From 71a340dea3da96000c901cd4a421c00e19b2e6f6 Mon Sep 17 00:00:00 2001
From: Santiago Rodriguez <santi@trisquel.info>
Date: Thu, 25 Jun 2015 03:24:25 +0200
Subject: [PATCH] abrowser: avoid logjam attack
Copied from
http://git.savannah.gnu.org/cgit/gnuzilla.git/commit/?id=58f127c1d5f8c89b9e55803701f734756d1cfa2a
---
helpers/DATA/firefox/settings.js | 7 +++++++
helpers/make-firefox | 2 +-
2 files changed, 8 insertions(+), 1 deletion(-)
diff --git a/helpers/DATA/firefox/settings.js b/helpers/DATA/firefox/settings.js
index 91d61fa7..34cf23d7 100644
--- a/helpers/DATA/firefox/settings.js
+++ b/helpers/DATA/firefox/settings.js
@@ -175,3 +175,10 @@ pref("loop.enabled",false);
// Use old style preferences, that allow javascript to be disabled
pref("browser.preferences.inContent",false);
+
+// Avoid logjam attack
+pref("security.ssl3.dhe_rsa_aes_128_sha", false);
+pref("security.ssl3.dhe_rsa_aes_256_sha", false);
+pref("security.ssl3.dhe_dss_aes_128_sha", false);
+pref("security.ssl3.dhe_rsa_des_ede3_sha", false);
+
diff --git a/helpers/make-firefox b/helpers/make-firefox
index f7f73180..27b39969 100644
--- a/helpers/make-firefox
+++ b/helpers/make-firefox
@@ -18,7 +18,7 @@
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
#
-VERSION=38
+VERSION=39
. ./config
--
GitLab