SciLinux: 09-58-49 Critical: Firefox HTTPS Trust Issues

Date: Thu, 8 Sep 2011 09:58:49 -0500
Reply-To: "Tyler L. Parsons" 
Sender: Security Errata for Scientific Linux
 
From: "Tyler L. Parsons" 
Subject: Security ERRATA Important: firefox on SL4.x, SL5.x,
 SL6.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 
MIME-Version: 1.0

Synopsis: Important: firefox security update
Issue Date: 2011-09-06

Mozilla Firefox is an open source web browser. XULRunner provides the XUL
Runtime environment for Mozilla Firefox.

A previous Firefox update rendered HTTPS certificates signed by a
certain Certificate Authority (CA) as untrusted, but made an exception for
a select few. This update removes that exception, rendering every HTTPS
certificate signed by that CA as untrusted.

All Firefox users should upgrade to these updated packages, which contain
Firefox version 3.6.22. After installing the update, Firefox must be
restarted for the changes to take effect.

SL4:
 i386
 firefox-3.6.22-1.el4.i386.rpm
 firefox-debuginfo-3.6.22-1.el4.i386.rpm
 x86_64
 firefox-debuginfo-3.6.22-1.el4.x86_64.rpm
 firefox-3.6.22-1.el4.x86_64.rpm
SL5:
 i386
 firefox-debuginfo-3.6.22-1.el5_7.i386.rpm
 xulrunner-devel-1.9.2.22-1.el5_7.i386.rpm
 xulrunner-debuginfo-1.9.2.22-1.el5_7.i386.rpm
 firefox-3.6.22-1.el5_7.i386.rpm
 xulrunner-1.9.2.22-1.el5_7.i386.rpm
 x86_64
 firefox-debuginfo-3.6.22-1.el5_7.i386.rpm
 firefox-debuginfo-3.6.22-1.el5_7.x86_64.rpm
 xulrunner-1.9.2.22-1.el5_7.i386.rpm
 xulrunner-1.9.2.22-1.el5_7.x86_64.rpm
 xulrunner-debuginfo-1.9.2.22-1.el5_7.i386.rpm
 xulrunner-devel-1.9.2.22-1.el5_7.x86_64.rpm
 xulrunner-debuginfo-1.9.2.22-1.el5_7.x86_64.rpm
 xulrunner-devel-1.9.2.22-1.el5_7.i386.rpm
 firefox-3.6.22-1.el5_7.i386.rpm
 firefox-3.6.22-1.el5_7.x86_64.rpm
SL6:
 i386
 xulrunner-devel-1.9.2.22-1.el6_1.i686.rpm
 firefox-3.6.22-1.el6_1.i686.rpm
 xulrunner-debuginfo-1.9.2.22-1.el6_1.i686.rpm
 xulrunner-1.9.2.22-1.el6_1.i686.rpm
 firefox-debuginfo-3.6.22-1.el6_1.i686.rpm
 x86_64
 xulrunner-debuginfo-1.9.2.22-1.el6_1.x86_64.rpm
 xulrunner-debuginfo-1.9.2.22-1.el6_1.i686.rpm
 xulrunner-devel-1.9.2.22-1.el6_1.i686.rpm
 firefox-3.6.22-1.el6_1.x86_64.rpm
 xulrunner-1.9.2.22-1.el6_1.x86_64.rpm
 xulrunner-1.9.2.22-1.el6_1.i686.rpm
 firefox-debuginfo-3.6.22-1.el6_1.x86_64.rpm
 firefox-debuginfo-3.6.22-1.el6_1.i686.rpm
 firefox-3.6.22-1.el6_1.i686.rpm
 xulrunner-devel-1.9.2.22-1.el6_1.x86_64.rpm

- Scientific Linux Development Team