Print this article | E-mail this article | Comment on this article

Mozilla Patches Firefox, Thunderbird

By BetaNews Staff, BetaNews

September 15, 2006, 5:50 PM

Mozilla has pushed to users a minor upgrade to Firefox Thursday which included seven security fixes, four of which the company considered "critical." In addition to the patches, the update also included improvements to the product's stability. Of the critical updates, a RSA signature forgery flaw, a memory corruption vulnerability, and two JavaScript issues were remedied.

Firefox 1.5.0.7 included far less critical patches than previous versions; version 1.5.0.5, released in July, included seven critical fixes and 12 altogether. In addition to Firefox, Mozilla on Friday released Thunderbird 1.5.0.7, which also fixed seven security issues as well as providing improvements to product stability. Both updates will be delivered automatically to users through the company's upgrade system, it said.

Add a Comment (59 Comments)

BetaNews reserves the right to remove any comment at any time for any reason. Please keep your responses appropriate and on topic. Foul language and personal attacks will not be tolerated.

By polarbeardog2

posted Sep 19, 2006 - 12:01 AM

I would like to ask why there is an article about regular updates. Look every one windows made another update and things in the world chaged some.

Score: 0

By venimus

posted Sep 20, 2006 - 9:39 AM

Obviously, because it involves really great critical security patches you shouldnt miss to update. IT IS NOT REGULAR UPDATE - IT IS CRITICAL. If you had some clue about internet programming you should se that these "javascript issues" are actually open door for all kind of malware. IE 5 is patched for them.

You should start asking yourself weither you are actually using a secure browser, because this patch is another proof that Firefox is one big lie.

Score: 0

By PC_Tool

posted Sep 19, 2006 - 9:20 AM

Look every one windows made another update

I think he just picked a topic at random and cut/paste. He obviously hasn't a clue as to what the article is about.

Score: 0

By wincement

posted Sep 19, 2006 - 2:00 AM

Perhaps you missed the name of the website you posted your comment on.

It's called BetaNews. Logically, that would include regular updates in software...

Score: 0

By DNG

edited Sep 18, 2006 - 9:31 AM

Firefox 1.5.0.7 is still vulnerable to Michal Zalewski flaw
test here: lcamtuf.coredump.cx/ffoxdie.html

Score: 0

By sophist_dreams

posted Sep 18, 2006 - 10:14 AM

I didn't have any problem with whatever was supposed to show up. It never did. Oh wait I protect myself from malicious java scripts by having no script installed. Another myth busted.

Score: 0

By templar™

posted Sep 18, 2006 - 11:25 PM

You are assuming that the majority of FF users would (want and know how to) install NoScript.

Score: 0

By PC_Tool

posted Sep 19, 2006 - 9:15 AM

Considering they know another browser OTHER THAN IE exists? ...and Firefox is known and used for it's extendability? I'd say the chances are pretty good.

Score: 0

By Grazer

posted Sep 18, 2006 - 1:05 PM

And your version of Firefox came with NoScript integrated?

Score: 0

By sophist_dreams

edited Sep 18, 2006 - 8:24 PM

It came with the ability to turn off java script (or in the advanced mode select how java script loads pages). It also came with the ability to turn off java. No Script is a nice add on that negates the necessity to do this by selectively allowing certain sites to load these two functions. The point I was making is that anti Firefox lamers seem to enjoy sending users to sites that show vulnerabilities that we are not stupid enough to let affect our browsers or our machines.

Score: 0

By joeshmoe7

posted Sep 18, 2006 - 12:45 PM

lol, noscript is the bomb.

Score: 0

By PostDeals

posted Sep 17, 2006 - 10:36 PM

All smart and security centric folks use Mozilla Firefox. I hope MS's IE team will learn something from them.

Score: 0

By frankwick

posted Sep 18, 2006 - 10:17 AM

True that FF is more secure than IE6. However, I have seen good results with the IE7 betas.

Score: 0

By Crand3

edited Sep 17, 2006 - 11:41 PM

That's quite a bold statement. I don't consider myself stupid. I'm probably the only person who perfers IE to FF but who doesn't rip on FF. It's a great program, I just prefer IE.

