Mozilla Firefox 3.0.11 is available

Firefox, Thunderbird, SeaMonkey, Camino, Mozilla, Netscape 6/7/8/9, and all Gecko-based browsers discussion and support forum.
(MozInfo701, Netscape Browser Archive)

Moderators: Antony, Edward, profman, Ramona

Mozilla Firefox 3.0.11 is available

Postby Fulvio » Fri 12 Jun, 2009 11:00 am

http://www.mozilla.com/en-US/firefox/personal.html
The release notes indicate that a number of fixes were applied. I got it using a 2.1MB update, which is available from Help|check for updates
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11
A minority may be right, and a majority is always wrong
~ Henrik Ibsen
WinXP, SP3, 512 MB, FF10, SM2.7, TB10, IE8.0, PC Tools Firewall , Avast 6.x, JRE1.7_02
User avatar
Fulvio
Moderator
Moderator
 
Posts: 11827
Joined: Wed 19 Jun, 2002 10:08 am

Postby Antony » Fri 12 Jun, 2009 9:59 pm

Thanks Fulvio.

From the Security list, this 3.0.11 seem to be a big security fix.

Fixed in Firefox 3.0.11
MFSA 2009-32 JavaScript chrome privilege escalation
MFSA 2009-31 XUL scripts bypass content-policy checks
MFSA 2009-30 Incorrect principal set for file: resources loaded via location bar
MFSA 2009-29 Arbitrary code execution using event listeners attached to an element whose owner document is null
MFSA 2009-28 Race condition while accessing the private data of a NPObject JS wrapper class object
MFSA 2009-27 SSL tampering via non-200 responses to proxy CONNECT requests
MFSA 2009-26 Arbitrary domain cookie access by local file: resources
MFSA 2009-25 URL spoofing with invalid unicode characters
MFSA 2009-24 Crashes with evidence of memory corruption (rv:1.9.0.11)

Four of above are flagged as Critical fix.
UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.0.10) Gecko/2009042315 Firefox/3.0.10
User avatar
Antony
diamond member
diamond member
 
Posts: 14343
Joined: Tue 18 Jun, 2002 11:36 pm
Location: Sydney, Australia


Return to Firefox, SeaMonkey and Netscape

Who is online

Registered users: Google [Bot]