Skip to navigation

Security Advisory mozilla security update

Advisory: RHSA-2004:486-18
Type: Security Advisory
Severity: Critical
Issued on: 2004-09-30
Last updated on: 2004-09-30
Affected Products: Red Hat Desktop (v. 3)
Red Hat Enterprise Linux AS (v. 2.1)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux ES (v. 2.1)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux WS (v. 2.1)
Red Hat Enterprise Linux WS (v. 3)
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor
CVEs (cve.mitre.org): CVE-2004-0902
CVE-2004-0903
CVE-2004-0904
CVE-2004-0905
CVE-2004-0908

Details

Updated mozilla packages that fix a number of security issues are now
available.

Mozilla is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Jesse Ruderman discovered a cross-domain scripting bug in Mozilla. If
a user is tricked into dragging a javascript link into another frame or
page, it becomes possible for an attacker to steal or modify sensitive
information from that site. Additionally, if a user is tricked into
dragging two links in sequence to another window (not frame), it is
possible for the attacker to execute arbitrary commands. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-0905 to this issue.

Gael Delalleau discovered an integer overflow which affects the BMP
handling code inside Mozilla. An attacker could create a carefully crafted
BMP file in such a way that it would cause Mozilla to crash or execute
arbitrary code when the image is viewed. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2004-0904 to
this issue.

Georgi Guninski discovered a stack-based buffer overflow in the vCard
display routines. An attacker could create a carefully crafted vCard file
in such a way that it would cause Mozilla to crash or execute arbitrary
code when viewed. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-0903 to this issue.

Wladimir Palant discovered a flaw in the way javascript interacts with
the clipboard. It is possible that an attacker could use malicious
javascript code to steal sensitive data which has been copied into the
clipboard. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-0908 to this issue.

Georgi Guninski discovered a heap based buffer overflow in the "Send
Page" feature. It is possible that an attacker could construct a link in
such a way that a user attempting to forward it could result in a crash or
arbitrary code execution. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-0902 to this issue.

Users of Mozilla should update to these updated packages, which contain
backported patches and are not vulnerable to these issues.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Updated packages

Red Hat Desktop (v. 3)

SRPMS:
mozilla-1.4.3-3.0.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: c8db78ffe83ebd4a0e935a4c5287a509
mozilla-1.4.3-3.0.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: c8db78ffe83ebd4a0e935a4c5287a509
 
IA-32:
mozilla-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: ed34cad577e7a2ec43b73155662c3823
mozilla-chat-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 30035e1900b293f3c01f5441e5b3486d
mozilla-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: e2f44df2fa7ac76f50c419ad7415c898
mozilla-dom-inspector-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: fe6c46344d57ac89a453edab1e2a249a
mozilla-js-debugger-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0ae9c284917a0813202d13977ebc23d8
mozilla-mail-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9682e260d658b97c748b34bb5a52c1ee
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 488703befef51e466079b462c02094c7
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0daea4b62934c4825267bdfa57121d9d
 
x86_64:
mozilla-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: ed34cad577e7a2ec43b73155662c3823
mozilla-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 02f35e9307a780aaf4394db84c924fe7
mozilla-chat-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: eba11930db2fd0105bd960970db013db
mozilla-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 76e5e88cc598f0a7e4507beeb519290c
mozilla-dom-inspector-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: e7e8dcc47f550d61e3cef3d350726c4b
mozilla-js-debugger-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: df5183bafcdb220fa4ed9ce7bad36f5a
mozilla-mail-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4e15297548c9b21f595fe6bbd3e51e48
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38e9db5a3bc1092e83bb2f8820235100
mozilla-nspr-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 96f6b2eca2afe2fa512f494d138fa327
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 13aae14a38c165a32b123b2e84af5ee7
mozilla-nss-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: c679a873dad6b08eb47f69c871bb04b9
 
Red Hat Enterprise Linux AS (v. 2.1)

SRPMS:
galeon-1.2.13-5.2.1.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38d208921a49cdba604bb43913abe051
galeon-1.2.13-5.2.1.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38d208921a49cdba604bb43913abe051
mozilla-1.4.3-2.1.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1df0013c48248d17778fc1551ff15dad
mozilla-1.4.3-2.1.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1df0013c48248d17778fc1551ff15dad
 
