On 9/14/2009 9:37 AM PT, NoOp typed:

How would I check for NSS version?

Why would you want to check it? We know the NSS version, SeaMonkey 1.1.18 comes with NSS 3.12.3.1, that's the whole purpose of doing a 1.1.18 at all, as the NSS 3.11.x used by SM 1.1.17 and lower allows SSL connections to be intercepted by third parties (so.called MITM attacks).

It does. But if you are using a debian packaged version, you'll want to
check the version on your system to ensure that it is updated as well.

http://www.ubuntu.com/usn/usn-810-1
http://www.ubuntu.com/usn/USN-810-2
http://www.ubuntu.com/usn/USN-810-3

Other distros should have similar security updates.

Ant, to check your version use 'apt-cache policy <packagename>'. Sample
output from an Ubuntu 9.04 system:

$ apt-cache policy libnss3-1d
libnss3-1d:
  Installed: 3.12.3.1-0ubuntu0.9.04.2
  Candidate: 3.12.3.1-0ubuntu0.9.04.2
  Version table:
 *** 3.12.3.1-0ubuntu0.9.04.2 0
        500 http://archive.ubuntu.com jaunty-updates/main Packages
        500 http://archive.ubuntu.com jaunty-security/main Packages
        100 /var/lib/dpkg/status
     3.12.2~rc1-0ubuntu2 0
        500 http://archive.ubuntu.com jaunty/main Packages

$ apt-cache policy libnspr4-0d
libnspr4-0d:
  Installed: 4.7.5-0ubuntu0.9.04.1
  Candidate: 4.7.5-0ubuntu0.9.04.1
  Version table:
 *** 4.7.5-0ubuntu0.9.04.1 0
        500 http://archive.ubuntu.com jaunty-updates/main Packages
        500 http://archive.ubuntu.com jaunty-security/main Packages
        100 /var/lib/dpkg/status
     4.7.3-0ubuntu2 0
        500 http://archive.ubuntu.com jaunty/main Packages

Ref: https://bugzilla.mozilla.org/show_bug.cgi?id=486537

I don't use Ubuntu. I use raw Debian. As for SeaMonkey package, I used the seamonkey-1.1.18.en-US.linux-i686.tar.gz package from Mozilla's server since Debian dropped IceApe (aka SeaMonkey) a few months ago. :( I extracted it into /home/Programs/SeaMonkey.

For those above packages if they help at all, I saw:
$ apt-cache policy libnss3-1d
libnss3-1d:
  Installed: 3.12.3.1-1
  Candidate: 3.12.3.1-1
  Version table:
 *** 3.12.3.1-1 0
        990 http://ftp.debian.org testing/main Packages
        100 /var/lib/dpkg/status
     3.12.3.1-0lenny1 0
        500 http://ftp.debian.org stable/main Packages
        500 http://security.debian.org stable/updates/main Packages

$ apt-cache policy libnspr4-0d
libnspr4-0d:
  Installed: 4.8-1
  Candidate: 4.8-1
  Version table:
 *** 4.8-1 0
        990 http://ftp.debian.org testing/main Packages
        100 /var/lib/dpkg/status
     4.7.1-4 0
        500 http://ftp.debian.org stable/main Packages
--
"This is what metaphor is. It is not saying that an ant is an elephant. Perhaps; both are alive. No. Metaphor is saying the ant is an elephant. Now, logically speaking, I know there is a difference. If you put elephants and ants before me, I believe that every time I will correctly identify the elephant and the ant. So metaphor must come from a very different place than that of the logical, intelligent mind. It comes from a place that is very courageous, willing to step out of our preconceived ways of seeing things and open so large that it can see the oneness in an ant and in an elephant." --Natalie Goldberg
   /\___/\
  / /\ /\ \         Phil/Ant @ http://antfarm.ma.cx (Personal Web Site)
 | |o   o| |        Ant's Quality Foraged Links (AQFL): http://aqfl.net
    \ _ /         Nuke ANT from e-mail address: phi...@earthlink.netant
     ( )                                           or ant...@zimage.com
Ant is currently not listening to any songs on his home computer.
_______________________________________________
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to