[kwlug-disc] NSS Vulnerability

Keefer Rourke keefer.rourke at gmail.com
Thu Sep 25 18:57:26 EDT 2014


Arch also very quickly pushed patches. I got the (partial) fix for bash
yesterday, and I updated NSS about half and hour ago.

I honestly appreciate the fuss though. If the media freaks out, at least
people will know about it and maybe consider updating their systems more
frequently.

Cheers,
Keefer
On Sep 25, 2014 6:12 PM, "Hubert Chathi" <hubert at uhoreg.ca> wrote:

> On Thu, 25 Sep 2014 17:50:14 -0400, Khalid Baheyeldin <kb at 2bits.com> said:
>
> > On Thu, Sep 25, 2014 at 5:24 PM, Hubert Chathi <hubert at uhoreg.ca> wrote:
> >> Am I the only one who is more concerned about the NSS vulnerability?
> >>
> >> https://www.mozilla.org/security/announce/2014/mfsa2014-73.html
> >> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-1568
> >>
>
> > Ubuntu pushed fixes for NSS (twice in a week or so) and Firefox for
> > those.
>
> Yup, I got the Debian updates.  But I'm more concerned about it because
> it affects desktop machines, which are in general much less responsibly
> maintained than server machines.  Thankfully, Firefox and Chrome
> auto-update, but people need to restart their browsers to use the new
> versions.  IMHO, the press should be telling everyone to restart their
> browsers, instead of freaking out about bash.
>
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20140925/ca98ee1f/attachment.htm>


More information about the kwlug-disc mailing list