IA-32:
galeon-1.2.13-5.2.1.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0113f2b2e33551ddae0b48ede67b31e6
mozilla-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: fea3285b8dd5da3a3bb611a7d5738d0b
mozilla-chat-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: a89a3550a7773de347018c8a463027cb
mozilla-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b57acd6332cb88d652a3cc41b5f9c527
mozilla-dom-inspector-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 8bea20265ab364b52d6fd361bf23d190
mozilla-js-debugger-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4bfcd1dd7b588edf2052efc9e8f6326a
mozilla-mail-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9c512ae1ecc4c8efe7a9684465b8b871
mozilla-nspr-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1e7977951fc2c8c69e03b50377f2398d
mozilla-nspr-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: c268cd8846a17b8cc7aee6a3d50f9c9c
mozilla-nss-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 69cc833f9d5a469b258a474e1ebc9ddf
mozilla-nss-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 891300626fafc05a8cd371f8b256dd15
 
IA-64:
galeon-1.2.13-5.2.1.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: fcb96e9637ce3b6dfe17a0171d15a50c
mozilla-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 6c4a5d7e011e56e4aa1018ae7e705b57
mozilla-chat-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0eee8252025e7d702b91df5660ee34ef
mozilla-devel-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 529225b13b9aae00118083bbef99834d
mozilla-dom-inspector-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0dcd345bd8163775000a77126668a4d8
mozilla-js-debugger-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 17761fdf3bc78ededd68ca4c6e26ae2e
mozilla-mail-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 8f804d0ac0d0d2755b557226f488dca2
mozilla-nspr-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: da89647961a2ebde1270b6789bca51b8
mozilla-nspr-devel-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 870ae30ec76b4cb4eaa6bb2002c50b83
mozilla-nss-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 8a3ee63abfb58c99c0dd45c37bb0fffb
mozilla-nss-devel-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: e5b52d933f797a5fb5b815bc75427b2e
 
Red Hat Enterprise Linux AS (v. 3)

SRPMS:
mozilla-1.4.3-3.0.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: c8db78ffe83ebd4a0e935a4c5287a509
mozilla-1.4.3-3.0.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: c8db78ffe83ebd4a0e935a4c5287a509
 
IA-32:
mozilla-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: ed34cad577e7a2ec43b73155662c3823
mozilla-chat-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 30035e1900b293f3c01f5441e5b3486d
mozilla-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: e2f44df2fa7ac76f50c419ad7415c898
mozilla-dom-inspector-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: fe6c46344d57ac89a453edab1e2a249a
mozilla-js-debugger-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0ae9c284917a0813202d13977ebc23d8
mozilla-mail-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9682e260d658b97c748b34bb5a52c1ee
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 488703befef51e466079b462c02094c7
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0daea4b62934c4825267bdfa57121d9d
 
IA-64:
mozilla-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 764f44795fae70df98eb784cfc24cb61
mozilla-chat-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 498f1bc992269627837acfd9fb5c1c16
mozilla-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 3c0e32e6dfd33b5b42d6ceecfc0e5d5a
mozilla-dom-inspector-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4a67ebbcb89f5e8add363f47a657d6df
mozilla-js-debugger-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 445ed37eb27214ef386114fe97d15ef9
mozilla-mail-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 618d5c39e66f2ff6a2ca461647b91fa2
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 5927274883eaa60f10ec714085d22a48
mozilla-nspr-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 83f18ec8692a9f309737efbb502ae5b9
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: dcd233f7708eb136a18ab6070d028592
mozilla-nss-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9e7b9754a77d136636c6d35f932fcc86
 
PPC:
mozilla-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: 7cced64ddef3f5f449bc93bf1d2fe2de
mozilla-chat-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4c1754389a897376b33f4eedfc307fbd
mozilla-devel-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: 781272325efec348c82bf9f13f2b1c01
mozilla-dom-inspector-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: 21bca14e1c7debc4517762c42ea0af18
mozilla-js-debugger-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: 267b1669158b9ae70d8a216bedd8ab3d
mozilla-mail-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: fe897ea969605ea7b7b8c65cfbca5837
mozilla-nspr-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: 850877d573ac4c3c246be7bac1d0ae9e
mozilla-nspr-devel-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: 736e608b4ff8802fa2ff156149399b79
mozilla-nss-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1e0c30c752fff593fb0b7ccc56d72a3b
mozilla-nss-devel-1.4.3-3.0.4.ppc.rpm
File outdated by:  RHSA-2006:0329
    MD5: e23c2cd94df856a5a852c090a5f935b9
 
