Mozilla Firefox security update 3.0.1 released

Firefox, Thunderbird, SeaMonkey, Camino, Mozilla, Netscape 6/7/8/9, and all Gecko-based browsers discussion and support forum.
(MozInfo701, Netscape Browser Archive)

Moderators: Antony, Edward, profman, Ramona

Mozilla Firefox security update 3.0.1 released

Postby J-M » Wed 16 Jul, 2008 6:28 pm

Download links:
http://www.mozilla.com/en-US/firefox/all.html

Release Notes document:
http://www.mozilla.com/en-US/firefox/3. ... easenotes/
UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.15) Gecko/20080623 Firefox/2.0.0.15
User avatar
J-M
diamond member
diamond member
 
Posts: 815
Joined: Sun 25 Jul, 2004 9:16 am
Location: Helsinki, Finland

Postby Fulvio » Wed 16 Jul, 2008 6:29 pm

A 2.0 MB incremental brings up 3.0.1. Somehow, compatibility for the Get Mail button got lost from 3.0 to 3.0.1.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
A minority may be right, and a majority is always wrong
~ Henrik Ibsen
WinXP, SP3, 512 MB, FF10, SM2.7, TB10, IE8.0, PC Tools Firewall , Avast 6.x, JRE1.7_02
User avatar
Fulvio
Moderator
Moderator
 
Posts: 11825
Joined: Wed 19 Jun, 2002 10:08 am

Postby Anonymosity » Thu 17 Jul, 2008 12:39 am

I had to bump up the extension Kill Bright Backgrounds again, but it still works. Yippee!
UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; rv:1.9.0.1) Gecko Firefox/3.0.1
Anonymosity
silver member
silver member
 
Posts: 304
Joined: Sat 21 Jun, 2008 2:56 am

Postby J-M » Thu 17 Jul, 2008 8:22 am

And MFSA 2008-35 is not the only security issue affecting to FF3.0, there is Critical MFSA 2008-36 released at
http://www.mozilla.org/security/known-v ... refox3.0.1

See 'Crash with malformed GIF file on Mac OS X' advisory.

FF2.x series doesn't include this GIF image handling vulnerability.
UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.16) Gecko/20080702 Firefox/2.0.0.16
User avatar
J-M
diamond member
diamond member
 
Posts: 815
Joined: Sun 25 Jul, 2004 9:16 am
Location: Helsinki, Finland

Postby PaulD » Thu 17 Jul, 2008 3:36 pm

Has anyone else noticed anything unusual about the download locations? My recollection is that downloads have always come from Mozilla. I first tried a download this morning around 11:30 US Pacific time (-7). It came in at 288KB; and when executed (to see what would occur), Windows aborted with 'Corrupt file'.

Now, three attempts to get 3.0.1 and one for 2.0.0.16 (URLs intentionally broken):
3.0.1
http: // chuangtzue . acc . umu . se --- Sweden
http: // mirror . yandex . ru --- Russia
http: // sent . utwente . nl --- Netherlands
- this last one, the first attempt was 500 - permission denied

2.0.0.16
http: // mirrors . linux . edu . lv --- Latvia

These attempts were from different Mozilla paths as well as from the Forum links.

I canceled all of these until I better understand what is going on.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0
PaulD
diamond member
diamond member
 
Posts: 894
Joined: Mon 14 Aug, 2006 5:52 pm

Postby James » Thu 17 Jul, 2008 8:23 pm

I just pressed the Check for Updates under Help and it updated to the latest version. I'm lazy that way. :wink:
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
James
User avatar
James
diamond member
diamond member
 
Posts: 2574
Joined: Sat 13 Jul, 2002 12:10 am
Location: Pacific NW USA

Postby Fulvio » Fri 18 Jul, 2008 10:30 am

PaulD wrote:Has anyone else noticed anything unusual about the download locations? My recollection is that downloads have always come from Mozilla. I first tried a download this morning around 11:30 US Pacific time (-7). It came in at 288KB; and when executed (to see what would occur), Windows aborted with 'Corrupt file'.

