Slashdot Mirror
Mozilla Firefox 1.02 Released
akadruid writes "Mozilla has begun rolling the Firefox 1.02 security update. It has appeared with the little fanfare and without the staggered rollout of 1.01 - have Mozilla sorted their distribution worries?"
← Back to Stories (view on slashdot.org)
But does it stop the bloody pop ups I've had to turn off Javascript to cure?
I like muppets.
It updated for me several hours ago. Perhaps your timing is just off?
As the version number suggests, this is a pretty minor update. That's not to say that these security fixes aren't important; they are, and they proove once again that open source software can react far faster to new threats than any closed source development model. Nevertheless, it means that the Mozilla Foundation aren't expecting a major download rush. Of course, with Slashdot's intervention, maybe we can take them by surprise.
Now, how long to the first "Firefox 1.02 ate my boot sector" post?
apterous.org
Don't forget the suite is updated as well...
-m
http://www.invisik.com
DISCLAIMER: Use at your own risk. It is always best to backup the profile directory if you can not afford to lose it!
Wah, wah, wha. They've said for a long time that 1.1 would be used to finish the Mac version, which include auto-update functionality. 1.0.1 and 1.0.2 are security releases, not functionality improvements.
Uninstalling the old before you install the new won't get rid of your settings. Those are saved in your home dir (on Win2000/XP).
You're asking for trouble if you update without installing. I ended up with both 1.0 and 1.0.1 in my Add/Remove Programs (win98), and removing the former broke the latter (and broke its uninstall function). The only way to get rid of 1.0.1 was to reinstall it to restore the uninstaller, then try again.
WeRelate.org - wiki-based genealogy
Click the Orange or Blue orb next to the flower in the top right part of your window. I just did it and it auto-updates Firefox to 1.02.
I don't keep a lid on my coffee so when I walk around I look busy -me
At this site, you can find updated Adblock definitions that you can easily import. Just scroll down to the most recent update, download, and install.
Ever since I installed these, I've had to manually block something only a couple of times. They work great!
My userid is prime!
This release is to fix a buffer overflow bug in the GIF handling code. The flaw was discovered by Internet Security Systems and patched before the public learned of the issue. When was the last time you heard of other browsers fixing problems proactively instead of reactively?
Really? Mine worked fine with just installing right over 1.0.1 with Windows XP. Under Linux...no go (of course).e fox-1.0.2.x86.package
However, Autopackage works great (if you've have FF installed from Autopackage): http://www.wildgardenseed.com/Taj/autopackage/fir
(BTW, if you do try this Autopackage, we'd love some feedback on how it works--taj at wildgardenseed dot com).
Tell the truth and you won't have so much to remember.
Download the new version and OS X then mount it as a disk image.
Drag the Firefox icon from the image folder to your Applications folder and click the OK button to approve the overwrite.
Then, you are done!
Easy.
Auto-update doesn't work on Mac though unfortunately. I love firefox, but the bugs on firefox take some getting used to. It still pisses me off to no end that there is no scrollbar so you can't see what percentage of the page you are viewing.
Umm.. Firefox 1.01 has come out already. I was running it until today. It's Thunderbird that has skipped a number. The article blatantly ignores the fact that Thunderbird 1.02 has ALSO been released, along with Firefox 1.02.
;) for a month or so. Guess they're too busy patenting the Internet.
That ignorance, of course, is nothing compared to Microsoft, which hasn't released ANY updates for my version of IE (not that I use it
Did you know that "FTW" ("for the win") is a direct translation of "Sieg Heil"?
The Support Forum advises uninstalling earlier versions before installing 1.0.2. (Although I can't now find the post. It was there 10 minutes ago.)
FWIW I had problems with the auto-update and did have to uninstall and reinstall and reconfigure my firewall.
Go this address: about:config
/. user
Right click anywhere
Select new, integer
Name: privacy.popups.disable_from_plugins
Value: 2
-- Taken from another
automatic update worked for me.
options->advanced->software update->check now.
world was created 5 seconds before this post as it is.
Or just use Myuninstaller http://www.nirsoft.net/utils/myuninst.html to delete items in from the Add/Remove Programs list in Windows without uninstalling the software.
