Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Slackware: 2014-028-02 Critical: Mozilla NSS Man-In-The-Middle Threat

slackware
Calendar Grey January 28, 2014
Scroller Slackware
Latest updates for mozilla-nss on Slackware address a crucial man-in-the-middle vulnerability affecting various releases. Update immediately!
New mozilla-nss packages are available for Slackware 14.0, 14.1, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-nss-3.15.4-i486-1_slack14.1.txz: Upgraded. Upgraded to nss-3.15.4 and nspr-4.10.3. Fixes a possible man-in-the-middle issue. For more information, see: https://www.cve.org/CVERecord?id=CVE-2013-1740 (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical slackware man-in-the-middle mozilla-nss

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 25d19027bc005b90eb5f2b011ff7d796 mozilla-nss-3.15.4-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 67363d6009a95cdd2493ea32a7570199 mozilla-nss-3.15.4-x86_64-1_slack14.0.txz
Slackware 14.1 package: 07839b5afc57ea47abb1466a4ea2df1c mozilla-nss-3.15.4-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: f4a3f0dd24e741250835f9e974af6b45 mozilla-nss-3.15.4-x86_64-1_slack14.1.txz
Slackware -current package: 11ec324bb08b840bb19e01ff73feffec l/mozilla-nss-3.15.4-i486-1.txz
Slackware x86_64 -current package: 5cb2976c86c99fe98dff6a508268012c l/mozilla-nss-3.15.4-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical slackware man-in-the-middle mozilla-nss

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg mozilla-nss-3.15.4-i486-1_slack14.1.txz