Mozilla Fixes 'Critical' Bug In Earlier Patch
2007-03-09 09:22:00
The Mozilla Foundation issued a download this week that fixes a prior patch that they had issued in December.
The problematic update was issued for Mozilla's flagship Firefox browser and for its SeaMonkey application suite, according to an advisory. The vulnerability, which Mozilla labeled as 'critical', caused JavaScript problems and enabled hackers to remotely execute arbitrary code. The bug was in Firefox 1.5.0.9 and Firefox 2.0.0.1, as well as in SeaMonkey 1.0.7.
The December patch update also addressed bugs in Mozilla's Thunderbird e-mail client, but it was unaffected by the bug, according to the company's advisory.
The advisory explains that the faulty patch introduced a regression that allows scripts from Web content to execute arbitrary code. Thunderbird was not affected by this flaw as it will not execute JavaScript.
The U.S.-CERT said it "strongly encourages" users to upgrade to Firefox 2.0.0.2 and SeaMonkey 1.1.1 as soon as possible.
|
|
Dell, Microsoft, and Novell Talk Linux Once bitter rivals, Microsoft and Novell have become allies and now are recruiting new friends to join their open-source party and put some meat on the bones of a landmark interoperability deal. Dell is the first of what the two tech titans hope will be several computer makers to bless the partnership by agreeing to help server customers migrate to SUSE.
IBM Opens Market Doors for Partners IBM Corp. is helping shepherd increasing numbers of local software companies onto the global stage as they move outside of the comfort zone of their home markets. MySpace to acquire Photobucket: source MySpace, part of Rupert Murdoch's News Corp., has reached a preliminary deal to acquire Photobucket, the world's top photo-sharing site, for around $250 million in cash, a source familiar with the deal said on Monday. Ericsson and Sun to develop open source-based server Telecom equipment maker Ericsson said on Tuesday it would join forces with U.S. computer maker Sun Microsystems to develop an open source Java echnology-based multimedia application server. Java Goes Open Source Sun Microsystems Inc. announced Tuesday it has finished the process of making the bulk of its core Java technology available as open-source software under the GNU general public license version 2. The vendor made the announcement at its JavaOne conference in San Francisco. Google's search engine goes universal In its latest technological leap, online search leader Google Inc. will begin showing videos on its main results page Wednesday along with photos, books and other content previously separated into different categories. Gartner Joins Open Source Squabble Gartner today joined squabbling by vendors over the meaning, purpose and spirit of open source by declaring that users demand the right to modify and redistribute software code and the resulting products. Secunia: Firefox users more likely to install patched Firefox users have something new to brag about. Security vendor Secunia reports that users of the open-source browser are more likely to have installed the latest security updates than Web surfers running Internet Explorer or Opera. IBM sees software producing half of profit by 2010 International Business Machines Corp. sees software accounting for nearly half of total profit by 2010, up from about 40 percent last year, the company said in slides prepared for an investor conference on Thursday. Google serves up searches du jour A new Google website devoted to charting online search trends lets people see what topics have US Internet users buzzing on any given day.
|