{"id":"openSUSE-SU-2021:1588-1","summary":"Security update for seamonkey","details":"This update for seamonkey fixes the following issues:\n\nupdate to SeaMonkey 2.53.10.1\n\n  * Security fix for NSS code bug 1737470.\n  * Only use networks and servers in lower case in ChatZilla bug\n    1742502.\n  * Change classic form icon in SeaMonkey composer bug 1710915.\n  * Addition fixes for SeaMonkey 32x32 default icons on Windows and\n    macOS bug 1729153.\n  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains\n    the relevant Firefox 60.8 security fixes.\n  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code\n    with Thunderbird. Please read the Thunderbird 60.0 release notes\n    for specific changes and security fixes in this release.\n  * Additional important security fixes up to Current Firefox 91.4 ESR\n    and a few enhancements have been backported. We will continue to\n    enhance SeaMonkey security in subsequent 2.53.x beta and release\n    versions as fast as we are able to.\n\nupdate to SeaMonkey 2.53.10\n\n  * Minor fixes for testdisplay command in ChatZilla bug 1727976.\n  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.\n  * IRCv3: Add support for server-time bug 1724586.\n  * Add localization note for network editor dialog width in ChatZilla\n    bug 1727977.\n  * IRCv3: Add support for extended-join and account-notify bug\n    1722159.\n  * Add ability to collapse message groups in ChatZilla bug 1724588.\n  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug\n    1727989.\n  * IRCv3: Add support for invite-notify bug 1722161.\n  * IRCv3: Add support for batch bug 1724589.\n  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.\n  * IRCv3: Add support for cap-notify bug 1722162.\n  * Stop using canonical name as collection keys in ChatZilla bug\n    1728025.\n  * IRCv3: Add support for TLS and STS bug 1722166.\n  * Helper function for renaming irc server properties in ChatZilla\n    bug 1728027.\n  * IRCv3: Add support for MONITOR bug 1722174.\n  * Remove use of msg.commasp in ChatZilla bug 1726965.\n  * Allow shiftKey to modify behaviour of link clicking in cZ bug\n    1713458.\n  * IRCv3: Add support for echo-message bug 1722211.\n  * In ChatZilla make /commands return all matches starting with\n    pattern bug 1726966.\n  * Use SeaMonkey prefs to determine how links behave in cZ bug\n    1713467.\n  * Allow parameters to be localised in ChatZilla bug 1724105.\n  * Add identify command to cZ and hook into password management bug\n    1713470.\n  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.\n  * IRCv3: Add support for message tags bug 1724584.\n  * Add last read message divider to ChatZilla bug 1729159.\n  * IRCv3: Add support for account-tag bug 1724585.\n  * Missing option 'text encoding Unicode/UTF-8' in preferences -\n    Mailnews bug 1679260.\n  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.\n  * Link about LEGACY extensions in Add-ons Manager is broken bug\n    1656797.\n  * Update help for clear private data preferences and dialog bug\n    1728911.\n  * Fix typo in cs_nav_prefs_appearance bug 1737473.\n  * Drop leftover 'Edit Menu' comment from messageWindow.xul and\n    addressbook.xul bug 1725121.\n  * Add dummy tab routines to SeaMonkey mailnews tab browser bug\n    1735243.\n  * Folder pane and tab/window title not updated correctly when\n    opening in new tab bug 1726940.\n  * Allow mail tab bar to be controlled separately to browser tab bar\n    bug 1724515.\n  * Copy any user set values for new mail.tabs prefs bug 1729165.\n  * Merge Master Passwords and Passwords pref panes into a single pref\n    pane bug 1728099.\n  * Move warning about redirection pref from Content to Privacy &\n    Security pane bug 1728185.\n  * Move website icons prefs from content pref pane to browser pref\n    pane bug 1727425.\n  * Move browser / mailnews system integration prefs into advanced\n    pane bug 1727659.\n  * Have separate opentabfor.middleclick for mailnews bug 1727948.\n  * Add removeBrowser helper for tabbrowser bug 1730391.\n  * Put \u003cbrowser\u003e in a \u003cstack\u003e so it's easy to overlay bug 1730392.\n  * Allow browser focus to be avoided bug 1720003.\n  * SeaMonkey 32x32 default icon has light stripe at the bottom bug\n    1729153.\n  * Support \u003cinput type=time\u003e and \u003cinput type=date\u003e in SeaMonkey bug\n    1730408.