Product: Fedora Version: 19 Component: firefox Matthew Miller <mattdm@xxxxxxxxxx> has granted fedora_requires_release_note: Bug 1005611: BEAST workaround not enabled in Firefox https://bugzilla.redhat.com/show_bug.cgi?id=1005611 ------- Additional Comments from Matthew Miller <mattdm@xxxxxxxxxx> See https://fedorahosted.org/fesco/ticket/1181 and the fesco meeting log. We'd like this to be applied in F20 and also as an update to F19 to go into updates-testing. I think this probably also could use a release note. Elio, do you have some text for that? On the devel mailing list you note: > Also, the notes in the Bodhi update should be very clear and explain that > user that, for reasons of compatibility, needs to opt out of the more > secure default can do so by setting the environment variable > NSS_SSL_CBC_RANDOM_IV=0. Is there anything more to say? -- relnotes-content mailing list relnotes-content@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/relnotes-content
