SillyDog701

[profman]

Mozilla has released Firefox 3.0.4 which has the same security fixes as Firefox 2.0.0.18.

Firefox 2.0.0.18 and 3.0.4 security updates now available for download

Release notes for 3.0.4

Latest Firefox version

Security Fixes in Firefox 3.0.4

MFSA 2008-58 Parsing error in E4X default namespace
MFSA 2008-57 -moz-binding property bypasses security checks on codebase principals
MFSA 2008-56 nsXMLHttpRequest::NotifyEventListeners() same-origin violation
MFSA 2008-55 Crash and remote code execution in nsFrameManager
MFSA 2008-54 Buffer overflow in http-index-format parser
MFSA 2008-53 XSS and JavaScript privilege escalation via session restore
MFSA 2008-52 Crashes with evidence of memory corruption (rv:1.9.0.4/1.8.1.18)
MFSA 2008-51 file: URIs inherit chrome privileges when opened from chrome
MFSA 2008-47 Information stealing via local shortcut files

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.18) Gecko/20081029 Firefox/2.0.0.18

[J-M]

Four of these vulnerabilities have been rated as Critical by Mozilla itself (i.e. MFSA 2008-52...MFSA 2008-55).

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-GB; rv:1.9.0.3) Gecko/2008092414 Firefox/3.0.3

[J-M]

The exact format of the version number is 3.0.4, not 3.04.

I.e. the title field of this thread says '3.04' now.

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-GB; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4

[profman]

The exact format of the version number is 3.0.4, not 3.04.

I.e. the title field of this thread says '3.04' now.

I have corrected any errant version numbers that I could locate.

Thanks!

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.18) Gecko/20081029 Firefox/2.0.0.18

[J-M]

I have corrected any errant version numbers that I could locate.

Thanks!

Thanks, the title has '3.0.4' i.e. the correct format now.

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-GB; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4