Firefox 1.0.4 Released

[TCH-Thomas]

This update have several security fixes so download it now!

[Patricia]

Thanks for the heads up Thomas

[TCH-Bruce]

Thanks Thomas!

[abinidi]

Thanks, Thomas!

 

Is it better to totally uninstall Firefox 1.0.3 and do a fresh install of 1.0.4, or can we just install 1.0.4 on top of the (formerly) current version?

[OldTimer]

abinidi

 

I just installed 1.0.4 on top of the current version. With no problems.

 

Greg

[TCH-Bruce]

This is what has been fixed in this release:

 

Fixed in Firefox 1.0.4

MFSA 2005-44 Privilege escalation via non-DOM property overrides

MFSA 2005-43 "Wrapped" java script: urls bypass security checks

MFSA 2005-42 Code execution via java script: IconURL

Read more here and here

[abinidi]

So does this mean it is safe to reenable javascript and allow "safe" sites to install files?

[Patricia]

from reading a bit on the changes, i believe so. i had that exact problem (exploited) with my browser. and it seems to be solved now that i have upgraded.

[TCH-Don]

I made a back up of my profiles

and then upgraded over 1.0.3

no problems.

[TCH-Bruce]

I didn't even back up my profile. I just upgraded and everything works.

[youneverknow]

I have been trying all day to get the upgrade with no luck what so ever. I guess their servers are really busy...my update screen just sits there and blinks at me. I'll try later like 3 am west coast time maybe that will work

[TCH-Don]

I bet they are swamped.

After I installed I tried to look at extensions,

but gave up.

 

 

 

(they need a better server )