Product: Fedora
Version: 19
Component: firefox
Matthew Miller <mattdm(a)redhat.com> has granted fedora_requires_release_note:
Bug 1005611: BEAST workaround not enabled in Firefox
https://bugzilla.redhat.com/show_bug.cgi?id=1005611
------- Additional Comments from Matthew Miller <mattdm(a)redhat.com>
See
https://fedorahosted.org/fesco/ticket/1181 and the fesco meeting log. We'd
like this to be applied in F20 and also as an update to F19 to go into
updates-testing.
I think this probably also could use a release note. Elio, do you have some
text for that? On the devel mailing list you note:
Also, the notes in the Bodhi update should be very clear and explain
that
user that, for reasons of compatibility, needs to opt out of the more
secure default can do so by setting the environment variable
NSS_SSL_CBC_RANDOM_IV=0.
Is there anything more to say?