Slashdot Mirror
Firefox Updated to 1.0.4
Exstatica writes "Firefox has been updated to 1.0.4 and they have fixed a few critical security holes, all javascript vulnerabilities. The Mozilla Foundation announced these vulnerabilities May 7th. 'There are currently no known active exploits of these vulnerabilities although a proof of concept has been reported." You don't have to upgrade, but it's recommended.'" We've reported on these vulnerabilities previously.
Firefox 1.0.4 was posted sometime between 11 and 11:30PM last night EST. I got it about 11:40 :D (Yes, geek alert)
That aside, with all of these newfound vulnerabilities popping up so often, could Firefox become (later down the line) the new Internet Explorer? May seem highly unlikely now.. but as the New York Lottery says...
"Hey, you never know."
It should be noted that the Mozilla Suite has also relased an update, 1.7.8.
Mozilla.org will probably get hammered!! Here's a google cache of the Firefox Mirror List
And while you're at it don't forget those extensions:
FoxyTunes: http:www.iosart.com/foxytunes/firefox/
AdBlock: http://adblock.mozdev.org/
Or you can just go get more at: update.mozilla.org
Happy Browsing!
I believe that a patch update system will be implemented starting with Firefox 1.1
You can check for updates from Tools>Options>Advanced>Software Updates. If you use some themes, e.g. Littlefox, there is a button next to the Firefox home page 'circle' that you can click to check for updates.
As for your observation regarding the red flag, I believe The Mozilla Foundation had disabled that feature on the website because of one of the critical flaws now fixed.
-clueless
(I need to create a login here, or did I do it previously?)
Although I've been an enthusiastic mozilla/firefox user & supporter since the late 90s (yes I was browsing with a 'naked' gecko control, HA! :P) I was surprised to find I'd lost track of development to the extent that I didn't realise the trunk builds have a much more up-to-date gecko engine. The gecko in the 1.0.x series (inc. 1.0.4) are a year old! Those users who prefer livin' on the edge might prefer to get a faster, smaller, much less memory-leaky build from:
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nigh tly/latest-trunk/
Reading some of the blogs on planet.mozilla.org states just that. Lots of tiny nifty features are supposedly going to be making it into 1.1 (the back/forward cache should make my 1 sec wait non-existent now!).
about:config
extensions.disabledObsolete = false
Regards,
Steve
As a system admin for your company, you should use a msi package, but if for some reason you can't, firefox's installer can be fully scripted by simply passing it some args and turning on the quiet switch(or invisible or something switch, you'll have to look it up).
Regards,
Steve
There is a flag variable in about:config 'app.update.updatesAvailable' that gets set to true. The notification would have gone away on its own in about a day when Firefox checked for updates.
These people look deep within my soul and assign me a number based upon the order I joined. -Homer Simpson
Middle click won't ever work on a 1.0.x release. You will need to wait until the 1.1 release. It was fix on the trunk by bug 151249.
bugzilla.mozilla.org/show_bug.cgi?id=151249
These people look deep within my soul and assign me a number based upon the order I joined. -Homer Simpson
I can't run the executable "firefox.exe" at work because it "has been disabled by the administrator." Solution? Rename to firefox2.exe.
The only pain comes when firefox is updated... it leaves the firefox2.exe executable from the previous installation, and adds the new firefox.exe to the install folder. It then becomes a dumb little task to update all the icons and shortcuts scattered about my system.
Wish there was some way to specify, during install, the resulting executable name. Of course, I have to be one of the maybe twenty people in the world who needs this, so maybe it's not worth the miniscule bloat.
IWARS.
People, in general, disappoint me. Politicians even more so.
It should be noted that 1.0.4 also features a JS bugfix which hastes said JS execution by around 20%.
...) is pure Javascript.
May sound like it suck... if you don't know that the whole XUL thing (basically everything in firefox but the Gecko engine itself: interface, extensions, userscripts,
"The way we can tell it's C# instead of Haskell is because it's nine lines instead of two." -- wadler
I would've shared your cynicism had I not just logged onto the BBC news website and seen their Latest News ticker show the words "The makers of Firefox say the two flaws in the open source browser have been fixed.", linking to this story of theirs, posted at 17:01BST, 16:01GMT.
A good, accurate followup to their original "Critical flaws found in Firefox" story