Mozilla Firefox 1.5.0.4 Released
KrayzieKyd writes "God Bless Mozilla. Firefox has just notified me that Firefox version 1.5.0.4 has just been released with release notes and according to Mozilla's website, the same has been released for Thunderbird with its own release notes."
thanks
ok
Are we getting slashdot articles for each verion bump of the mozilla products? I tought freshmeat was created for that.
Is there something special about this release? According to the release notes these bugs where removed. Great but not enough for a slashdot article.
MFSA 2006-43 Privilege escalation using addSelectionListener
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-41 File stealing by changing input type (variant)
MFSA 2006-39 "View Image" local resource linking (Windows)
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object prototypes
MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-34 XSS viewing javascript: frames or images from context menu
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
200GB/2TB $7.95 Coupon: SAVE90DOLLAR
I must be really fast
Fixed in Firefox 1.5.0.4
MFSA 2006-43 Privilege escalation using addSelectionListener
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-41 File stealing by changing input type (variant)
MFSA 2006-39 "View Image" local resource linking (Windows)
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object prototypes
MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-34 XSS viewing javascript: frames or images from context menu
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
so what?
I hope the new version stops crashing every time the planets are not aligned perfectly. I for one have down^Wupgraded to firefox 1.0. What are your experiences with 1.5? Is it better or worse than 1.0?
Just so you mods don't have to feel dirty modding up a karmawhore...
The following security bugs have been fixed for Firefox 1.5.0.4:
MFSA 2006-43 Privilege escalation using addSelectionListener
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-41 File stealing by changing input type (variant)
MFSA 2006-39 "View Image" local resource linking (Windows)
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object prototypes
MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-34 XSS viewing javascript: frames or images from context menu
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
And these for Thunderbird 1.5.0.4:
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-40 Double-free on malformed VCard
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object prototypes
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
Well, it's good to see security issues fixed instead of having them swept under the carpet. Indeed, both Microsoft and Opera lack the guts to admit they're not perfect.
However, the automated updates (Mozilla devs be praised!) make putting releases like this not worthy of a news article.
The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
IE7 and Opera 9 are comming soon too. Personally I prefer Opera over all others as it's both smaller and faster. It also has a ton of features, so that I don't need to spend the next 6 months of tracking extensions and manke configurations as when using Firefox. However, it's nice to see that we're all getting what we want.
A nice year for browsers, indeed, at has taken too long to get here.
Seamonkey, the new version of the old mozilla suite (Netscape-like) has also been updated. The release notes: http://www.mozilla.org/projects/seamonkey/releases /seamonkey1.0.2/.
I thought one of the benefits of Firefox 1.5 was incremental updates i.e. patches that that are in the 100s of KBs range. However, watching the progress meter for this latest update it will have eventually downloaded 6.1MB, which is basically the full version of Firefox.
I've got a fever and the only prescription is more COBOL.
procps-3.2.6-3.4.i386.rpm for fedora core 5 was released yesterday too. yawn, nothing to see here, move along.
KrayzieKyd writes "God Bless Mozilla.
More like God damn Mozilla. Twelve crippling bugs (four of which are critical) are in this patch. Is this what open source promises? A dozen exploitable bugs per point release? How many more dozens of bugs are there in that bloated piece of shit? It kinda makes one wonder if IE is really the safest browser on the market. Shame on you Mozilla.org for touting FF as secure.
Wake me up when version 2.0 arrives. Opera 8 (and the upcoming 9) is just as good, if not better than firefox.
I'd like to hear about memory management issues, frequent crashes and how Opera was there first - in that order. I need a refresher; it must be while since v1.5.0.3.
I think it's excellent with all these updates. Firefox if absolutely worth the attention.
Before Firefox - our local banking etc. where only accepted on Internet Explorer and nothing else, leaving out Mac and Linux users. Today Firefox is so respected that our country's Largest Bank support it!
Way to go FIREFOX!.
What this world is coming to - is for you and me to decide.
Is it just me or are the menus like 4 times faster at least? Or is it this patch changes firefox so that my old registry tweak setting windows menu paint dealy from 400ms to 0ms now being recognized by FF? I'ts not a simple memory leak fix because I have 1.5 gigs and I never noticed FF slowing down after long term use.
Or am I just crazy and nothing changed at all? maybe it was the extention update to cute menus cyrstal SVG
China has invaded Taiwan! it doesn't look good, folks.
for software update notifications. Really mind boggling technology isn't it?
Oh wait, it's not 1996....
