Izdana je nova inačica programskog paketa SeaMonkey. Riječ je o aplikaciji koja predstavlja integrirani web preglednik, čitač elektronske pošte, klijent za IRC i newsgrupe. Problem se javlja zbog mogućnosti podmetanja određenih HTTPS (eng. Hypertext Transfer Protocol Secure) certifikata. Nadogradnja blokira, odnosno stavlja na tzv. "crnu listu" (eng. blacklist) spomenute certifikate. Svim se korisnicima spomenutog paketa savjetuje instalacija nove inačice, kako bi spriječili zlouporabu i zaštitili svoja računala od potencijalnih napada.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] seamonkey (SSA:2011-086-01)
New seamonkey packages are available for Slackware 12.2, 13.0, 13.1,
and -current to fix a security issue.
Here are the details from the Slackware 13.1 ChangeLog:
+--------------------------+
patches/packages/seamonkey-2.0.13-i486-1_slack13.1.txz: Upgraded.
This release fixes a security vulnerability by blacklisting several
invalid HTTPS certificates.
For more information, see:
http://www.mozilla.org/security/announce/2011/mfsa2011-11.html
(* Security fix *)
patches/packages/seamonkey-solibs-2.0.13-i486-1_slack13.1.txz: Upgraded.
+--------------------------+
Where to find the new packages:
+-----------------------------+
HINT: Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try. This is another primary FTP site
for Slackware that can be considerably faster than downloading
directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating additional FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated packages for Slackware 12.2:
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/seamonkey-2.0.13-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/seamonkey-solibs-2.0.13-i486-1_slack12.2.tgz
Updated packages for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/seamonkey-2.0.13-i486-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/seamonkey-solibs-2.0.13-i486-1_slack13.0.txz
Updated packages for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/seamonkey-2.0.13-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/seamonkey-solibs-2.0.13-x86_64-1_slack13.0.txz
Updated packages for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/seamonkey-2.0.13-i486-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/seamonkey-solibs-2.0.13-i486-1_slack13.1.txz
Updated packages for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/seamonkey-2.0.13-x86_64-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/seamonkey-solibs-2.0.13-x86_64-1_slack13.1.txz
Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/seamonkey-solibs-2.1b2-i486-2.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/seamonkey-2.1b2-i486-2.txz
Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/seamonkey-solibs-2.1b2-x86_64-2.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/seamonkey-2.1b2-x86_64-2.txz
MD5 signatures:
+-------------+
Slackware 12.2 packages:
dc003079904b03485c0bd4d674f9fc9a seamonkey-2.0.13-i486-1_slack12.2.tgz
bd8cc92f62b3dad445ae68f15d7e86f7 seamonkey-solibs-2.0.13-i486-1_slack12.2.tgz
Slackware 13.0 packages:
effcfc7bcb9622ddb086a1a9c4ca477d seamonkey-2.0.13-i486-1_slack13.0.txz
1b7b33567e554a4ada37f131a6dd64b1 seamonkey-solibs-2.0.13-i486-1_slack13.0.txz
Slackware x86_64 13.0 packages:
482e108d00b1e0a4a8b9a829799a87cf seamonkey-2.0.13-x86_64-1_slack13.0.txz
7992c8555c8a9f3aef7f3466a7c739a1
seamonkey-solibs-2.0.13-x86_64-1_slack13.0.txz
Slackware 13.1 packages:
de0ab2f2e528d6433d13e76e9e05cceb seamonkey-2.0.13-i486-1_slack13.1.txz
f22524b3a8208d0167cab00912edfc70 seamonkey-solibs-2.0.13-i486-1_slack13.1.txz
Slackware x86_64 13.1 packages:
c5a92e52b2fdc0bd0f9f30a31bb9e99b seamonkey-2.0.13-x86_64-1_slack13.1.txz
519128a45fb369e2f93e407dcbdb92a1
seamonkey-solibs-2.0.13-x86_64-1_slack13.1.txz
Slackware -current packages:
0f1255d80e5ef4ff3f8eaac3ce8d219d seamonkey-solibs-2.1b2-i486-2.txz
2958dd612e1bd0308dfb3cf550398ab3 seamonkey-2.1b2-i486-2.txz
Slackware x86_64 -current packages:
db7d91d3cde22f2c1c33e489913dca6b seamonkey-solibs-2.1b2-x86_64-2.txz
914ae0c1e7e95dfbb5872e3c32c7c90c seamonkey-2.1b2-x86_64-2.txz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg seamonkey-2.0.13-x86_64-1_slack13.1.txz
seamonkey-solibs-2.0.13-x86_64-1_slack13.1.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite. with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk2PeEMACgkQakRjwEAQIjPo3ACfenUOGaONn6msOSE5w4nwUpdI
zNEAni3pwvQyPSiMe6L3XsUvbuKodnzp
=bARn
-----END PGP SIGNATURE-----
Posljednje sigurnosne preporuke