Linked by Thom Holwerda on Fri 23rd Feb 2007 22:23 UTC, submitted by anonymous
Mozilla today released updated versions of the Firefox browser, v1.5.0.10 and v2.0.0.2, for Windows, Mac, and Linux, which close a major security flaw called the 'location.hostname vulnerability'. The fix stops hackers from being able to tamper with how websites are displayed.
Thread beginning with comment 216172
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[4]: Auto-update rocks
by stuhood on Sat 24th Feb 2007 18:14
in reply to "RE[3]: Auto-update rocks"
Member since:2006-07-11
Member since:2005-08-17
Recent Original Stories
Recent Comments
Headlines
Random Comments
Random Stories
Random OS Link
Member since:
2005-08-08
"I run linux and have installed firefox in my home directory so it can do automatic updates"
albeit unlikely, any process running in your user account can modify the binary? kinda defeats the purpose of the security model. not a good solution.
it would be nice if firefox notified regular users (windows or linux) of updates too so you could switch to admin or root respectively... or maybe even allow you to click update, and prompt for credentials to runnas/sudo.