Mozilla Firefox 1.5.0.3 Released

Mini-Geek writes "Mozilla Firefox 1.5.0.3 has been released. As with previous 1.5.0.x patches, 1.5.0.3 can be downloaded as a small, incremental download. From the article: 'This update fixes a publicly disclosed denial of service weakness. All users are encouraged to upgrade to this version. The bugfixes previously planned for Firefox 1.5.0.3 were shifted to 1.5.0.4, and a quick update was released shortly after the recent to address the publicly reported issue.'"

Comments

luv incremental updates

[scott_evil]

Gotta love the small update size. More software should work this way and instead of giving us everything each time, just give the changes. Well... more windows software needs to do it, other platforms seem to manage it ok.

Re:Just a minor revision

[christopherfinke]

Seriously, who finds this interesting?

Well, I do. Mostly because I'm an extension developer and I like to make sure that all of my extensions work with the latest version of Firefox, but also because I just find Firefox to be interesting software and news about it is almost never unwelcome on my screen. Slashdot is reserved regarding posting about Firefox compared to Digg, where even articles about speculation about point-releases are promoted to the front page almost immediately.

Re:Yet again I was interrupted while I work

[Blahbooboo3]

Yes! However, it's the attitude of "figure it out moron" from some people that is the problem with open source projects.

auto-updates make security easier

[MikeFM]

It's definately a role model that other software venders could learn from. For friends and family that I used to have to babysit their browser updates now all I have to do is let Firefox do it's thing. Seems to work well in Thunderbird too. It really does make it a lot easier for non-technical people to keep up-to-date and truth be told it makes it easier for a geek boy like me too.

The only other Windows program I have that seems to work as well is Azureus which is also opensource.

Denial of Service my ass

[brunes69]

There is no such thing as a "denial of service" attack in a web browser. At worst it causes a crash, and potentially makes you lose unsaved data on some web forms.

If we're calling anything that locks your browser a DOS now, then how come this bug, which is over 3 years old and seems dead simple to fix, is not? I can make a browser DOS on any web page I want:

<script>
while(true) alert('Boom!');
</script>

Such a piece of code does not trigger the "script is taking a long time" message because it fires alerts. And the alerts are content-modal so you can't do *anything* to close the browser or tab causing the alerts. You have to kill it off.

No different from the "denial of service" bug mentioned in this posting.