Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread Ant via support-seamonkey 

On 3/20/2018 11:35 AM, NoOp wrote:

On 3/20/2018 11:02 AM, Frank-Rainer Grahl wrote:

Fix will be in 2.49.3. Building was supposed to be started this week but I
caught a cold.

FRG


Thanks! Hope you feel better soon.


Ditto. At least, the fix is coming. I wonder if there will be other 
fixes too.

--
"At high tide the fish eat ants; at low tide the ants eat fish." --Thai 
Proverb
Note: A fixed width font (Courier, Monospace, etc.) is required to see 
this signature correctly.

   /\___/\   Ant(Dude) @ Personal Web Site http://antfarm.ma.cx
  / /\ /\ \
 | |o   o| |  If crediting, then use Ant nickname and URL/link.
\ _ /  Axe ANT from its address if e-mailing privately.
 ( )
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread Ant via support-seamonkey 

On 3/20/2018 7:59 AM, chokito wrote:

Official Builds 32 Bit
52.6.1.6610 SeaMonkey.exe (2.49.2)
52.7.2.6648 Frefox.exe (52.7.2)

WG9s SeaMonkey ESR Builds 64 Bit
52.7.2.6652 SeaMonkey.exe (2.49.3)


Thanks. Is this information shown anywhere in our SM installations?
--
"... [Let us inquire] what glory there was in an omnipotent being 
torturing forever a puny little creature who could in no way defend 
him(her!)self? Would it be to the glory of a man to fry ants?" 
--Charlotte Perkins Gilman
Note: A fixed width font (Courier, Monospace, etc.) is required to see 
this signature correctly.

   /\___/\   Ant(Dude) @ Personal Web Site http://antfarm.ma.cx
  / /\ /\ \
 | |o   o| |  If crediting, then use Ant nickname and URL/link.
\ _ /  Axe ANT from its address if e-mailing privately.
 ( )
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread NoOp 
On 3/20/2018 11:02 AM, Frank-Rainer Grahl wrote:
> Fix will be in 2.49.3. Building was supposed to be started this week but I 
> caught a cold.
> 
> FRG

Thanks! Hope you feel better soon.

> 
> 
> Mason83 wrote:
>> On 20/03/2018 16:21, G. Ross wrote:
>>> NoOp wrote:
 https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
 Out of bounds memory write while processing Vorbis audio data
 ANNOUNCED
 March 16, 2018
 IMPACT
 CRITICAL
 PRODUCTS
 Firefox, Firefox ESR
 FIXED IN
 Firefox 59.0.1
 Firefox ESR 52.7.2

 Also see:
 https://www.securityfocus.com/bid/103432

 What version of ESR is SeaMonkey 2.49.2 using?
>>>
>>> How common is vorbis audio data?
>> 
>> Before Opus came along, Vorbis was the best royalty-free open-source audio 
>> codec.
>> It was even better than most proprietary solutions.
>> 
>> https://en.wikipedia.org/wiki/Opus_%28audio_format%29
>> https://en.wikipedia.org/wiki/Vorbis
>> 
>> Vorbis wrapped in OGG is used heavily on Wikipedia for most (all?) audio 
>> clips.
>> e.g. 
>> https://en.wikipedia.org/wiki/File:Musopen_-_In_the_Hall_Of_The_Mountain_King.ogg
>> 
>> Regards.
>> 
> 

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread Frank-Rainer Grahl 
Fix will be in 2.49.3. Building was supposed to be started this week but I 
caught a cold.


FRG


Mason83 wrote:

On 20/03/2018 16:21, G. Ross wrote:

NoOp wrote:

https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
Out of bounds memory write while processing Vorbis audio data
ANNOUNCED
March 16, 2018
IMPACT
CRITICAL
PRODUCTS
Firefox, Firefox ESR
FIXED IN
Firefox 59.0.1
Firefox ESR 52.7.2

Also see:
https://www.securityfocus.com/bid/103432

What version of ESR is SeaMonkey 2.49.2 using?


How common is vorbis audio data?


Before Opus came along, Vorbis was the best royalty-free open-source audio 
codec.
It was even better than most proprietary solutions.

https://en.wikipedia.org/wiki/Opus_%28audio_format%29
https://en.wikipedia.org/wiki/Vorbis

Vorbis wrapped in OGG is used heavily on Wikipedia for most (all?) audio clips.
e.g. 
https://en.wikipedia.org/wiki/File:Musopen_-_In_the_Hall_Of_The_Mountain_King.ogg

Regards.


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread Mason83 
On 20/03/2018 16:21, G. Ross wrote:
> NoOp wrote:
>> https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
>> Out of bounds memory write while processing Vorbis audio data
>> ANNOUNCED
>> March 16, 2018
>> IMPACT
>> CRITICAL
>> PRODUCTS
>> Firefox, Firefox ESR
>> FIXED IN
>> Firefox 59.0.1
>> Firefox ESR 52.7.2
>>
>> Also see:
>> https://www.securityfocus.com/bid/103432
>>
>> What version of ESR is SeaMonkey 2.49.2 using?
>
> How common is vorbis audio data?

Before Opus came along, Vorbis was the best royalty-free open-source audio 
codec.
It was even better than most proprietary solutions.

https://en.wikipedia.org/wiki/Opus_%28audio_format%29
https://en.wikipedia.org/wiki/Vorbis

Vorbis wrapped in OGG is used heavily on Wikipedia for most (all?) audio clips.
e.g. 
https://en.wikipedia.org/wiki/File:Musopen_-_In_the_Hall_Of_The_Mountain_King.ogg

Regards.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread G. Ross 

NoOp wrote:

https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
Out of bounds memory write while processing Vorbis audio data
ANNOUNCED
March 16, 2018
IMPACT
CRITICAL
PRODUCTS
Firefox, Firefox ESR
FIXED IN
Firefox 59.0.1
Firefox ESR 52.7.2

Also see:
https://www.securityfocus.com/bid/103432

What version of ESR is SeaMonkey 2.49.2 using?



