Firefox updated to 1.0.3

By Laurie A. Duncan

Mozilla must have been a little jealous of all the attention Safari is getting for being updated to version 1.3 so they've released their own update to Firefox, bringing up to version 1.0.3.

This version is described as a security update that is part of their "ongoing program to provide a safe Internet experience for our customers." It is recommend that all users install the upgrade. Fixes include:

  • MFSA 2005-33
    Javascript "lambda" replace exposes memory contents
  • MFSA 2005-34
    javascript: PLUGINSPAGE code execution
  • MFSA 2005-35
    Showing blocked javascript: popup uses wrong privilege context
  • MFSA 2005-36
    Cross-site scripting through global scope pollution
  • MFSA 2005-37

    Code execution through javascript: favicons

  • MFSA 2005-38
    Search plugin cross-site scripting
  • MFSA 2005-39
    Arbitrary code execution from Firefox sidebar panel II
  • MFSA 2005-40
    Missing Install object instance checks
  • MFSA 2005-41
    Privilege escalation via DOM property overrides

Along with the security patches, 1.0.3 also includes a "fix to improve update process."


I haven't installed it yet but I'm hoping it doesn't break everything we did yesterday to make Firefox more tolerable when we can't use Safari.. UPDATE: Now that I have installed it, I can confirm that it doesn't break everything we did yesterday. In fact, to its credit, it didn't break anything. I feel safer already.
 

Recommended