https://www.us-cert.gov/ncas/current-ac ... nerabilityMozilla Patches Critical Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Mozilla Security Advisories for Firefox 72.0.1 and Firefox ESR 68.4.1 and Thunderbird 68.4.1 and apply the necessary updates.
URGENT: update for FireFox needed now!?! What abouty SM?
- Peter Creasey
- Posts: 1341
- Joined: October 26th, 2007, 2:32 pm
- Location: Texas
URGENT: update for FireFox needed now!?! What abouty SM?
What is the implication of this for SeaMonkey?
. . . . . . . . . . Pete
-
- Posts: 1361
- Joined: December 15th, 2015, 1:20 pm
Re: URGENT: update for FireFox needed now!?! What abouty SM?
Fix is in the unofficial 2.53.2 since 2 days and will be in the final 2.53.1 too.
I suggest you use NoScript 5.1.9 if you are concerned. I do. In the wild you find these type of nasties usually on bad obscure websites or in ads served by compromised ad servers.
FRG
I suggest you use NoScript 5.1.9 if you are concerned. I do. In the wild you find these type of nasties usually on bad obscure websites or in ads served by compromised ad servers.
FRG
- Peter Creasey
- Posts: 1341
- Joined: October 26th, 2007, 2:32 pm
- Location: Texas
Re: URGENT: update for FireFox needed now!?! What abouty SM?
Thanks, I figured you had everything covered in good fashion.
. . . . . . . . . . Pete
- ElTxolo
- Posts: 2810
- Joined: July 30th, 2007, 9:35 am
- Location: Localhost
Re: URGENT: update for FireFox needed now!?! What abouty SM?
frg wrote:Fix is in the unofficial 2.53.2 since 2 days and will be in the final 2.53.1 too.Peter Creasey wrote:What is the implication of this for SeaMonkey?
https://www.us-cert.gov/ncas/current-ac ... nerabilityMozilla Patches Critical Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Mozilla Security Advisories for Firefox 72.0.1 and Firefox ESR 68.4.1 and Thunderbird 68.4.1 and apply the necessary updates.
I suggest you use NoScript 5.1.9 if you are concerned. I do. In the wild you find these type of nasties usually on bad obscure websites or in ads served by compromised ad servers.
- From your response, I gather that you are NOT going to patch SeaMonkey 2.49.5 with any new updates, to fix this critical issue, right ... ???
Which according to numerous sources, that is actively being exploited ...
You seem NOT to care about the security of SeaMonkey 2.49.5 users. As the only valid solution you recommend to use the NoScript extension.
How to Ask Questions The Smart Way - How to Report Bugs Effectively
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240318 SeaMonkey/2.53.18.2
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240412 SeaMonkey/2.53.19
~
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240318 SeaMonkey/2.53.18.2
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240412 SeaMonkey/2.53.19
~
- therube
- Posts: 21714
- Joined: March 10th, 2004, 9:59 pm
- Location: Maryland USA
Re: URGENT: update for FireFox needed now!?! What abouty SM?
Correct.I gather that you are NOT going to patch SeaMonkey 2.49.5 with any new updates, to fix this critical issue, right ... ???
https://freenode.logbot.info/seamonkey/20200113
Fire 750, bring back 250.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
- ElTxolo
- Posts: 2810
- Joined: July 30th, 2007, 9:35 am
- Location: Localhost
Re: URGENT: update for FireFox needed now!?! What abouty SM?
therube wrote:Correct.I gather that you are NOT going to patch SeaMonkey 2.49.5 with any new updates, to fix this critical issue, right ... ???
https://freenode.logbot.info/seamonkey/20200113
.... Never underestimate human stupidity (Pittacus Lore)
Last edited by ElTxolo on January 14th, 2020, 3:24 am, edited 1 time in total.
How to Ask Questions The Smart Way - How to Report Bugs Effectively
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240318 SeaMonkey/2.53.18.2
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240412 SeaMonkey/2.53.19
~
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240318 SeaMonkey/2.53.18.2
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240412 SeaMonkey/2.53.19
~
-
- Posts: 1361
- Joined: December 15th, 2015, 1:20 pm
Re: URGENT: update for FireFox needed now!?! What abouty SM?
> .... Never underestimate human stupidity (Pittacus Lore)
Yours or mine? I really know that we need to get releases out faster but i can also wish for the moon. By the time we do 2.49.6 we would have 2.53.1 anyway. We are around 4 to 5 core people and as long as this does not change it will go nowhere. We did make tremedous progress in the last months rebuilding the infrastructure but we are not yet at releases. The 2.53.1 beta is done for 14 days now and still not up.
Yours or mine? I really know that we need to get releases out faster but i can also wish for the moon. By the time we do 2.49.6 we would have 2.53.1 anyway. We are around 4 to 5 core people and as long as this does not change it will go nowhere. We did make tremedous progress in the last months rebuilding the infrastructure but we are not yet at releases. The 2.53.1 beta is done for 14 days now and still not up.
- ElTxolo
- Posts: 2810
- Joined: July 30th, 2007, 9:35 am
- Location: Localhost
Re: URGENT: update for FireFox needed now!?! What abouty SM?
frg wrote:.... I really know that we need to get releases out faster but i can also wish for the moon. By the time we do 2.49.6 we would have 2.53.1 anyway. We are around 4 to 5 core people and as long as this does not change it will go nowhere. We did make tremedous progress in the last months rebuilding the infrastructure but we are not yet at releases. The 2.53.1 beta is done for 14 days now and still not up.
