SillyDog701

[DJGM]

Firefox 1.0.1 has been released. This maintenance update release resolves a few bugs
and security flaws, and is therefore a necessary upgrade, if you're using Firefox 1.0.0.

MozillaZine article - Mozilla Firefox 1.0.1 Released.

Download via official Firefox product page.
or . . . download via BitTorrent sources.

UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b2) Gecko/20050219

[beanboy89]

Thanks, DJGM.
I was about to post this, then I saw your thread.

Here are direct links to downloads:
Windows Installer Mirror
Windows ZIP Mirror
Linux Installer Mirror
Mac OSX Disk Image Mirror

FTP Directory Mirror

Edit by beanboy89: Added mirror links on alternate Mozilla server.

UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.6) Gecko/20050222

[Andrew T.]

I tried the direct download links, and found that they did not work. I looked on Mozilla's FTP server, and no "1.0.1" folder was present. Then I reloaded, and the new folder appeared. This was because "http://ftp.mozilla.org/" actually alternates between several mirrors, not all of which have picked up this new Firefox release yet.

Downloading Mozilla Firefox 1.0.1 through the official products page should work even if the direct links don't.

Anyway, I just downloaded Mozilla Firefox 1.0.1, and can't wait to try it out!

UserAgent: Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

[beanboy89]

I downlaoded Mozilla 1.0.1, and find it much the same as Firefox 1.0. I guess that is the case, as this release was intended to provide minor security updates, not new features.

I tried the direct download links, and found that they did not work. I looked on Mozilla's FTP server, and no "1.0.1" folder was present. Then I reloaded, and the new folder appeared. This was because "http://ftp.mozilla.org/" actually alternates between several mirrors, not all of which have picked up this new Firefox release yet.

Thanks for letting us know that the links were broken. I have updated my message to include mirrored links to each release on an alternate server.

UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1

[Andrew T.]

Indeed, so far I have found that Mozilla Firefox 1.0.1 looks and feels exactly the same as version 1.0 did. I do notice that the Gecko revision designation in the useragent string has been changed again, this time to "1.7.6."

UserAgent: Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1

[Antony]

This maintenance update release resolves a few bugs and security flaws

Any interesting or important fixes in this release?

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.5.6 (KHTML, like Gecko) Safari/125.12

[beanboy89]

Any interesting or important fixes in this release?

There have been no new freatues added, only a few security fixes including the IDN Spoofing Vulnerability.

What's New 1.0.1

Here's what's new in Firefox 1.0.1:

* Improved stability
* International Domain Names are now displayed as punycode.

To show International Domain Names in Unicode, set the "network.IDN_show_punycode" preference to false.
* Several security fixes.

UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1

[DJGM]

Here's a list of the bugfixes in the Mozilla 1.0.1 update.

The security fixes . . .
[tt]
* 22183 - Display hostname in title bar when address bar is hidden, to reduce the impact of the fact that web sites are allowed to spoof address bars.
* 260560 - Security and download dialogs can be spoofed by covering them partially using popup windows.
* 262887 - Secunia background tab security issues (SA12712).
* 275417 - Download dialog source spoofing (SA13599).
* 279945 - Image drag and drop allows to create executable files.
* 280056 - When dropping a javascript link to a tab, the script runs in the security context of the site currently displayed in the tab.
* 280603 - "New Updates Avail" popup in bottom right-hand corner pops up endlessly / excessive hits on update service.
* 280664 - Using Flash and the -moz-opacity filter you can get access to about:config and make the user silently change values.
* 282270 - Display IDN URLs as punycode by default (controlled by a hidden pref).

[/tt]

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1

[Fulvio]

And, if anyone may wonder,it is best to uninstall the old version. All the extention, and plugins folders are retained by uninstalling.
1.01 is over 3 MB larger that 1.0.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1 (ax)

[Alice]

Also, If anyone was wondering, there's no need to reverse the compreg.dat edit (IDN spoofing workaround) as each profile's compreg.dat file is regenerated when the new Firefox 1.0.1 program is opened in that profile.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1

[Edward]

What about an update to the Mozilla suite?