The following statement is true
The preceding statement is false
Damn, bloody fighting
Hardly looks like news. And I'm already tired of Mozilla team not addressing the most critical issue - memory hogging. Brushing that aside is not going to help the developers or the users.
Open source? SO why do I have to SIGN UP to VIEW the bug database? IT says I am not authorized to view the bugs in the release notes. So much for open source. I do not want to EDIT it, just VIEW READ ONLY.
When going to the bugzilla database for a bug ( https://bugzilla.mozilla.org/show_bug.cgi?id=33683 0 ) in the release notes on this build of firefox I get...
Access Denied
You are not authorized to access bug #336830. To see this bug, you must first log in to an account with the appropriate permissions.
Opensource is FUD. Security bug? So what, its FIXED so SHOW ME THE DAMN BUG.
I find it at bit thought provoking that the phrase "God Bless Mozilla" has not spun of a any comments yet, while any talk about intelligent creation will make /. glow from the furios comments.
./ post. /., but I can't but feel a bit awkward reading the words on /.
And yes you are right that this post is not about anything that has to do with God which of course it the reason for people not commenting this little feature of the
I don't know if KrayzieKyd partipates in the frequent discussion about (bashing of?) Intelligent Creation here on
It's probably just me being touchy, so here goes my good karma (which again is a term I according to my previos (lack of) logic of this comment shuold get annoyed by).
Viewing the bug database has NOTHING to do with open source or not.
You get a bitch-slap you whiney SOB.
You should be happy you don't have to sign away your rights by signing NDAs effectively barring you to work on competing products, or have to pay ANYTHING..
I hate to give this site a slashdotting, but lets see what happens.
http://www.adelaidemetro.com.au/
It hasn't displayed in any Firefox version on Mac OS X properly. I've reported it but it hasn't been fixed in the last 4 versions.
I like Firefox very much. It works much faster and consumes less resorces then IE. But with every release it becomes more and more heavy, and will reach IE soon.
Hide your files and folders from others!
Fast, small footprint, low resource use. More customisable than any other browser I've tried, stable, secure, free. And did I mention it is fast?
Get it here:
http://www.opera.com/download/linux/
And I *still* can't find text within a textbox...
YOU FAIL IT!
Coming from someone who can't be bothered by registering a free account, and then bitches about it all over /. to show everyone what a lazy SOB he actually is. You didn't even contact Mozilla Foundation about this, did you? What do you think bitching about it on /. will do. Really, what do you expect from others that you can't do yourself? When you eat, who will hold your golden spoon?
Open Source do not need people bitching about missing features, telling other people what to do and putting them down.
That is not support.
Speech is cheap, work is what really matters.
Have a nice day!
Naturally, if you care about security then you too will have javascript disabled.
Don't forget, you can get a processor optimized verison at http://getswiftfox.com/
At the office we use mostly "low end" machines - 800 to 1300 Mhz Athlon/Via processors. We're running Debian Sarge on most machines. Recently I upgraded from sarges 1.0.7(?) to the binary linux bundle and _everyone_ has told me they've experienced faster rendering and more stability, and we use it a lot - most of our apps are web-based. About the tabs/pre-caching problem/feature, see previous post.
It is blessed by some dude they refer to as 'God'. I have no idea what they're talking about, but it seems this release is divine, and must be mentioned on slashdot.
Or maybe they should let that 'God' stay the 'hell' out of science. They just don't match.
The earth is flat, over and out.
You sound like you were served bugs for dinner, and not bug-fixes.
Way to bite the hand that feed you..
All software contains bugs. It's just that those security-holes that Microsoft products are so full of, were already known to be problematic. ActiveX, VB for applications: Java/Javascript came long before these, and contained proper sandboxing, something these security-riddled hacks sorely miss. Microsoft were warned many times, and the world is now paying billions of dollars repairing the damage every year.
There is no reason to keep them locked away to a selected view, the bugs are fixed, if anybody wants to exploit them they can just do a DIFF on the source which is viewable anyway. We have automatic updates that notify them (even without installing) of such changes. Why hide them in shame? Sweeping them under the carpet? There is NO REASON at all to keep them HIDDEN.
If only my Spellbound plug-in would work again. Now howe will aye bee able two correct my pore spelling?
Now if only there was a plug-in for the correction of misused homonyms.
I think I'll wait until Mozilla hits 1.5.1 -- and from what I hear, that magic milestone is a long way away.
... -after- the update has installed itself in a friendly way on my machine? I mean, come on: anyone who needs this update already has Firefox installed and will get a notification -or- has turned such notifications off for some very good reason and won't be interested to read about it here.
