The BugBlog

Mozilla Busy with Firefox Patches

The recently released Mozilla Firefox 3.5.4 patched 11 bugs, five of which were critical. This includes fixes to both the browser engine and the Javascript engine, third-party media library fixes, and other assorted bugs. Firefox users should be able to get the update via their automatic update function, or you can get it here.

SafeSearch Too Safe for Firefox 3.5

According to Mozilla, if you upgrade to Firefox 3.5.x, and you are running AVG SafeSearch v8.0or earlier, you won't get any results from pressing the Enter key when in the Location Bar. Mozilla says that upgrading SafeSearch will fix that.

Firefox Scrapes Bug off Chrome

Just like a chrome bumper on a car may be marred by bugs, the Chrome in Mozilla Firefox 3.5 and 3.5.1 may pick up some bugs. One bug in incorrectly cached wrappers may lead to privilege escalation. Mozilla has patched this in Firefox 3.5.2. They credit Wladimir Palant and moz_bug_r_a4 with finding the bug. If you don't have auto updates turned on, you can get the new version here.

Firefox 3.5 on Mac OS X

Mozilla says that when running Firefox 3.5 on a Mac OS X computer, Java applications that need to keep track of the mouse position may have problems. There is no fix yet.

Restoring Mozilla Bookmarks

Mozilla says that if you are restoring bookmarks from a backup in Mozilla Firefox 3.5, it may take a long time - so long that Mozilla says you may think your computer has locked up. The only fix appears to be patient.

Mozilla Fixes JavaScript Chrome Bug

There's a bug in Mozilla Firefox 3.0.10 and SeaMonkey 1.1.16 that may allow an attacker to run hostile code via a bug in the way JavaScript handles chrome objects. This is rated as a critical bug - if you can't get the fix in Firefox 3.0.11 or SeaMonkey1.1.17, then you should disable JavaScript until you do. Security researcher moz_bug_r_a4 gets credit for finding this bug. Get the download via the Firefox Help>Check for Updates command.

Firefox 3.0.10

Mozilla Firefox 3.0.10 fixes a bug in Text Frames that attackers could exploit to crash the browser and then run hostile code. Firefox should automatically check for updates, but you can also download the latest version here.

Bugs Fixed in Firefox 3.0.5

Mozilla Firefox 3.0.5 fixes a number of critical security bugs, including a couple in XSS, and others that may causes crashes with memory corruption. See the full set of security fixes here.

Adobe Likes Internet Explorer Better

If you do a Search for Help in Adobe Creative Suite 4, the search will launch in Microsoft Internet Explorer even if you have Mozilla Firefox set as your default browser. As of now, there is no workaround.

Mozilla Releases Firefox 3.0.1

Mozilla has already released their first update for Firefox 3.0.1, which fixes two critical security bugs. One fixes a bug that may allow hostile code to sneak in through a command-line URI when Firefox isn't running. The second one may let in the hostile code via a CSS counter overflow. Either use the Firefox Help, Check for Updates command, or here.