Thursday, February 22, 2007

Postponed Firefox Release

I was writing that Mozilla Firefox 2.0.2 will be out this week and the release date was scheduled to be 21 February if no major problem, mostly regarding to security, but unfortunately, there is. ComputerWorld has wrote an article about postponed Firefox updates due to a security vulnerability related to cookies that was found by Michal Zalewski. He also had some online demo to check whether your browser is vulnerable or not. Here's the full disclosure about the issue.

The good news is that Firefox team had already made a patch to fix this issue, but they will need some time to re-test all of them and make sure that there aren't any regression made by this patch. They plan to shift the release date for one day and to be scheduled to be released on February 22. That's one thing i like about Open Source, the patches are ready in short time and not taking a lot of time before the customer can have them.