New mozilla-nss packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] mozilla-nss (SSA:2014-267-02) New mozilla-nss packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/mozilla-nss-3.16.5-i486-1_slack14.1.txz: Upgraded. Fixed an RSA Signature Forgery vulnerability. For more information, see: https://www.mozilla.org/en-US/security/advisories/mfsa2014-73/ (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 14.0 package: cfc150e0746387b0c03bd75768f62ad4 mozilla-nss-3.16.5-i486-1_slack14.0.txz Slackware x86_64 14.0 package: e15fd03c91bb10e8295199b83e491438 mozilla-nss-3.16.5-x86_64-1_slack14.0.txz Slackware 14.1 package: 9fbd11d86d60f666cbf504e669f8bec2 mozilla-nss-3.16.5-i486-1_slack14.1.txz Slackware x86_64 14.1 package: 25c8bc5729cc16300d43682c1e2732bd mozilla-nss-3.16.5-x86_64-1_slack14.1.txz Slackware -current package: e0892666b93a86d1bb8aee164cfd2dc3 l/mozilla-nss-3.16.5-i486-1.txz Slackware x86_64 -current package: d6f82ef5e9ac5d56c96cdaa70d2fd222 l/mozilla-nss-3.16.5-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg mozilla-nss-3.16.5-i486-1_slack14.1.txz +-----+ . Recent updates forslackware-nss packages address the RSA Signature Forgery vulnerability found in current versions.. Mozilla-NSS Update, Slackware Security, Package Management. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.