<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for seamonkey</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2021:1588-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2021-12-16T12:45:56Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-12-16T12:45:56Z</InitialReleaseDate>
    <CurrentReleaseDate>2021-12-16T12:45:56Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for seamonkey</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for seamonkey fixes the following issues:

update to SeaMonkey 2.53.10.1

  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.

update to SeaMonkey 2.53.10

  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option 'text encoding Unicode/UTF-8' in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover 'Edit Menu' comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new 'Saved Search Folder' using 'Save View as a
    Folder...' bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.

update to SeaMonkey 2.53.9.1

  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.

update to SeaMonkey 2.53.9

  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">openSUSE-2021-1588</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FCXLQHPHQDAKQFBGGGAOTGPB45CUZWL6/</URL>
      <Description>E-Mail link for openSUSE-SU-2021:1588-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Package Hub 15 SP3">
      <Branch Type="Product Name" Name="SUSE Package Hub 15 SP3">
        <FullProductName ProductID="SUSE Package Hub 15 SP3">SUSE Package Hub 15 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.3">
      <Branch Type="Product Name" Name="openSUSE Leap 15.3">
        <FullProductName ProductID="openSUSE Leap 15.3" CPE="cpe:/o:opensuse:leap:15.3">openSUSE Leap 15.3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="seamonkey-2.53.10.1-bp153.10.1">
      <FullProductName ProductID="seamonkey-2.53.10.1-bp153.10.1">seamonkey-2.53.10.1-bp153.10.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="seamonkey-dom-inspector-2.53.10.1-bp153.10.1">
      <FullProductName ProductID="seamonkey-dom-inspector-2.53.10.1-bp153.10.1">seamonkey-dom-inspector-2.53.10.1-bp153.10.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="seamonkey-irc-2.53.10.1-bp153.10.1">
      <FullProductName ProductID="seamonkey-irc-2.53.10.1-bp153.10.1">seamonkey-irc-2.53.10.1-bp153.10.1</FullProductName>
    </Branch>
    <Relationship ProductReference="seamonkey-2.53.10.1-bp153.10.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Package Hub 15 SP3">
      <FullProductName ProductID="SUSE Package Hub 15 SP3:seamonkey-2.53.10.1-bp153.10.1">seamonkey-2.53.10.1-bp153.10.1 as a component of SUSE Package Hub 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="seamonkey-dom-inspector-2.53.10.1-bp153.10.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Package Hub 15 SP3">
      <FullProductName ProductID="SUSE Package Hub 15 SP3:seamonkey-dom-inspector-2.53.10.1-bp153.10.1">seamonkey-dom-inspector-2.53.10.1-bp153.10.1 as a component of SUSE Package Hub 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="seamonkey-irc-2.53.10.1-bp153.10.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Package Hub 15 SP3">
      <FullProductName ProductID="SUSE Package Hub 15 SP3:seamonkey-irc-2.53.10.1-bp153.10.1">seamonkey-irc-2.53.10.1-bp153.10.1 as a component of SUSE Package Hub 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="seamonkey-2.53.10.1-bp153.10.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:seamonkey-2.53.10.1-bp153.10.1">seamonkey-2.53.10.1-bp153.10.1 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="seamonkey-dom-inspector-2.53.10.1-bp153.10.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:seamonkey-dom-inspector-2.53.10.1-bp153.10.1">seamonkey-dom-inspector-2.53.10.1-bp153.10.1 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="seamonkey-irc-2.53.10.1-bp153.10.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:seamonkey-irc-2.53.10.1-bp153.10.1">seamonkey-irc-2.53.10.1-bp153.10.1 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
  </ProductTree>
</cvrfdoc>
