14 DAY TRIAL // Firefox 3.5 may be coming soon, but the vast majority of people is still using Firefox 3. And, while the focus of the enthusiasts and the development team may be on the upcoming version, Firefox 3 is still getting some attention from Mozilla and, while it won't get any new features or major tweaks, there are still bugs and security issues getting fixed. June 11 saw the release of the latest version, 3.0.11, which resolves several security vulnerabilities, as well as some stability issues.
Firefox 3 has been getting a steady stream of updates and, while the previous version, 3.0.10, only fixed one critical security vulnerability, the latest, 3.0.11, solves a total of nine security vulnerabilities, four of which were critical. Here is the full list of security fixes:
– JavaScript chrome privilege escalation; – XUL scripts bypass content-policy checks; – Incorrect principal set for file: resources loaded via location bar; – Arbitrary code execution using event listeners attached to an element whose owner document is null; – Race condition while accessing the private data of an NPObject JS wrapper class object; – SSL tampering via non-200 responses to proxy CONNECT requests; – Arbitrary domain cookie access by local file: resources; – URL spoofing with invalid unicode characters; – Crashes with evidence of memory corruption (rv:1.9.0.11).
Usually, these types of updates don't see any major internal changes, but, because several issues were reported with SQLite, the internal database system Firefox uses, it has been upgraded to a newer version, which has fixed the problems. Another issue where some users reported that their bookmarks had become corrupt was also fixed in this version.
This is pretty much it, as expected, nothing major, just a small bug-fixing release. The next version, 3.0.12, is expected to come on July 15, 2009, by which time Firefox 3.5 Release Candidate should have been also released. However, with some people still using Firefox 2, Firefox 3 shouldn't be expected to be replaced as soon as 3.5 is out the door, even with the automated update system.
Firefox 3.0.11 can be downloaded right here.