SecurityGarden

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Tuesday, April 24, 2012

Mozilla Firefox 12 Released with Critical Security Updates

Posted on 12:02 PM by Unknown

Firefox 12 was sent to the release channel today by Mozilla.  It is important to note two important things to about this update.

First, the release of version 12 is the last version release to officially support Windows 2000, Windows XP RTM or XP Service Pack 1.  Windows XP SP2 and above will be the oly supported Windows operating systems in the next version release of Firefox.

Second, after installing version 12, subsequent updates will no longer require approval of the User Account Control (UAC).  Instead, Firefox will automatically update (silent updates).  Note, however, the addition of the Update Tab to the Advanced panel of the Options settings.  The option is provided to "Check for updates, but let me choose whether to install them."

Edit Note:  The update to version 12 is the first step toward silent updates.  The addition included
the Mozilla Maintenance Service.  It is expected that silent updates will be in place no later than version 14.



Security Updates Fixed in Firefox 12

MFSA 2012-33 Potential site identity spoofing when loading RSS and Atom feeds
MFSA 2012-32 HTTP Redirections and remote content can be read by javascript errors
MFSA 2012-31 Off-by-one error in OpenType Sanitizer
MFSA 2012-30 Crash with WebGL content using textImage2D
MFSA 2012-29 Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
MFSA 2012-28 Ambiguous IPv6 in Origin headers may bypass webserver access restrictions
MFSA 2012-27 Page load short-circuit can lead to XSS
MFSA 2012-26 WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error
MFSA 2012-25 Potential memory corruption during font rendering using cairo-dwrite
MFSA 2012-24 Potential XSS via multibyte content processing errors
MFSA 2012-23 Invalid frees causes heap corruption in gfxImageSurface
MFSA 2012-22 use-after-free in IDBKeyRange
MFSA 2012-21 Multiple security flaws fixed in FreeType v2.4.9
MFSA 2012-20 Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4)

What's New

The Release Notes include new and fixed features in version 12.  The numerous Bug Fixes are in the link available in References.


  • NEW -- Windows: Firefox is now easier to update with one less prompt (User Account Control)
  • NEW -- Page Source now has line numbers
  • CHANGED -- Line breaks are now supported in the title attribute
  • CHANGED -- Improvements to "Find in Page" to center search result
  • CHANGED -- URLs pasted into the download manager window are now automatically downloaded
  • DEVELOPER -- Support for the text-align-last CSS property has been added
  • DEVELOPER -- Experimental support for ECMAScript 6 Map and Set objects has been implemented
  • FIXED -- Various security fixes
  • FIXED -- Some TinyMCE-based editors failed to load (739141)
  • FIXED -- OS X: WebGL performance may be degraded on some hardware (713305)

      Known Issues

      • If you try to start Firefox using a locked profile, it will crash (see 573369)
      • For some users, scrolling in the main GMail window will be slower than usual (see 579260)
      • Some synaptic touch pads are unable to vertical scroll (see 622410)
      • Windows: The use of Microsoft's System Restore functionality shortly after updating Firefox may prevent future updates (see 730285)

      Update

      The upgrade to Firefox 12 will be offered through the browser update mechanism after any impacts related to the Microsoft Security Updates are analyzed.  To get the update now, select "Help" from the Firefox menu at the upper left of the browser window, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu.

      If you do not use the English language version, Fully Localized Versions are available for download.

      References

      • Common questions after updating Firefox
      • Security Updates
      • Mozilla Firefox Release Notes
      • Bug Fixes 



      Remember - "A day without laughter is a day wasted."
      May the wind sing to you and the sun rise in your heart...


      Email ThisBlogThis!Share to XShare to Facebook
      Posted in Firefox, Mozilla, Security, Updates, Vulnerabilities | No comments
      Newer Post Older Post Home

      0 comments:

      Post a Comment

      Subscribe to: Post Comments (Atom)

