Blog

Firefox has just released an update to version 3.5.4, correcting quite a few security flaws and correcting a number of stability issues.

This update is recommended for all Firefox users of the 3.5.x family of browsers.

From www.mozilla.com, the list of fixes includes the following:

Firefox 3.5.4 fixes the following issues:

• Several security issues.
• Fixed several stability issues.
• Added the ability to re-submit crash reports
• After using Clear Recent History some SSL sites would not load all images and styles without pressing reload

You can find the complete list of changes here. You may also be interested in the Firefox 3.5.3 release notes for a list of changes in the previous version.

The list of security issues fixed makes this a mandatory upgrade, in my book:

• MFSA 2009-64 Crashes with evidence of memory corruption (rv:1.9.1.4/ 1.9.0.15)
• MFSA 2009-63 Upgrade media libraries to fix memory safety bugs
• MFSA 2009-62 Download filename spoofing with RTL override
• MFSA 2009-61 Cross-origin data theft through document.getSelection()
• MFSA 2009-59 Heap buffer overflow in string to number conversion
• MFSA 2009-57 Chrome privilege escalation in XPCVariant::VariantDataToJS()
• MFSA 2009-56 Heap buffer overflow in GIF color map parser
• MFSA 2009-55 Crash in proxy auto-configuration regexp parsing
• MFSA 2009-54 Crash with recursive web-worker calls
• MFSA 2009-53 Local downloaded file tampering
• MFSA 2009-52 Form history vulnerable to stealing

Firefox should attempt to upgrade itself automatically, but if not, just use Help > Check for Updates…

Keep up to date, and stay safe on the web!