SillyDog701

[Andrew T.]

Mozilla Firefox 1.0.2 has been released. It implements a few small security fixes, and is a necessary upgrade for Firefox 1.0 and 1.0.1 users. Release notes are available.

You can get it from the Firefox download page; otherwise, here are some direct links to US-localized English builds:

Windows installer
Mac OS X disk image
Linux tar.gz; Linux tar.gz installer

In the interest of our British visitors, UK-localised English builds are also available:

Windows installer
Mac OS X disk image
Linux tar.gz; Linux tar.gz installer

Mozilla Firefox is available in a wide range of other languages, many of which also now have a 1.0.2 release as well.

ZIP Windows builds are not available.

The files are appearing on the server as I type this.

(De-stickified by Andrew T. 15-4-2005)

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

[J-M]

Three new security vulnerabilities was fixed in this release. They are mentioned at http://www.mozilla.org/projects/securit ... ml#Firefox page:

1) Drag and drop loading of privileged XUL
2) Arbitrary code execution from Firefox sidebar panel
3) GIF heap overflow parsing Netscape extension 2

Secunia collected them as SA14654 advisory;
http://secunia.com/advisories/14654/

This advisory was classified as 'Highly critical' (4/5).
Updating to FF1.0.2 is recommended to all users.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fi-FI; rv:1.7.6) Gecko/20050226 Firefox/1.0.1

[Alice]

I Uninstalled Firefox 1.01 using Add/Remove, as I usually do before installing a newer version, but was surprised that I was NOT asked to delete Program Files, as I remember from prior uninstalls. After the uninstall I looked and saw that the C:\Program Files\Mozilla Firefox folder still existed, and inside were various leftover files and folders, including an install.log (from my old MozAX plugin install) my old Plugins, search plugins, and certain components like flashplayer.xpt, nsImozaxPlugin.XPT nsIQTScriptablePlugin.XPT.

I decided to leave all these old program files alone, and installed Firefox 1.0.2 into the same C:\Program Files\Mozilla Firefox folder. All my old plugins and searchplugins, carried over. My lone UserAgent extension was left untouched. Easiest install ever.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050317 Firefox/1.0.2 (ax)

[J-M]

This time I becided to use Automatic Update feature, when a notification window appeared. Fine, Mozilla guys (and girls)! :D Localized versions was pushed to Auto-update system too, and now they have possibly more server capacity in use too. When updating 1.0 to 1.0.1 the MF's delay was a quite long.

However, it is a quite odd that the setup program start when your recent browser session is open! In fact, I manually closed my browser from XP's Taskbar before continuing the installation process.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fi-FI; rv:1.7.6) Gecko/20050318 Firefox/1.0.2

[J-M]

When checked, now there is two previous entries at Add or Remove Programs too:

Mozilla Firefox (1.0)
and
Mozilla Firefox (1.0.1)

This is a known bug, but unfortunately they hadn't enough time to fix it to this release .

Alice, I tested what my user agent said, and there is no anything about your (ax) suffix.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fi-FI; rv:1.7.6) Gecko/20050318 Firefox/1.0.2

[Al]

I did not uninstall Firefox 1.0.1 and installed 1.0.2 and there were no bugs

UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.6) Gecko/20050317 Firefox/1.0.2

[Alice]

You get an orphaned FF 1.0.1 entry in Add/remove programs if you don't uninstall 1.0.1 before installing 1.02 and you use the same Program Files folder for 1.02. Thats mentioned here:
http://www.mozillazine.org/talkback.htm ... le=6281#11

by mlefevre
Wednesday March 23rd, 2005 2:13 PM

"It was my understanding that you needed to uninstall the previous EXE install before installing the new"

That used to be the case, but as of 1.0, you don't need to do that any more. Unless you have stuff from a couple of versions back (e.g. 0.8), or a zip build, installing over the top should work fine. The remaining known issue is that you end up with multiple entries in the Windows add/remove programs list.

