Mozilla Patches Critical Firefox, Thunderbird Flaws

[Bio-Hazard]

Mozilla on Sept. 15 shipped a "highly critical" Firefox update to correct a range of security flaws that could lead to security bypass, cross-site scripting, spoofing, denial-of-service and system access attacks.
The open-source group patched a total of seven vulnerabilities in its flagship browser and warned that the majority of the flaws could be exploited to run attacker code without any user interaction beyond normal Web browsing.
Since releasing Firefox 1.5 (http://www.eweek.com/article2/0,1895,1894371,00.asp) in November 2005, Mozilla has patched 59 security vulnerabilities in the browser, more than half rated by the company as "critical."

http://www.eweek.com/article2/0,1895,2016449,00.asp

[DragonMaster]

At least, they fix them!

[vfrex]

What makes security patches news exactly?

[werty316]

Any security patches to a well known app is news most of the time. I have seen news on XP updates once and a while if they are substantial enough.

[Kougar]

What makes security patches news exactly?

If it's a major enough fix, then it warrants the news update to get the word out. People usually tend to get upset or angry when security flaws of that severity are not mentioned, or "they are not warned", regardless of whether or not it directly affects them.

[vfrex]

Firefox and Thunderbird are basically updating automatically these days. If you disable the automatic updates, you should know better anyway.

[Kougar]

Not everyone likes everything to auto-update itself. Case in point, Werty mentioned in passing one of the recent previous updates to Firefox caused him problems with ebay's site.

I let some things auto-update, but program changes I prefer to install or update myself, so if something ceases working correctly I know exactly where to start troubleshooting from.

[vfrex]

Do you need news stories to inform you to update all of your non-auto updating software? Another question I would have is, why haven't there been 59 news postings in here regarding all of Mozilla's security patches? Should we have one every patch Tuesday?

I'll quit dancing around though. Sbrehm, you posted an article a few days ago regarding the number of security patches that Firefox developers have applied this year. The assertion was that because the number of security patches to Firefox have been greater than the number of security patches for IE this year, IE must be more secure. I'm wondering if this thread has something to do with your previous.

[DragonMaster]

[QUOTE]Another question I would have is, why haven't there been 59 news postings in here regarding all of Mozilla's security patches?[QUOTE]

It's a new release. TechSpot announces almost every Firefox releases and what MS's patch Tuesday has new when there are important updates.

[vfrex]

ugh

The point is, why has that techspot released been posted on this member news forum this time, but not every(any) other? I'm saying that there is an ulterior motive for posting it.

[DragonMaster]

TechSpot doesn't create any news tho, they put a summary and there's a link to redirect you to the site where they got the news from.

If you want to know everything about Mozilla, you just have to look at Mozilla.org, there's MozDEV news and MozillaZine news there.

[GIBSON]

ugh

The point is, why has that techspot released been posted on this member news forum this time, but not every(any) other? I'm saying that there is an ulterior motive for posting it.
Uhm, yes it has been. I remember several newsthreads regarding this topic.

[vfrex]

Uhm, yes it has been. I remember several newsthreads regarding this topic.

Show me a link. I just did a search of the bjorn3d member news forum and found nothing.

[DragonMaster]

You can find some, on other forums where there's people that post it.

[GIBSON]

Show me a link. I just did a search of the bjorn3d member news forum and found nothing.
I am not going to do the effort to search for one. If one visits this place often enough and if one has a decent memory, one will remember having seen news posts about firefox updates.
'nuff said