[SLE] Multiple Mozilla security holes - But how to upgrade???
I haven't been able to find v.1.5 for either Firefox or Thunderbird for
Suse v.9.3. Is Suse dropping support for it?
I haven't seen any discussion of the below on this list, so... For Your
Reading Pleasure::::::)
-------- Original Message --------
Subject: US-CERT Technical Cyber Security Alert TA06-208A -- Mozilla
Products Contain Multiple Vulnerabilities
Date: Thu, 27 Jul 2006 16:38:20 -0400
From: US-CERT Technical Alerts
On Friday 28 July 2006 18:37, ken wrote:
I haven't been able to find v.1.5 for either Firefox or Thunderbird for Suse v.9.3. Is Suse dropping support for it?
Start here and pick your architecture: ftp://ftp.gwdg.de/pub/linux/suse/apt/SuSE Under the correct directory for your architecture are a number of directories for various projects/applications. For example, under the directory for 9.3 on i386 (32-bit) is a directory called "RPMS.mozilla": ftp://ftp.gwdg.de/pub/linux/suse/apt/SuSE/9.3-i386/RPMS.mozilla The rpm packages you want are there. hth & regards, Carl P.S.: You might consider installing apt for SUSE 9.3... works a treat here (on 10.0, too.) There should even be an apt installation script and instructions here: http://linux01.gwdg.de/apt4rpm/ -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
Carl Hartung wrote:
...
ftp://ftp.gwdg.de/pub/linux/suse/apt/SuSE
....
ftp://ftp.gwdg.de/pub/linux/suse/apt/SuSE/9.3-i386/RPMS.mozilla
The rpm packages you want are there.
hth & regards,
Carl
P.S.: You might consider installing apt for SUSE 9.3... works a treat here (on 10.0, too.) There should even be an apt installation script and instructions here: http://linux01.gwdg.de/apt4rpm/
Carl, Muchissimas Dank. Sehr appreciated. I never would have thought to look for RPMs under an "apt" subdirectory. I guess I need to think more outside the box once in awhile. One of the factors which drew me to Suse was that it spoke both RPM and apt. If I didn't have to take time to unsurprise myself so frequently, I'd probably get to the latter sooner. One further surprise is that Wolfgang Rosenauer's (who signed the Mozilla packages I downloaded) gpg key isn't signed by anyone. Yes, I've heard the name before. But I or anyone else could post a public key claiming to be anyone-- for example, have a look at all those claiming to be the First Dufus: http://pgp.mit.edu:11371/pks/lookup?search=%22George+Bush%22&op=index, even providing an accurate mailto. So just to humor those of us who try to read and follow the docs and best practices, could a few folks at Novell, folks who know (the real) Wolfgang sufficiently, ascertain that the posted gpg signature at http://pgp.mit.edu:11371/pks/lookup?search=0x71423d59&op=index is his, then sign it. (It's a little weird that this hasn't already been done.. or am I reading the wrong docs?) TIA. Sorry for the inconvenience. Thanks again, Carl, -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
ken wrote:
One further surprise is that Wolfgang Rosenauer's (who signed the Mozilla packages I downloaded) gpg key isn't signed by anyone. To import a gpg signature into RPM, I usually have to delete all the other signatures, otherwise it won't work IIRC. So the fact it is only his sig suggests he meant for it to be imported into your rpm database. Quite nice of him IMHO.
-- Joe Morris Registered Linux user 231871 -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Fri, Jul 28, 2006 at 06:37:15PM -0400, ken wrote:
I haven't been able to find v.1.5 for either Firefox or Thunderbird for Suse v.9.3. Is Suse dropping support for it?
We would really like to cancel any Mozilla support, but no. We are planning to release a version upgrade of Firefox 1.0.x to 1.5.0.x pretty soon to fix the issues for NLD 9, SUSE Linux 9.2 -> 10.0. (10.1 has Firefox 1.5 already.) Ciao, Marcus -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
participants (4)
-
Carl Hartung
-
Joe Morris (NTM)
-
ken
-
Marcus Meissner