Firefox updated...
FYI...
Firefox v3.0 released
- http://www.mozilla.com/firefox/
Release notes:
- http://www.mozilla.com/firefox/3.0/releasenotes/
Download:
- http://www.mozilla.com/firefox/all.html
(over 45 languages)
---
Suggested reading prior to install:
Release notes / Known Issues:
- http://www.mozilla.com/firefox/3.0/releasenotes/
(Includes)...known problems with Firefox 3...
Last edited by AplusWebMaster; 2008-06-17 at 22:51.
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Firefox vuln - unpatched
FYI...
Firefox vuln - unpatched
- http://secunia.com/advisories/30761/
Release Date: 2008-06-19
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Unpatched
Software: Mozilla Firefox 2.0.x, Mozilla Firefox 3.x...
The vulnerability is reported in versions 3.0 and 2.0.x. Other versions may also be affected.
Solution: Do not follow untrusted links nor browse untrusted web sites...
Original Advisory:
http://dvlabs.tippingpoint.com/blog/...lla-firefox-30
"...Not unlike most browser based vulnerabilities that we see these days, user interaction is required such as clicking on a link in email or visiting a malicious web page. While Mozilla is working on a fix, we wont be divulging anything else until a patch is available..."
- http://blog.mozilla.com/security/200...investigation/
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2786
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2785
- http://preview.tinyurl.com/47o8yg
June 26, 2008 (arstechnica.com) - "...Mozilla told us that they have not finalized the schedule for when Firefox 3 will be made available to Firefox 2 users through the update channel, but they suspect that it will happen within the next two or three months..."
Last edited by AplusWebMaster; 2008-06-27 at 19:56. Reason: Added Arstechnica note on FFv2 update channel...
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Firefox v2.0.0.15 released
FYI...
Firefox v2.0.0.15 released
From an admin account, start Firefox, then >Help >Check for Updates
-or-
Download
- http://www.mozilla.com/en-US/firefox/all-older.html
What's New in Firefox 2.0.0.15:
- http://www.mozilla.com/en-US/firefox.../releasenotes/
July 1, 2008
- http://www.mozilla.org/projects/secu...s.html#Firefox
- http://secunia.com/advisories/30911/
Last Update: 2008-07-03
Critical: Highly critical
Impact: Security Bypass, Cross Site Scripting, Spoofing, Exposure of system information,
Exposure of sensitive information, DoS, System access
Where: From remote
Solution Status: Vendor Patch...
Solution: Update to version 2.0.0.15...
Last edited by AplusWebMaster; 2008-07-03 at 14:32. Reason: Added Secunia advisory.
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Firefox v2.0.0.16 released
FYI...
Firefox v2.0.0.16 released
From an admin account, start Firefox, then >Help >Check for Updates
-or-
Download
- http://www.mozilla.com/en-US/firefox/all-older.html
What's New in Firefox 2.0.0.16:
- http://www.mozilla.com/en-US/firefox.../releasenotes/
July 15, 2008
- http://www.mozilla.org/security/know...firefox20.html
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2785
CVSS v2 Base score: 9.3 (High)
- http://cve.mitre.org/cgi-bin/cvename...=CVE-2008-2933
Last edited by AplusWebMaster; 2008-07-16 at 14:00. Reason: Added CVE references...
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Firefox v3.0.1 released
FYI...
Firefox v3.0.1 released
- http://www.mozilla.com/firefox/
July 16, 2008
Upgrading Firefox
- http://support.mozilla.com/en-US/kb/Upgrading+Firefox
"To manually check for a Firefox update, click the Help menu at the top of the Firefox window, and select Check for Updates..."
If "Check for Updates is disabled", see:
- http://support.mozilla.com/en-US/kb/...es+is+disabled
Security Advisories
- http://www.mozilla.org/security/know...l#firefox3.0.1
Known Issues
- http://www.mozilla.com/en-US/firefox.../releasenotes/
Fixes in v3.0.1:
- http://www.mozilla.org/security/anno...sa2008-34.html
- http://www.mozilla.org/security/anno...sa2008-35.html
- http://www.mozilla.org/security/anno...sa2008-36.html
- http://secunia.com/advisories/31106/
Last Update: 2008-07-17
Critical: Highly critical
Impact: Security Bypass, Spoofing, System access
Where: From remote
...The vulnerabilities are reported in versions prior to 3.0.1.
Solution: Update to version 3.0.1 ...
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2785
CVSS v2 Base score: 9.3 (High)
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2933
Last edited by AplusWebMaster; 2008-07-17 at 18:10. Reason: Added Secunia advisory and CVE ref...
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
FYI...
Firefox v3.0.2 released
- http://www.mozilla.com/firefox/
Upgrading Firefox
- http://support.mozilla.com/en-US/kb/Upgrading+Firefox
"To manually check for a Firefox update, click the Help menu at the top of the Firefox window, and select Check for Updates..."