s390:
mozilla-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: f509c61bed2d17bb777e26c362dc7d3c
mozilla-chat-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: 2adcad1473851141f73d847b9ea8658b
mozilla-devel-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: aa87922bcf00504f4433b05f08c9880a
mozilla-dom-inspector-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: bd57c23e7c4348f05ab7e3d8d1a209c3
mozilla-js-debugger-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: f1827ae1bfb53d7e334b0f50351d2733
mozilla-mail-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: f4013dbd4fb1fdb5d66f2d059aeeaf65
mozilla-nspr-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: e8f1f5dff953ad3e4bebeb3720034870
mozilla-nspr-devel-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: 7b7073e954a3806af5190c6022a33846
mozilla-nss-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: 34bf96dc6d7c74e118eca502d639619f
mozilla-nss-devel-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: 995dd5f501ce1849843b4b0b8b7e362e
 
s390x:
mozilla-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 42e7bbd941624c0d5f78a2daaef77a36
mozilla-chat-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 452d26a8fe47ce1ae6519a3fe0f69fd6
mozilla-devel-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9107c76c5feba6761df5eb0c05e361e6
mozilla-dom-inspector-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 2d2bcee4e192763a6fa6e1b9c0020e46
mozilla-js-debugger-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4b314a8025478ceea7643f1afbcbc3d4
mozilla-mail-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 2ec20f1e7645e5e3a5bf9774dfcbcb9a
mozilla-nspr-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: e8f1f5dff953ad3e4bebeb3720034870
mozilla-nspr-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 08a8ad7f957bf7758f0eb25de18cdae3
mozilla-nspr-devel-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 7e8b974544b0f496a76cb69464b87c22
mozilla-nss-1.4.3-3.0.4.s390.rpm
File outdated by:  RHSA-2006:0329
    MD5: 34bf96dc6d7c74e118eca502d639619f
mozilla-nss-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 2df9052e3d468aae9fec4a87c5ec1fab
mozilla-nss-devel-1.4.3-3.0.4.s390x.rpm
File outdated by:  RHSA-2006:0329
    MD5: 46568a244360960aa670751c2feab9d7
 
x86_64:
mozilla-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: ed34cad577e7a2ec43b73155662c3823
mozilla-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 02f35e9307a780aaf4394db84c924fe7
mozilla-chat-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: eba11930db2fd0105bd960970db013db
mozilla-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 76e5e88cc598f0a7e4507beeb519290c
mozilla-dom-inspector-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: e7e8dcc47f550d61e3cef3d350726c4b
mozilla-js-debugger-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: df5183bafcdb220fa4ed9ce7bad36f5a
mozilla-mail-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4e15297548c9b21f595fe6bbd3e51e48
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38e9db5a3bc1092e83bb2f8820235100
mozilla-nspr-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 96f6b2eca2afe2fa512f494d138fa327
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 13aae14a38c165a32b123b2e84af5ee7
mozilla-nss-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: c679a873dad6b08eb47f69c871bb04b9
 
Red Hat Enterprise Linux ES (v. 2.1)

SRPMS:
galeon-1.2.13-5.2.1.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38d208921a49cdba604bb43913abe051
galeon-1.2.13-5.2.1.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38d208921a49cdba604bb43913abe051
mozilla-1.4.3-2.1.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1df0013c48248d17778fc1551ff15dad
mozilla-1.4.3-2.1.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1df0013c48248d17778fc1551ff15dad
 
IA-32:
galeon-1.2.13-5.2.1.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0113f2b2e33551ddae0b48ede67b31e6
mozilla-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: fea3285b8dd5da3a3bb611a7d5738d0b
mozilla-chat-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: a89a3550a7773de347018c8a463027cb
mozilla-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b57acd6332cb88d652a3cc41b5f9c527
mozilla-dom-inspector-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 8bea20265ab364b52d6fd361bf23d190
mozilla-js-debugger-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4bfcd1dd7b588edf2052efc9e8f6326a
mozilla-mail-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9c512ae1ecc4c8efe7a9684465b8b871
mozilla-nspr-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1e7977951fc2c8c69e03b50377f2398d
mozilla-nspr-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: c268cd8846a17b8cc7aee6a3d50f9c9c
mozilla-nss-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 69cc833f9d5a469b258a474e1ebc9ddf
mozilla-nss-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 891300626fafc05a8cd371f8b256dd15
 
Red Hat Enterprise Linux ES (v. 3)

SRPMS:
mozilla-1.4.3-3.0.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: c8db78ffe83ebd4a0e935a4c5287a509
mozilla-1.4.3-3.0.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: c8db78ffe83ebd4a0e935a4c5287a509
 
