On Sunday, October 16, 2016 at 9:59:26 PM UTC+2, Ray_Net wrote: > Lee wrote on 16/10/2016 17:45: > > On 10/16/16, Ray_Net wrote: > >> seemonkey wrote on 13/10/2016 08:06: > >>> There's at least one security vulnerability that is missing from this NSS > >>> version: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1950 > >>> > >>> There was a bugfix in NSS > >>> https://bugzilla.mozilla.org/show_bug.cgi?id=1245528 to solve this issue > >>> but unfortunately it seems that this bugfix is not in 3.20.x according to > >>> the developer entries. I didn't check the code yet if the bugfix is really > >>> missing! > >>> > >>> So my question is why seamonkey uses still this outdated NSS version? It > >>> should use at least 3.21.1 (that is in latest firefox esr /45.4.0/ and > >>> also in latest thunderbird /45.4.0/) > >>> > >>> As a workaround i can copy the nss libraries from firefox esr to seamonkey > >>> until a security release of seamonkey let's say 2.40.1 arrives. I tried > >>> this end i can start seamonkey with newer NSS library because they're > >>> compatible. > >> "As a workaround i can copy the nss libraries from firefox esr to > >> seamonkey " > >> > >> Could you tell us what we need (in details) to do ? > >> I have Firefox 46.0.1 and SeaMonkey 2.40 on a windows pc. > > Upgrade. > > > > The current version of Firefox is 49.0.1 > > about:support / Library Versions says the NSS* expected & in use version is > > 3.25 > > > > The 'current' version of SeaMonkey is 2.40 and is missing a lot of > > security patches. Upgrading requires that you download & install a > > new version of SM instead of waiting for it to upgrade automatically. > > **where** to download the new version from is a bit of a question tho > > :( I'm guessing the safest bet is > > https://l10n.mozilla-community.org/~akalla/unofficial/seamonkey/nightly/latest-comm-release-windows32/ > > if only because akalla had to pick _this_ particular build to make > > available for downloading. SeaMonkey 2.46 has the same 3.25 > > about:support / Library Versions for NSS* as FF. > > > > Regards, > > Lee > You don't understand. > - I hate to install a not released SM. > - I stay with FireFox 46.0.1 because I am able with it to do "View > Selection Source" using my version of Firefox, because my SM 2.40 cannot > do it. > - He said " It should use at least 3.21.1 (that is in latest firefox esr > /45.4.0/" and because my version of Firefox is greater (46.0.1) I can > use nss from this version to put into SM because it should be > 3.21.1. > So the question is still open: > How, in details, can I use the NSS of my FireFox 46.0.1 into my SM 2.40 ?
I understand you. In detail you must do the following. Copy these files from firefox into seamonkey overwriting the existing files (you have *.dll instead of *.so): libfreebl3.chk libfreebl3.so libnspr4.so libnss3.so libnssckbi.so libnssdbm3.chk libnssdbm3.so libnssutil3.so libplc4.so libplds4.so libsmime3.so libsoftokn3.chk libsoftokn3.so libssl3.so I did it on linux, on windows it should be the same, please check it! I hope you have chk files too. However i have firefox 45.4.0 (esr) not the 46. _______________________________________________ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
