The Register® — Biting the hand that feeds IT

Feeds

Firefox update fixes four critical flaws

Laggard 2.x users urged to upgrade

Customer Success Testimonial: Recovery is Everything

Users of Firefox need to update their browser software again following the publication of patches by Mozilla on Wednesday.

Both supported versions of Firefox need patching but the 2.x version of the popular open source browser is most in need of a retool. Firefox 2.0.0.18 addresses 11 security vulnerabilities, six of which are classified as critical. Meanwhile, on the other track, Firefox 3.0.4 lances nine security vulnerabilities, four of which are critical.

The critical flaws in Firefox 3.x cover a vulnerability in the session restore feature that could allow cross-site scripting attacks and a separate memory corruption flaw as well as code injection risks involving the nsFrameManager and http-index-format parser of the browser. Mozilla's advisory explains the bugs in greater depth here.

Firefox 3.0.4 also fixes a slew of stability and performance glitches.

Mozilla's developers urge those left behind on the Firefox 2.x release to upgrade to Firefox 3.x, warning that it will stop issuing stability and security patches for the older release next month.

The SeaMonkey internet application suite evolved from the same code base as Mozilla's Application Suite and needs patching against the same 11 flaws as Firefox 2.x. Seamonkey, a community-driven project separate from Mozilla since, advises users to upgrade to Seamonkey 1.1.13. ®

Agentless Backup is Not a Myth

Latest Comments

Are you people quite mad?

... you can use the FF3 Address Bar the same way as you always did, by typing in the first part of the address you want to go to until enough has been typed to narrow it down so that the URL you want is showing in the dropdown, then pick it from the list. As you're typing, other URLs may be shown in the list but they're likely to be related to the one you're typing. Even if they're not, plough on and your result will soon appear. What's the problem?

In addition, the address bar will help you find addresses where the part of the URL you can remember is not at the beginning, or where you can only remember part of the page title, but you don't have to worry your little heads about this.

You people probably don't like predictive texting either, do you? What a reason to abandon a browser: "They added extra functionality! Waaaah!"

0
0

You prat!

"I'm sick of all these updates and seriously considering going back to Internet Explorer"

1) would you rather security problems weren't addressed?

2) there are updates to IE pretty much every patch Tuesday

If you're going back to IE may I recommend IE 3.0 which is no longer supported, so you'll be safe from those nasty security patches.

0
0

Here we go again

I'm sick of all these updates and seriously considering going back to Internet Explorer.

0
0

More from The Register

Bjarne Again: Hallelujah for C++
Plus: Now officially OK to admit you never used STL algorithms
Interwebs taunt Sir Jony over Apple eye candy makeover
Hey Ive, Ive... add more unicorns, willya?
SCO vs. IBM battle resumes over ownership of Unix
Zombie lawsuit back and wants to suck the brains out of Linux
Apple: iOS7 dayglo Barbie makeover is UNFINISHED - report
Plus: You don't like the icons? Blame marketing
Red Hat to ditch MySQL for MariaDB in RHEL 7
So long, Oracle! Don't let the door hit you on the way out
Shy? Socially inadequate? Fiddling with your phone could help
App 'tells the brutal truth' about social inadequates' chatup lines
Java EE 7 melds HTML5 with enterprise apps
New release arrives with GlassFish, NetBeans support
 breaking news
'Office Facebook' firm Tibbr wants you to PAY for mobe-meetings app
Great idea. Punters won't cough for it though
 breaking news
The only Waze is Google: Ad giant tipped to gobble map app 'for $1.3bn'
Pac-Man-satnav-ish upstart in bidding war with Apple, Facebook
 breaking news
PM Cameron calls for modern, programmable computers! (We think)
IT education musings to G8 chiefs to mystify IT industry