\n  * Middleclick on browser tab handled twice (closes tab and loads URL\n    from primary or clipboard) bug 1734407.\n  * Unable to create a new 'Saved Search Folder' using 'Save View as a\n    Folder...' bug 1738669.\n  * Enable compression for standard http connections bug 1728996.\n  * Support VS2022 for compiling under Windows bug 1728988.\n  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains\n    the relevant Firefox 60.8 security fixes.\n  * SeaMonkey 2.53.10 shares most parts of the mail and news code\n    with Thunderbird. Please read the Thunderbird 60.0 release notes\n    for specific changes and security fixes in this release.\n  * Additional important security fixes up to Current Firefox 78.15\n    ESR and a few enhancements have been backported. We will continue\n    to enhance SeaMonkey security in subsequent 2.53.x beta and\n    release versions as fast as we are able to.\n\nupdate to SeaMonkey 2.53.9.1\n\n  * Fix the lazy loading of images from some websites bug 1727967.\n  * Move certain font family defaults from serif to sans serif bug\n    1727982.\n  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains\n    the relevant Firefox 60.8 security fixes.\n  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code\n    with Thunderbird. Please read the Thunderbird 60.0 release notes\n    for specific changes and security fixes in this release.\n  * Additional important security fixes up to Current Firefox 78.14\n    ESR and a few enhancements have been backported. We will continue\n    to enhance SeaMonkey security in subsequent 2.53.x beta and\n    release versions as fast as we are able to.\n\nupdate to SeaMonkey 2.53.9\n\n  * There is now an option to clear browser history during shutdown\n    bug 1621445.\n  * Uninstall plugin command for ChatZilla bug 541719.\n  * Update icons used in ChatZilla status bar bug 1710238 and bug\n    1710249.\n  * Make ChatZilla understand mIRC color code 99 bug 1710298.\n  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and\n    update CAP ACK and CAP LS bug 1710313.\n  * Use Unicode instead of images for emojis in ChatZilla bug 1711375\n    and add some extra emojis bug 1711376.\n  * Use SeaMonkey's configured web search rather than a separate one\n    in ChatZilla bug 1712498.\n  * Add a networks editor to ChatZilla bug 1716232.\n  * Implement IRCv3 away-notify bug 1717543, chghost and\n    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX\n    bug 1722214.\n  * Link to SeaMonkey website in debugQA for verification sites and\n    development section bug 1685606.\n  * Send button should be disable until we have a recipient bug\n    104973.\n  * Remove need to use a modifier for marking messages as unread bug\n    1719216.\n  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the\n    relevant Firefox 60.8 security fixes.\n  * SeaMonkey 2.53.9 shares most parts of the mail and news code with\n    Thunderbird. Please read the Thunderbird 60.0 release notes for\n    specific changes and security fixes in this release.\n  * Additional important security fixes up to Current Firefox 78.13\n    ESR and a few enhancements have been backported. We will continue\n    to enhance SeaMonkey security in subsequent 2.53.x beta and\n    release versions as fast as we are able to.\n","modified":"2021-12-16T12:45:56Z","published":"2021-12-16T12:45:56Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FCXLQHPHQDAKQFBGGGAOTGPB45CUZWL6/"}],"affected":[{"package":{"name":"seamonkey","ecosystem":"SUSE:Package Hub 15 SP3","purl":"pkg:rpm/suse/seamonkey&distro=SUSE%20Package%20Hub%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.53.10.1-bp153.10.1"}]}],"ecosystem_specific":{"binaries":[{"seamonkey-irc":"2.53.10.1-bp153.10.1","seamonkey":"2.53.10.1-bp153.10.1","seamonkey-dom-inspector":"2.53.10.1-bp153.10.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:1588-1.json"}},{"package":{"name":"seamonkey","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/seamonkey&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.53.10.1-bp153.10.1"}]}],"ecosystem_specific":{"binaries":[{"seamonkey-dom-inspector":"2.53.10.1-bp153.10.1","seamonkey-irc":"2.53.10.1-bp153.10.1","seamonkey":"2.53.10.1-bp153.10.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:1588-1.json"}}],"schema_version":"1.7.3"}