Mozilla Fixes Firefox Bugs -- 2.0.0.2 Released [Feb 23, 2007]

[Vin DSL]

Source: http://www.pcworld.com/article/id,12...a/article.html

Mozilla Corp. has released an update to its Firefox browser, fixing a number of security flaws in the product.

The Firefox 2.0.0.2 release includes a fix for a bug disclosed by security researcher Michal Zalewsky last week. That flaw can be exploited by attackers to manipulate cookie information in the Firefox browser, making it probably the most important fix in the update, according to Window Snyder, Mozilla's head of security strategy...

The updates also include a fix for a previously undisclosed memory corruption flaw in the browser that could be exploited to run unauthorized software on a Firefox user's computer...

The patches were released on Friday afternoon and should soon be delivered via Firefox's automatic software update mechanism, Snyder said.

[jason]

Ironically, about 30 seconds after I started reading this thread, F5x popped up a dialog box saying "Firefox has downloaded version 2.0.0.2 and must be restarted yadda yadda yadda." I guess I should restart now....

--Jason

[Vin DSL]

Yeah, I guess I'm 'old fashioned', whatever that means...

In Firefox years, I guess that means a couple of years ago!

I don't allow Firefox to check automagically for updates. Same for add-ons. I do this manually -- sometimes several times a day -- and I DO NOT ALLOW Firefox to close & reboot itself... I do that manually too!

That's how I stay ahead of the crowd on updates -- particularly Firefox & company.

Plus, that allows me to go over to Mozilla and act like a Big Shot, in case things don't work out. I'm a few hours ahead of the rest, you know?

Anyway, the update seems to be fine -- just the usual stuff, like firewalls causing problems -- Firefox not starting up after the update -- ppl losing all their bookmarks -- and all the usual stuff...

[jason]

I generally don't allow anything to auto update, either. I just never got around to turning it off on this machine. And admittedly, I haven't been watching the Fx news all that closely lately.

--Jason