Pages

Sunday, July 17, 2005

Yet another Firefox security update

Yet another Firefox security update Open Source ZDNet.com: "The Mozilla folks have released another security update this week, though I noticed that there's a lot less media chatter about these security fixes than the last round.
Perhaps there's something to this eWeek article that notes that a lot of updates were rolled out Tuesday (Firefox was one) in the same timeframe of Microsoft's 'patch Tuesday.'

The 1.0.5 release fixes 12 vulnerabilities, two of them considered 'critical' and four of 'high' severity. The biggies are a vulnerability that could allow execution of code with enhanced privileges and a vulnerability that could allow execution of arbitrary code.

For those that are keeping track, Firefox has had five security updates this year so far: 1.0.1 was released Februrary 24, 1.0.2 released on March 23, 1.0.3 was released on April 14, and 1.0.4 was pushed out on May 12 - a little earlier than the Moz folks planned, due to a premature disclosure of Firefox security issues by a third party. "

No comments: