[SECURITY] Fedora 17 Update: mozilla-https-everywhere-2.0.3-2.fc17

updates at fedoraproject.org updates at fedoraproject.org
Wed May 2 04:42:50 UTC 2012


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-7051
2012-05-02 04:37:21
--------------------------------------------------------------------------------

Name        : mozilla-https-everywhere
Product     : Fedora 17
Version     : 2.0.3
Release     : 2.fc17
URL         : https://eff.org/https-everywhere
Summary     : HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
Description :
HTTPS Everywhere is a Firefox extension produced as a collaboration between
The Tor Project and the Electronic Frontier Foundation. It encrypts your
communications with a number of major websites.

Many sites on the web offer some limited support for encryption over HTTPS,
but make it difficult to use. For instance, they may default to unencrypted
HTTP, or fill encrypted pages with links that go back to the unencrypted site.

The HTTPS Everywhere extension fixes these problems by rewriting all requests
to these sites to HTTPS.

--------------------------------------------------------------------------------
Update Information:

Fix a possible SSL downgrade vulnerability.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update mozilla-https-everywhere' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list