SecurityGarden

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Tuesday, August 28, 2012

Firefox 15 Release Includes Critical Security Updates

Posted on 4:37 PM by Unknown

Firefox 15 was sent to the release channel today by Mozilla.  Included in the update are seven (7) critical, six (6) high, and three (3) moderate security updates.

Based on the extensive list of security updates, it is recommended that the update be applied as soon as possible.

Please also note that the release of Firefox 15 includes the completion of the inclusion of silent updates.

Security Updates Fixed in Firefox 15

      MFSA 2012-72 Web console eval capable of executing chrome-privileged code
      MFSA 2012-71 Insecure use of __android_log_print
      MFSA 2012-70 Location object security checks bypassed by chrome code
      MFSA 2012-69 Incorrect site SSL certificate data display
      MFSA 2012-68 DOMParser loads linked resources in extensions when parsing text/html
      MFSA 2012-67 Installer will launch incorrect executable following new installation
      MFSA 2012-66 HTTPMonitor extension allows for remote debugging without explicit activation
      MFSA 2012-65 Out-of-bounds read in format-number in XSLT
      MFSA 2012-64 Graphite 2 memory corruption
      MFSA 2012-63 SVG buffer overflow and use-after-free issues
      MFSA 2012-62 WebGL use-after-free and memory corruption
      MFSA 2012-61 Memory corruption with bitmap format images with negative height
      MFSA 2012-60 Escalation of privilege through about:newtab
      MFSA 2012-59 Location object can be shadowed using Object.defineProperty
      MFSA 2012-58 Use-after-free issues found using Address Sanitizer
      MFSA 2012-57 Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7)

          What's New


          The Release Notes include new and fixed features in version 15.  The huge list of Bug Fixes are in the link available in the References below.
          • NEW -- Silent, background updates
          • NEW -- Support for SPDY networking protocol v3
          • NEW -- WebGL enhancements, including compressed textures for better performance
          • NEW -- Localization in Maithili (see all available locales)
          • CHANGED -- Optimized memory usage for add-ons
          • DEVELOPER -- JavaScript debugger integrated into developer tools
          • DEVELOPER -- New layout view added to Inspector
          • DEVELOPER -- High precision event timer implemented
          • DEVELOPER -- The CSS word-break property has been implemented.
          • DEVELOPER -- New responsive design tool allows web developers to switch between desktop and mobile views of sites
          • HTML5 -- Native support for the Opus audio codec added
          • HTML5 -- The audio and video eleents now support the played attribute
          • HTML5 -- The element now supports the media attribute
          • FIXED -- Focus rings keep growing when repeatedly tabbing through elements (720987)

           Known Issues

            • Unresolved -- Debugger breakpoints do not catch on page reload (see 783393) Note, in Resolved in v16
            • Unresolved -- If you try to start Firefox using a locked profile, it will crash (see 573369)
            • Unresolved -- For some users, scrolling in the main GMail window will be slower than usual (see 579260)
            • Unresolved -- Windows: The use of Microsoft's System Restore functionality shortly after updating Firefox may prevent future updates (see 730285)

              Update

              To get the update now, select "Help" from the Firefox menu at the upper left of the browser window, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu.

              If you do not use the English language version, Fully Localized Versions are available for download.

              References

              • Common questions after updating Firefox
              • Security Updates
              • Mozilla Firefox Release Notes
              • Bug Fixes 



              Remember - "A day without laughter is a day wasted."
              May the wind sing to you and the sun rise in your heart...


              Email ThisBlogThis!Share to XShare to Facebook
              Posted in Firefox, Security, Updates, Vulnerabilities | No comments
              Newer Post Older Post Home

              0 comments:

              Post a Comment

              Subscribe to: Post Comments (Atom)