Add/Remove programs is hardly a list of installed programs. Its just a list generated from HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall
Nothing really magical going on there. Two entries for firefox doesn't mean you have two copies of firefox installed. Delete the registry key if you really care that much? Most people are too busy USING their computer to worry about what little glitches are in a dialog in control panel that they never use.
Morphing Software
You should be uninstalling the old version before you install the new one.
All you bookmarks and extensions will still be there after you install the new version. Those are saved in your profile directory, which is not deleted when you uninstall the old Firefox.
Use adblock, and block all of the admedia/adwhoever javascript includes; most pop-anythings will go away because the commands to activate them aren't there.
I had but a simple dream, to destroy all humans.
It already does. Be sure automatic updates are turned on under Tools, Options, Advanced, Software Updates.
There were some problems with auto update in 1.0 that were fixed in 1.0.1. You should now see a message box in the bottom right corner (like when downloads finish) when there are critical updates.
Also, another easily-overlooked item is the up-pointing arrow that sometimes appears in the top right corner. This means updates are available. Red for critical updates, blue or green for non-critical updates.
Although the ebuild has propagated to the rsync rotation, the distfile won't go out until a server does its sync once every 2 hours.
So.... chill.
wdd
There don't seem to be any directly corresponding ones for Firefox 1.0.2, closest it seems would be ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nigh tly/2005-03-14-17-aviary1.0.1/firefox-1.0.2.en-US. win32.zip.
For Thunderbird 1.0.2, I've found that the http://ftp.mozilla.org/pub/mozilla.org/thunderbird /nightly/2005-03-17-12-aviary1.0.1/thunderbird-win 32.zip has an match on the md5sum for thunderbird.exe as compared to the official release.
It depends on the extension author. Whoever wrote the extension must have coded it specifically to one version instead of a range. I have a dozen extensions installed and none of them complained from 1.0 to 1.0.1 to 1.0.2.
.xpi files are really .jar files that you can unpack and edit the "allowed versions" tag to make them more lenient. I forget the exact details but a little Googling should turn it up if you're interested.
Note that
I'm waiting for their long-awaited IM program to come out. It would be very nice to have a Mozilla-based IM program.
IIRC, versions 6/7 of netscape included a built in AOL client (at least for the linux version). Of course, it was fairly unusable when compared to something such as gaim, but it was there. I'm unaware as to whether the new firefox-based version of netscape includes it, though.
BTW: I heard that Yahoo will be giving out 1GB accounts starting April.
:)
Yes, we can verify that.
Why do people expect feature changes from a security update? The point of these updates is that they ONLY fix the critical problems. They don't screw with anything else to minimize the chance of breaking something.
If you're looking for new features or enhancements, you'll get that with 1.1. Or you can try the nightly builds. But don't expect any noticable changes in a security/stability update (unless you are suffering from stability problems).
As for your pop-ups, the latest trend is supposedly to generate them from a Flash embed. You can either not install Flash, or use the Flashblock extension (recommended), or try adblock, or try the hidden preference that is supposed to prevent plugin-generated pop-ups. In the past, a major cause of failure for the pop-up blocker has been the Tabbrowser Extensions (TBE) extension. I don't know whether it still suffers from this problem.
Oh, quit trolling... I get this on my Debian box:
Not to mention that apt hasn't been a Debian-only tool for quite a while...
This is a patch for a major security flaw in Firefox. I hope Firefox users are putting the bandwidth to good use or they will face the same problems as IE users.
Vote for Pedro
That sounds like you got an extension update and not a Firefox update.
- A
A quick Google search revealed that you can also remove an entry from the registry manually with details found at here. I did this myself, installed the 1.02 version, and all seems to be running smoothly.
Fetch Text URL - Firefox Extension
You lose the scrollbar if you've installed a funky theme that doesn't work with OS X. (It doesn't matter if you're using the theme, unfortunately, just that it's installed.) So try uninstalling your themes.
Win dain a lotica, en vai tu ri silota
As Gilda Radner used to say on SNL... Never mind.
Turned out my Zone Alarm was blocking the new version by default, but for some reason didn't pop up a message box saying so. Once I checked the program controls the new FireFox worked fine...
