Headlines without verbs are like pigs without truffles - Mike Magee
|
|
|
Mozilla fixes Firefox issue
OPEN SOURCE SOFTWARE OUTFIT Mozilla has issued a fix for the latest critical security vulnerability to affect its popular Firefox browser.
The problem, which would allow a remote attacker to take control of an infected system, was seen to be so severe that the German government advised people to stop using Firefox.
Now Mozilla has fixed the problem, one week ahead of its own schedule, suggesting that it took the German warning very seriously.
Mozilla has already issued one fix but it required a lot of manual intervention. This latest fix is automatic and can be installed after following a few simple "check for updates" instructions.
The German Buerger Cert has already recommended that users update to this latest release, although, to be honest, our Google Translate version of events makes it a little difficult to work out.
"The Mozilla developers are ready for Firefox version 3.6, the update 3.6.2. The Bürger-CERT recommends that users of version 3.6 to upgrade quickly", it said. µ
Share this:
Share
@joed
The vulnerability was apparently in a too small a buffer for their new 3.6 downloadable fonts thing, so you are wrong in thinking noscript would have protected you since it would think it was all legit and OK to have a website have some original fonts.
The original text:
Empfehlung
Die Mozilla-Entwickler stellen für die Firefox-Version 3.6 das Update 3.6.2 bereit.
Das Bürger-CERT empfiehlt Anwendern der Version 3.6 zeitnah eine Aktualisierung durchzuführen.
Am einfachsten ist dies über die integrierte Update-Funktion möglich.
My translated version:
Recommandation
The Mozilla developers have made the 3.6.2 update ready for Firefox version 3.6.
The Bürger-CERT recommends that users of version 3.6 to perform an update very soon.
The easiest way to do this is with the integrated Update function.
-
Just my 5 cents.
And to make all worse I'm Danish.
Best regards, Anders Otte
that my other system got 3.6.2 update some 2 days ago (w/o asking) and every time i tried to trigger update process on my laptop it would find nothing. today 3.6.2 is loading automatically.
not that i really cared - i'm quite sure that with noscript enabled not much could have happened.
that I never got 3.6.1?