              Popular Posts

              • Security Bulletin Advance Notice for August, 2013
                On Tuesday, August 13, 2013, Microsoft is planning to release eight (8) bulletins.  Three of the bulletins are identified as Critical with f...
              • Critical Out-of-Band Update Released for MS10-046
                Microsoft released Security Bulletin MS10-046 out-of-band to address a vulnerability in Windows. The security update is identified as crit...
              • Hotmail Security to Protect and Recover Your Account
                Time and time again I see reports from Hotmail users who have lost control of their e-mail account.  As explained by Walter Harp, Director o...
              • Long Awaited Outlook.com Calendar Refresh Rollout
                The long-awaited Outlook.com calendar refresh has been released and is in the process of being rolled out. Because the servers are grouped i...
              • Microsoft Security Advisory 2269637 Released
                Microsoft released Security Advisory 2269637 which relates to a remote attack vector to a class of vulnerabilities affecting applications t...
              • Oracle Java Update
                Oracle released the Java SE 7u40 today.  In addition to bug fixes and enhancements, the update includes the following: advanced monitoring ...
              • Adobe Reader Security Updates
                Adobe has released security updates for Adobe Reader and Acrobat XI (11.0.03) and earlier versions for Windows and Macintosh. Adobe identif...
              • Advance Notice: Security Updates for Java SE
                The Sun Security Blog published the following update announcement: "On November 3, 2009, Sun will release the following security update...
              • Adobe Flash Player and Adobe Air Security Updates
                Adobe released updates to both Adobe Flash Player and Adobe AIR to correct a critical vulnerability in both products. From the Adobe Securi...
              • Waledac Botnet Takedown
                The Waledac botnet had the capability of sending 1.5 billion spam e-mails per day. During a three-week period in December, 2009, approximat...

              Categories

              • Adobe
              • Advisory
              • Amero
              • AntiVirus
              • Apple
              • Ask
              • AVG
              • Bing
              • Browser
              • Child Safety
              • email
              • ESET
              • Ethics
              • Facebook
              • Firefox
              • Firewall
              • FixIt
              • Fraud
              • General
              • Google
              • Hotmail
              • IE10
              • IE6
              • IE7
              • IE8
              • IE9
              • Java
              • Lavasoft
              • malware
              • Microsoft
              • Microsoft Apps
              • Mozilla
              • MVP
              • NCSAM
              • Office
              • Office 2007
              • Office 2010
              • Opera
              • Outlook.com
              • Phishing
              • Privacy
              • safety
              • Search
              • Security
              • Service Pack
              • SkyDrive
              • Skype
              • Software
              • SP1
              • sp2
              • SP3
              • Spotlight
              • Sumatra
              • tutorial
              • UAC
              • Updates
              • Vulnerabilities
              • Windows
              • Windows 7
              • Windows 8
              • Windows Live
              • Windows Live OneCare
              • Windows Vista
              • Windows XP
              • WinPatrol

              Blog Archive

              • ►  2013 (93)
                • ►  October (2)
                • ►  September (8)
                • ►  August (9)
                • ►  July (5)
                • ►  June (8)
                • ►  May (7)
                • ►  April (15)
                • ►  March (9)
                • ►  February (16)
                • ►  January (14)
              • ▼  2012 (98)
                • ►  December (7)
                • ►  November (6)
                • ►  October (11)
                • ►  September (5)
                • ▼  August (10)
                  • Critical Java Security Update
                  • Firefox 15 Release Includes Critical Security Updates
                  • Adobe Flash Player Security Update (again!)
                  • WinPatrol PLUS or Family Pack 30% Discount Coupon
                  • Critical Security Update for Adobe Flash Player
                  • Adobe Reader and Acrobat Critical Security Upates
                  • Microsoft August 2012 Security Bulletin Release
                  • Gauss: Kaspersky Discovery, Analysis and Removal Tool
                  • Security Bulletin Advance Notice for August 2012
                  • Windows Essentials 2012
                • ►  July (8)
                • ►  June (12)
                • ►  May (7)
                • ►  April (12)
                • ►  March (6)
                • ►  February (6)
                • ►  January (8)
              • ►  2011 (130)
                • ►  December (8)
                • ►  November (10)
                • ►  October (7)
                • ►  September (12)
                • ►  August (9)
                • ►  July (6)
                • ►  June (13)
                • ►  May (14)
                • ►  April (13)
                • ►  March (15)
                • ►  February (10)
                • ►  January (13)
              • ►  2010 (146)
                • ►  December (10)
                • ►  November (15)
                • ►  October (19)
                • ►  September (15)
                • ►  August (14)
                • ►  July (8)
                • ►  June (19)
                • ►  May (5)
                • ►  April (11)
                • ►  March (6)
                • ►  February (14)
                • ►  January (10)
              • ►  2009 (33)
                • ►  December (11)
                • ►  November (11)
                • ►  October (11)
              Powered by Blogger.

              About Me

              Unknown
              View my complete profile