SECURITY ALERT: Mozilla FireFox 1.0.3!

[Welly Wu]

http://secunia.com/advisories/15292/
http://www.mozillazine.org/

DO THIS NOW:
1. DISABLE JAVASCRIPT
2. DISABLE SOFTWARE INSTALLATION:
A. MICROSOFT WINDOWS: TOOLS->OPTIONS->WEB FEATURES->UNCHECK THE BOX ENTITLED "ALLOW WEBSITES TO INSTALL SOFTWARE"
B. LINUX: EDIT->PREFERENCES->WEB FEATURES->UNCHECK THE BOX ENTITLED "ALLOW WEBSITES TO INSTALL SOFTWARE"

Extra security tip:
Only allow http://update.mozilla.org or http://addons.mozilla.org as approved whitelist sites to install plugins and themes for Mozilla FireFox 1.0.3.

Future security tip:
UPDATE TO MOZILLA FIREFOX 1.0.4 WHEN IT BECOMES AVAILABLE IMMEDIATELY!

 

[oneeyedhobbit]

Thanks for the heads-up, Welly.

 

[apnk]

Thanks for the head up.

 

[fr4c]

ty

 

[oneeyedhobbit]

Seeing as this is directly related to extensions, am I safe to click (within firefox) "Tools-extensions-update" and trust that the update being displayed for my tabbed browser preferences is an actual update or could it just be a potential security issue?

 

[kramer5150]

Thanks!!

 

[MrSlacker]

thanks a lot

 

[apnk]

Quote:

Originally Posted by Welly Wu Extra security tip: Only allow http://update.mozilla.org or http://addons.mozilla.org as approved whitelist sites to install plugins and themes for Mozilla FireFox 1.0.3.

So if we got all themes and plugin's from the sites above, we are safe right? Or should I still disable java just to be safe?

 

[eitook]

invaluable.....
cheers

 

[mightyacorn]

Thanks!

 

[seeberg]

Thanks for the notice, keep passing it on!
(I should note that disabling Javascript will force you to revert to the old version of Yahoo mail-if you use it-, which looks pretty basic, but if means online safety, then it's necessary)

,
Abe

 

[MrSlacker]

they have an update already

 

[oneeyedhobbit]

As someone else said, 1.0.4 is now out.

 

[seeberg]

Got my copy of Firefox 1.0.4 right as soon as I was notified(OMG, this feature is so essential to Firefox's awesomeness), so I'm gonna keep on rocking like a hurricane- I suggest anyone that hasn't got theirs yet to do it NOW!!!

,
Abe