      Popular Posts

      • Security Bulletin Advance Notice for August, 2013
        On Tuesday, August 13, 2013, Microsoft is planning to release eight (8) bulletins.  Three of the bulletins are identified as Critical with f...
      • Critical Out-of-Band Update Released for MS10-046
        Microsoft released Security Bulletin MS10-046 out-of-band to address a vulnerability in Windows. The security update is identified as crit...
      • Hotmail Security to Protect and Recover Your Account
        Time and time again I see reports from Hotmail users who have lost control of their e-mail account.  As explained by Walter Harp, Director o...
      • Long Awaited Outlook.com Calendar Refresh Rollout
        The long-awaited Outlook.com calendar refresh has been released and is in the process of being rolled out. Because the servers are grouped i...
      • Microsoft Security Advisory 2269637 Released
        Microsoft released Security Advisory 2269637 which relates to a remote attack vector to a class of vulnerabilities affecting applications t...
      • Oracle Java Update
        Oracle released the Java SE 7u40 today.  In addition to bug fixes and enhancements, the update includes the following: advanced monitoring ...
      • Adobe Reader Security Updates
        Adobe has released security updates for Adobe Reader and Acrobat XI (11.0.03) and earlier versions for Windows and Macintosh. Adobe identif...
      • Advance Notice: Security Updates for Java SE
        The Sun Security Blog published the following update announcement: "On November 3, 2009, Sun will release the following security update...
      • Adobe Flash Player and Adobe Air Security Updates
        Adobe released updates to both Adobe Flash Player and Adobe AIR to correct a critical vulnerability in both products. From the Adobe Securi...
      • Waledac Botnet Takedown
        The Waledac botnet had the capability of sending 1.5 billion spam e-mails per day. During a three-week period in December, 2009, approximat...

      Categories

      • Adobe
      • Advisory
      • Amero
      • AntiVirus
      • Apple
      • Ask
      • AVG
      • Bing
      • Browser
      • Child Safety
      • email
      • ESET
      • Ethics
      • Facebook
      • Firefox
      • Firewall
      • FixIt
      • Fraud
      • General
      • Google
      • Hotmail
      • IE10
      • IE6
      • IE7
      • IE8
      • IE9
      • Java
      • Lavasoft
      • malware
      • Microsoft
      • Microsoft Apps
      • Mozilla
      • MVP
      • NCSAM
      • Office
      • Office 2007
      • Office 2010
      • Opera
      • Outlook.com
      • Phishing
      • Privacy
      • safety
      • Search
      • Security
      • Service Pack
      • SkyDrive
      • Skype
      • Software
      • SP1
      • sp2
      • SP3
      • Spotlight
      • Sumatra
      • tutorial
      • UAC
      • Updates
      • Vulnerabilities
      • Windows
      • Windows 7
      • Windows 8
      • Windows Live
      • Windows Live OneCare
      • Windows Vista
      • Windows XP
      • WinPatrol

      Blog Archive

      • ►  2013 (93)
        • ►  October (2)
        • ►  September (8)
        • ►  August (9)
        • ►  July (5)
        • ►  June (8)
        • ►  May (7)
        • ►  April (15)
        • ►  March (9)
        • ►  February (16)
        • ►  January (14)
      • ▼  2012 (98)
        • ►  December (7)
        • ►  November (6)
        • ►  October (11)
        • ►  September (5)
        • ►  August (10)
        • ►  July (8)
        • ►  June (12)
        • ►  May (7)
        • ▼  April (12)
          • Oracle Java SE Update
          • Mozilla Firefox 12 Released with Critical Security...
          • SkyDrive Changes + 25 GB Storage for Current Users
          • Understanding Microsoft Anti-Malware Software
          • It is official!  Windows 8 will be called Windows ...
          • WinPatrol PLUS for 99 Cents and Family Pack only $...
          • Adobe Reader and Acrobat Critical Security Updates
          • Microsoft April 2012 Security Bulletin Release
          • OSX/Flashback Trojan
          • Happy Easter 2012
          • Security Bulletin Advance Notification for April, ...
          • SkyDrive Command Line Interface
        • ►  March (6)
        • ►  February (6)
        • ►  January (8)
      • ►  2011 (130)
        • ►  December (8)
        • ►  November (10)
        • ►  October (7)
        • ►  September (12)
        • ►  August (9)
        • ►  July (6)
        • ►  June (13)
        • ►  May (14)
        • ►  April (13)
        • ►  March (15)
        • ►  February (10)
        • ►  January (13)
      • ►  2010 (146)
        • ►  December (10)
        • ►  November (15)
        • ►  October (19)
        • ►  September (15)
        • ►  August (14)
        • ►  July (8)
        • ►  June (19)
        • ►  May (5)
        • ►  April (11)
        • ►  March (6)
        • ►  February (14)
        • ►  January (10)
      • ►  2009 (33)
        • ►  December (11)
        • ►  November (11)
        • ►  October (11)
      Powered by Blogger.

      About Me

      Unknown
      View my complete profile