[EMAIL PROTECTED] wrote:

> Is it worth effort to install 4.73...I have 4.72 now... is it better, more
> stable, worse???  Thanks for the help...

Well if you look at the release notes (if you can get passed
the blinding, annoying 'Netscape Netcenter'):

http://home.netscape.com/eng/mozilla/4.7/relnotes/windows-4.73.html#whatnew

There's a list of a bunch of things that's supposed to be
new, but in fact you have to compare it to the older listing
to subtract off the stuff that's not-quite-so-new:

http://home.netscape.com/eng/mozilla/4.7/relnotes/windows-4.72.html#whatnew

This looks like it might be important:

     Security fixes that address Javascript cookie
     exploitation and SSL (Secure Socket Layer) vulnerability. To
     get more information about these and other
     security issues in Netscape Communicator, check our
     security information page at

        http://home.netscape.com/security/notes/index.html. 

And what they say over there is: 

   JavaScript Cookie Exploit - An exploit was reported for
   Netscape Communicator 4.72 and earlier in which a hostile
   site can read the links in a user's bookmark file and
   some attributes of HTML files if the user's profile name
   and the Communicator installation directory path are
   known to the hostile site. This exploit has been fixed in
   Netscape Communicator 4.73, which is now available for
   download. Users of previous Communicator versions can use
   any of four techniques to prevent the exploit.
   
   The Acros-Suencksen SSL Vulnerability - This
   vulnerability, which could allow a malicious web master
   to intercept secure data via an SSL connection, has been
   identified and fixed in both the Personal Security
   Manager (PSM) for Netscape Communicator and Netscape
   Communicator version 4.73.

So that's the bottom line. It's a security upgrade (and
maybe we really should se a redhat security alert about
these things, no?).


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to