Slashdot Mirror


Firefox 1.0.7 Released

hackajar writes "Firefox 1.0.7 has been released today. From the announcement "Fixes are included for the international domain name (IDN) link buffer overflow vulnerability and the Linux command line URL parsing flaw. There are also other security and stability changes, including a fix for a crash experienced when using certain Proxy Auto-Config scripts. In addition, some regressions introduced by previous 1.0.x security updates have been resolved.""

6 of 366 comments (clear)

  1. Quick to the point by timeToy · · Score: 5, Insightful

    That's perfectly fits with yesterday's news about Mozilla foundation being more reactive to security fixes than M$.

  2. No translated version by zdzichu · · Score: 5, Insightful

    And yet again, users of localised build were left in the cold.
    Think about your grandpa, who doesn't know english. He can't use non-translated build and is left with vulnerable, older version.
    Good work, Firefox developers!

    --
    :wq
  3. something concerns me by Dink+Paisy · · Score: 5, Insightful
    "In addition, some regressions introduced by previous 1.0.x security updates have been resolved."

    Too many regressions caused by security updates, and people will turn off auto-update. That's the very reason that Microsoft moved to a monthly update cycle. Getting updates out quickly is important, but unless the security hole is being actively exploited, it's probably more important to make sure nothing else gets broken by the fix. If you convince people not to install updates, then you're in really big trouble.

    --

    Whoever corrects a mocker invites insult;
    whoever rebukes a wicked man incurs abuse.
    --Proverbs 9:7
    1. Re:something concerns me by amdotaku · · Score: 5, Insightful

      Indeed, this is the dark side to Firefox, its stand alone update cycle. Its not friendly to extension developers, confuses and annoys users and administrators, and worse of all makes the whole Distribution based system the rest of FOSS uses go to pot.(Some people just want to run a version that comes with the distro without constant worrying and compatibility issues.) I think Firefox's special position at the head of the FOSS movement has made them focused too much on runing their own tight ship and not enough about letting their users do the same.

  4. Re:Don't use your distro tools to install it... by passthecrackpipe · · Score: 5, Insightful

    Heh, a list of many complex actions involving different user ID's, directories and other computer "magic" as seen from a users perspective, followed by:

    "The install was as easy as anything packaged by Vise or InstallShield"

    Can you please pass some of that crack you seem to be smoking? I'm a big linux fan, but installing anything, not in the least a user install from firefox, does not compare with the "double click setup.exe" from vise or installshield.

    And before all the fanboys knee-jerk with the security/spyware/virus/whatever-my-linux-kung-fu-i s-so-cool-i-kick-your-ass stuff - I know, i use linux and firefox. but that still doesn't make it an easy install. The distro install, incidentally, is pretty easy though, so just wait for the vendor updates mmmkay?

    --
    People who think they know everything are a great annoyance to those of us who do.
  5. Re:Nasty bugs. by 14erCleaner · · Score: 5, Insightful
    There seems to be a FUD campaign against Firefox. Why the heck would Symantec care about Firefox when they havent once to my knowledge critiziced Internet Explorer even when it had a critical patch coming out pretty much every day.

    Symantec sells security software that covers up Microsoft vulnerabilities.

    If everybody stopped using IE and Outlook, half of their business might go away.

    --
    Have you read my blog lately?