If "Check for Updates is disabled", see:
- http://support.mozilla.com/en-US/kb/...es+is+disabled
Security Advisories
- http://www.mozilla.org/security/know...l#firefox3.0.2
Known Issues
- http://www.mozilla.com/en-US/firefox.../releasenotes/
---
Firefox v2.0.0.17 released
From an admin account, start Firefox, then >Help >Check for Updates
-or-
Download
- http://www.mozilla.com/en-US/firefox/all-older.html
What's New in Firefox 2.0.0.17:
- http://www.mozilla.com/en-US/firefox.../releasenotes/
September 23, 2008
- http://www.mozilla.org/security/know...irefox2.0.0.17
---
FF3: http://secunia.com/advisories/32011/
Software: Mozilla Firefox 3.x
CVE reference:
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-3837
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4058
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4060
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4061
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4062
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4063
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4064
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4065
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4067
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4068
FF2: http://secunia.com/advisories/31984/
Software: Mozilla Firefox 2.0.x
CVE reference:
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-0016
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-3835
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-3836
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-3837
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4058
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4059
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4060
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4061
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4062
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4065
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4066
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4067
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4068
http://web.nvd.nist.gov/view/vuln/de...=CVE-2008-4069
.
Last edited by AplusWebMaster; 2008-09-26 at 10:26. Reason: Added Secunia/CVE advisory links...
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Firefox v3.0.3 released
FYI...
Firefox v3.0.3 released
- http://en-us.www.mozilla.com/firefox.../releasenotes/
September 26, 2008 - "Fixed a problem where users were unable to retrieve saved passwords or save new passwords (bug 454708*)"
* https://bugzilla.mozilla.org/show_bug.cgi?id=454708
- http://www.mozilla.com/firefox/all.html
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Firefox v3.0.4 - v2.0.0.18 released
FYI...
Firefox v3.0.4 - v2.0.0.18 released
From an admin account, start Firefox, then >Help >Check for Updates
-or-
Download Firefox v3.0.4
- http://www.mozilla.com/firefox/all.html
Download Firefox v2.0.0.18
- http://www.mozilla.com/firefox/all-older.html
Release Notes
- http://www.mozilla.com/firefox/3.0.4/releasenotes/
Also see "Known Issues..." for v3: All Systems - 9 items, Microsoft Windows - 2...
Security issues
- http://www.mozilla.org/security/know...l#firefox3.0.4
___
Firefox 3
- http://secunia.com/advisories/32713/
Release Date: 2008-11-13
Critical: Highly critical...
Firefox 2
- http://secunia.com/advisories/32693/
Release Date: 2008-11-13
Critical: Highly critical...
Last edited by AplusWebMaster; 2008-11-17 at 17:27.
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Firefox updated...
FYI...
Firefox v2.0.0.19...
- https://wiki.mozilla.org/WeeklyUpdat...F_Major_Update
2008-12-01 - "...Firefox 2.0.0.19 / 3.0.5 / Major Update...
• On track for December 16 release (possible day slip for major update)
• Firefox 2.0.0.19 will be the last release of Firefox 2 and will not include Phishing Protection..."
- http://news.cnet.com/8301-1009_3-10115852-83.html
December 5, 2008 - "...Google asked Mozilla to disable the feature in Firefox 2.0.0.19 that warns users of sites suspected of hosting identity fraud scams because the older browsers rely on an outdated SafeBrowsing protocol that Google is not supporting anymore..."
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Firefox v3.0.5 released
FYI...
Firefox v3.0.5 released
- http://www.mozilla.com/firefox/
Dec. 16, 2008
Release Notes
- http://www.mozilla.com/firefox/3.0.5/releasenotes/
Security Advisories
- http://www.mozilla.org/security/know...l#firefox3.0.5
Fixed in Firefox 3.0.5
MFSA 2008-69 XSS vulnerabilities in SessionStore
MFSA 2008-68 XSS and JavaScript privilege escalation
MFSA 2008-67 Escaped null characters ignored by CSS parser
MFSA 2008-66 Errors parsing URLs with leading whitespace and control characters
MFSA 2008-65 Cross-domain data theft via script redirect error message
MFSA 2008-64 XMLHttpRequest 302 response disclosure
MFSA 2008-63 User tracking via XUL persist attribute
MFSA 2008-60 Crashes with evidence of memory corruption (rv:1.9.0.5/1.8.1.19)
___
Firefox v2.0.0.19 released
- http://www.mozilla.com/en-US/firefox/all-older.html
- http://www.mozilla.com/en-US/firefox.../releasenotes/
Note: This is the last planned release of Firefox 2. All users are encouraged to upgrade to Firefox 3.
Firefox 2.0.0.19 does -not- include Phishing Protection.
___
- http://secunia.com/advisories/33203/
- http://secunia.com/advisories/33184/
Last edited by AplusWebMaster; 2009-01-22 at 11:50. Reason: Added Secunia advisory links...
The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Posting Permissions
