Mozilla Patches 10 Firefox Bugs - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
Software // Enterprise Applications
News
12/20/2006
11:33 AM
50%
50%

Mozilla Patches 10 Firefox Bugs

Both Firefox 1.5.x and 2.x will alert their users that an update is ready to install, but impatient users can download the fixes.

Mozilla patched 10 Firefox vulnerabilities late Tuesday, seven of them marked "critical," but left a password-spilling bug unresolved.

Firefox 2.0.0.1, the first update since the October debut of Firefox 2.0, fixes 10 flaws while 1.5.0.9 patches nine. Both Firefox 1.5.x and 2.x will alert their users that an update is ready to install, but impatient users can download the fixes from the Mozilla Web site.

According to the security advisories posted by Mozilla, the updates quash bugs in the layout and JavaScript engines, Firefox's implementation of SVG (Scalable Vector Graphics) comment objects, and LiveConnect, the bridge code that allows Java applets and Web-based JavaScript to communicate. Some of the vulnerabilities were also present in Mozilla's ThunderBird e-mail client and the SeaMonkey suite, which have been updated to 1.5.0.9 and 1.0.7, respectively.

But a Firefox bug first reported Nov. 22 hasn't been fixed. The vulnerability, which Danish security tracker Secunia pegged as "less critical," could let attackers hijack passwords from Firefox sessions. Secunia has recommended that users disable the browser's automated password saving feature until a patch is produced. (In Firefox, users can select Tools|Options|Security, then clear the box marked "Remember passwords for sites.")

Mozilla on Tuesday also repeated earlier recommendations that users update to Firefox 2.0, as the 1.5.x line will be maintained with security fixes only until April 24, 2007. Firefox 1.x dropped off Mozilla's security support list in May.

Firefox 1.5.0.9 and 2.0.0.1 are available immediately for Windows, Linux, and Mac OS X.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
Slideshows
IT Careers: 10 Industries with Job Openings Right Now
Cynthia Harvey, Freelance Journalist, InformationWeek,  5/27/2020
Commentary
How 5G Rollout May Benefit Businesses More than Consumers
Joao-Pierre S. Ruth, Senior Writer,  5/21/2020
News
IT Leadership in Education: Getting Online School Right
Jessica Davis, Senior Editor, Enterprise Apps,  5/20/2020
White Papers
Register for InformationWeek Newsletters
Video
Current Issue
Key to Cloud Success: The Right Management
This IT Trend highlights some of the steps IT teams can take to keep their cloud environments running in a safe, efficient manner.
Slideshows
Flash Poll