Score: 0

By Secret Agent Man

posted Sep 18, 2006 - 6:38 AM

Thank you for going against the stigma that you have to hate one browser if you use the other.

Score: 0

By Crand3

edited Sep 18, 2006 - 7:35 PM

What I do hate is people like Paul Thurrot who is a source of beta news but uses FF on windows betas. That goes against everything beta testing is about. If you don't use the IE betas, don't b1tch if they don't work well when the code goes gold. I give my feedback to the newsgroups like a good boy should.

On the flipside of that, could you imagine the flame wars that would start if one of the vista betas had a problem loading FF but IE worked. That article would hit like 2000 comments in the first hour. Seems to me people like Paul are testing FF on Vista solely for that purpose and are let down when it works.

Score: 0

By Grazer

posted Sep 18, 2006 - 1:06 PM

No, no, no we must uphold the idea that browsers and OSes are like religions and the immortals from the Highlander series.
There can be only one. ;P

Score: 0

By crashoverride

posted Sep 18, 2006 - 5:17 PM

lmao....nice

Score: 0

By fewt

edited Sep 18, 2006 - 9:15 AM

.. weird wrong comment location

Score: 0

By PC_Tool

posted Sep 18, 2006 - 12:51 PM

BN seems to be suffering from advanced Alzheimer's. Keeps forgetting what comment you are trying to reply to after you hit "Post your Comment"

Score: 0

By cranbers

posted Sep 17, 2006 - 3:53 PM

I have noticed that most people who are fairly computer literate and are shown something useful in FireFox end up switching. IE7 is an improvement. However it can never compete with the ease of use, small install size and download size. As well as the huge number of extensions easily available all in one place. I also love the fact you can fully customize every aspect of the layout, don't forget the themes! You can change around where you want buttons or if you don't want them they can be removed.

You can't say anything like that about ie even at version 7. Programs available have to be bought typically. They are out there but usually are buggy, slow and just plain suck. Until Microsoft fixes this aspect of ie. I don't see it turning FireFox users back, unless it is to download it on a new computer that doesn't yet have it.

I hope Mozilla corp/foundation can keep it going as well as keep improving everything. Thanks to them Microsoft actually got off their rich lazy butt and did an update to ie that wasn't meant to be originally. That is sad, greedy corps that onl care about money, not their users, not their rep and certainly not about making friends.

Score: 0

By Grazer

edited Sep 18, 2006 - 1:10 PM

You can change around where you want buttons or if you don't want them they can be removed.

You can't say anything like that about ie even at version 7

I have been adding/removing and rearranging buttons in IE6 for years. I think I was doing it with IE5 and possbly earlier versions, but as I don't have them installed anywhere I can't verify.

I've always thought skins were overrated. It is a rare skin that actually enhances usability.

Programs available have to be bought typically. They are out there but usually are buggy, slow and just plain suck. Until Microsoft fixes this aspect of ie.
So is MS responsible for the crappiness of third party apps now?

Score: 0

By joeshmoe7

posted Sep 17, 2006 - 6:46 PM

right on

Score: 0

By MySecret

edited Sep 17, 2006 - 8:32 AM

Tipsboy I've done the same as you...tested every blind out there and keep coming back to Firefox. This is not simply a replacement for Ie....its a whole new breed of browser. When a * free browser focuses on the customers needs and continually improves not only security but stability and customization, you have a winning browser.
You pay for IE when you purchase windows.....Name one ie update in the past 2 yrs that was focused on enhanced customization.
I just used the spell check extension for Firefox by highlighting 1 word and 3 secs later this post was spellchecked Oh ya ..I
choose when scripts are allowed on a site by 1 simple click of my mouse.....how many clicks to do the same for IE?...
And with Firefox 2 these extensions will be built in.

Score: 0

By tipsyboy

posted Sep 17, 2006 - 3:59 AM

Why is there not one constructive criticism comment here!? I really would like to learn about alternatives if this firefox is really bad stuff at all. You can tear apart everything and everybody for any reason whatsoever - what for?

