SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Science and Innovation from Around the World -- Ignore unavailable to you. Want to Upgrade?


To: jttmab who wrote (20)9/21/2005 1:52:17 PM
From: Bucky Katt  Respond to of 149
 
Mozilla Firefox 1.0.7 Released
Wednesday September 21st, 2005

Mozilla Firefox 1.0.7, a security and stability update to the flagship Mozilla browser, is now available for download. Fixes are included for the international domain name (IDN) link buffer overflow vulnerability and the Linux command line URL parsing flaw. There are also other security and stability changes, including a fix for a crash experienced when using certain Proxy Auto-Config scripts. In addition, some regressions introduced by previous 1.0.x security updates have been resolved.

The Mozilla Foundation previously issued a patch for Firefox 1.0.6 that protected users against the IDN link buffer overflow flaw at the expense of removing support for IDNs. Firefox 1.0.7 has a more permanent solution that does not involve disabling IDN functionality and any users who installed the patch will find that IDN support is restored when they upgrade.

Firefox 1.0.7 can be downloaded from the Firefox product page or the Firefox 1.0.7 directory on ftp.mozilla.org. The Firefox 1.0.7 Release Notes have more details about this upgrade and we expect the Mozilla Foundation's list of known security vulnerabilities to be updated soon.

An equivalent update to the Mozilla Application Suite, Mozilla 1.7.12, is expected shortly.



To: jttmab who wrote (20)9/25/2005 1:14:52 PM
From: Bucky Katt  Respond to of 149
 
Apple Computer released 10 security fixes to address Mac OS X flaws that security experts described as "critical."

Apple issued the patches, available through its Web site, Thursday. The flaws affect versions 10.3.9 and 10.4.2 of the Mac OS X operating system, as well as related server software.

Symantec and the French Security Incident Response Team both said the vulnerabilities are serious and that the need to patch them is urgent. However, no exploits for them have been reported, Symantec noted in an alert sent to members of its DeepSight service Friday.

The flaws expose affected machines to remote attack using arbitrary commands and e-mail interception, according to Apple's bulletin. Certain vulnerabilities could also be exploited for a denial-of-service attack, FrSirt said in an online advisory.

Apple declined to comment on the security patches Friday.

The company has previously released patches for these Mac OS X versions. In one of its bigger security updates, the company last month unloaded fixes for 44 flaws. Last May, it released an update for 20 vulnerabilities, and in March, it distributed an update for a dozen security bugs.