Now, three attempts to get 3.0.1 and one for 2.0.0.16 (URLs intentionally broken):
3.0.1
http: // chuangtzue . acc . umu . se --- Sweden
http: // mirror . yandex . ru --- Russia
http: // sent . utwente . nl --- Netherlands
- this last one, the first attempt was 500 - permission denied

2.0.0.16
http: // mirrors . linux . edu . lv --- Latvia

These attempts were from different Mozilla paths as well as from the Forum links.

I canceled all of these until I better understand what is going on.


I did this and found it suspicious. But, when I tried to upgrade Opera, the download location was from Germany, and I got a notice that it was not guaranteed as secure by Opera.
And, what is mozilla.isc.org? That was the location for 3.0.1 installer.
In the meantime, I can't get into mozillazine.org
May be AVG8.0 is right after all, seeing some Trojans (StartpageCQS)
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.2pre) Gecko/2008071402 SeaMonkey/2.0a1pre
A minority may be right, and a majority is always wrong
~ Henrik Ibsen
WinXP, SP3, 512 MB, FF10, SM2.7, TB10, IE8.0, PC Tools Firewall , Avast 6.x, JRE1.7_02
User avatar
Fulvio
Moderator
Moderator
 
Posts: 11825
Joined: Wed 19 Jun, 2002 10:08 am

FF3.0.1 display problems

Postby skopros » Sat 19 Jul, 2008 12:49 pm

i have switched from netscape 7.2 to FF3.0.1 and now find that the screens for yahoo mail and finance pages (plus most other sites) come up without color backgrounds and in clunky looking text, i.e., very stripped-down looking pages. i'm on an IBM laptop running updated XP.

yahoo finance page now has no bar above to select stock portfolio views, nor other choices that appeared in drop-down bars in former yahoo version of display. Options i had under Netsc. 7.2 just seem to have disappeared from my page displays.

i was running the FF2.xxx.xxx portable (thumbdrive) ver. of FF on my hard drive before i downloaded the security-patch FF version that just became available. now, that too displays in the stripped-down text rather than graphic mode.

i also downloaded netscape 9.xx to check how pages look and find the they display in somewhat the same non-graphic way, rather than showing as they did in netscape 7.2.

am i missing something basic here, or do i need to customize somehow. i've tried searching all the "options" offerings in the FF 3.0.1 version but can't get away from the text rather than graphic look to my pages.

i'm not very browser confident and many of the posts i read are beyond me.

any advice to old guy who liked the old netscape look much appreciated.

skopros
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
sto kalo
skopros
junior member
junior member
 
Posts: 9
Joined: Thu 17 Jun, 2004 9:06 am

Postby Anonymosity » Sat 19 Jul, 2008 3:20 pm

Check to see if Firefox is running in Compatibility mode (from Properties).
UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; rv:1.9.0.1) Gecko Firefox/3.0.1
Anonymosity
silver member
silver member
 
Posts: 304
Joined: Sat 21 Jun, 2008 2:56 am

Postby PaulD » Sat 19 Jul, 2008 4:01 pm

Anonymosity: Are you indicating that FF should or should not be run in Compatibility? And if yes, which one?

Skopros: Are you referring to finance.yahoo.com? I don't see your problem, either non-compatible, or (to test Anon's thesis) with Compatible 2000.

Did you install Firefox in its own new folder (as defaulted), or did you put it in the same folder as Netscape was?

