The mozilla team has released a new version of Firefox which can already be downloaded from the Help > Check for Updates menu in Firefox or downloaded from the official download site. Three critical, two high, one moderate and two low security vulnerabilities have been fixed in this release making it a must have update for every Firefox user.
If you happen to download the new Firefox release from the official website you should be aware that you download the full version which overwrites the previous version of Firefox if installed in the same directory. All of my installed extensions are compatible with the new release and I suppose that only a few will not work initially with this release. Below is the list of fixes in this release.
MFSA 2007-25 XPCNativeWrapper pollution
MFSA 2007-24 Unauthorized access to wyciwyg:// documents
MFSA 2007-23 Remote code execution by launching Firefox from Internet Explorer
MFSA 2007-22 File type confusion due to %00 in name
MFSA 2007-21 Privilege escallation using an event handler attached to an element not in the document
MFSA 2007-20 Frame spoofing while window is loading
MFSA 2007-19 XSS using addEventListener and setTimeout
MFSA 2007-18 Crashes with evidence of memory corruption
Related Articles:
Firefox 2.0.0.6 has been releasedThunderbird Security Update To 2.0.0.17
Thunderbird 2.0.0.5 available
Firefox 3 Release Candidate 2 released
Firefox 2.0.0.13 released
This is NOT true in my case as a “Check for Updates” indicates nothing new is available to download. I’m using v.2.0.0.4 and therefore must download directly.
hehe when I was done with the first part of the article window popped up to tell me restart firefox for the new updates to work (2.0.0.5)
Well it did work for me Lorissa just a second before I started writing the article. Was running Firefox 2.0.0.4 US. Maybe they have more than one update server who got updated one after the other.
Upgraded to 2.0.0.5 and it’s running smoothly so far. I’m glad they work hard on that nasty security issues.