Mozilla Firefox 1.5.0.4 Released 375
KrayzieKyd writes "God Bless Mozilla. Firefox has just notified me that Firefox version 1.5.0.4 has just been released with release notes and according to Mozilla's website, the same has been released for Thunderbird with its own release notes."
Freshmeat? (Score:5, Insightful)
Is there something special about this release? According to the release notes these bugs where removed. Great but not enough for a slashdot article.
MFSA 2006-43 Privilege escalation using addSelectionListener
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-41 File stealing by changing input type (variant)
MFSA 2006-39 "View Image" local resource linking (Windows)
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object prototypes
MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-34 XSS viewing javascript: frames or images from context menu
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
Re:Freshmeat? (Score:5, Interesting)
Well, we seem to get slashdot articles about every MSIE security flaw; by that standard a new release of FireFox which fixes 12 security flaws (5 of them rated "critical") is certainly slashdotworthy.
Re:Freshmeat? (Score:5, Insightful)
Re:Freshmeat? (Score:3, Insightful)
And actually, MFSA 2006-32 [mozilla.org] fixes *7* "potential memory corruption" vulnerabilities, so the count of critical flaws alone could be as high as 12.
Re:Freshmeat? (Score:2, Funny)
Yeah, but those articles are made to host flames against microsoft in the forums, not to actually educate anyone about them (not many people on Slashdot actually use IE).
Re:Freshmeat? (Score:2)
Re:Freshmeat? (Score:2)
Re:Freshmeat? (Score:3, Funny)
Re:Freshmeat? (Score:5, Insightful)
Re:Freshmeat? (Score:5, Insightful)
Ah, so this is a Slashvertisment.
Re:Freshmeat? (Score:2)
On the other hand, it is preaching to the choir a bit -- it would be better to try to get it listed on news sites with less technical audiences.
Re:Freshmeat? (Score:2)
Nevertheless the editors should care more for qualitiy than quantity but I agree they have to keep an eye on the numbers as well.
O. Wyss
Re:Freshmeat? (Score:2)
Re:Freshmeat? (Score:2)
I'm sure someone out there realises why I mentioned this.
Re:Freshmeat? (Score:5, Funny)
Re:Freshmeat? (Score:5, Interesting)
I started with FF with my normal three tabs each with a different site open. I pulled up taskmanager and looked at all running processes. There was firefox at 31 meg.
So then I open IE6. Since I rarely use it I haven't changed the default home page from MSN. I check taskmanager, again. iexplore starts up using 45 meg. So I think maybe it's because of the website. I point IE6 at google. Sure enough the RAM usage goes down to 42 meg. To be fair however I thought I should open the three sites I have open in my FF tabs in IE.
iexplore.exe ---> 42,976k
iexplore.exe ---> 24,444k
iexplore.exe ---> 38,408k
Total iexplore.exe RAM usage 105,828k
Firefox with the same sites open in three tabs ---> 31,776k
If firefox is leaking on my machine it's into a big bucket called iexplore.exe
Re:Freshmeat? (Score:5, Insightful)
Re:Freshmeat? (Score:3, Insightful)
Seamonkey also updated (Score:5, Informative)
Re:SeaMonkey for Security (Score:5, Informative)
Re:Seamonkey also updated (Score:2)
Re:SeaMonkey!!!! (Score:3, Informative)
A: SeaMonkey!!!! [mozilla.org]
Incremental Updates (Score:5, Interesting)
Re:Incremental Updates (Score:5, Informative)
Re:Incremental Updates (Score:5, Informative)
Re:Incremental Updates (Score:2)
Unfortunate.
Re:Incremental Updates (Score:3, Informative)
For what? Anyone with automatic updates turned on is at most one version back
Re:Incremental Updates (Score:3, Informative)
For me it was 500 KB (Score:2)
Re:Incremental Updates (Score:5, Informative)
My FF 1.5.0.3 downloaded a mere 600k, and Thunderbird's update to 1.5.0.4 was roughtly the same size (~500k).
Your FF probably failed a hash check or something and downloaded everything to reinstall from scratch, that's the fallback when the updater doesn't manager to install incremental updates.
Re:Incremental Updates (Score:2)
Triggering Incremental Update (Score:2)
Re:Triggering Incremental Update (Score:2)
I believe it's consistent across platforms (I'm using Linux) and it's Help->Check for Updates...
Here we go... (Score:5, Funny)
Re:Here we go... (Score:3, Interesting)
Re:Here we go... (Score:3, Insightful)
LS
Re:Here we go... (Score:2)
You forget that Firefox is still mostly used by the techical minority -- there's probably quite a lot of us with heavy usage patterns like that. I, for example, tend to keep Firefox up until it crashes, and usually have between 1 and 5 windows with at least 10 tabs each open all the time.
Memory leaks, crashes, and the fact that each tab isn't handled b
Re:Here we go... (Score:2)
Get Firefox at current, moderate speed and keep it that way or get faster-loading MSIE (because windows starts slower, desktop won't appear until MSIE loads into the memory) and have the whole system, on t
Re:Here we go... (Score:2)
The right solution: Make good defaults.