Two ideas:
1 - Check Tools > Options > (tab) Content. Make sure that the check boxes are checked.
2 - If that isn't the problem, create a new profile (call it Test), and see if you still have the problem. To do this, modify your Desktop shortcut to Firefox thus:
- Right-click on the shortcut; Properties; in the 'Target' line, after ... \firefox.exe" add -P
It will read as within these braces { ... \firefox.exe" -P }. Note that the -P is not within the double-quotation marks. Click 'Apply' and 'OK' and try Firefox again. The -P appendix will force Firefox always to Open via the Profile Manager.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
PaulD
diamond member
diamond member
 
Posts: 894
Joined: Mon 14 Aug, 2006 5:52 pm

FF page renderingand yahoo finance

Postby skopros » Sun 20 Jul, 2008 1:08 pm

paul--

thanx for advice; i too didn't understand whether i shld or shld not be using compatibility mode (don't really hv a clue what that is, however!). and, yes, yahoo's finance site is what i was using.

i installed FF3 from the .exe file download to its own folder (default), not over netscape. i also downloaded FF portable apps. ver. and used it before FF3 security fix, but can't find it in my XP Programs "population" listing (tho FF3's there now).

It seems that sometimes, the yahoo sites display as they did with netscape and then sometimes (initially) don't. complete mystery to me.

i'll try your -P handle and content box checks.

thanx to you and Anon. for the help.

skopros
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
sto kalo
skopros
junior member
junior member
 
Posts: 9
Joined: Thu 17 Jun, 2004 9:06 am

Re: FF page renderingand yahoo finance

Postby Anonymosity » Sun 20 Jul, 2008 2:05 pm

skopros wrote:thanx for advice; i too didn't understand whether i shld or shld not be using compatibility mode (don't really hv a clue what that is, however!). and, yes, yahoo's finance site is what i was using.

You are using Windows XP and Firefox 3.0.1, according to your user-agent. You should not need to use compatibilty mode. To investigate it, right-click the Firefox shortcut, choose Properties, and Compatiblilty tab. If any of the checkboxes there are checked, uncheck them.
UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; rv:1.9.0.1) Gecko Firefox/3.0.1
Anonymosity
silver member
silver member
 
Posts: 304
Joined: Sat 21 Jun, 2008 2:56 am

FF3 page display

Postby skopros » Fri 25 Jul, 2008 10:48 am

thanx anon--no boxes were checked in compatibility tab but i still hv trouble w the way FF3 writes my screens; no real logic i can discern. sometimes pages show up in clunky textual-type mode, other times, it seems to revert to more graphic mode. everything works but sometimes a page's options don't show up, i.e. no drop-down box for finance when in yahoo mail mode.

guess i'll just be glad everything works most of the time.

appreciate the help however.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
sto kalo
skopros
junior member
junior member
 
Posts: 9
Joined: Thu 17 Jun, 2004 9:06 am

Postby Fulvio » Sat 26 Jul, 2008 8:56 pm

I don't do Finances of any kind, but I know that Yahoo may be a problem. The best way to sort out Firefox from Yahoo issues is to use IETab with Firefox3.0.1. If using IETab with Yahoo pages, the problem lies in Yahoo.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
A minority may be right, and a majority is always wrong
~ Henrik Ibsen
WinXP, SP3, 512 MB, FF10, SM2.7, TB10, IE8.0, PC Tools Firewall , Avast 6.x, JRE1.7_02
User avatar
Fulvio
Moderator
Moderator
 
Posts: 11825
Joined: Wed 19 Jun, 2002 10:08 am

sea mnokey

Postby skopros » Mon 08 Sep, 2008 9:53 pm

i've switched from FF3 to latest sea monkey and really like its netscape feel (old guy familiar w netscape for years)...can i count on security fixes when FF discovers them? i'm using avira as av and hv another laptop ibm 600E using ME...

anyone know an av other than clam av that'll work w ME, something w an automatic "guard" scan function? i downloaded clam but it was like skipping rope in peanut butter. avira wldn't install; java didn't like.

also i hv IT friend who says running ME unguarded isn't really too risky for guy like me who's very cautious and doesn't go to bad neighborhoods (no you tube, porn, freebies). true?

thanx folks

skopro
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.16) Gecko/20080702 SeaMonkey/1.1.11
sto kalo
skopros
junior member
junior member
 
Posts: 9
Joined: Thu 17 Jun, 2004 9:06 am

Next

Return to Firefox, SeaMonkey and Netscape

Who is online

Registered users: Google [Bot], MSNbot Media, Yahoo [Bot]