How common is vorbis audio data?

--

GW Ross







___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread WaltS48 

On 3/20/2018 10:59 AM, chokito wrote:

Official Builds 32 Bit
52.6.1.6610 SeaMonkey.exe (2.49.2)
52.7.2.6648 Frefox.exe (52.7.2)

WG9s SeaMonkey ESR Builds 64 Bit
52.7.2.6652 SeaMonkey.exe (2.49.3)



Thanks for the clarification.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread chokito 
Official Builds 32 Bit
52.6.1.6610 SeaMonkey.exe (2.49.2)
52.7.2.6648 Frefox.exe (52.7.2)

WG9s SeaMonkey ESR Builds 64 Bit
52.7.2.6652 SeaMonkey.exe (2.49.3)
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread WaltS48 

On 3/20/18 12:42 AM, Edmund Wong wrote:

NoOp wrote:

https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
Out of bounds memory write while processing Vorbis audio data
ANNOUNCED
March 16, 2018
IMPACT
CRITICAL
PRODUCTS
Firefox, Firefox ESR
FIXED IN
Firefox 59.0.1
Firefox ESR 52.7.2

Also see:
https://www.securityfocus.com/bid/103432

What version of ESR is SeaMonkey 2.49.2 using?



ESR 52



I thought SM 2.49.2 was based on 52.7.0. So will there be a 2.49.2.1 to 
include the security fix, or will users have to wait until 2.49.3?


--
Best name ever! Cadet Bone Spurs
National Popular Vote 
Ubuntu 16.04LTS - Unity Desktop

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread Ant via support-seamonkey 

On 3/19/2018 9:55 PM, NoOp wrote:

On 3/19/2018 9:42 PM, Edmund Wong wrote:

NoOp wrote:

https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
Out of bounds memory write while processing Vorbis audio data
ANNOUNCED
March 16, 2018
IMPACT
CRITICAL
PRODUCTS
Firefox, Firefox ESR
FIXED IN
Firefox 59.0.1
Firefox ESR 52.7.2

Also see:
https://www.securityfocus.com/bid/103432

What version of ESR is SeaMonkey 2.49.2 using?



ESR 52



Mozilla Firefox ESR 52.1.1?


I think v52.0. See its user agent for Windows: User agent: Mozilla/5.0 
(Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0 
SeaMonkey/2.49.2. :(




Will there be a SeaMonkey 2.29.3?


I hope so and CCed mozilla.dev.apps.seamonkey newsgroup to see if anyone 
knows about it.

--
"I made my list for my birthday." --Christopher. "Yeah, what'd you put 
on there? - A basketball or an ant farm." and "This could be an ant 
farm. This could be a microscope or anything." --Chris from The Pursuit 
of Happyness movie.
Note: A fixed width font (Courier, Monospace, etc.) is required to see 
this signature correctly.

   /\___/\   Ant(Dude) @ Personal Web Site http://antfarm.ma.cx
  / /\ /\ \
 | |o   o| |  If crediting, then use Ant nickname and URL/link.
\ _ /  Axe ANT from its address if e-mailing privately.
 ( )
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-20 Thread NoOp 
On 3/19/2018 9:55 PM, NoOp wrote:
> On 3/19/2018 9:42 PM, Edmund Wong wrote:
...
>> ESR 52
>> 
> 
> Mozilla Firefox ESR 52.1.1?
> 
> Will there be a SeaMonkey 2.29.3?
> 
C/SeaMonkey 2.49.3?
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-19 Thread NoOp 
On 3/19/2018 9:42 PM, Edmund Wong wrote:
> NoOp wrote:
>> https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
>> Out of bounds memory write while processing Vorbis audio data
>> ANNOUNCED
>> March 16, 2018
>> IMPACT
>> CRITICAL
>> PRODUCTS
>> Firefox, Firefox ESR
>> FIXED IN
>> Firefox 59.0.1
>> Firefox ESR 52.7.2
>> 
>> Also see:
>> https://www.securityfocus.com/bid/103432
>> 
>> What version of ESR is SeaMonkey 2.49.2 using?
>> 
>> 
> ESR 52
> 

Mozilla Firefox ESR 52.1.1?

Will there be a SeaMonkey 2.29.3?

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Mozilla Foundation Security Advisory 2018-08

2018-03-19 Thread Edmund Wong 
NoOp wrote:
> https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
> Out of bounds memory write while processing Vorbis audio data
> ANNOUNCED
> March 16, 2018
> IMPACT
> CRITICAL
> PRODUCTS
> Firefox, Firefox ESR
> FIXED IN
> Firefox 59.0.1
> Firefox ESR 52.7.2
> 
> Also see:
> https://www.securityfocus.com/bid/103432
> 
> What version of ESR is SeaMonkey 2.49.2 using?
> 
> 
ESR 52
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Mozilla Foundation Security Advisory 2018-08

2018-03-19 Thread NoOp 
https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
Out of bounds memory write while processing Vorbis audio data
ANNOUNCED
March 16, 2018
IMPACT
CRITICAL
PRODUCTS
Firefox, Firefox ESR
FIXED IN
Firefox 59.0.1
Firefox ESR 52.7.2

Also see:
https://www.securityfocus.com/bid/103432

What version of ESR is SeaMonkey 2.49.2 using?


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey