SillyDog701

[Fulvio]

Less than a month ago, [sdt=13042]I was being forced to upgrade[/sdt] to Firefox 2.0.0.2, and I have not seen that offensive dialogue as of now.

Antony,
I think that we went through the settings in Options|Advanced|Updates. There are two options, beside that of allowing the installation. One is to check, and you will get a notice, but no installation. The other is to uncheck everything, like I have. The settings in 2.0.0.3 are the same as they were in 2.0.0.2. So, if you made the changes, you would not get the offensive installation. How are your settings?

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[Antony]

Fulvio,

I made the change in settings.

Now, this dialogue looks less offensive. Of course, I clicked "Later".



Although it says "It is strongly recommended that you upgrade Firefox ...", but I clicked "View more information about this update" (which is the release note). My judgement told me it is not that serious at all, no need to rush.

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2

[Fulvio]

Dumb, dumb, dumb. I think that I had posted earlier saying that I installed 2.0.0.3 in the default location, vacated by the uninstallation of 1.5.0.10. It worked well, and I still had 2.0.0.2 installed in another directory. So far, so good, until I decided to uninstall 2.0.0.2. I had renamed the shortcut to Firefox 2. On uninstalling, the renamed shortcut was not touched, but the not renamed shortcut for 2.0.0.3, although it pointed to another folder was gone.
It was not hard to go fishing for another shortcut, but, I guess we are not safe.
Otherwise 2.0.0.3 works fine.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[Natashaj]

Just reading here I am supposed too uninstall firefox everytime there is a version change or is safe too go over the top . I take the dloads from the help section I assume it goes over the top
and does anyone know if the add on red cats green flavour works ok in new version

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2

[J-M]

This is from the Mozilla Foundation Security Advisories:

Fixed in Firefox 2.0.0.3

MFSA 2007-11 FTP PASV port-scanning

This only security vulnerability has been assigned as Low Risk by French-based security company FrSIRT:

Name: Mozilla Firefox "nsFtpState::R_pasv()" (!!!) FTP PASV Response Port Scanning Vulnerability
Link: http://www.frsirt.com/english/advisories/2007/1034

Exclamation marks added by J-M

I.e. this is (1/4) type vulnerability, the highest severity being used by the vendor is High Risk (4/4).
From the advisory:

This issue is due to an error in the "nsFtpState::R_pasv()" [netwerk/protocol/ftp/src/nsFtpConnectionThread.cpp] function when processing FTP PASV responses, which could be exploited by remote attackers to perform a rudimentary port-scan of systems inside an internal network by tricking a user into connecting to a malicious web page hosted on a specially crafted FTP server.

Additionally, Mozilla Foundation states that the impact of this security vulnerability is Low as well.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2

[SSS]

Just reading here I am supposed too uninstall firefox everytime there is a version change or is safe too go over the top

It's safe to go over the top. You can also upgrade from Firefox's Automatic Updates, which you can launch from Help -> Check for Updates.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[J-M]

It appears that the Security Alerts & Announcements section of page http://www.mozilla.org/security/ has not been updated to include the information about the current release.
The Known Vulnerabilities page was updated, however.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2

[Ramona]

It'is listed on the Mozilla Foundation Security Advisories page.

Security Advisory MFSA 2007-11

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[Edward]

An online article regarding this, mentioned there was also an update to SeaMonkey as well. However, I have not seen this update.

Ed

UserAgent: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.8.1.2) Gecko/20070221 SeaMonkey/1.1.1

[SSS]

For some strange reason, I was just downgraded from Firefox 2.0.0.3 to 2.0.0.2 (it did it as soon as I opened Firefox). Very weird. Has anyone had this happen before?

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2