Firefox at 3.6.7 that has known security bugs, all the while 3 newer versions where released in 54 days.

Bram_Gro Bram_Gro at lavabit.com
Mon Sep 20 16:13:15 UTC 2010


On 09/20/2010 03:53 PM, Christoph A. wrote:
> On 09/20/2010 02:36 PM, Bram_Gro wrote:
>
>>> you need to signup at bugzilla.redhat.com and submit a bug there.
>>>
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=635659 (priority should have
>> been urgent).
>
> Thank you for filing this bugreport.
>
> I was also asking for an update a week ago:
>
> http://lists.fedoraproject.org/pipermail/users/2010-September/382706.html
>
> regarding the SSL problem you experienced:
> http://lists.fedoraproject.org/pipermail/users/2010-September/382411.html
>
>
> kind regards,
> Christoph
>
>
Well Christoph, I'm just astonished and curious as to how this could 
have continued for almost 2 months, without being noticed and addressed 
by any of the folks that manage this important default package, 
especially because web browsers today are basically the number one 
attack surface.



More information about the users mailing list