-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1



[slackware-security]  firefox-seamonkey-thunderbird (SSA:2007-152-02)



New mozilla-firefox and seamonkey packages are available for Slackware 10.2,

11.0, and -current to fix security issues.  New thunderbird packages are

are available for Slackware 10.2 and 11.0 to fix security issues.



More details about this issue may be found at these links:

    known-vulnerabilities.html#firefox
    known-vulnerabilities.html#seamonkey
    known-vulnerabilities.html#thunderbird




Here are the details from the Slackware 11.0 ChangeLog:

+--------------------------+

patches/packages/mozilla-firefox-1.5.0.12-i686-1.tgz:

  Upgraded to firefox-1.5.0.12.

  This upgrade fixes several possible security bugs.

  For more information, see:

    known-vulnerabilities.html#firefox
  (* Security fix *)

patches/packages/mozilla-thunderbird-1.5.0.12-i686-1.tgz:

  Upgraded to thunderbird-1.5.0.12.

  This upgrade fixes several possible security bugs.

  For more information, see:

    known-vulnerabilities.html#thunderbird
  (* Security fix *)

patches/packages/seamonkey-1.1.2-i486-1_slack11.0.tgz:

  Upgraded to seamonkey-1.1.2.

  This upgrade fixes several possible security bugs.

  For more information, see:

    known-vulnerabilities.html#seamonkey
  (* Security fix *)

extra/mozilla-firefox-2.0.0.4/mozilla-firefox-2.0.0.4-i686-1.tgz:

  Upgraded to firefox-2.0.0.4.

  This upgrade fixes several possible security bugs.

  For more information, see:

    known-vulnerabilities.html#firefox
  (* Security fix *)

+--------------------------+





Where to find the new packages:

+-----------------------------+



HINT:  Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try.  This is another primary FTP site

for Slackware that can be considerably faster than downloading

from ftp.slackware.com.



Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project!  :-)



Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.



Updated packages for Slackware 10.2:

mozilla-firefox-1.5.0.12-i686-1.tgz
mozilla-thunderbird-1.5.0.12-i686-1.tgz


Updated packages for Slackware 11.0:

mozilla-firefox-1.5.0.12-i686-1.tgz
mozilla-thunderbird-1.5.0.12-i686-1.tgz
seamonkey-1.1.2-i486-1_slack11.0.tgz
mozilla-firefox-2.0.0.4-i686-1.tgz


Updated packages for Slackware -current:

mozilla-firefox-2.0.0.4-i686-1.tgz
seamonkey-1.1.2-i486-1.tgz




MD5 signatures:

+-------------+



Slackware 10.2 packages:

9b1f98981341c2b5813cba7a8425a17d  mozilla-firefox-1.5.0.12-i686-1.tgz

07ce695e642641cda081435714ba499a  mozilla-thunderbird-1.5.0.12-i686-1.tgz



Slackware 11.0 packages:

9b1f98981341c2b5813cba7a8425a17d  mozilla-firefox-1.5.0.12-i686-1.tgz

07ce695e642641cda081435714ba499a  mozilla-thunderbird-1.5.0.12-i686-1.tgz

5bcbb4759292e9660a31d084b62f74a5  seamonkey-1.1.2-i486-1_slack11.0.tgz

96895695345c903decc484a7b0ab0a85  mozilla-firefox-2.0.0.4-i686-1.tgz



Slackware -current packages:

96895695345c903decc484a7b0ab0a85  mozilla-firefox-2.0.0.4-i686-1.tgz

e437c6f7a9a2cda50d27278bfc3f0a4d  seamonkey-1.1.2-i486-1.tgz





Installation instructions:

+------------------------+



Upgrade the packages as root:

# upgradepkg mozilla-firefox-1.5.0.12-i686-1.tgz
 mozilla-thunderbird-1.5.0.12-i686-1.tgz seamonkey-1.1.2-i486-1_slack11.0.tgz





+-----+



Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com



+------------------------------------------------------------------------+

| To leave the slackware-security mailing list:                          |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message:                                                     |

|                                                                        |

|   unsubscribe slackware-security                                       |

|                                                                        |

| You will get a confirmation message back containing instructions to    |

| complete the process.  Please do not reply to this email address.      |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.7 (GNU/Linux)



iD8DBQFGYN9aakRjwEAQIjMRAkckAKCBXnG6U7K8m6APGWX5ukQBSLVTZQCcDSDK

uAEUCZ2guzWPSyA57FB5STI=

=bbJd

-----END PGP SIGNATURE-----