IA-32:
mozilla-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: ed34cad577e7a2ec43b73155662c3823
mozilla-chat-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 30035e1900b293f3c01f5441e5b3486d
mozilla-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: e2f44df2fa7ac76f50c419ad7415c898
mozilla-dom-inspector-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: fe6c46344d57ac89a453edab1e2a249a
mozilla-js-debugger-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0ae9c284917a0813202d13977ebc23d8
mozilla-mail-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9682e260d658b97c748b34bb5a52c1ee
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 488703befef51e466079b462c02094c7
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0daea4b62934c4825267bdfa57121d9d
 
IA-64:
mozilla-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 764f44795fae70df98eb784cfc24cb61
mozilla-chat-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 498f1bc992269627837acfd9fb5c1c16
mozilla-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 3c0e32e6dfd33b5b42d6ceecfc0e5d5a
mozilla-dom-inspector-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4a67ebbcb89f5e8add363f47a657d6df
mozilla-js-debugger-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 445ed37eb27214ef386114fe97d15ef9
mozilla-mail-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 618d5c39e66f2ff6a2ca461647b91fa2
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 5927274883eaa60f10ec714085d22a48
mozilla-nspr-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 83f18ec8692a9f309737efbb502ae5b9
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: dcd233f7708eb136a18ab6070d028592
mozilla-nss-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9e7b9754a77d136636c6d35f932fcc86
 
x86_64:
mozilla-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: ed34cad577e7a2ec43b73155662c3823
mozilla-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 02f35e9307a780aaf4394db84c924fe7
mozilla-chat-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: eba11930db2fd0105bd960970db013db
mozilla-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 76e5e88cc598f0a7e4507beeb519290c
mozilla-dom-inspector-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: e7e8dcc47f550d61e3cef3d350726c4b
mozilla-js-debugger-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: df5183bafcdb220fa4ed9ce7bad36f5a
mozilla-mail-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4e15297548c9b21f595fe6bbd3e51e48
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38e9db5a3bc1092e83bb2f8820235100
mozilla-nspr-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 96f6b2eca2afe2fa512f494d138fa327
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 13aae14a38c165a32b123b2e84af5ee7
mozilla-nss-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: c679a873dad6b08eb47f69c871bb04b9
 
Red Hat Enterprise Linux WS (v. 2.1)

SRPMS:
galeon-1.2.13-5.2.1.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38d208921a49cdba604bb43913abe051
galeon-1.2.13-5.2.1.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38d208921a49cdba604bb43913abe051
mozilla-1.4.3-2.1.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1df0013c48248d17778fc1551ff15dad
mozilla-1.4.3-2.1.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1df0013c48248d17778fc1551ff15dad
 
IA-32:
galeon-1.2.13-5.2.1.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0113f2b2e33551ddae0b48ede67b31e6
mozilla-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: fea3285b8dd5da3a3bb611a7d5738d0b
mozilla-chat-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: a89a3550a7773de347018c8a463027cb
mozilla-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b57acd6332cb88d652a3cc41b5f9c527
mozilla-dom-inspector-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 8bea20265ab364b52d6fd361bf23d190
mozilla-js-debugger-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4bfcd1dd7b588edf2052efc9e8f6326a
mozilla-mail-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9c512ae1ecc4c8efe7a9684465b8b871
mozilla-nspr-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1e7977951fc2c8c69e03b50377f2398d
mozilla-nspr-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: c268cd8846a17b8cc7aee6a3d50f9c9c
mozilla-nss-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 69cc833f9d5a469b258a474e1ebc9ddf
mozilla-nss-devel-1.4.3-2.1.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 891300626fafc05a8cd371f8b256dd15
 
Red Hat Enterprise Linux WS (v. 3)

SRPMS:
mozilla-1.4.3-3.0.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: c8db78ffe83ebd4a0e935a4c5287a509
mozilla-1.4.3-3.0.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: c8db78ffe83ebd4a0e935a4c5287a509
 
IA-32:
mozilla-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: ed34cad577e7a2ec43b73155662c3823
mozilla-chat-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 30035e1900b293f3c01f5441e5b3486d
mozilla-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: e2f44df2fa7ac76f50c419ad7415c898
mozilla-dom-inspector-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: fe6c46344d57ac89a453edab1e2a249a
mozilla-js-debugger-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0ae9c284917a0813202d13977ebc23d8
mozilla-mail-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9682e260d658b97c748b34bb5a52c1ee
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 488703befef51e466079b462c02094c7
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-devel-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0daea4b62934c4825267bdfa57121d9d
 
