|
|
From: Slackware Security Team <security@slackware.com>
To: slackware-security@slackware.com
Subject: [slackware-security] Mozilla (SSA:2004-266-03)
Date: Wed, 22 Sep 2004 13:39:12 -0700 (PDT) |
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] Mozilla (SSA:2004-266-03)
New Mozilla 1.7.3 packages are available for Slackware 10.0 and -current to
fix security issues.
Here are the details from the Slackware 10.0 ChangeLog:
+--------------------------+
patches/packages/mozilla-1.7.3-i486-1.tgz: Upgraded to mozilla-1.7.3.
The Mozilla page says this fixes some "minor security holes".
It also breaks Galeon and Epiphany, and new versions of these have
still not appeared. In light of this, I think it's time to remove
these Gecko-based browsers. The future is going to be Firefox and
Thunderbird anyway, and I don't believe Galeon and Epiphany can be
compiled against Firefox's libraries.
(* Security fix *)
+--------------------------+
[ Philip Langdale of the Galeon project was kind enough to write to tell
me that Galeon can be compiled against Mozilla 1.7.3 if this option
is used: --with-mozilla-snapshot=1.7.2
The point about Firefox remains though. I don't intend to support the
Mozilla suite, a number of browsers that depend on it, and Firefox and
Thunderbird. While these are all great projects the goal will be to
choose the best one and go with it. ]
Where to find the new packages:
+-----------------------------+
Updated packages for Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/mozilla-1.7.3-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/mozilla-plugins-1.7.3-noarch-1.tgz
Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-1.7.3-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-plugins-1.7.3-noarch-1.tgz
MD5 signatures:
+-------------+
Slackware 10.0 packages:
b94d6165e6412ce17113d57b8f4fa326 mozilla-1.7.3-i486-1.tgz
25f1b0a8b66dc21cff2ca8107184a33c mozilla-plugins-1.7.3-noarch-1.tgz
Slackware -current packages:
6e5a0460aa32b4d1014d068868cc616b mozilla-1.7.3-i486-1.tgz
d930901e1ab613f492349833a15934ff mozilla-plugins-1.7.3-noarch-1.tgz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg mozilla-1.7.3-i486-1.tgz mozilla-plugins-1.7.3-noarch-1.tgz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
iD8DBQFBUeKrakRjwEAQIjMRAsGcAJwMP+zjMht2bSq8zkI3tCX4kDvHLgCfV1b9
IKIQ1IsV7Sav+s2jlp0vXWI=
=Wsq9
-----END PGP SIGNATURE-----
|
| |