Firefox 3.0.8 released, fixed two security bugs.

[clevin]

http://www.mozilla.com/en-US/firefox/3.0.8/releasenotes/

two critical security bugs fixed, one of them is reported in the Pwn2Own contest 10 days ago.

3.0.x users should check for update from help menu. If you have auto update function on (default), you should be reminded soon.

Seamonkey 1.1.16 also released for one security bug fix. Pwn2Own bug does not affect Seamonkey nor firefox 2.x

 

[daneoni]

Too bad i can't update to it. When i click the check for update button on FF it NEVER finds an update even though there's blatantly one. It works well on windows but for some reason it chokes on the mac.

I can't be bothered to start re-installing again...i'll just not update. Its not my main browser anyway.

 

[clevin]

there might be a bit delay on mac update channel.

re-install is easy anyway. I sure want at least one safe browser on my machine. You can try opera then, if you dont want to manually update firefox 3.0.8, Opera has not been reported to have any critical security problem currently (sure it might still have it).

 

[keekl]

I checked for update and ~bam~ there it is, downloading now...don't use it as much as Safari 4 but keep it in the dock for special occasions..

 

[Jethryn Freyman]

So that's what the update was for.

I wonder how long it will take Apple to patch Safari.

 

[TuffLuffJimmy]

I sure want at least one safe browser on my machine.

So now FireFox is without security flaws?

 

[Diaresi]

So now FireFox is without security flaws?

No, but Apple are clearly showing they lag with security patches. They always have done.

Watch a Safari update come out tomorrow now

 

[clevin]

So now FireFox is without security flaws?

without publicly known ones. If you found one, report to mozilla and they might reward you a bit.

which is good enough for most normal users, what do you think?

of course nobody is perfect, but at least mozilla is patching the problems, Im sure that means something to normal users, especially these type of zero-day exploits. One case of harm is bad enough for an user.

 

[PeteB]

Dang.. And I've been stuck on 3.0.5 for ages without any prompt for updates.

 

[clevin]

Dang.. And I've been stuck on 3.0.5 for ages without any prompt for updates.

just go download 3.0.8 and install it, you wont lose any of your password, addons, caches, etc, etc

 

[PeteB]

just go download 3.0.8 and install it, you wont lose any of your password, addons, caches, etc, etc

Yeah, I did. It's just weird that I downloaded 3.0.0 when it came out and Firefox was happy to update itself up to 3.0.5. After that point, it decided not to tell me that updates were there.

 

[clevin]

Yeah, I did. It's just weird that I downloaded 3.0.0 when it came out and Firefox was happy to update itself up to 3.0.5. After that point, it decided not to tell me that updates were there.

is automatic update in preference checked?

 

[SkyBell]

Odd, it automatically installed it for me on my eMac... Good thing it did though, I guess. I would've been too lazy to do it on my own.

 

[K3mp]

Is 3.08 just a security update? I'm using a 3.1 Beta right now because of the lack of touch gestures in FF.

 

[PeteB]

is automatic update in preference checked?

Yes, and I used Help->Check for Updates... pretty often.

 

[clevin]

Yes, and I used Help->Check for Updates... pretty often.

somewhere in the profile might be corrupted, I dont think it worth the trouble for a new profile though.

Is 3.08 just a security update? I'm using a 3.1 Beta right now because of the lack of touch gestures in FF.

yes, its just a security fix.

Im not sure if the bug affect 3.1 released betas. But Im pretty sure shiretoko nightly should be safe.

 

[PeteB]

Agreed. I'm not sweating it.