Slashdot Mirror
Mozilla Firefox 1.02 Released
akadruid writes "Mozilla has begun rolling the Firefox 1.02 security update. It has appeared with the little fanfare and without the staggered rollout of 1.01 - have Mozilla sorted their distribution worries?"
← Back to Stories (view on slashdot.org)
Let's just say the bandwidth of vulnerable IE users is being put to good use.
Anyone else notice the speed increase?
Now if only they'd get going on Sunbird. I need a good calendar app.
But does it stop the bloody pop ups I've had to turn off Javascript to cure?
I like muppets.
Can anyone explain to me the best way to upgrade Firefox? Updating from 1.0 to 1.0.1 seemed to leave two instances of Mozilla on my desktop. Should I uninstall the old before installing the new? I don't want to lose all my settings/bookmarks/etc.
jf
I got my auto-update notification in FireFox, ran the "wizard" to update, and am now posting from 1.0.2. Update completed before the /. story was posted! (/. is my normal update notifier) Nice work Mozilla!
As the version number suggests, this is a pretty minor update. That's not to say that these security fixes aren't important; they are, and they proove once again that open source software can react far faster to new threats than any closed source development model. Nevertheless, it means that the Mozilla Foundation aren't expecting a major download rush. Of course, with Slashdot's intervention, maybe we can take them by surprise.
Now, how long to the first "Firefox 1.02 ate my boot sector" post?
apterous.org
I was really hoping this patch fixed those pop-unders I started getting lately.
I'm a firm believer in the philosophy of a ruling class. Especially since I rule. -Randal, Clerks
Don't forget the suite is updated as well...
-m
http://www.invisik.com
How it is an update when it acts as a total re-install?
I love how firefox/thunderbird keep filling up my Add/Remove Programs list in XP everytime there is an "update".
Not trying to flame, but shouldn't there be a better way?
Firefox was crashing when the address bar received focus. After the upgrade, problem resolved...
At this site, you can find updated Adblock definitions that you can easily import. Just scroll down to the most recent update, download, and install.
Ever since I installed these, I've had to manually block something only a couple of times. They work great!
My userid is prime!
Those smily popup windows are an spyware thing not a popup thing. They are generated from within windows usually. Download and run a spyware app.
This release is to fix a buffer overflow bug in the GIF handling code. The flaw was discovered by Internet Security Systems and patched before the public learned of the issue. When was the last time you heard of other browsers fixing problems proactively instead of reactively?
Hopefully there is a Debian build when I get home so that I can update my MEPIS/Debian box. (Or is that GNU/MEPIS/DEBIAN/Linux?? :-) )
\/\/oobie
Really? Mine worked fine with just installing right over 1.0.1 with Windows XP. Under Linux...no go (of course).e fox-1.0.2.x86.package
However, Autopackage works great (if you've have FF installed from Autopackage): http://www.wildgardenseed.com/Taj/autopackage/fir
(BTW, if you do try this Autopackage, we'd love some feedback on how it works--taj at wildgardenseed dot com).
Tell the truth and you won't have so much to remember.
Download the new version and OS X then mount it as a disk image.
Drag the Firefox icon from the image folder to your Applications folder and click the OK button to approve the overwrite.
Then, you are done!
Easy.
That's not CTRL, you're hitting ALT.
And it looks like you're overshooting W and hitting F4.
Not that there's anything wrong with that.
If Firefox incorporated a bittorrent agent inside the browser for updates. Simple click and launch a bittorrent download - then install followed by some minimal upload time - say 5 minutes of bandwidth
... heh heh
that would be cool
---- "Logoff! That cookie shit makes me nervous!" - A. Soprano
Ever going fix this?
Its not so bad on my work comp, but downright embarrasing on my girlfriend's laptop when there's 5 Firefox entries in the Add/Remove Programs dialog.
Anyone else having problem with the autoupdate not doing anything? I "Check Update" and was given an option to install 1.0.2, so obviously it knew 1.0.2 is out.