- Let's see, dude. You still don't seem to get it.
I have NOT criticized, the work you do at SeaMonkey at all. In fact, I have always been one of the first, to personally congratulate you several times.
What I do criticize and totally disagree with, is that you do NOT anything about the serious/critical security issues in SeaMonkey 2.49.5.
Except recommend users to use a shitty extension to mitigate the security problem.
Firefox, Firefox ESR, Thunderbird, Pale Moon, Basilisk, Waterfox ... etc, have released almost immediate security updates, to fix this issue.
But at SeaMonkey NOTHING has been done.
And with this last one, it's what I do NOT agree with. Do you get it now or what?
How to Ask Questions The Smart Way - How to Report Bugs Effectively
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240318 SeaMonkey/2.53.18.2
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240412 SeaMonkey/2.53.19
~
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240318 SeaMonkey/2.53.18.2
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20240412 SeaMonkey/2.53.19
~
- therube
- Posts: 21714
- Joined: March 10th, 2004, 9:59 pm
- Location: Maryland USA
Re: URGENT: update for FireFox needed now!?! What abouty SM?
I'd been wondering about that. Glad to see that he's go it.Waterfox
(Reddit sucks. So I tend to not follow or use WF because of that.)
Fire 750, bring back 250.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
-
- Posts: 1361
- Joined: December 15th, 2015, 1:20 pm
Re: URGENT: update for FireFox needed now!?! What abouty SM?
It is a free world. No one is forced to use SeaMonkey. Use whatever you want to use but if you do not contribute with code or helping to actually get releases out don't tell me what to do. It is a community project and the remaining devs do it all in their spare time. And I say I miss broader support from the community. Usually the same people helping out and ausually the same people demanding the moon.
Please close. This discussion goes nowhere and I get more angry by the minute.
FRG
Please close. This discussion goes nowhere and I get more angry by the minute.
FRG
- Frank Lion
- Posts: 21177
- Joined: April 23rd, 2004, 6:59 pm
- Location: ... The Exorcist....United Kingdom
- Contact:
Re: URGENT: update for FireFox needed now!?! What abouty SM?
It's a fair point. If they are going to fix anything then fixing what 98% of the userbase are using does make the most sense.ElTxolo wrote:What I do criticize and totally disagree with, is that you do NOT anything about the serious/critical security issues in SeaMonkey 2.49.5.
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)
.
.
- Peter Creasey
- Posts: 1341
- Joined: October 26th, 2007, 2:32 pm
- Location: Texas
Re: URGENT: update for FireFox needed now!?! What abouty SM?
It is unfortunate that more of us are not in a position and/or qualified to be helpful with development.frg wrote: It is a community project and the remaining devs do it all in their spare time.
Please know that the vast majority of us appreciate all that you do and how you do it. And please continue same.
Thanks.
. . . . . . . . . . Pete
- ndebord
- Posts: 1122
- Joined: December 7th, 2002, 9:53 am
Re: URGENT: update for FireFox needed now!?! What abouty SM?
Frank,Frank Lion wrote:It's a fair point. If they are going to fix anything then fixing what 98% of the userbase are using does make the most sense.ElTxolo wrote:What I do criticize and totally disagree with, is that you do NOT anything about the serious/critical security issues in SeaMonkey 2.49.5.
Well, as we have 4 to 5 developers now, all working in their spare time, the timing of this bug is unfortunate as SM 2.53.xx is almost a reality. SM 2.49.xx is yesterday's browser and to my mind it makes sense to allocate sparse resources to bug fix the new SM, not the old. Just sayin'
Nick
-N- Si vis pacem, para bellum
FrameWork, SeaMonkey(64-bit),Windows 10 Pro (X64- 21H2), WinPatrol, Malwarebytes & Panda Dome
FrameWork, SeaMonkey(64-bit),Windows 10 Pro (X64- 21H2), WinPatrol, Malwarebytes & Panda Dome
-
- Posts: 1361
- Joined: December 15th, 2015, 1:20 pm
Re: URGENT: update for FireFox needed now!?! What abouty SM?
Thanks Nick. It is better to have a few hundered new sec patches than 1. It is not that I like the current situation.
As always: tanstaafl.
As always: tanstaafl.
- Frank Lion
- Posts: 21177
- Joined: April 23rd, 2004, 6:59 pm
- Location: ... The Exorcist....United Kingdom
- Contact:
Re: URGENT: update for FireFox needed now!?! What abouty SM?
Well, this is no ordinary bug, but an actively exploited critical security issue. Plus, in my opinion, 2.53 may be almost a reality but it's also not yet ready for prime time at the moment.ndebord wrote:... the timing of this bug is unfortunate as SM 2.53.xx is almost a reality.
There will come a time in SeaMonkey's future when security issues just cannot be fixed, but we're not at that point yet. Therefore a 'Let them eat cake' attitude to users of the existing official version of SeaMonkey is far from ideal.
Users of software have the right to bring up issues of things that concern them. It is the heat of the particular kitchen we have chosen to work in.
The answer to users (especially ones regarding a critical security issue!) is never '
Please close. This discussion goes nowhere and I get more angry by the minute.', as above.
Even I never talk to users like that.
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)
.
.