Re:Here we go... (Score:3, Interesting)
Show the world and be taken seriously! (Score:5, Informative)
Before Firefox - our local banking etc. where only accepted on Internet Explorer and nothing else, leaving out Mac and Linux users. Today Firefox is so respected that our country's Largest Bank support it!
Way to go FIREFOX!.
Re:Show the world and be taken seriously! (Score:2)
Re:Show the world and be taken seriously! (Score:2)
Who CARES if they only support a couple browsers because they're so paranoid they don't trust opera/safari/konq etc. That is a GOOD THING.
But you'd throw your trust at a bank simply because they supported everyone? Whether that support is tested to be secure or not?
Silly argument you've got there, if you value your money that is.
Re:Show the world and be taken seriously! (Score:2)
Re:Show the world and be taken seriously! (Score:2)
Re:Show the world and be taken seriously! (Score:2)
I'd like to see a Linux user who can change to the latest version of Internet Explorer (which a lot of bank sites demand) in 5 seconds.
Sometimes the browser matters... (Score:2)
Well, I do all my banking online. All of it, from transferring money to paying bills. You don't think browser support would be a big issue for me?
And truthfully, I live in a large enough city in the US (Chi
Re:Show the world and be taken seriously! (Score:2, Interesting)
Any bank that still has been restricting access to IE only during the last two years (many would say even longer than that) should be beaten unconscious and shot, given IEs widely known rather big insecurity issues (sure, Firefox also has its share of issues, but it's nowhere near as severe, often and unpatched as is IE).
What, online banking, using IE? Eeeeeeckck!!
Re:Show the world and be taken seriously! (Score:2)
Menu Delay (Score:4, Interesting)
Or am I just crazy and nothing changed at all? maybe it was the extention update to cute menus cyrstal SVG
Thank God (Score:2)
Oh wait, it's not 1996....
Re:Thank God (Score:4, Funny)
1. All firefox copies poll mozilla.org every minute to check for updates
2. All firefox copies download the update at the exact same moment
Looks good. Can't see any flaws there.
1.5.0.4 is major.significant.minor.forget-it (Score:3, Insightful)
Re:1.5.0.4 is major.significant.minor.forget-it (Score:5, Interesting)
I'm sure they're addressing this issue as it is easily now the #1 complaint about Mozilla. I recall it having memory issues even before plugins and the memory-hogging history-full-page-store feature (the one where you hit "back" and the page is just supposed to pop up, not re-render or re-request), but those two issues have magnified the issue into something that can't be ignored or poo-poo'ed anymore; I, too, will often see my Firefox hovering around the 600MB mark, and I recently installed that memory leak test tool and it didn't come up often at all.
Probably ought to shut off that feature; doesn't seem to do much for me anyhow.
disappointing (Score:5, Funny)
Re:disappointing (Score:2)
And do not tell me frames suck... they ARE [sun.com] being used and the functionallity is broken.
Spellbound (Score:3, Funny)
Now if only there was a plug-in for the correction of misused homonyms.
Thunderbird now in mac universal binary (Score:5, Informative)
If you let software update happen on a mac intel, it doesn't update to 1.5.0.4 universal, but just updates the PPC image. You need to download the new universal image, and install that over the older version, and then it runs.
They still haven't addressed all the networking problems yet, but I really don't ever expect them to.
the AC
Re:Thunderbird now in mac universal binary (Score:2, Interesting)
Changelist (Score:2, Redundant)
Bon Echo (Score:4, Interesting)
Default update setting flawed (Score:5, Interesting)
My 2 cents.
LS
Re:Default update setting flawed (Score:2)
Firefox DOES ask you if you want to install it or not, mine did at least.
Re:Will it stop crashing? (Score:4, Informative)
Re:Will it stop crashing? (Score:5, Informative)
http://weblogs.mozillazine.org/ben/archives/00974
Re:Will it stop crashing? (Score:2)
Re:Will it stop crashing? (Score:3, Insightful)
What kind of a feature is it, if everybody complain about it.
Plus turning caching off doesn't solve Firefox's speed. Part of the problem is bad memory management and coding, part of it is slow rendering engine, and part is the fact all tabs share a single thread, so when one takes more CPU, the whole window freezes.
Those are software design mistakes, and calling them various funny names, like "features" won't solve the fact we've actual problems w
Re:Will it stop crashing? (Score:2)
You're trying to tell me that it's normal for FF to have behavior by which it will go up to 150 megs and beyond (more like 200+ most days) of memory usage overnight if I leave it open (with static non auto-refreshing pages)?
Further, according to the article you linked and the nice little chart, my system has 512 MB of memory, so it should cache at most 5 pages back in my browsing history per session, not per tab.
In some rare occasions I could see it using that much memory, if I
Re:Will it stop crashing? (Score:2)
Re:Will it stop crashing? (Score:2, Funny)
It's OK, but the troll-blocker doesn't seem to be working very well.
