This from PC World.

Mozilla Issues Fixes for Firefox, SeaMonkey Flaws
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.

The post goes on to say that even disabling Javascript does not protect your browser and computer.

I am now using FF portable.

N



Edited 1 time(s). Last edit at 03/07/2007 02:27AM by ndebord.

? can You cite sources and have You tested with k-meleon ?

The announcement in PC World (and in other media)
is very unclear.
The bug seems to be fixed already in Firefox 2.0.0.2
and Seamonkey 1.1.1, if a read the announcement of
the Mozilla Foundation from March, 5th correctly. See here :

http://www.mozilla.org/security/announce/2007/mfsa2007-09.html

In the press it gives the impression of an additional fix,
which I cannot find anywhere.

As my GRE for my Linux-usable version and my update 5 for
KM 0.9.13 dates from a Seamonkey nightly of February, 21st,
I presume, that the fix is already included there, as the
latest Firefox 2.0.0.2 was released on February, 24th .

Fred

P.S.:

The "plus" version of KM-Linux-usable still has an
older Gecko engine. It will soon be replaced by a
newer one in the upcoming version "plus 2".

Fred

Fred - ndebord has a 1.02 that is updated to GRE 1.8.1.1 and can be updated to 1.8.1.2 easily/ & any unchanged 1.02 can be updated 1.8.0.9 easily / i simply ??? & do not understand why he is using a portable FF that is older than his KM.



Edited 1 time(s). Last edit at 03/07/2007 08:04AM by guenter.

I don t know either.
In PC World and in other news coming from the same
source probably, it suggests (wrongly), that there is still
a new bug that was dangerous, even with javascript
turned off, that would act when you click on thumbnails.
This must have been confusing.
Fred

@ Guenter
Heise confirms, that the bug has been fixed already
in Firefox 2.0.0.2 and Seamonkey 1.1.1 and 1.0.8 ,
and that the message came after having patched.

http://www.heise.de/newsticker/meldung/86345

Fred

Guenter,

Yes, the PC World article seems to have gotten it wrong about whether or not patches were needed for 2.0.2 in FF (along with SM 1.0.8 and 1.1.1). As for the Portable Firefox, I used the update process to get to 2.0.2 and still thought (at the time) that there were bugs not fixed in that release. I like Portable FireFox as my backup browser, but if KM 1.0.2 falls behind in bugfixes, I will use FF more often. As much as I like to use Fred's various versions which are regularly updated, I would also like to see patches regularly available for KM 1.0.2, similar to Brian's executables. Taking a piece from SM 1.0.7 and another from SM 1.0.8 and also SM 1.1.1, is more of a manual exercise than I would like to undertake on a regular basis.

N



Edited 2 time(s). Last edit at 03/09/2007 02:28AM by ndebord.