On 09/25/2014 10:00 AM, David E. Ross wrote:
> On 9/25/2014 9:29 AM, NoOp wrote:
>> Seems to have been released... from the RSS feed:
>> 
>> " As part of Mozilla's ongoing stability and security update process,
>> SeaMonkey 2.29.1 is now available for Windows, Mac, and Linux as a free
>> download from www.seamonkey-project.org.
>> 
>> We recommend that all SeaMonkey users upgrade to this latest release.
>> 
>> For a list of changes and more information, please review the SeaMonkey
>> 2.29 Release Notes. "
>> 
>> Why no notice here, or on the dev list?
>> 
>> Also wondering where the "official" 64 bit linux version is -
>> particularly since new linux64 build hosts were added (yes, I'm aware
>> that they had a firmware issue earlier in the month -
>> https://bugzilla.mozilla.org/show_bug.cgi?id=1058385).
>> 
> 
> This update implemented a fix to a security vulnerability in NSS, the
> component that handles the use of security certificates.  I cannot find
> a bug report for the problem.
> 

Related to:
<https://www.mozilla.org/security/announce/2014/mfsa2014-73.html>
Mozilla Foundation Security Advisory 2014-73

Title: RSA Signature Forgery in NSS
Impact: Critical
Announced: September 24, 2014
Reporter: Antoine Delignat-Lavaud
Products: Firefox, Thunderbird, SeaMonkey, NSS
<https://bugzilla.mozilla.org/show_bug.cgi?id=1064636>
(looks like it's still not public)

_______________________________________________
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to