Firefox and Thunderbird 1.0.6 Released

micpp writes "Only a short time after the release of version 1.0.5, Mozilla has released version 1.0.6 of both Firefox and Thunderbird . This update fixes a bug in the browser and email program which prevented some extensions from working."

Comments

So...

[Pxtl]

is there anyway to use Thunderbird's spam filter to hide spam in a newsgroup yet?

That was certainly quick

[BlackCobra43]

Three cheers for efficient open-source response to bugs.

Re:That was certainly quick

[Anonymous Coward]

Security fixes made in FireFox 1.0.5, released July 12, 2005

(Mozilla's rating) Mozilla's description of vulneraility, Date reported to Mozilla

(High) Content-generated event vulnerabilities: April 11, 2005
(Low) XBL scripts ran even when javascript disabled: May 2, 2005
(High) Code execution via "Set as Wallpaper": May 3, 2005
(Low) Same-origin violation with InstallTrigger callback: May 8, 2005
(High) Script injection from Firefox sidebar panel using data: May 13, 2005
(Critical) Code execution through shared function objects: May 19, 2005
(Moderate) Possibly exploitable crash in InstallVersion.compareTo: May 28, 2005
(Moderate) The return of frame-injection spoofing: June 6, 2005
(Moderate) Same origin violation: frame calling top.focus(): June 6, 2005
(Critical) Standalone applications can run arbitrary code through the browser: June 20, 2005
(Low) javascript prompt origin spoofing: June 26, 2005
(High) XHTML node spoofing: June 27, 2005

Re:That was certainly quick

[daern]

> Three cheers for efficient open-source response to bugs.

Three cheers for rushing patches out quickly with proper regression testing to avoid having to re-release with bug fixes.

Perhaps people might have some understanding of why Microsoft don't release patches 2 days after someone tells them about a vulnerability. Frankly, if I was a corporate Firefox user that had started testing Firefox for deployment, I'd be a little pissed about having to start all over again with the new version.

RELEASE CYCLE!!!

[JossiRossi]

AHHHHHHHHHH!!! This wasn't part of any cycle I was told about! My god! My day is ruined! Thank god Microsoft will be consistent. My life can get back to normal in a couple weeks.

and of course

[devilsandy]

the software update feature never worked for me. I had to download and install.

Re:and of course

[PReDiToR]

They stagger the release times to ease bandwidth. The setup file comes first, then it hits the update servers.

In a couple of days people can autoupdate or use the little blue xmas tree.

What really irks me...

[oberondarksoul]

...is having all my extensions and themes disabled whenever I install a new version of Firefox. Granted, you can re-enable them through about:config, but wouldn't it be nicer to have a dialogue box on first launch (along the lines of "You have some old extensions installed which may not be 100% compatible - do you want to disable them?")?

Re:What really irks me...

[Soul-Burn666]

Ummm, that's what Fierfox does for me.
It says "Extenions A and B may not be compatible with Firefox version XYZ and will be disabled".

Also, about:config -> app.extension.version
Set that to a low number (1.0 for example) and it won't even ask to disable them.

Re:What really irks me...

[Suppafly]

ya, thousands of people screaming at the devs wondering what the hell is wrong with FF

What is wrong with ff is that it is setup in such a way that extensions can have it hang. People should be 'screaming at the devs' about this.

Fixing extensions

[Iriel]

Now if only they could fix a bug that would get authors to update their extensions to the new browser version. I miss my FireGoat browswer

(yes, I know there's a way to fix firesomething, but I haven't had time and it's just annoying to install an extension to get an error saying that it's for an older version)

Stealing Microsoft's innovations...

[bigtallmofo]

I see they still have tabbed web browsing, which has been in Internet Explorer since version 7.0.

The ultimate test

[ICECommander]

Can Mozilla's servers be /.ed?

Mirrors?

[carambola5]

Can we get a list of mirrors, please? mozilla.org is blocked at the proxy here at work. *grumble*

Automatic updater

[Xerotope]

All of these software updates are driving me nuts. Under Debian it's fine, just "apt-get upgrade" and things happen fairly seamlessly. But on my windows box, updating requires downloading a new installer for each program, in some cases uninstalling the new version, and then running each new installer. These window installers all require multiple steps, and so it's just a big hassle to stay current.

Why can't more programs these days have automatic updates? Firefox does in theory. It'll check for new updates, then download the new version and start the installer for you and then break your install. Not the updating experience I'm looking for.