FF runs smoothly on my machine for years, and it gives me exactly what I wanna have. It's not as fast as IE, but I decided to live with that because of what I wanna have in a browser. Tried every available browser out there - there are a lot of those - and always returned to FF after a short time.

Score: 0

By mesiex

posted Sep 16, 2006 - 5:09 AM

Fine! I nevertheless think Firefox 2 beta (downloaded yesterday from Betanews)is even better. Thanks for keeping it available for Windows 98 SE! Being a home user, I feel comfortable and at ease with my old computer which doesn't allow Vista at all.

Score: 0

By tipsyboy

posted Sep 17, 2006 - 3:49 AM

Here's a good man!

Never change a running system.

Yes, and we gotta have to thank all those who keep good things alive.

Score: 0

By DaComboMan

posted Sep 17, 2006 - 6:30 AM

I'm with you on this one Tipsyboy!

Score: 0

By mesiex

posted Sep 17, 2006 - 5:17 PM

Thank you both. Good and simple means twice good, and you don't need an atom bomb when you have only got flies to kill.

Score: 0

By cranbers

posted Sep 15, 2006 - 11:06 PM

People like to bash firefox. They say things like see even firefox has flawed code. But the fact is, firefox has been around for what, 2 years? IE has been around for at least 5 times longer then that with hundreds of bug fixes. Considernig firefox is relatively new to market and it's a not for profit organization. They do a pretty good job. Microsoft is a multi billion dollar company that doesn't release updates other then holes being plugged, and that's sad.

Score: 0

By Grazer

posted Sep 18, 2006 - 1:11 PM

People like to bash firefox. They say things like see even firefox has flawed code.
That's bashing, I thought it was just stating the truth...not that I am saying IE is better.

Score: 0

By computershack

posted Sep 17, 2006 - 7:07 AM

"They say things like see even firefox has flawed code. But the fact is, firefox has been around for what, 2 years?"

No, actually about 12-13 as it's based on the original Netscape Mozilla which was around in the early 1990's when HTML first came out. So in fact, IE is the baby.

Score: 0

By DJInsomniac

posted Sep 17, 2006 - 9:39 AM

That was Netscape.

This is Firefox.

Based off the same code, maybe, but two different browswers.

Firefox is still younger.

Score: 0

By Desides

posted Sep 15, 2006 - 11:24 PM

"But the fact is, firefox has been around for what, 2 years?"

Much longer than that. First it was Phoenix, then Firebird, then Firefox. It's quite a few years old, but has only been truly usable since 1.0.

Also, Mozilla has since formed the Mozilla Corporation. Notice that you now download Firefox from mozilla.com, not mozilla.org.

Score: 0

By PC_Tool

posted Sep 16, 2006 - 12:06 AM

It's been useable since firebird. ;)

Is that "firesomething" plugin still around? Loved that one...

Score: 0

By Desides

posted Sep 16, 2006 - 12:32 AM

"It's been useable since firebird. ;)"

Yeah, but not by the general public. I certainly wouldn't have put Firebird up against IE, Safari, or Opera...

Score: 0

By fewt

posted Sep 16, 2006 - 8:05 AM

Why not?

Score: 0

By Desides

posted Sep 16, 2006 - 2:28 PM

General instability, feature incompleteness, that sort of thing. By the time they changed the name (again) to Firefox, the codebase had improved by leaps and bounds.

Score: 0

By fewt

posted Sep 16, 2006 - 7:00 PM

How about something specific this time.

The only instability was the every now and then process exit with no warning. It was a rare occurance.

Score: 0

By Desides

posted Sep 16, 2006 - 7:48 PM

"How about something specific this time."

Yes, like I'm going to go back and look up changelogs from years-old versions for the sake of supporting my opinion on Betanews.

Score: 0

By fewt

posted Sep 17, 2006 - 8:43 AM

Why wouldn't you, unless you were wrong that is.

Score: 0

By Desides

posted Sep 17, 2006 - 12:55 PM

Because I don't particularly care to wade through all that information for someone on Betanews?

You take differing opinions and interweb arguments way too seriously. Get over yourself.

Score: 0

By fewt

posted Sep 17, 2006 - 9:06 PM

LOL

I take things seriously?

Funny stuff.