"Oh, they actually fixed some security issues in Firefox? That must means it's now completely safe, I'm going down there to download straightaway..."
Mozilla and IE are implementing complicated, but eye-candy nontheless, technologies. If sites use these technologies for Web 2.0, they will lock in to Mozila and IE and lockout any new www browsing product. While what really matters is the *information* contained in a webpage, these complicated standards will render it unviewable by other programs.
So while WWW was all about ''information in a simple form where everybody can see it'', now it's turning into ''files that can be viewed by the Gecko runtime system (js, XUL, SVG, etc)''.
The Mozilla-Google syndication is pushing futher this lockin for the Web. Google funds mozilla (5 of mozilla's developers are already "very rich people"). Google got money from MS. MS's public image is destroyed forever, but the stockholders are using "good Google" now. Think about these matters before you go to sleep. It's a good way to fight insomnia...
Just tested with the newest macintel universal binary, and it is significantly faster than 1.5.0.2 (which also claimed universal binary, but they fucked up).
If you let software update happen on a mac intel, it doesn't update to 1.5.0.4 universal, but just updates the PPC image. You need to download the new universal image, and install that over the older version, and then it runs.
They still haven't addressed all the networking problems yet, but I really don't ever expect them to.
the AC
Hemos is like...sci-fi fans;he thinks technology is cool, but he hasn't bothered to understand the science it's based on
Any Ubuntu users here? How should I update my Firefox on Ubuntu Dapper Drake 6.06 LTS?
w00t
...And now they're forcing the "mozilla has been updated" page to load on startup on my other two Firefox profiles EVERY TIME - DESPITE MY ACTUAL HOMEPAGE!! What the hell is going on!?
Maybe you were starting from an out-of-date version?
Patrick Doyle
I mod down every jackass who puts his moderation policy in his sig. Oh, wait a sec....
All your home pages are belong to use. China - get out of taiwan
Anyone wanting to stick with the Mozilla Suite should upgrade to SeaMonkey soon for security updates. SeaMonkey gets all the core security fixes Firefox and Thunderbird do, but the old Suite isn't being developed any more and therefore won't get any security fixes.
What a fool believes, he sees, no wise man has the power to reason away.
Worked fine for me. Oh, sorry, on a mac. Right.
Someday maybe mommy will buy you a real computer.
CNN is for commies! TRUE PATRIOTS watch FoxNews!
I updated my blog just now. Just in case you were interested.
Defining Statistics and Social Research
In 1.5.0.3 if you go to http://news.bbc.co.uk/ and scroll to the bottom, the "Contact us" link is all messed up. Much as I like Firefox, I see loads of stuff like this.
It created it's own user profile and is ignoring my old one. Now I have to re-enter all my passwords to sites, import my bookmarks and re-install all my extensions.
Weren't the other two identical posts by this guy clue enough? Or do moderators usually skip to the end of the comment tree and mod up the first thing they see? Hopefully whoever modded this trash up will be killed out of moderation by metamoderation.
Opera is the best of everything. It renders almost everything IE will render, yet is more standards compliant, smaller, and faster than all of its competition. Since it's free (as in beer), I don't care that its not open source.
Firefox has a loooooong way to go yet. It's great to have it on board as it could one day be the browser of choice. But that day has not yet arrived.
Good to see that Firefox is now surpassing IE on all fronts, including the frequency of security flaws being plugged!!
;-)
Actually I'm a big fan of FF, especially now that I've got 2GB memory installed......
Q: I have Mozilla 1.7.13. What am I supposed to upgrade to!?!?!
A: SeaMonkey!!!!
What a fool believes, he sees, no wise man has the power to reason away.
HD Trailers
I am currently using Bon Echo Alpha 3 . I tried 1.5.0.4 and it seems much stabler and faster than 1.5.0.3 but it seems to me that Bon echo is still the best firefox version, It seriously is awesome.
Copyright infringement is "piracy" in the same way DRM is "consumer rape"
Considering that privacy and security are big concerns for every large software project these days, I believe that Firefox's default update setting should be changed. If you go to Tools --> Options --> Advanced --> Update, and you haven't changed your default settings, you will find that it is set to "Automatically download and install the update". Even Microsoft wouldn't do this, so why is it acceptable in Firefox? It should default to "Ask me what I want to do.", and during the first update, a checkbox should be provided asking the user if he wants automatic updates from then on.
My 2 cents.
LS
There is a fine line between being a cultivated citizen and being someone else's crop. - A. J. Patrick Liszkie
Well, I do all my banking online. All of it, from transferring money to paying bills. You don't think browser support would be a big issue for me?
