Firefox 1.0.7 out

[Maskie]

http://www.mozilla.org/products/firefox/
Firefox 1.0.7 is a security and stability release. We strongly recommend that all users upgrade to this latest version.

This version includes several security and stability fixes, including a fix for a reported buffer overflow vulnerability and a fix for a Linux shell command vulnerability.

Specific changes in Firefox 1.0.7

* Fix for a potential buffer overflow vulnerability when loading a hostname with all soft-hyphens
* Fix to prevent URLs passed from external programs from being parsed by the shell (Linux only)
* Fix to prevent a crash when loading a Proxy Auto-Config (PAC) script that uses an "eval" statement
* Fix to restore InstallTrigger.getVersion() for Extension authors

 

[Vox Populi Vox Dei]

What this change also affect Firefox Beta 1.5 or is it strictly part of the 1.0.x family?

 

[bb_matt]

anyone got a local mirror for us poor ADSL "broadband users", who once again, are up **** creek thanks to SAIX ?

 

[Maskie]

What this change also affect Firefox Beta 1.5 or is it strictly part of the 1.0.x family?

I am sure that all the security fixes will also be rolled into the 1.5 branch

 

[.geek]

Thanks Maskie

 

[DFantom]

What this change also affect Firefox Beta 1.5 or is it strictly part of the 1.0.x family?

The changes will likely be incorporated into the 1.5 code base and probebly show up in the next beta.

 

[Raithlin]

The fix is most probably already in the nightly builds...

 

[krycor]

mine still says 1.0.6 .. on what do i click to autoupdate it ?

 

[DFantom]

mine still says 1.0.6 .. on what do i click to autoupdate it ?

this