Security Fixes in Firefox 3.5.3 and 3.0.14

Mozilla updated all supported versions of its web browser, Firefox, bringing the older branch to 3.0.14 and the latest version to 3.5.3. Both were security and bug-fixing updates, so there's nothing too exiting about them, but you should update to the latest version as soon as possible. You are also encouraged to move from the deprecated 3.0 line to Firefox 3.5, which is significantly faster and safer, while also bringing some useful features like private browsing and geolocation.

Not surprisingly, both updates fix a number of common security threats and a total of three critical security fixes were implemented. The Chrome privilege escalation issue with FeedWriter was resolved, as well as a TreeColumns dangling pointer vulnerability. Finally, the Gecko HMTL rendering engine powering Mozilla Firefox was also updated to version 1.9.1.3/1.9.0.14 and fixes several crashes that lead to memory corruption.

A minor vulnerability was also plugged in both new versions, preventing location-bar spoofing when using tall, line-height, Unicode characters. Firefox 3.0.14 also had a moderate security hole fixed, as there were insufficient warnings when PKCS11 modules were installed or removed. Several stability fixes were also introduced in the latest versions. As the Mozilla team along with contributors are working on Firefox 3.6, coming in a couple of months, while at the same time preparing for Firefox 3.7, which should arrive sometime in March 2010, the current versions are also kept up-to-date.

Firefox 3.0 users are urged to move to the newer branch, as the older browser has an end-of-life date set for January 2010, after which there will be no more updates including security fixes. Users will also receive a new round of notifications showing the advantages of 3.5 and explaining why it's important for them to update at the end of this month. A number of users is still employing the aging Firefox 2.0 and Mozilla has released some information to help them move to a newer version.

The latest versions of Mozilla Firefox, 3.5.3 / 3.0.14, are available for download here.