Firefox and Thunderbird 1.0.6 Released

micpp writes "Only a short time after the release of version 1.0.5, Mozilla has released version 1.0.6 of both Firefox and Thunderbird . This update fixes a bug in the browser and email program which prevented some extensions from working."

Comments

Re:I'm still at 1.04?

[blankmeyer]

They release the new versions for download before they release it for auto-upgrade. It is usually several days behind the download version (this will be changed when Deer Park is released). Before they had a chance to get 1.0.5 setup for the upgrade, the bug was reported and they held off (why have people update to 1.0.5 when 1.0.6 is days away?). If 1.0.6 was released today, my next Monday it should be released to the auto-update system.

Re:and of course

[PReDiToR]

They stagger the release times to ease bandwidth. The setup file comes first, then it hits the update servers.

In a couple of days people can autoupdate or use the little blue xmas tree.

1.1 will solve these constant updates

[JonVisc]

Version 1.1 for both apps will be out in the summer which offers updates in the style of windows updates, which is a good thing. You don't have to reinstall the whole application, it just updates what is needed. Hur-ray!

Re:1.1 will solve these constant updates

[JonVisc]

Kind of answers that here: http://wiki.mozilla.org/Software_Update The main quote being... "The update itself will contain a manifest of files which need updating/removal." At which point it will delete or overwrite them, but you can read about it, it covers it better than I can :-)

Re:That was certainly quick

[Anonymous Coward]

Security fixes made in FireFox 1.0.5, released July 12, 2005

(Mozilla's rating) Mozilla's description of vulneraility, Date reported to Mozilla

(High) Content-generated event vulnerabilities: April 11, 2005
(Low) XBL scripts ran even when javascript disabled: May 2, 2005
(High) Code execution via "Set as Wallpaper": May 3, 2005
(Low) Same-origin violation with InstallTrigger callback: May 8, 2005
(High) Script injection from Firefox sidebar panel using data: May 13, 2005
(Critical) Code execution through shared function objects: May 19, 2005
(Moderate) Possibly exploitable crash in InstallVersion.compareTo: May 28, 2005
(Moderate) The return of frame-injection spoofing: June 6, 2005
(Moderate) Same origin violation: frame calling top.focus(): June 6, 2005
(Critical) Standalone applications can run arbitrary code through the browser: June 20, 2005
(Low) javascript prompt origin spoofing: June 26, 2005
(High) XHTML node spoofing: June 27, 2005

And relax....

[ear1grey]

...it's worth clarifying that this release fixes one, and only one bug.

There's no (known) security vulnerability here, so if you're extension free, or see no effects, you can shrug this one off.

Re:uuencode/decode. C'mon, support it.

[Nimey]

What Thunderbird really needs is to support uuencode/decode.

You need the Mnenhy extension.