And truthfully, I live in a large enough city in the US (Chicago) that it would be unlikely that I couldn't find a bank that offers all the services I want/need without having to stipulate which browser I used.
I don't understand this attitude of just blindly accepting what's handed to you. YOU define what you need, not the other way around. And if a business can't provide what you need, you go elsewhwere.
But, as I've brought up with them before, the site is full of wasted space. I even wrote them a tool to remove all that guff but was told (about 6 months ago) that they were working on the problem.
w s.bbc.co.uk%2F
I only noticed it when I was parsing the thing for an new aggregator and found a big input file to output file sise diff. The XML parser was set to discard pointless whitespace.
Validator... http://validator.w3.org/check?uri=http%3A%2F%2Fne
---
Sometimes I feel like I'm repeating myself. Sometimes I feel like I'm repeating myself.
Time flies like an arrow. Fruit flies like a banana.
When they fix the Windows Media Player plugin for the MacBook (Intel) then I'll be impressed.
[%] Cingular Ringtones
Is there now way to for an update from Firefox anymore? I haven't had a notification yet.
How do you TRIGGER the incremental update without waiting for Firefox to figure out there is one? I find it's quicker to download the full 4mb installer than it is to wait for the 500kb patch to be detected.
I use Firefox as my primary browser except when test for compatibility web app (I am a developer). Recently, I tried mozilla 1.4 and netscape 7.2 on our app because some @#$%@ still run them and have problem. I was very surpised to find out that these browser is several times faster showing up same webpages than Firefox. It's not only noticable, but it could be said that it's many times faster, not just faster. I know that Firefox support alot more. However, with this speed, I think it's definitely possible to be way faster, and support more. If to support more and it's slower, something wrong with the design that does not scale well. This is almost a shock to me. I have been using Firefox for so long that I couldn't think it would be slower than it's predessor. I always think it's problem the same or faster.
Firefox 1.5.0.3 Loop DoS Exploit
yet?
"effect" is more commonly used as a noun than a verb. and i have yet to see a use for "affect" as a noun.
Usage Note:
So that's all right then.
As always, all IMO. Insert "I think" everywhere grammatically possible.
Too minor a change to be posted here. Just a month minus one day ago, we received news of 1.5.0.3 http://slashdot.org/article.pl?sid=06/05/03/121720 0. Nevertheless, it's nice to see firefox patches released on a regular basis.
No thanks, I use Moz suite, and tried out seamonkey when 1.0 came out, since after all it IS supposed to be the upgrade, right? Corrupted mail, crashing web browser. How can Mozilla take something that worked and fuck it up so badly?
Whatever happened to the firefox mission of FIXING BUGS rather than adding features??
Sure would be nice if they would fix the focus bugs under Linux. They were reported many years ago and they remain pervasive.
Sure would be nice if they would fix the keyboard binding problems. Getting emacs style bindings is a major pain and doesn't even work in some environments. The current approach is a joke and has been for years. Bugs were filed years ago..
Yeah, I'm bitching. But these are serious problems that keep me at version 0.8 with potentially dire security consequences.
I heard often about how it's various plugins and extensions that cause Firefox to leak memory. But I have come to doubt that theory.
I recently started using Firefox 1.5.0.3 on Linux. I didn't bother to install Flash, Sun's Java plugin, or anything else like that. I didn't bother finding any extensions beyond what might come with the default Firefox installation.
Nevertheless, I did notice the memory leaks that others were talking about. After about a week of fairly heavy use, the browser would be consuming 600+ MB of RAM. Konqueror doesn't do that, and Opera doesn't do that. Any piece of software that consumes 60% of my system's memory, while its competitors do not, is flawed in my book.
As I said earlier, this was with a default installation from mozilla.org. If it is the fault of any extension, it's due to extensions they themselves included in the official binary distribution for Linux.
That alone makes me not want to use Firefox in the future, regardless of what version it is or how much work they put into it. It's sort of the same feelings towards Microsoft products. There are only so many times that one wants to deal with low-quality software before saying to hell with it, especially when promises of "it'll improve in the next release!" never materialize.
What exactly doesn't firefox do that it has a long way to go?
Hopefully this update will fix some of the stability issues the software has as of late...
"Instant gratification takes too long." - Carrie Fisher
Can you provide some examples of sites that didn't work? If it truly was as much of a problem as you make it out to be, I'm sure that you'd remember those sites. I find your claims doubtful, because having been an Opera users for years, I cannot say I've run into the same problems ever.