Re:Will it stop crashing? (Score:2)
I have very few crashing issues (the only ones I had were when I removed one of the RAM sticks, nF4 really don't like running on a single RAM stick, and DFI's Lanparty motherboards like it even less, so the whole computer was hellishly unstable anyway), and the JS rendering is much much faster than in Firefox 1.0... A good thing which is balanced by the even higher number of extensions i'm interrested in, which means that i bumped my extensions count from ~20 in the days of Firefox 1.0 to more than 40 now..
Re:thats it? (Score:3, Informative)
Re:Is this intereseting? (Score:4, Informative)
Re:Is this intereseting? (Score:2, Insightful)
Re:What does God have to do with this? (Score:5, Funny)
Re:Mozilla bug database is a joke (Score:3, Insightful)
In addition, the definitions of "open source" and "free software" have nothing to do with anonymous bugzilla access, but rather with the availability of source code and the rights one has with regards to use and modification of said code. If you don't believe me, read [gnu.org] the definitions [opensource.org] yoursel
Re:Mozilla bug database is a joke (Score:2, Informative)
Go here and click just try to click through to bugzilla from the issues:
http://www.mozilla.org/projects/security/known-vu
Re:Mozilla bug database is a joke (Score:2)
Open Source does not require granting you access to every single piece of plan, report, draft, helper service or conversation log that was created in the process of making the software. The fact that you can use Bugzilla at all is just a good will of the Mozilla Fundation. The content of the Bugzilla database is neither open s
Re:Mozilla bug database is a joke (Score:2)
Follow-up: You Troll||Moron, "I'm looking through dozens of bugs right now. No reg required."
You: You moron, Mozilla restricts...
I: You asshole, Restricts, not conflicting with OSS.
The follow-up took the wrong point in disproving the OP stupidity. You just attacked the follow-up without ever taking into account that OP was completely wrong. That's being an asshole, attacking just one side when both are wrong. Now when I pointed out what
Re:Mozilla bug database is a joke (Score:2)
Moron. Grade A.
Re:Mozilla bug database is a joke (Score:2)
Good job talking out of your ass. The security bugs are still inaccessible wihtout a special account.
Re:Mozilla bug database is a joke (Score:2)
Re:Mozilla bug database is a joke (Score:2)
Is there maybe a some specific reason why you want to see them BEFORE most of people have the upgrade installed?
Re:Mozilla bug database is a joke (Score:2)
If you forget to lock your door one day, do you want someone coming by to put a big red sign announcing that fact to the world so anyone can walk into your house and take whatever they want?
Re:Opensource is FUD (Score:4, Insightful)
Remember when Microsoft releases a patch it would say "a maliciously crafted web page may" etc. The bugzilla entry for Firefox may actually GIVE you all you need to build that maliciously crafted page.
As said before, there's no need to publicize detailed steps to exploit a browser.
Re:Opensource is FUD (Score:2)
then get a copy of the source code and do your own management....
Equally, If you don't like the way Microsoft manage Office releases, then
use another office suite.
The thing about free (as in speech) software is that you have the choice to
do what you want with the code. It doesn't say anything about how FOSS projects
are managed.
However, I think that the Mozilla projects are particularly well managed, and Firefox in particular, is a very ve
Re:WTF?? (Score:2)
Re:Opensource is FUD (Score:2)
The fact that you have updated doesn't mean everyone else did. Some installs will take a week or more to just update, someone's on holidays, the computer is off, or the network is damaged, down. Opening them the moment the problem is fixed would give everyone a short but significant time window to exploit them.
Re:Opensource is FUD (Score:2)
Re:Open the FIXED security bugs in the database.. (Score:2)
A bug is marked as "Fixed" as soon as the patch makes it into the trunk. Then it needs to be backported to release branch, added to update and sent out through update mechanisms. And leave people some time to download the update and patch their installs. Otherwise it will be a race between black hats and admins, who gets to exploit/update first, and there -will- be victims.
Re:Open the FIXED security bugs in the database.. (Score:2, Insightful)
I see no particular reason to publicize exploits.
Fucking stupid moderators (Score:2)
Re:Fucking stupid moderators (Score:2)
DON'T TRUST THE LYING LIBERAL MEDIA! (Score:2, Funny)
Re:Can it display the BBC web site properly yet? (Score:2)
It not only fails validation but also.... (Score:3, Informative)
I only noticed it when I was parsing the thing for an new aggregator and found a big input file to output file sise diff. The XML parser was set to discard pointless whitespace.
Validator... http://validator.w3.org/check?uri=http%3A%2F%2Fnew s.bbc.co.uk%2F [w3.org]
---
Sometimes I feel like I'm repeating myself. Sometimes I f
Re:Opera - best browser out there (Score:2)
And as Opera users we benefit from standards compliant web pages.
As long as IE has the lions share of the market, I want both browsers to increase their use.
Re:No, thanks. (Score:2)
Re:Firefox will be like IE in a future... (Score:2)
improved performance for me (running on Gentoo).
Re:Are we at the mercy of the update gods? (Score:2, Informative)