[DLSLUG-Discuss] FW: US-CERT Technical Cyber Security Alert TA06-208A -- Mozilla Products Contain Multiple Vulnerabilities

[Roger]

  Hi everyone,
  I got the NoScript plugin to work.
  I also got Yumex to work on one of my FC4 partitions. Yumex says that I have an update available for Firefox. 
  I'll try to download it when I get home, but I have dial-up so it may take a little while. lol...
  I also wonder...
  If I were supporting a local network of FC/RedHat machines, could I use Yumex to update a local server and have all the local workstations point to that server? I believe that Symantec supports that method for anti-virus updates for some enterprise high-end commercial versions.
  Would an enterprise edition of RedHat support that kind of technology and methodology?
  -Roger

   
  
Ted Roche <[e-mail addresses are not shown in archives]> wrote:
    On Jul 28, 2006, at 7:22 PM, Roger wrote:

Yes. On some platforms, FireFox will offer to auto-update. Happened 
on my Mac yesterday. Ubuntu is offering an updated T-bird this 
morning. You'll need to check with the maintainers of your distribution.

> III. Solution
>
> Upgrade
>
> Upgrade to Mozilla Firefox 1.5.0.5, Mozilla Thunderbird 1.5.0.5, or
> SeaMonkey 1.0.3.
>
> Disable JavaScript and Java
>
> These vulnerabilities can be mitigated by disabling JavaScript and
> Java in all affected products. Instructions for disabling Java in
> Firefox can be found in the "Securing Your Web Browser" document.
>

I recommend NoScript plug-in for FireFox. I only enable js when -I- 
want it to run.


Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com





 		
---------------------------------
Groups are talking. We&acute;re listening. Check out the handy changes to Yahoo! Groups. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://dlslug.org/pipermail/dlslug-discuss/attachments/20060729/0927d4eb/attachment.html