sevrver does not support RFC 5746, see CVE-2009-3555
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
firefox (Ubuntu) |
Invalid
|
Undecided
|
Unassigned |
Bug Description
Affected Ubuntu 11.04 on two computers and 11.10 amd64 too, since latest browser update.
firefox 7.0.1+build1+n
Several pages are inaccessible in ssl sessions by this bug, it is visible in the error-console while the browser is hourglassing forever. It is NOT okay to force thousands of server admins to repair something that is based on a client ignorance like these new ff version.
ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: firefox 7.0.1+build1+
ProcVersionSign
Uname: Linux 2.6.38-11-generic i686
AddonCompatChec
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.23.
Architecture: i386
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/
BuildID: 20110928224103
Card0.Amixer.info:
Card hw:0 'I82801DBICH4'
Mixer name : 'Analog Devices AD1981B'
Components : 'AC97a:41445374'
Controls : 26
Simple ctrls : 18
Card29.Amixer.info:
Card hw:29 'ThinkPadEC'
Mixer name : 'ThinkPad EC 1RHT71WW-3.04'
Components : ''
Controls : 2
Simple ctrls : 1
Card29.
Simple mixer control 'Console',0
Capabilities: pvolume pvolume-joined pswitch pswitch-joined penum
Playback channels: Mono
Limits: Playback 0 - 14
Mono: Playback 9 [64%] [on]
Channel: release
CurrentDmesg: Error: command ['sh', '-c', 'dmesg | comm -13 --nocheck-order /var/log/dmesg -'] failed with exit code 1: comm: /var/log/dmesg: Permission denied
Date: Sun Oct 23 09:51:46 2011
EcryptfsInUse: Yes
ForcedLayersAccel: False
IfupdownConfig:
auto lo
iface lo inet loopback
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Alpha i386 (20110318)
IpRoute:
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.136 metric 2
169.254.0.0/16 dev wlan0 scope link metric 1000
default via 192.168.1.1 dev wlan0 proto static
Plugins:
QuickTime Plug-in 7.6.6 - Lib=libtotem-
DivX® Web Player - Lib=libtotem-
Windows Media Player Plug-in 10 (compatible; Totem) - Lib=libtotem-
VLC Multimedia Plugin (compatible Totem 2.32.0) - Lib=libtotem-
Shockwave Flash - Lib=libflashpla
ProcEnviron:
LANGUAGE=de_DE:en
LANG=de_DE.UTF-8
SHELL=/bin/bash
Profiles: Profile0 (Default) - LastVersion=
RunningIncompat
SourcePackage: firefox
UpgradeStatus: Upgraded to natty on 2011-03-25 (212 days ago)
dmi.bios.date: 06/18/2007
dmi.bios.vendor: IBM
dmi.bios.version: 1RETDRWW (3.23 )
dmi.board.name: 2373L77
dmi.board.vendor: IBM
dmi.board.version: Not Available
dmi.chassis.
dmi.chassis.type: 10
dmi.chassis.vendor: IBM
dmi.chassis.
dmi.modalias: dmi:bvnIBM:
dmi.product.name: 2373L77
dmi.product.
dmi.sys.vendor: IBM
Thank you for reporting this to Ubuntu. Starting with Firefox 4, these sites have been disabled by default. This has been a known security issue for quite a while. This issue is the same as bug 798672 where an upstream bug is linked. The upstream bug does contain more information as well as links about where this was fixed. There is some documentation here as well: https:/ /wiki.mozilla. org/Security: Renegotiation
Please contact the site owner in question about this issue. Please report any other issues you may find.