Kod programskog alata IceApe, namijenjenog operacijskom sustavu Debian, otkriven je novi sigurnosni propust. Radi se o skupu aplikacija namijenjenih svakodnevnom korištenju Interneta, poput web preglednika, klijenta elektroničke pošte i HTML uređivača. Propust se javlja zbog pogreške vezane uz korištenje pojedinih povučenih SSL certifikata za javne web stranice. Ranjivost je bilo moguće iskoristiti za otkrivanje osjetljivih podataka. Svim se korisnicima savjetuje nadogradnja na nove inačice paketa u svrhu izbjegavanja mogućih problema.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2199-1                   Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
http://www.debian.org/security/                        Moritz Muehlenhoff
March 23, 2011                         http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : iceape
Vulnerability  : none in iceape
Problem type   : none in iceape
Debian-specific: no
CVE ID         : not available

This update for the Iceape internet suite, an unbranded version of
Seamonkey, updates the certificate blacklist for several fraudulent
HTTPS certificates. 

More details can be found in a blog posting by Jacob Appelbaum of the 
Tor project:
https://blog.torproject.org/category/tags/ssl-tls-ca-tor-certificates-torbrowser

The oldstable distribution (lenny) is not affected. The iceape package only
provides the XPCOM code.

For the stable distribution (squeeze), this problem has been fixed in
version 2.0.11-4.

For the unstable distribution (sid), this problem has been fixed in
version 2.0.13-1.

We recommend that you upgrade your iceape packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk2KW5cACgkQXm3vHE4uylo0AQCgnWxJzIs6SUjXuhhHuJvFRVPA
GsEAnR30DuJBPIDHD2yWGqx2hDcBRgxV
=2v7I
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
with a subject of "unsubscribe". Trouble? Contact Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
Archive: http://lists.debian.org/Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.