And give the Opera 9 prereleases a try sometime. They're quite fantastic. I just tried Firefox 1.5.0.4, and it does feel slower in comparison to Opera 9. But then again, Opera has put a lot of work into making their browser speedy and efficient.
http://bugzilla.mozilla.org/show_bug.cgi?id=335249
What a fool believes, he sees, no wise man has the power to reason away.
http://bugzilla.mozilla.org/show_bug.cgi?id=283580
What a fool believes, he sees, no wise man has the power to reason away.
No, I tried it, and Minefield is MUCH better. Try it.
13. Any legal action is absolutly excluded. (Pi World Ranking List rules)
Why is this news?!?!?!?!?!?!
/. feel the need to put it on the front friggin page?!?!?!
STOP TELLING US WHAT MINOR VERSION FIREFOX IS ON! Anyone that cares (I assume those people are the ones using it) learn rather quickly when they get the "new version, update?" dialogue. So why does
We call that "Web 1.0".
There is a spark in every single flame bait point.
from Thunderbird. I have been sending bug reports for years without a fix. http://home.infionline.net/~arm3/images/cursorlagg ing.png
Until that is fixed, I can't use it. Other than that, it works well. As long as I don't have to edit my e-mail it is not a problem, but trying to change anything in the body of the text is impossible.
photosMy Photostream
Unable to resist...
In the '70's, MicroData built a (get this) User Microprogrammable machine. Naturally, not too many people other than E.E. and C.S. researchers wanted to write their own microcode, so MicroData needed to find another line of business. So, they developed the Reality system.
I worked on a MicroData Reality system in during a summer job in 1977. I know that Pick and Reality use the same underlying database approach, but I don't know who derived from whom.
Where did UniData fit in?
Brilliant.
max suckiness.
Links 2.1pre22. does braille, text and graphics modes, alots of configuration, much better downloadmanager, can do graphics in framebuffer or svgalib as well. Much smaller, much faster, alot of languages, auto size single pictures *hint, hint*...
Windoze not found: (C)heer, (P)arty or (D)ance
Or did your large bank just decide to make a standards based web site?
It's not a big deal. Whenever Firefox grows that big, or I open too many tabs, it tends to crash, thus bringing memory usage back down.
Gosh, shouldn't the comment have been something like:
...
/. moderators screw you!".
1. Strip stupid moderator
2. Copulate/Sodomize (gender dependent)
3.
4. Profit!
Or maybe "On American
There is no right to feel safe thru security vaudeville at the expense of everyone's freedom, privacy and tax money.
And SSL with my online banking croaked. I've now disabled automatic updates, but the horse hath bolten. Anybody know how to REVERSE one of these %$#@ patches, say to v1.5.0.3?
...it pops up a stonking big window telling you as such, then asking your permission (and telling you it will restart the browser). It then brings up another nice window that tells you it's downloading an update.
Then, when the browser restarts it opens up a page telling you your browser has been upgraded to the latest version.
Anyone with an IQ over 50 should get the gist.
I am NaN
On a Macintosh. I'm in the middle of my 5th consecutive crash trying to load the "Pirates Bay" article from 03-June. It hangs in between the initial page draw and the Slashdotter kicking in. All the less-populated pages on the Slashdot open in FF, but not the P-Bay article. Meanwhile, the Slashdotter Extension works fine for the "Reply to selected text", and even has my user-chosen color scheme for the "reply-to' page, but the main page is a stiff, no color. Lousy stuff.
If the guys wrote three or four of the Extensions (Slashdotter, Developer Tools, AdBlock, and a couple others) for any other app out there, I would toss FF in a second. What a dog.. If the 'community' (har har) can't write for the Mac, then then they ought to admit they're a windows/Explorer thing, and get out of the pool. what a waste.
Safari, Camino, and OmniWeb rip through the same page like it isn't even there. What's FF's excuse? I ask you...Shabby bullshit..and Safari is way faster and they have a clue about CSS, what gives? It's like 1998 over in FF-land, jesus, wake the fuck up, or roll over and find a new gig.There are many situatutions where you can't use 1.5 (or 5.0 or whatever the Marketing dept. is coming up with this week) but pretty much everyone has 1.4 already installed. For one example, my work machines are locked down so I can't upgrade Java to 1.5. For maximum compatibility, I always write my Java with the 1.4 API.
Back to the original topic, using Java's API with frames is much nicer than without. But what problem was xtracto referring to? I just did a Find and it hopped around the frames looking for matches just fine. This machine is Windows 2000, BTW.