Mozilla Firefox 1.0.3/Suite 1.7.7 Released

Zitat

The Mozilla Foundation today released updates to two of it's main products, the Mozilla Suite and Firefox. This marks the third round of security fixes for Firefox, along with the seventh minor update to the 1.7 version of the Mozilla Suite. Security issues fixed in these new versions are listed on the Known Vulnerabilities page with detailed descriptions of each issue.

As previously reported, these latest releases went through several iterations of fixes, some of which disabled or broke some extensions. The Mozilla Foundation has been working with extension authors to fix any issues that have surfaced with the releases, and most extensions have been updated, or will be in the coming days, to work with 1.0.3/1.7.7.

Code:

What's New 1.0.3

Firefox 1.0.3 is a security update that is part of our ongoing
program to provide a safe Internet experience for our customers.
We recommend that all users upgrade to this latest version.

Here's what's new in Firefox 1.0.3:

    * Several security fixes.
    * Fix to improve update process.

Zitat

Fixed in Firefox 1.0.3
MFSA 2005-33 Javascript "lambda" replace exposes memory contents
MFSA 2005-34 javascript: PLUGINSPAGE code execution
MFSA 2005-35 Showing blocked javascript: popup uses wrong privilege context
MFSA 2005-36 Cross-site scripting through global scope pollution
MFSA 2005-37 Code execution through javascript: favicons
MFSA 2005-38 Search plugin cross-site scripting
MFSA 2005-39 Arbitrary code execution from Firefox sidebar panel II
MFSA 2005-40 Missing Install object instance checks
MFSA 2005-41 Privilege escalation via DOM property overrides