Stability Update for Firefox 3.6.7 to version 3.6.8
Just three days after Mozilla released Firefox 3.6.7, they have pushed out a stability/security update, Firefox version 3.6.8. I just published an extensive article about Firefox 3.6.7, two days ago!
This back-to-back sudden release was rushed out to fix a stability/security problem in the handling of crashed plug-ins (Flash), in Firefox browser windows and tabs. The problem was apparently caused by one of the 126 bug fixes included in Firefox 3.6.7. Right now, there are more unresolved bugs showing up in Bugzilla, for v 3.6.7 and one for the just released 3.6.8.
If you have allowed the option for automatic Firefox updates, you will see a pop-up notice about the new version. Download it, then, when prompted, restart Firefox. If you prefer to get the update manually, go to Firefox's Help menu item > Check for Updates. Download and apply the update to 3.6.8. You can also download the latest version from the Firefox product page.
UPDATE! July 26, 2010
Geek Alert!
Mozilla developer Daniel Holbert reported that the fix to the plug-in parameter array crash that was fixed in Firefox 3.6.7 caused a crash showing signs of memory corruption. While the Firefox What's New page described the update as a stability patch, there was more to the story. In certain circumstances, properties in the plug-in instance's parameter array could be freed prematurely leaving a dangling pointer that the plug-in could execute, potentially calling into attacker-controlled memory.
If you like this article please share it.
The content on this blog may be reprinted provided you do not modify the content and that you give credit to Wizcrafts and provide a link back to the blog home page, or individual blog articles you wish to reprint. Commercial use, or derivative work requires written permission from the author.