Slackware 13 and the recent Firefox vulnerability

GazL · 04-01-2010, 04:39 AM

Most ISPs implement a transparent web-proxy/cache these days and they can sometimes deliver out of date information. The osuosl one has definitely been updated, so if it's still delivering the old one to you even after you've cleared your browser cache, then it's probably your ISPs fault. Alternatively, osuosl could be using some sort of round-robin cluster and not all nodes have been updated yet.

gegechris99 · 04-01-2010, 04:55 AM

Thanks GazL for the explanation.

I will check tonight when I'm back home if my usual mirror is updated and if not I'll switch to one where I can see the update.

Lufbery · 04-01-2010, 07:03 PM

I'm all up-to-date again!

damgar · 04-01-2010, 07:43 PM

Lufbery · 04-01-2010, 09:10 PM

I wondered if, once Firefox was updated, Seamonkey would need an update too. Well, tonight I got a notice from Seamonkey has an update available:

http://www.mozilla.org/security/know...amonkey20.html

Version 2.04 is now available.

catkin · 04-02-2010, 12:06 PM

Quote:

Originally Posted by Alien Bob

Check the ChangeLog.txt in a few minutes, Firefox update will be in there as well as some other niceties.

After upgrading 13.0 today, Firefox is at 3.6.2 but Mozilla Firefox 3.6 Release Notes say "Firefox 3.6.3 fixes a critical security issue ... bug 555109" so we are not in the clear yet. Bug 555109 is not visible even after logging in to Mozilla's Bugzilla so it's not possible to assess the risk or consider workarounds.

BrZ · 04-02-2010, 01:48 PM

The source for 3.6.3 was released today...

Lufbery · 04-04-2010, 08:55 PM

Well, darn. So now we start waiting for Firefox 3.6.3 . . .

For those that celebrate it, I hope everyone had a very nice Easter holiday. I certainly did not expect a lot of development/packaging to happen this weekend.

brianL · 04-05-2010, 07:09 AM

Updated to FF 3.6.3 (and the rest) from tds mirror now.

catkin · 04-05-2010, 07:12 AM

Quote:

Originally Posted by brianL

Updated to FF 3.6.3 (and the rest) from tds mirror now.

tds mirror?

brianL · 04-05-2010, 07:16 AM

This one, in the US:
http://slackware.mirrors.tds.net/pub/slackware/

I used to use a UK mirror, but they were always 2 days behind with updates.

GazL · 04-05-2010, 09:07 AM

I use mirrorservice.org which is uk based. They sync daily.

brianL · 04-05-2010, 09:21 AM

That was the one I used to use. Strange, they always seemed to be 2 to 3 days behind some of the other mirrors. Maybe things have improved.

GazL · 04-05-2010, 09:29 AM

Time zone can be a factor. If Pat posts updates early morning US time then they might be too late for the daily sync and not turn up till the following day. I've never had to wait more than 1 day though.

My ISP virignmedia have their own mirror, but I've found that one highly unreliable.

brianL · 04-05-2010, 09:35 AM

I might give mirrorservice another try for the next updates.