Score: 0

By PC_Tool

posted Sep 18, 2006 - 9:07 AM

Yeah, man, you need to lighten up, dude.

;)

Did you change the addy of your BBS?

Score: 0

By fewt

edited Sep 18, 2006 - 9:16 AM

yeah, that domain is going away.

TW and the doors are offline right now though, hit fewt.com and click out to it.

I'll fix'em when I have some time, my wallpaper changer was my priority lately. heh

Score: 0

By PC_Tool

posted Sep 18, 2006 - 12:49 PM

Bah... those are a dime a dozen... Now a BetaNews comment counter...those are rare... ;)

Heh...

The universe was getting lonely anyway. Need to gather some more players. Maybe re-bang and post it on stardock or something. ;)

Score: 0

By fewt

posted Sep 18, 2006 - 8:45 PM

Mine's better (heh) it can pull a color from your wallpaper and set the desktop color to match.

Wait, that's the pro version heh.

I tried to get it on stardock, but the BBS isn't compatible with their scraper.

Score: 0

By PC_Tool

edited Sep 19, 2006 - 9:03 AM

The pro version. Of a wallpaper changer. That automates loading the image into MS Paint and using the eyedropper.

Sweet...

I'm in. ;)

Love the VM appliance on your site. Great use of VMware.

Score: 0

By sophist_dreams

posted Sep 16, 2006 - 5:03 PM

I used Firebird for almost a year before it became Firefox..I would stack it up against anything that was out at that tine

Score: 0

By Desides

posted Sep 16, 2006 - 6:16 PM

I wouldn't. It was too much in flux. It became really usable around 0.9, IMO.

Score: 0

By Frostek

posted Sep 18, 2006 - 11:43 AM

I'd agree witht hat. I usedto use the Mozilla Suite instead, but checked out Firewotsit from timeto time. 0.8 was okay,but you really started to seeimprovementsabout 0.9.

Firefox now really does everything I need, so I've no complaints.

Score: 0

By mjm01010101

posted Sep 15, 2006 - 11:31 PM

It's a subsidiary of the Mozilla organization:
http://www.mozilla.org/foundation/

Sorta like the Red Cross, which also has a corporate arm (highly profitable, also) for it's charitable organization.

Score: 0

By Desides

posted Sep 16, 2006 - 12:33 AM

Yes, but it's still the Corporation that now offers Firefox.

Score: 0

By orizng

posted Sep 15, 2006 - 5:57 PM

Im using 2.0RC nightly now, update everyday.

Score: 0

By DJInsomniac

edited Sep 17, 2006 - 9:38 AM

Stupid Betanews.

Score: 0

By cranbers

posted Sep 15, 2006 - 11:03 PM

are you talking about beta 2 rc? There is no release candidate for 2.0 yet.

Score: 0

By dex23462

posted Sep 15, 2006 - 6:12 PM

So what's your point?

Score: 0

By sophist_dreams

edited Sep 16, 2006 - 5:05 PM

His point was that the 2.0 nightlies have the security fixes incorporated in them when they come out.

Score: 0

By Das mod

posted Sep 15, 2006 - 6:34 PM

dude ..... you pwnt his @zz good .... lol ... good ... GOOD

Score: 0

Nov 21 - 9:29 PM ET Hurd's the word in Ballmer's e-mail nightmares

Nov 21 - 6:51 PM ET Coalition urges better laws for e-mail and cell phone privacy

Nov 21 - 6:42 PM ET How is Internet advertising faring in this bad economy?

Nov 21 - 6:15 PM ET From out of the Amazon Cloud, an AWS winner emerges

Nov 21 - 5:20 PM ET Mufin music finder enters public beta, adds widgets

Nov 21 - 5:01 PM ET Google launches its SearchWiki semantics plug-in

Nov 21 - 4:57 PM ET Asus previews a slimmer, less costly Eee PC

Nov 21 - 4:32 PM ET New Adobe Media Player ushers in AIR 1.5

Nov 21 - 2:11 PM ET AT&T to add Pantech's low-cost C630 phone to 3G lineup

Nov 21 - 1:11 PM ET iPhone gets firmware 2.2 update