Firefox 3.0.5 Fixes Several Security Issues.

[Peaches]

Firefox 3.0.5 fixes several security issues.

FireFox 3.0.5 has been released with several security fixes.

Published: 2008-12-17,

Last Updated: 2008-12-17 15:09:15 UTC

by donald smith (Version: 1)

"Fixed in Firefox 3.0.5 MFSA 2008-69 XSS vulnerabilities in SessionStore MFSA 2008-68 XSS and JavaScript privilege escalation MFSA 2008-67 Escaped null characters ignored by CSS parser MFSA 2008-66 Errors parsing URLs with leading whitespace and control characters MFSA 2008-65 Cross-domain data theft via script redirect error message MFSA 2008-64 XMLHttpRequest 302 response disclosure MFSA 2008-63 User tracking via XUL persist attribute MFSA 2008-60 Crashes with evidence of memory corruption (rv:1.9.0.5/1.8.1.19) Thanks to John and Roseman for bringing this to our attention."

Source of info. http://isc.sans.org/diary.html

[Peaches]

Posted at 09:15 PM ET, 12/17/2008

Firefox 2 Users Will Get No More Security Updates

"Security Fix has often praised Mozilla for equipping its Firefox Web browser with a no-hassle system for automatically applying security updates. But for those users still browsing the Interwebs with anything less than Firefox 3, it's time to take note: Mozilla shipped its final update to Firefox 2 on Tuesday, and plans no further updates for this version.

Put simply: If you want to keep using Firefox safely, you're going to need to upgrade to Firefox 3. The latest version of the popular browser received mixed reviews on its release, but Mozilla appears to have done a good job ironing out the kinks since then. Most notably, Firefox 3 consumes far less system memory than older releases.

That said, there is a non-trivial chance that Mozilla may in fact ship another update to Firefox 2. A bug report filed Wednesday with Mozilla indicates the browser maker overlooked a security flaw in its latest update."

Read more here: http://blog.washingtonpost.com/securityfix/