However after clicking on "Install Now" it just shows "downloading and installing updates" but there is no internet connection at all, so it's not really doing anything.
Otherwise can I please have a link to download the patch? Last time I went mozilla.org but couldn't find the patch, and had to download the whole 4.3MB 1.0.1
Rock that crushes, Paper & Scissors that don't matter.
Umm.. Firefox 1.01 has come out already. I was running it until today. It's Thunderbird that has skipped a number. The article blatantly ignores the fact that Thunderbird 1.02 has ALSO been released, along with Firefox 1.02.
;) for a month or so. Guess they're too busy patenting the Internet.
That ignorance, of course, is nothing compared to Microsoft, which hasn't released ANY updates for my version of IE (not that I use it
Did you know that "FTW" ("for the win") is a direct translation of "Sieg Heil"?
It seems there are no official zip builds for formal releases. Asa's blog explains why and suggests that those looking for them "look at the build ID in the final release, and get the same nightly build from the same branch".
Only problem? The release notes don't specify the build ID, so you have to run the installer first. When you do that, you discover the build ID is 20050317. Only there don't (currently) appear to be any 1.02 zip builds in any of the aviary directories for 20050317.
Am I missing something?
Go this address: about:config
/. user
Right click anywhere
Select new, integer
Name: privacy.popups.disable_from_plugins
Value: 2
-- Taken from another
automatic update worked for me.
options->advanced->software update->check now.
world was created 5 seconds before this post as it is.
With Bugzilla and the community, their backend that addresses security bugs is pretty tight. But why is the desktop end limited by the archaic announcement/download/install scenario? I'd prefer to accept subscription to the security bugfix channel, RSS polled every few hours or hundred pages. If it authenticated the patches, I'd get a nonmodal notification message, with "More Info" and "Always Autoapply" buttons in the window. That would make their rapid responses worthwhile. If they could upgrade in the background without slowing down my surfing, with on-demand rollbacks, I'd probably just autoupdate, looking for upgrade notices in my email.
--
make install -not war
Add/Remove programs is hardly a list of installed programs. Its just a list generated from HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall
Nothing really magical going on there. Two entries for firefox doesn't mean you have two copies of firefox installed. Delete the registry key if you really care that much? Most people are too busy USING their computer to worry about what little glitches are in a dialog in control panel that they never use.
Morphing Software
I can't say I've experienced this error. I just logged in and out of my 4 yahoo accounts and no problems. I don't have the abovementioned mplayer-plugin problem either.
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b2) Gecko/20050303 Firefox/1.0+
Downloaded binary from mozilla.org on a Debian Testing system.
It already does. Be sure automatic updates are turned on under Tools, Options, Advanced, Software Updates.
There were some problems with auto update in 1.0 that were fixed in 1.0.1. You should now see a message box in the bottom right corner (like when downloads finish) when there are critical updates.
Also, another easily-overlooked item is the up-pointing arrow that sometimes appears in the top right corner. This means updates are available. Red for critical updates, blue or green for non-critical updates.
After the install I was informed that my extensions were disabled until new ones come out to ensure compatability. I can understand why that could be important for major updates but will I have to lose my gmail notifier every time a minor bug fix comes out?
Although the ebuild has propagated to the rsync rotation, the distfile won't go out until a server does its sync once every 2 hours.
So.... chill.
wdd
However, this was where I found out, so I can't take all the credit :^)
My digital rights don't need management.
> Most people are too busy USING their computer to worry about what little glitches are in a dialog in control panel that they never use.
Many people still think using "the internet" means clicking on the Explorer icon. A minor item like this doesn't help convince them to switch.
You should be uninstalling the old version before you install the new one.
which bit of autoupdate don't they get ?
i shouldnt be doing anything other than clicking an update icon,everything should be taken care of
does Microsoft say "to install SP2 you must uninstall SP1" ? so why do i have to in mozilla ?
never mind me having to disappear into advanced settings to check updates manually when in IE its on the tools menu, easy to get at if i want to check
at the moment the word to describe their update process is rubbish
BTW: I heard that Yahoo will be giving out 1GB accounts starting April.
:)
Yes, we can verify that.
Have they fixed the memory leaks in 1.0 yet?
Having an idle browser leaking 300 MB of memory per day is like a self-inflicted DOS attack.
This is a patch for a major security flaw in Firefox. I hope Firefox users are putting the bandwidth to good use or they will face the same problems as IE users.
Vote for Pedro
"When ever I access my mail account at https://mail.yahoo.com, [with Firefox 1.0x] the browser crashes when I log out."
Score: 0 Offtopic
"I hate those smilie popups which seems to be unblockable, please make them go away. [which is to say Firefox still isn't blocking all popups]
Score: 0 Offtopic
"I hope this fixes the problems with this document contains no data."
Score: 0 Troll
"Open source software can react far faster to new threats than any closed source development model."
Score: +5 Informative
Mmmm gotta love that pure Slashdot fanboi machine. Work in a plug for Linux or Open Source, instant +5. Mention a valid and existing bug with the open source software the post is about, you're an offtopic troll, probably a NAMBLA member or Nazi too. Die!
I'm Rick James with mod points biatch!
A quick Google search revealed that you can also remove an entry from the registry manually with details found at here. I did this myself, installed the 1.02 version, and all seems to be running smoothly.
Fetch Text URL - Firefox Extension
Don't forget the proper settings you need to get the most out of Filterset.G:
Recommended Adblock settings for Filterset.G
[To modify: Tools > Adblock > Preferences]
Hide Ads x Remove Ads
Ablock Options:
Obj-Tabs
x Collapse Blocked Elements
x Check Parent Links
x Site Blocking
x Keep List Sorted
The roots of education are bitter, but the fruit is sweet.
--Aristotle
And if you're not running firefox with root/administrator privileges, how is that thing supposed to work?
Defenestrate Windows...
"Open source software can react far faster to new threats than any closed source development model."
Well the story IS about an update.
Those other comments you show that were modded offtopic are *bug reports*. This isn't where you go to file bug reports.
You have to be really careful when installing. The very last page (Your install finished successfully, blahblahblah) has two checkmarks: one resets your homepage to Firefox's default, the other launches Firefox after hitting the Finish/Done button. It's only been like that the last few releases. Hard to catch if you're click-happy during installs.
I thought that was what Michael Jackson was for.
Sometimes at night I imagine the darkness is filled with horrible things with too many teeth, like Julia Roberts.
I can't find the Bugzilla entry at the moment, but this bug HAS BEEN FIXED in the trunk. It will be incorporated into the next branch, Firefox 1.1, which comes out in two to three months.
Firefox didn't let me know about the new version, I had to read it on Slashdot or I wouldn't even know.
I told it to "Check now" for updates, and got this error:
"Firefox was not able to find any available updates"
Umm, there is an available update, a whole new version.
Maybe the Firefox team should have Firefox check the Slashdot RSS feed to see if it needs updates.
Sigh.
Just because it CAN be done, doesn't mean it should!
When do they start pushing this security updates to me? Or manage to inform me when I first open my browser, not when I browse to the /. website??
StarTrek.org Free Webmail
So, I updated on my work comp, and it now has some really odd issues.
It hijacked my homepage to put mozilla homepage on it, even though I unchecked that option.
when I change it back to my homepage, it loads with my homepage just fine on boot, but when I click the home button in the toolbar, I get sent to the moz homepage. WTF?!
Any one else seeing that? any idea how to fix this?
badger
While I understand your point, I'd like to point out that Trillian isn't open source.
On a side note, K-Meleon and Trillian aren't cross-platform. I consistently put my friends and family on Firefox, Thunderbird, and Gaim, so that when they eventually move to Linux (an inevitability, I think, barring an Apple-based purchase), they'll be well-acquainted with the applications they'll use most.
Really? Mmmm, I've found Trillian 3 to be very slick looking, and incredibly stable. Well, 0.74 was stable too. Never crashed for me. I mean, never in 3 years of use.
