[packages/iceweasel] - add protection for POODLE vulnerability - rel 2

baggins baggins at pld-linux.org
Wed Oct 15 20:43:36 CEST 2014


commit d8c92000ae1068e36d0b4f8f91a12eb6bccf9220
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Wed Oct 15 20:43:11 2014 +0200

    - add protection for POODLE vulnerability
    - rel 2

 iceweasel.spec | 2 +-
 vendor-ac.js   | 2 ++
 vendor.js      | 2 ++
 3 files changed, 5 insertions(+), 1 deletion(-)
---
diff --git a/iceweasel.spec b/iceweasel.spec
index a0ebbd1..3b0c947 100644
--- a/iceweasel.spec
+++ b/iceweasel.spec
@@ -27,7 +27,7 @@ Summary(hu.UTF-8):	Iceweasel web böngésző
 Summary(pl.UTF-8):	Iceweasel - przeglądarka WWW
 Name:		iceweasel
 Version:	33.0
-Release:	1
+Release:	2
 License:	MPL v2.0
 Group:		X11/Applications/Networking
 Source0:	http://releases.mozilla.org/pub/mozilla.org/firefox/releases/%{version}/source/firefox-%{version}.source.tar.bz2
diff --git a/vendor-ac.js b/vendor-ac.js
index 2b4cf82..9312cb3 100644
--- a/vendor-ac.js
+++ b/vendor-ac.js
@@ -6,3 +6,5 @@ pref("general.useragent.compatMode.firefox", true);
 pref("distribution.searchplugins.defaultLocale", "en-US");
 // Forbid application updates
 lockPref("app.update.enabled", false);
+// POODLE protection, CVE-2014-3566
+pref("security.tls.version.min", 1);
diff --git a/vendor.js b/vendor.js
index 2eabbe1..6bf1b78 100644
--- a/vendor.js
+++ b/vendor.js
@@ -6,3 +6,5 @@ pref("general.useragent.compatMode.firefox", true);
 pref("distribution.searchplugins.defaultLocale", "en-US");
 // Forbid application updates
 lockPref("app.update.enabled", false);
+// POODLE protection, CVE-2014-3566
+pref("security.tls.version.min", 1);
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/iceweasel.git/commitdiff/d8c92000ae1068e36d0b4f8f91a12eb6bccf9220



More information about the pld-cvs-commit mailing list