Why can't software updates operate more like Eclipse's update tool? Or Sun's Java update? Or Adobe reader's? Or dare I say it, Microsofts Windows update?

And yes, I'm lazy. This is supposed to be one of the menial tasks where computers replace people.

Re:Automatic updater

[ckaminski]

Patience... soon enough Windows Update will become an API you can leverage as an app developer to tell Windows where to find patches and updates to your software. Just wait.

Re:Automatic updater

[digidave]

Wow, so it'll finally be where Linux package management was in 1999? (Or earlier)

Re:Automatic updater

[Nate B.]

Okay, I'll feed the troll.

I use Debian with IceWM and after installing a package through apt or aptitude, if it's a GUI and sometimes character based, it will show immediately in the system menu. That's the Programs selection in the IceWM menu. No restarting IceWM required. Debian does the same thing for KDE. This has been the case for at least the past few years so I would say that, at least in Debian's case, it's pogressed well beyond MS Windows circa '93.

So, maybe you're just using an immature distribution or your facts aren't quite what you thought they were.

Re:I'm still at 1.04?

[blankmeyer]

They release the new versions for download before they release it for auto-upgrade. It is usually several days behind the download version (this will be changed when Deer Park is released). Before they had a chance to get 1.0.5 setup for the upgrade, the bug was reported and they held off (why have people update to 1.0.5 when 1.0.6 is days away?). If 1.0.6 was released today, my next Monday it should be released to the auto-update system.

uuencode/decode. C'mon, support it.

[British]

I honestly wish you could do a "block sender" in newsgroups. Really, it would make usenet a little bit more bearable. But all the blocking features seem to be reserved for email.

I tried messing around with the rules & such for newsgroups(filters?) but they never came close to working.

What Thunderbird really needs is to support uuencode/decode. Why does only Freeagent and some freeware newsreader support this, yet is wideley used on usenet? What's the difficulty here?

If Thunderbird supported that, it could steal some users away from the ungodly complicated FreeAgent.

Re:uuencode/decode. C'mon, support it.

[beacher]

Check out Pan (available on almost all platforms) here. Pan has been dormant for almost a year - it's in the process of being resurrected, but It's a damn good newsreader that supports yEnc. Plus it supports plonking ;)

Re:uuencode/decode. C'mon, support it.

[Nimey]

What Thunderbird really needs is to support uuencode/decode.

You need the Mnenhy extension.

Re:Thunderbird version increases from 1.0.2 to 1.0

[the web]

You are technically correct, the best kind of correct.

Re:Check for updates...

[ballstothat]

How many of us want to prove how l33t we are by bragging about using Alpha releases? Hands?

I can see yours is already raised.

1.1 will solve these constant updates

[JonVisc]

Version 1.1 for both apps will be out in the summer which offers updates in the style of windows updates, which is a good thing. You don't have to reinstall the whole application, it just updates what is needed. Hur-ray!

Re:1.1 will solve these constant updates

[JonVisc]

Kind of answers that here: http://wiki.mozilla.org/Software_Update The main quote being... "The update itself will contain a manifest of files which need updating/removal." At which point it will delete or overwrite them, but you can read about it, it covers it better than I can :-)

For those of you that cant go to mozilla.org

[boijames]

Mirror of Mac, Windows and nix version (English) here.

So how did the breaking of extensiosn get past QA?

[doormat]

I'm curious as to how it got past the QA team that 1.0.5 broke a bunch of extensions. Downloading say, the 10 most popular extensions and testing them is too dificult and time consuming?

And relax....

[ear1grey]

...it's worth clarifying that this release fixes one, and only one bug.

There's no (known) security vulnerability here, so if you're extension free, or see no effects, you can shrug this one off.

Re:To all complaining about the "update", or lack

[geoffspear]

They should just print out the binary diffs to the previous version and mail them to you so you can make the changes in a hex editor. Do you really trust their installer application to make the changes to your computer?

Enterprise FF/TB Managment

[theyenk]

Does FF/TB have some type of a management console, that allows you to push updates out to client computers. I work at a university with 3k+ computers, I pity the foo who has to update boxes for a week straight, only to have 1.0.7 come out the next day. Or does anyone know of an open source client management system, that would hold updates for clients and auto-update if out of date clients pass by the manager?

They are called Dhtml hover ads

[zymano]

They use javascript/ccs/dhtml and they suck.
We need to pester the FF people about it.

http://dhtml-menu.com/menu-demos/demo347.html
http://css.maxdesign.com.au/floatutorial/