14 DAY TRIAL // The folks at Mozilla have updated the release notes for the two Firefox branches (3.5 and 3.0), revealing that final versions of the popular web browser are now available for download. As usual, the Mozilla FTP had been listing the releases for quite some time, but only yesterday evening were the two final versions made available officially.
As revealed in the official release notes, Firefox 3.5.2 for Mac fixes several security issues and makes images with ICC profiles render properly on all monitors. Fixed in this release are several critical security problems, as well as moderate and low ones. The issues are:
MFSA 2009-46 Chrome privilege escalation due to incorrectly cached wrapper; MFSA 2009-45 Crashes with evidence of memory corruption (rv:1.9.1.2/1.9.0.13); MFSA 2009-44 Location bar and SSL indicator spoofing via window.open() on invalid URL; MFSA 2009-43 Heap overflow in certificate regexp parsing; MFSA 2009-42 Compromise of SSL-protected communication; MFSA 2009-38 Data corruption with SOCKS5 reply containing DNS name longer than 15 characters.
Firefox 3.0.13 also fixes a bunch of security issues on the Mac side. The first problem listed below is labeled as moderate (only works in uncommon, non-default configurations or requires the user to perform complicated and/or unlikely steps). The last two are critical (can be used to run attacker code and install software, requiring no user interaction beyond normal browsing). The vulnerabilities are:
MFSA 2009-44 Location bar and SSL indicator spoofing via window.open() on invalid URL; MFSA 2009-43 Heap overflow in certificate regexp parsing; MFSA 2009-42 Compromise of SSL-protected communication.
One known issue still exists in the browser, according to Mozilla – if you use IPv6 from a network location that doesn't support IPv6 routing, your DNS lookups may be very slow, the company explains. As a workaround, you must set network.dns.disableIPv6 to true. Fans of Mozilla’s powerful web browser can download their preferred Mac version using the link below.