The Register® — Biting the hand that feeds IT

Feeds

Firefox update tackles critical memory bugs

We can remember it for you wholesale

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Mozilla has released a new version of Firefox in response to the discovery of several security flaws in the browser software.

Version 3.0.7 of Firefox plugs five security vulnerabilities, three of which earn the dreaded "critical" label. Of these critical flaws a bug that means that Firefox crashes with evidence of memory corruption stands out as the most severe. Critical flaws in Mozilla's garbage collection process (involving memory management and "cloned XUL DOM elements") as well as bugs in the PNG library used by Mozilla also create a possible means for hackers to inject malware onto vulnerable systems.

The Firefox update also fixes a number of lesser security and stability bugs, as explained in Mozilla's release notes here. Malware exploiting the bugs is yet to be seen in circulation, but that's a poor reason to hold off upgrading. Those who have enabled Mozilla's automated update process should find that new software is installed within a day or so.

Mozilla's Thunderbird email client and SeaMonkey application suite share a similar code base to Firefox and therefore also need updating, to Thunderbird 2.0.0.21 and SeaMonkey 1.1.15, respectively.

The Firefox update was published on Thursday a day after Opera released a new version of its software, largely in response to the discovery of separate security flaws, making it a busy week on the alternative browser security front. ®

Agentless Backup is Not a Myth

Latest Comments
Anonymous Coward

@ Silverwave (was, "Still using Firefox 2, myself")

>>>...That import/export stuff in FF3 doesn't seem to work well.

>

>Yeah the workaround is to: close FF > export to html(overwrite bookmarks.html) > clean up bookmarks.html

>rm bookmarkbackups > rm places.sqlite > restart ff (will auto import bookmarks.html).

...I'm a bit late returning to this thread, but, well, colour me impressed. Okay, with a genuinely helpful suggestion like this, I may indeed try installing FF3 again and giving it a shot. This is, at least, no more irritating than what I currently do anyway. I am still not convinced that the bookmark searching functions in FF3 are actually better, but at least this will take most of the edge off. Thanks!

0
0

@ Here we go again

I know that AC - his name is Jack and I believe his last name is A**.

0
0

@The BigYin

>>Yes, some of the add ons are for the previous version; I can't remove these as FF won't let me. This is yet another issue, along with the memory and CPU hogging

Sounds like profile problems, try creating a clean one and re-adding extensions 1 at a time.

Notes:

firefox -ProfileManager

firefox -safe-mode

To transfer your information between profiles you need to copy these files:

signons3.txt

key3.db

places.sqlite

cert8.db

cert_override.txt

0
0

More from The Register

 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving
Panda-peddlers cuffed for chess gambling gambit
More porridge on the menu for Chinese coders after second offence
 breaking news
Yes, maybe we should keep hackers in the clink for YEARS, mulls EU
Watch out black hats, they just might throw away the key
Internet fraud still stings suckers
Australians twice as gullible as Americans