ a word of it, though,...)

I'm downloading the new Seamonkey right now,....(whilst I post)....

Caneri · #8 Post by **Caneri** » Thu 17 Jul 2008, 00:15

@trapster,

Thanks for that....I never used Seamonkey much but with all the browser hopping it's just getting to be a pain and Puppy comes with Seamonkey so let's give 'er.

Seamonkey does render page well so with the personal toolbar working and (if) the clear private data will work I will stop the browser wars now and move on to a decent Seamonkey...and yes I know but FF is getting to be a pain and we all have better things to do.

I like Opera but it makes a mess of my server directories and I'm done fighting with it.

Thanks again Trapster..now to clear the cache on auto?....

Best,
Eric

trapster · #9 Post by **trapster** » Thu 17 Jul 2008, 10:57

Try Here to clear the cache. I believe it's putting the folder into a tmp or ram directory that gets cleared on every boot.

nooby · #10 Post by **nooby** » Thu 17 Jul 2008, 15:29

Javascript and java isn't the same is it?

One can activate the built in javascipt feature in FireFox
without having an 18 MB java installed? I have java actibated in
Seamonkey and it still fails.

But the stormtracker site takes me here

http://java.com/en/download/linux_manua ... ava.com:80

Do I really have to chose amng them? shouldn't I actibate a Puppy repo
to get a java that Barry tested to work for seamonkey? How do I do such?

I manged to set up mail.gmx.com in seamonkey but fail to send.
Must have missed something obvious? Any suggestion?

nooby · #11 Post by **nooby** » Thu 17 Jul 2008, 16:56

Yes when one know it is super easy. One do right click and at bottom
there is NoScript and their one allow gmx.com so easy but to a noob like
me very unlikely. I looked in preferences and security.

When I upgraded to seamonkey 1.1.10 then I seems to have lost
ability to play music on youtube. Or doesn't this version have that.

Barry maybe included it in the original and now one need to add it
by hand?

alienjeff · #12 Post by **alienjeff** » Thu 17 Jul 2008, 17:22

Caneri wrote:Firefox seems to have issues with crashes and cpu usage in Puppy and my wife even says there is an issue in XP...hmmm.

What versions of Firefox and Puppy?

Caneri · #13 Post by **Caneri** » Thu 17 Jul 2008, 17:55

Hi Jeff,

I just tried posting a long reply and lost it to the internet gods..grrr...let's try this post then I can edit.

Anyway hope you are well old boy...

Best,
Eric

(old)Puppy Linux Discussion Forum

(old)Puppy Linux Discussion Forum

SeaMonkey 1.1.11 Security Release

SeaMonkey 1.1.11 Security Release