Fedora Linux Support Community & Resources Center

Go Back   FedoraForum.org > Fedora 19/20 > Security and Privacy
FedoraForum Search

Forgot Password? Join Us!

Security and Privacy Sadly, malware, spyware, hackers and privacy threats abound in today's world. Let's be paranoid and secure our penguins, and slam the doors on privacy exploits.

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 18th July 2009, 03:35 PM
marko Offline
Registered User
 
Join Date: Jun 2004
Location: Laurel, MD USA
Posts: 6,000
Still no security patched Firefox 3.5.1 in yum?

Firefox 3.5 has a critical java script vulnerability as noted in the recent news. I had to manually update to 3.5.1 using the mozilla tarball because there's still no Firefox 3.5.1 in Fedora Updates or even Fedora Updates Testing repositories. Is this normal? I didn't want to resort to using the mozilla one because now I can't use flash (my system is 64 bit and mozilla only seems to offer a 32bit tar file of Firefox) and having two Firefoxs means dealing with the ProfileManager, separate bookmarks and so on.

I'm trying to find out if I'm just looking in the wrong place, I tried the normal mirrors for "updates" for Fedora 11 and then updates-testing and also the baseurl for "updates" to get rid of the mirror update delay. None of them seem to have 3.5.1 ?

Maybe I'm over-reacting and it would sufficient to just turn off jit.content in the about:config of my Firefox 3.5.
I'm also using noscript. I see it was only noted by mozilla org on July 16 so maybe it's just too soon to expect it in yum

http://www.mozilla.org/security/anno...sa2009-41.html

Last edited by marko; 18th July 2009 at 03:39 PM.
Reply With Quote
  #2  
Old 18th July 2009, 04:04 PM
marko Offline
Registered User
 
Join Date: Jun 2004
Location: Laurel, MD USA
Posts: 6,000
Quote:
Originally Posted by marko View Post
Firefox 3.5 has a critical java script vulnerability as noted in the recent news. I had to manually update to 3.5.1 using the mozilla tarball because there's still no Firefox 3.5.1 in Fedora Updates or even Fedora Updates Testing repositories. Is this normal? I didn't want to resort to using the mozilla one because now I can't use flash (my system is 64 bit and mozilla only seems to offer a 32bit tar file of Firefox) and having two Firefoxs means dealing with the ProfileManager, separate bookmarks and so on.

I'm trying to find out if I'm just looking in the wrong place, I tried the normal mirrors for "updates" for Fedora 11 and then updates-testing and also the baseurl for "updates" to get rid of the mirror update delay. None of them seem to have 3.5.1 ?

Maybe I'm over-reacting and it would sufficient to just turn off jit.content in the about:config of my Firefox 3.5.
I'm also using noscript. I see it was only noted by mozilla org on July 16 so maybe it's just too soon to expect it in yum

http://www.mozilla.org/security/anno...sa2009-41.html
UPDATE
I've set my jit.content to false and will just wait for the eventual update in yum, as I read more about this that sounds sufficient to block the vulnerability.
Reply With Quote
  #3  
Old 19th July 2009, 10:40 PM
nirik Offline
Community Manager
 
Join Date: Mar 2009
Location: Broomfield, CO
Posts: 436
It's been build for a while, but just hasn't pushed out yet due to slow mirror sync issues

You can get it direct frorm the build system at:
http://koji.fedoraproject.org/koji/b...buildID=114800
Reply With Quote
  #4  
Old 20th July 2009, 01:10 AM
Demz
Guest
 
Posts: n/a
just download it from koji using rpm --Uvh
Reply With Quote
Reply

Tags
firefox, patched, security, yum

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Firefox: a security bug? odiseo77 Security and Privacy 2 22nd August 2005 08:51 PM
Firefox security patches controversy? imdeemvp Fedora Focus 12 24th July 2005 07:10 AM
Firefox 0.10.1 - Security Update ghaefb News 5 5th October 2004 01:59 AM
Microsoft security chief uses Firefox ghaefb Linux Chat 25 18th September 2004 09:21 AM


Current GMT-time: 04:30 (Saturday, 02-08-2014)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat