Slashdot Mirror


Firefox Updated to 1.0.4

Exstatica writes "Firefox has been updated to 1.0.4 and they have fixed a few critical security holes, all javascript vulnerabilities. The Mozilla Foundation announced these vulnerabilities May 7th. 'There are currently no known active exploits of these vulnerabilities although a proof of concept has been reported." You don't have to upgrade, but it's recommended.'" We've reported on these vulnerabilities previously.

1 of 454 comments (clear)

  1. Yes, but ... by thinkfat · · Score: 5, Insightful

    ... as soon as the first proof of concept evolves into a worm, they will experience what it means to be deployed on millions of internet-connected pc's of clueless users.

    Rule #1: doesn't matter how fast you output a security update, if it's not being installed.

    Unfortunately it's not enough for an update to _exist_.