New Firefox 1.0.3 Vulnerabilities

Cross-site scripting attacks use iframes plus update function

[bateman_ap]

haven't seen it here but only did a quick search so dismiss if already posted. Two vulnerabilities have been discovered in Firefox that can compromise a user's system.

No patch as of yet, more info at
[secunia.com...]

Current solution is to disable JavaScript

[2by4]

"but in Firefox 1.1 we will have binary patching (aka sweet, simple, small, efficient updates)"

That's from the link posted by jdmorgan.

How long did 1.0.4 take to get released? 2 days for the testing version? I'll stick with Firefox, no problem.

[amznVibe]

I recommend the Stipe optimized 1.0.4 build which just came out.
Be sure to backup your current firefox folder and settings folder before trying this but I think you'll be pleasently surprised at the speed boost.

(for all cpu types)
installer version:
[pryan.org...]

or self-extracting zip:
[pryan.org...]

I am able to unzip the files right over my 1.0.3 with no profile rebuilding needed.

(some people are reporting a startup error if they use the spellbound extension but Firefox will still work fine)

[StupidScript]

Thanks for the stipe tip, amznVibe.

After zipping my FF program directories, I installed the .EXE stip-build right into my old FF directory.

No problems, and now surfing with stipespeed! :)

[jdMorgan]

Firefox 1.0.4 [mozilla.org] final is now available for download.

Jim

[jdMorgan]

For this upgrade, it is recommended that you do a clean install:

Firefox 1.0.4 Release notes/Installation instructions [mozilla.org]

Jim

[Neo541]

<side note>Google Maps doesn't seem to recognize the Stipe build. Interesting</side note>

[amznVibe]

I fix google maps by changing the user-agent to be more generic on starup.

Put this into "user.js":

user_pref("general.useragent.override", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0");

[g1smd]

As well as Firefox 1.0.4 there is a new version Mozilla 1.7.8 out too.