IA-64:
mozilla-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 764f44795fae70df98eb784cfc24cb61
mozilla-chat-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 498f1bc992269627837acfd9fb5c1c16
mozilla-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 3c0e32e6dfd33b5b42d6ceecfc0e5d5a
mozilla-dom-inspector-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4a67ebbcb89f5e8add363f47a657d6df
mozilla-js-debugger-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 445ed37eb27214ef386114fe97d15ef9
mozilla-mail-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 618d5c39e66f2ff6a2ca461647b91fa2
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 5927274883eaa60f10ec714085d22a48
mozilla-nspr-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 83f18ec8692a9f309737efbb502ae5b9
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: dcd233f7708eb136a18ab6070d028592
mozilla-nss-devel-1.4.3-3.0.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 9e7b9754a77d136636c6d35f932fcc86
 
x86_64:
mozilla-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: ed34cad577e7a2ec43b73155662c3823
mozilla-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 02f35e9307a780aaf4394db84c924fe7
mozilla-chat-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: eba11930db2fd0105bd960970db013db
mozilla-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 76e5e88cc598f0a7e4507beeb519290c
mozilla-dom-inspector-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: e7e8dcc47f550d61e3cef3d350726c4b
mozilla-js-debugger-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: df5183bafcdb220fa4ed9ce7bad36f5a
mozilla-mail-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 4e15297548c9b21f595fe6bbd3e51e48
mozilla-nspr-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: dfa30f1286bab6f24603e1947314567f
mozilla-nspr-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38e9db5a3bc1092e83bb2f8820235100
mozilla-nspr-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 96f6b2eca2afe2fa512f494d138fa327
mozilla-nss-1.4.3-3.0.4.i386.rpm
File outdated by:  RHSA-2006:0329
    MD5: b3165005cd23d7cb33024f67de209cc1
mozilla-nss-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 13aae14a38c165a32b123b2e84af5ee7
mozilla-nss-devel-1.4.3-3.0.4.x86_64.rpm
File outdated by:  RHSA-2006:0329
    MD5: c679a873dad6b08eb47f69c871bb04b9
 
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor

SRPMS:
galeon-1.2.13-5.2.1.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38d208921a49cdba604bb43913abe051
galeon-1.2.13-5.2.1.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 38d208921a49cdba604bb43913abe051
mozilla-1.4.3-2.1.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1df0013c48248d17778fc1551ff15dad
mozilla-1.4.3-2.1.4.src.rpm
File outdated by:  RHSA-2006:0329
    MD5: 1df0013c48248d17778fc1551ff15dad
 
IA-64:
galeon-1.2.13-5.2.1.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: fcb96e9637ce3b6dfe17a0171d15a50c
mozilla-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 6c4a5d7e011e56e4aa1018ae7e705b57
mozilla-chat-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0eee8252025e7d702b91df5660ee34ef
mozilla-devel-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 529225b13b9aae00118083bbef99834d
mozilla-dom-inspector-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 0dcd345bd8163775000a77126668a4d8
mozilla-js-debugger-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 17761fdf3bc78ededd68ca4c6e26ae2e
mozilla-mail-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 8f804d0ac0d0d2755b557226f488dca2
mozilla-nspr-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: da89647961a2ebde1270b6789bca51b8
mozilla-nspr-devel-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 870ae30ec76b4cb4eaa6bb2002c50b83
mozilla-nss-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: 8a3ee63abfb58c99c0dd45c37bb0fffb
mozilla-nss-devel-1.4.3-2.1.4.ia64.rpm
File outdated by:  RHSA-2006:0329
    MD5: e5b52d933f797a5fb5b815bc75427b2e
 

Bugs fixed (see bugzilla for more information)

133012 - CAN-2004-0905 javascript link dragging information leak
133013 - CAN-2004-0905 javascript link dragging information leak
133014 - CAN-2004-0904 BMP integer overflows
133015 - CAN-2004-0904 BMP integer overflows
133016 - CAN-2004-0903 VCard buffer overflow
133017 - CAN-2004-0903 VCard buffer overflow
133021 - CAN-2004-0908 javascript clipboard information leakage
133022 - CAN-2004-0908 javascript clipboard information leakage
133023 - CAN-2004-0902 "send page" heap based buffer overflow
133024 - CAN-2004-0902 "send page" heap based buffer overflow


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/