And here's the bugzilla report:
https://bugzilla.mozilla.org/show_bug.cgi?id=247884
Upgrading doesn't remove / uninstall the old entry from Add Remove Programs - Windows

J-M, the (ax) behind my UA string means I have the Mozilla ActiveX plugin for Firefox 1.0x installed.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050317 Firefox/1.0.2 (ax)

[Alice]

For anyone with orphaned Add/Remove entries they would like to remove, I copied the following from the firefox newsgroup at secnews.netscape.com:563

Subject:Re: *Mozilla Firefox 1.0.2 Released*
From: Leonidas Jones <snip>
Date: Thu, 24 Mar 2005 17:11:24 -0500
Newsgroups: netscape.mozilla.firebird
<snip>
>>>>>>>>>> I did a Tools=>Update, which - wonder of wonders - installed 1.0.2.
>>>>>>>>>> I see the cautions against installing over 1.0.1, though. But I
>>>>>>>>>> don't seem to have any problem with the update so far. Does doing
>>>>>>>>>> it this way cause any problems that I just haven't seen yet?
>>>>>>>>
>>>>>>>> The problem:
>>>>>>>> Windows Control Panel -> Add or Remove Programs.
>>>>>>>> There is more than one Firefox entry.
>>>>>>
>>>>>> Ah, I see that now. Two questions then...
>>>>>>
>>>>>> 1. Are two entries in Add/Remove really a problem?
>>>>>>
>>>>>> 2. If it is a problem, would removing the old entry with TweakUI (XP
>>>>>> Powertoys) fix it, or are there other aspects (e.g. registry) to the
>>>>>> old Add/Remove entry that would remain?
>>>>>>
>>>>>> Thanks, Kris
>>>>
>>>> No the two entries are not really a problem, as long as you understand
>>>> why they are there. What does cause a problem is that new users
>>>> sometimes see the two entries weeks after installing a new version,
>>>> and will try to uninstall the older version. Since that older version
>>>> really isn't there, the current version is uninstalled instead.
>>>>
>>>> This leaves the user with no working version, confused, angry, and
>>>> headed to Opera.
>>>>
>>>> There are several way to remove the orphaned entries. I am sure
>>>> TweakUI could do it, Regcleaner can do, even Spybot S&D can do it.
>>>>
>>>> Lee
>
>>
>> Sorry. I guess I was thinking of Regcleaner. I don't see how to do it in
>> TweakUI. I'll try that.
>>
>> Kris

Since most people have Spybot S&D aboard, its pretty easy in Advanced Mode.

In Spybot, at the left click Tools, then choose Uninstall Info. In the
list of programs scroll down to Mozilla Firefox 1.0, or whatever old
version you have listed. Click on it once to highlight, then click
Delete. Presto, the rogue listing is gone.

Lee

-- Leonidas Jones, Mozilla Champion

Note that TweakUI for Win9X will allow you to delete Add/Remove entries . The WinXp version doesn't include that feature.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050319

[Alice]

Just wanted to mention that the Add/Remove bug is fixed in Firefox 1.0.3, currently in testing. See
http://weblogs.mozillazine.org/asa/archives/007880.html

Irmen, the new installer does clean the "1.0", "1.0.1" and "1.0.2" entries from Add/Remove Programs -list. The only one left for me was "1.0 PR".
Posted by: Jussi Kukkonen on April 2, 2005 03:28 PM

Version 1.0.3 did remove the 2 previous uninstall entries so it's a WFM.
Posted by: Olive on April 2, 2005 03:51 PM

More here:
http://sillydog.org/forum/viewtopic.php?t=8679
Firefox 1.0.3 candidates available for testing

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050317 Firefox/1.0.2 (ax)

[J-M]

J-M, the (ax) behind my UA string means I have the Mozilla ActiveX plugin for Firefox 1.0x installed.

Thanks. OK, I am familiar with this plugin, but didn't know that they are using that 'suffix' familiar from NS7 any more in FF user agent.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fi-FI; rv:1.7.6) Gecko/20050318 Firefox/1.0.2

[Alice]

One of the entries in the C:\Program Files\Mozilla Firefox\defaults\pref\activex.js file that was included in the Mozilla ActiveX plugin install for Firefox 1.0.x is:
pref("general.useragent.vendorComment", "ax");

I'm assuming that's what adds the (ax) to my UA.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050404 Firefox/1.0.3 (ax)

[J-M]

pref("general.useragent.vendorComment", "ax");

I'm assuming that's what adds the (ax) to my UA.

Thanks! I think not so many were aware of that.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fi-FI; rv:1.7.7) Gecko/20050414 Firefox/1.0.3