Stop by my site where I write about ERP systems & more
Yep, this shouldn't really be happening, and there appears this appears to be already logged in Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=24788 4 (remember you need to copy and paste that URL into a new tab kiddies as Bugzilla will 'disable' the request from Slashdot)
And it was fixed how soon exactly?
MS bashers don't bash MS because they've got security problems, but more often because they know about an issue and sometimes wait months and months to roll a patch out.
Don't forget the proper settings you need to get the most out of Filterset.G:
Recommended Adblock settings for Filterset.G
[To modify: Tools > Adblock > Preferences]
Hide Ads x Remove Ads
Ablock Options:
Obj-Tabs
x Collapse Blocked Elements
x Check Parent Links
x Site Blocking
x Keep List Sorted
The roots of education are bitter, but the fruit is sweet.
--Aristotle
I don't want to sound like a MS-hater or a OSS fanboy, but this flaw does not seem so low-impact.
Cross platform compatibility and consistency.
Most of the 3rd party multi-protocol IM clients are cross-platform, the only exception I can think of is gaim. Gaim, however requires the use of gtk, and gtk doesn't work all that nicely with Windows, even with the gtk-wimp theme.
A Mozilla-based IM client would solve the these problem, and I would really look forward to one.
I can't find the Bugzilla entry at the moment, but this bug HAS BEEN FIXED in the trunk. It will be incorporated into the next branch, Firefox 1.1, which comes out in two to three months.
For what it's worth, I managed to implement a very barebones jabber client as a 10k firefox extension... and I don't even really know what I'm doing. :) I wouldn't suggest anyone else use it, but by installing it onto portable firefox I could use AIM/MSN/Yahoo in any of the campus labs. I've found even this crappiest IM client is very nice in terms of convenience.
:( But regardless, a good, working jabber client will probably be released for Firefox at some point.
And although my little extension isn't really useable by anyone else, there are people working on a jabber client in XUL called jabberzilla. It hasn't released any code that I could find.
If you're gonna lie, at least don't post on your blog about you changing Apache settings to disable indexing.
let's keep it to the facts.
I'm a big fan of Secunia, the only site i know that offers a page of unpatched known holes for each software.
And i can tell you that IE has always more Highly Critical unpatched known holes than Firefox:
IE holes
Firefox holes
I did that in Windows but then in the Add/Remove Programs in the Control Panel I got entries for Mozila Fire for 1.0, Mozilla Firefox 1.0.1, Mozilla Firefox 1.0.2. So if you install Firefox on top of a previous install it doesn't remove the old one. It should warn you about this or remove the old guy.
It's fixed in the aviary branch, slated for the next proper point release. In the meantime do what I did, install the SlashFix extension which forces a reflow after any slashdot page has loaded (and only slashdot pages).
I am NaN
What a fool believes, he sees, no wise man has the power to reason away.
Yes, when you submit a bug to Bugzilla you can mark it as a security bug. If you do that, only you and the security group will be able to see it. If it's a new legitimate security bug, you can then expect a check for $500.
What a fool believes, he sees, no wise man has the power to reason away.
Your organization doesn't have to know that unrelated programs X, Y, and Z aren't part of a unified package. Call it the Open Source Suite and set up a single-point installer for everything.
Hokey statistics and ancient misconceptions are no match for a good thought in your head, kid!
This bug is still being worked on. It's Bug 247884 (I can't direct link, they block links from slashdot.)
7 88 4
https://bugzilla.mozilla.org/show_bug.cgi?id=24
For context, click Parent.
I was using Firefox, but recently switched to Camino after seeing a post on Slash. I think Camino uses a lot / most of the stuff developed for Firefox. Not really sure what the difference is, but if anybody knows the finer points between Camino and Firefox, please educate me.
Camino is REALLY fast, and uses a lot less system resources on OS X than Firefox. But the best way I can describe Camino is that it's Firefox optimized for OS X. Camino has a better look and feel in OS X than Firefox. Don't be put of by 0.8 release, it's solid. I encourage all OS X people using Firefox to try Camino.
One thing I don't like is the name....I can't get the ugly station wagon with the rally wheels out of my head.
Of course, I'm using it with an OS that's not a total piece of shit, so your mileage may vary.
-- $SIGNATURE