UserAgent: Opera/8.0 (X11; Linux i586; U; en)

[beanboy89]

What about an update to the Mozilla suite?

According to Asa Dotzler, a Mozilla 1.7.6 update will be comming shortly.

Seamonkey 1.7.6 will be the security/stability update from the 1.7 branch that matches up with the Firefox and Thunderbird 1.0.1 releases. As soon as we get Firefox and Thunderbird shipped, we'll turn our attention to testing shipping Seamonkey 1.7.6. I'm usually overly-optimistic but I think we can get that out next week too.

If you want to get a taste of Mozilla 1.7.6, you can download a Mozilla 1.7.6 nightly.

UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.6) Gecko/20050222

[Edward]

I'd rather not try a nightly. I once tried one with a earlier version of Mozilla and it did some strange things...

UserAgent: Opera/8.0 (X11; Linux i586; U; en)

[Alice]

http://weblogs.mozillazine.org/asa/
February 24, 2005 entry, under
firefox 1.0.1 security and stability update available

Get it while it's hot. Firefox 1.0.1 update is available. This is a security and stability update so not much in the way of new feautures. <snip>

Thunderbird 1.0.1 and Mozilla 1.7.6 should be coming in the next week or so.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1 (ax)

[Alice]

And, if anyone may wonder,it is best to uninstall the old version. All the extention, and plugins folders are retained by uninstalling.

I removed all my old Firefox Program files and saved the plugins and searchplugins as well as the Components\flashplayer.xpt file to backup, when I uninstalled Firefox 1.0. Then I installed FF1.0.1, then I copied back ONLY the plugin files I needed, after checking about:plugins (in particular, crescendo and flash plugins plus flashplayer.xpt) plus I copied back some newer searchplugins, but I DID NOT copy back the npmozax.dll Mozilla ActiveX plugin. Later on, I reinstalled the Mozilla ActiveX plugin from within Firefox 1.0.1 by opening mozactivex-ff-10.xpi (which I had saved on my hard drive).

Fulvio, you DID reinstall the Mozilla Active X Plugin, not just keep the old npmozax.dll plugin file? Reason I ask is because I see Firefox/1.0.1 (ax) in your UA.

A Mozilla ActiveX Plugin install adds other files besides just the C:\Program Files\Mozilla Firefox\Plugins\npmozax.dll file. I copied the following from the Program Files\Mozilla Firefox install.log:

-------------------------------------------------------------------------------
[tt]file:///D:/Setup/Mozilla/FF10ActiveX Plugin/mozactivex-ff-10.xpi -- 2005-02-25 14:42:48[/tt]
-------------------------------------------------------------------------------
ActiveX Plugin (version 1.0.0.3)
--------------

** File found: msvcrt.dll
** File found: msvcp60.dll
** File found: msvcp70.dll
[1/4] Installing: C:\PROGRA~1\MOZILL~1\plugins\npmozax.dll
[2/4] Installing: C:\PROGRA~1\MOZILL~1\components\nsIMozAxPlugin.xpt
[3/4] Installing: C:\PROGRA~1\MOZILL~1\components\nsAxSecurityPolicy.js
[4/4] Installing: C:\PROGRA~1\MOZILL~1\defaults\pref\activex.js

Install completed successfully -- 2005-02-25 14:42:51

P.S.:
This 2-page thread has information on the Firefox 1.0 XPI install process, in case you forgot:
http://sillydog.org/forum/viewtopic.php?t=8093
from page 2 of the thread:

On ActiveX Installation - Firefox 1.0
Download Adam Lock's ActiveX Plugin for Firefox 1.0 from here:
http://www.iol.ie/~locka/mozilla/plugin.htm#download
<snip>
The "click here" link will work if you add www.iol.ie to your software installation "allowed sites" list (click the "Edit Options..." button when you see the message, in a yellow area under the toolbar, "To protect your computer, Firefox prevented this site from installing software..." ).
It's a new security feature in Firefox 1.0 to limit XPI installs to a list of allowed sites. See:
http://plugindoc.mozdev.org/faqs/xpinstall.html

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1 (ax)