I've also noticed on my crappy campus connection that I'm keeping a connection to AIM via Trillian when everyone using AIM/Dead AIM is getting disconnected every 20 minutes or so.
Not to mention the nice easy encrypted IM's (I know, not perfect, but combined with direct connections, likely good enough for most. Hey, if anyone want's to do a plugin that implements a GPG
interface, I'll be the first to use it. I won't switch IM clients though, I cannot stand the interface of any other one I've tried. This included GAIM (Huge, Ugly, One network feel), Miranda (Small, Unstable, unpolished), AIM(Ads.))
YMMV of course.
Opera, Proxomitron-Grypen,GPG 0x0A1C6EE3
let's keep it to the facts.
I'm a big fan of Secunia, the only site i know that offers a page of unpatched known holes for each software.
And i can tell you that IE has always more Highly Critical unpatched known holes than Firefox:
IE holes
Firefox holes
The Firefox update process really sucks from an ease-of-use point of view. Since it's a complete new install, I wouldn't even call it an "update"...
For a proper update procedure, it seems you have to download the new version, uninstall the old one, and then re-install the new one - hoping that all plugins survive the procedure.
That's not user friendly, and will drive people away from Firefox, perhaps back to IE, which is definitely easier to keep up to date. I do hope that Firefox will get a true "patch" mechanism yet...
Don't whistle while you're pissing.
I did that in Windows but then in the Add/Remove Programs in the Control Panel I got entries for Mozila Fire for 1.0, Mozilla Firefox 1.0.1, Mozilla Firefox 1.0.2. So if you install Firefox on top of a previous install it doesn't remove the old one. It should warn you about this or remove the old guy.
It's fixed in the aviary branch, slated for the next proper point release. In the meantime do what I did, install the SlashFix extension which forces a reflow after any slashdot page has loaded (and only slashdot pages).
I am NaN
Yes, when you submit a bug to Bugzilla you can mark it as a security bug. If you do that, only you and the security group will be able to see it. If it's a new legitimate security bug, you can then expect a check for $500.
What a fool believes, he sees, no wise man has the power to reason away.
This is /. If you say anything which may in anyway be taken as a negitive commentary (true or not) about FF, Linux, or any F/OSS then you are a troll.
;-)
Sorry, thats just the way it is. If you don't like it, go find another community where open free discussion of all ideas is encouraged. We don't do that here!
Two types of posts will be accepted here. 1) Flowing praise for any/all F/OSS projects or 2) Spewing hatred toward MS$. Any other ideas or discussions are strictly prohibited!
"reality has a well-known liberal bias" - Steven Colbert
<sigh>
Don't give me that "edit the registry" b.s. either. I know how to do it but I choose not to. I want another dozen entries first before I take a screen shot and send it back to them.
Someone really should mod this original poster up -- it isn't offtopic at all! The story is about an upgrade to Firefox to cure some security-related crash issues. The poster is experiencing other crash issues. (And remember that any crash has a good chance of being a security issue).
This bug is still being worked on. It's Bug 247884 (I can't direct link, they block links from slashdot.)
7 88 4
https://bugzilla.mozilla.org/show_bug.cgi?id=24
For context, click Parent.
I was using Firefox, but recently switched to Camino after seeing a post on Slash. I think Camino uses a lot / most of the stuff developed for Firefox. Not really sure what the difference is, but if anybody knows the finer points between Camino and Firefox, please educate me.
Camino is REALLY fast, and uses a lot less system resources on OS X than Firefox. But the best way I can describe Camino is that it's Firefox optimized for OS X. Camino has a better look and feel in OS X than Firefox. Don't be put of by 0.8 release, it's solid. I encourage all OS X people using Firefox to try Camino.
One thing I don't like is the name....I can't get the ugly station wagon with the rally wheels out of my head.
Of course, I'm using it with an OS that's not a total piece of shit, so your mileage may vary.
-- $SIGNATURE