Mozilla ignites Firefox 1.0 PR
28482
Mozilla gets ready to launch what may become one of the most significant steps in Internet browser innovations since the release of the Internet Explorer 4.0.
30787
Even though this barely touches the topics of this site, it is well worth mentioning that the Mozilla Firefox browser has finally reached the 1.0 milestone.
260192
Mozilla will patch a security bug in Firefox that could be attacked in Internet Explorer.
624578
(InfoWorld) - Mozilla has released the first update for the Firefox 2.0 browserÂ to fix eight security vulnerabilities. According to the company, release 2.0.0.1 of Firefox fixes flaws in memory corruption as well as the way the browser executes RSS (really simple syndication), Javascript and CSS (cascading style sheets) code, among other vulnerabilities. Mozilla also patched similar flaws in its Firefox 1.5 browser. Five of the eight flaws were rated as critical, according to Firefox. A critical rating means a Firefox user would be vulnerable to attack and remote software installation on their machines just from browsing the Web in the usual fashion. Two of the flaws were rated as high, while one received a low security-risk rating, Firefox said. Mozilla's advisory and information on the update can be found on the company's Web site. Danish security firm Secunia ApS also posted information about the patches on its Web site. Mozilla released Firefox 2.0, the second major update to its open-source browser, in October.
206068
(InfoWorld) - Mozilla updated the preview of Firefox 3.0 to alpha 8 Thursday, unveiling for the first time to users several security features it has talked up for months. Among the security provisions debuting in the new alpha of "Gran Paradiso," the code name for Firefox 3.0, are built-in anti-malware warnings and protection against rogue extension updates, according to documentation Mozilla posted to its Web site. The malware blocker, which was first mocked up in June, will block Web sites thought to contain malicious downloads. The feature, a companion to the phishing site alert system in the current Firefox 2.0, will use information provided by Google to flag potentially-dangerous sites, warn anyone trying to reach those URLs with Firefox, and automatically block access to the site. Mozilla also pointed to a URL that demonstrates the new malware blocker for alpha 8 users. Also taking a bow is a check meant to prevent plug-ins' automatic updates from sending users to malicious sites where they might be infected by attack code or drive-by downloads. Firefox relies on small plug-ins -- called "extensions" in the Mozilla vernacular -- for much of its power and flexibility. Several thousand extensions have been written, the vast bulk of them by outside developers, that do everything from boost browsing speed to block irritating Flash animations. Firefox regularly checks to see if the installed extensions are up to date, and, if not, automatically pulls in the newest version and installs it. "Firefox automatically checks for updates to add-ons using a URL specified in the add-on's install manifest," Mozilla spells out in a developer's document. "Currently there are no requirements placed on these URLs. In particular, [they are not] required to be https. This allows either the update manifest or the update package to be compromised, potentially resulting in the injection of malicious updates. A demonstration of one form of compromise is already public." Most extensions are hosted on Mozilla's own servers -- at the servers feeding its Add-ons site -- but some are not; it's those off-site extensions that Mozilla wants to lock down. To stymie attacks through a compromised extension update, Mozilla will require updates -- both the actual update package and the much smaller "manifest," or notification of an update -- to be delivered over an SSL-secured connection. Or the update must be digitally signed. The change doesn't affect the initial installation of an extension, something Mozilla recognized. "[This] has no impact on the security of initial add-on installs," it told developers in the online guide. This newest preview, which can be downloaded in versions for Windows, Mac OS X, and Linux from the Mozilla site, still comes with a warning to end-users. "Alpha 8 is intended for Web application developers and our testing community. Current users of Mozilla Firefox should not use Gran Paradiso Alpha 8," the browser's release notes. Mozilla has not officially committed to a release date for the final version of Firefox 3.0. Computerworld is an InfoWorld affiliate
397083
Mozilla has confirmed a vulnerability in its Firefox browser that could be used by attackers to scout out a system before they undertake a more aggressive assault.
332579
The Mozilla Foundation has released Firefox 2.0.0.8, introducing support for Mac OS X 10.5 'Leopard' in the release.
722275
Mozilla Corp. now plans to launch its revamped Firefox add-on Web site tonight.
42492
As expected, Mozilla Corp. has released an update to Firefox that eliminates 11 vulnerabilities, including four ranked as "critical" by the software developer.
132909
Edging towards release Mozilla released a second beta version of its upcoming Firefox 2.0 browser on Thursday. The release is targeted at developers and intended to generate more feedback while also incorporating a number of bug fixes contained in the Beta 1 version of the code, released in July.â¦
449251
Mozilla bumped up the threat ranking for an unpatched Firefox bug to "high," but promises a quick fix.
185715
Yesterday, Mozilla launched version 1.0 of its Thunderbird e-mail client for Windows, Linux, and Mac OS X in the hopes of winning over converts much like its browser cousin Firefox is doing in the browser space.
735966
With a few final security patches before its departure, Firefox 1.5 is heading to Browser Heaven to make room for its 2.0 successor. On Wednesday, the Mozilla Foundation released the final update for 1.5.0.12, and officially released 2.0.0.4.
707022
(InfoWorld) - Mozilla has hit an early milestone on the road to the next version of its open-source browser, but the final product is still a year away, developers say. The Mozilla team released its first alpha release of Firefox 3.0 Friday, giving Firefox and Web application developers an early look at the next-generation browser. This release is not intended for regular users, not even those who like to play around with early versions of the product, Mozilla said. The software, code-named Gran Paradiso, comes justÂ six weeks after Mozilla shipped version 2.0 of the browser, but it has already been more than a year in development, according to Mike Schroepfer, Mozilla's vice president of engineering. The final version of Firefox 3.0 is expected to be released by the end of 2007. Developers hope that it will be a major step toward making Web applications indistinguishable from programs that are installed on the desktop, Schroepfer said. Gran Paradiso features better support for a number of graphics standards, such as the Scalable Vector Graphics (SVG) language and the Canvas specification, Schroepfer said. "These are fairly major architectural changes to enable us to improve performance." Firefox 3.0 also supports the Cairo graphics library, which aims to make Web pages look the same whether they are being printed or viewed on a Windows PC, a Macintosh or small-screen device. The Firefox 3.0 plan calls for browsing, bookmarking and privacy enhancements to be built into the browser, but Schroepfer said there is still a lot of time to work out new features. "It's a bit early to be talking about the user-facing features," he said. Â
214487
The Mozilla Foundation announced yesterday there have been over one million downloads of Firefox Preview Release in less than 100 hours, after being made available on the Internet last Tuesday.
112650
The Mozilla Foundation today announced the worldwide availability of the Mozilla Thunderbird 1.0 e-mail client. Thunderbird follows last month&#39;s highly successful release of the open-source browser, Mozilla Firefox 1.0.
504591
InfoWorld - With the release of its latest Firefox 2.0.0.5 browser, open-source software maker Mozilla claims to have fixed a number of potentially serious vulnerabilities in its flagship product.