Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Mozilla The Internet Bug Security

Firefox 3.5.1 Released 147

alek writes "A day after Slashdot reports about a self-inflicted vulnerability in Firefox 3.5, Mozilla releases 3.5.1. It addresses that security issue, but also fixes the annoying slow-startup on Windows. Bummer the UNIX wars have subsided, because apparently they also had to fix a problem where Firefox on a Sparc platform would crash when visiting www.hp.com!"
This discussion has been archived. No new comments can be posted.

Firefox 3.5.1 Released

Comments Filter:
  • by Anonymous Coward on Friday July 17, 2009 @02:12AM (#28726539)
    But I need build instructions and test instructions and possibly a youtube video, written/made for a student, not for a programmer that already knows a number of things about firefox. That is the way I feel about most open-source projects. I don't want to contribute in huge quantities, but only bugfixes, in any area and not limited to any particular technology. Sadly, I see such build-instructions missing or the build-instructions are too complicated in major open-source projects that could use bug-fixers early in the cycle.
  • by asa ( 33102 ) <asa@mozilla.com> on Friday July 17, 2009 @02:19AM (#28726557) Homepage
    Your post says "but also fixes the annoying slow-startup on Windows." which suggests that all Windows users were experiencing slow starts. That's not the case at all. It was only a small fraction of users affected by the now fixed issue. And for the record, the security flaw was already fixed, even before it was lifted from our bug database and turned into a public exploit. It just takes a few days to get everything in order for a release to users.
  • Re:Blue screen (Score:5, Informative)

    by EsbenMoseHansen ( 731150 ) on Friday July 17, 2009 @02:35AM (#28726633) Homepage

    Actually, the linux blue screen of death is blinking of 2 (or is it three?) of the keyboard leds. Though support for blue screen of death is coming, by the name of kernel mode-settting. It is pretty rare, though.

    Lockups I have seen, too, in both linux and windows. Lots of cases is hardware problems, but your problem sounds like a driver issue. Using proprietary drivers, perhaps?

  • by EsbenMoseHansen ( 731150 ) on Friday July 17, 2009 @02:39AM (#28726645) Homepage

    Here, let me click on the top link for "firefox build instructions" in google: simple firefox build [mozilla.org]. Looks pretty standard to me. Tests, if there are any, are usually automated or findable by a similar exercise.

  • by cratermoon ( 765155 ) on Friday July 17, 2009 @02:40AM (#28726649) Homepage
    No less a personage than Brendan Eich says the whole issue with slow startup in the NSS module is snake oil that does nothing but "waste users' time at startup pretending to scrape entropy off the filesystem."
  • by xaxa ( 988988 ) on Friday July 17, 2009 @02:41AM (#28726651)

    I installed it ages ago:

    aptitude install firefox-3.5

    http://packages.ubuntu.com/search?searchon=names&keywords=firefox-3.5 [ubuntu.com]

  • by Eighty7 ( 1130057 ) on Friday July 17, 2009 @02:52AM (#28726681)
    https://launchpad.net/~fta/+archive/ppa [launchpad.net]

    Just add the fta repository & install "firefox-3.5". They even link to a mozilla daily build repository if that's your thing.
  • Re:Blue screen (Score:1, Informative)

    by Anonymous Coward on Friday July 17, 2009 @02:55AM (#28726699)

    Using proprietary drivers, perhaps?

    Yes, indeed I do. I wasn't trying to be bashing/trolling here, just pointing out the sub-optimal end-user experience. My ATI card (RV710 [Radeon HD 4350]) is by no means rare and I can't afford to buy another, more "compatible", one.

  • by Haiyadragon ( 770036 ) on Friday July 17, 2009 @03:16AM (#28726757)

    Scroll down to firefox-3.5. Stupidly, this package doesn't overwrite the firefox package, meaning that applications will still use 3.0 to open links. Even if you remove the firefox package, firefox-3.5 is still not used. Changing the webbrowser in preferred applications seems to work on some applications...

    Anyway, in the end I just simlinked like so: ln -s /usr/bin/firefox-3.5 /usr/bin/firefox, and everything worked great.

  • by TheSeer2 ( 949925 ) on Friday July 17, 2009 @03:23AM (#28726787) Homepage

    It was user situation dependent. Firefox was reading all of a user's temp files to seed its RNG or something along those lines so if you had a lot of large temp files your startup time would be quite large.

    Regardless, it still takes 5x Chrome's startup time with the fix so... peh.

  • by ahecht ( 567934 ) on Friday July 17, 2009 @03:36AM (#28726835) Homepage

    On further study, it NSS DOES use process IDs and many, many other factors to generate the seeds. Searching the additional file locations ("C:\Documents and Settings\*user*\Local Settings\History", "C:\Documents and Settings\*user*\Local Settings\Temporary Internet Files", "C:\Documents and Settings\*user*\My Recent Documents", "C:\Documents and Settings\*user*\Temp\", "Recycle Bin", and "Network Neighborhood") were added because some older OSs (Win2k and WinCE) didn't have strong enough build-in pseudo-random number generators.

    This patch changed NSS to use the built-in PRNG in Windows XP and up which uses "process ID and thread ID, the system clock, the system time, the system counter, memory status, free disk clusters, andthe hashed user environment block".

  • by klui ( 457783 ) on Friday July 17, 2009 @03:49AM (#28726899)
    OS dependent. They coded for the case where Windows CE/2000 did not have a certain call and they wanted to get good entropy for their RNG in NSS. https://bugzilla.mozilla.org/show_bug.cgi?id=501605 [mozilla.org]
  • by Anonymous Coward on Friday July 17, 2009 @04:46AM (#28727055)

    Ubuntu uses update-alternatives to select between different packages providing the same functionality

    to see which browsers are installed:

    update-alternatives --list x-www-browser

    to select firefox-3.5:

    update-alternatives --set x-www-browser /usr/bin/firefox-3.5

  • Re:version numbers (Score:5, Informative)

    by Rhapsody Scarlet ( 1139063 ) on Friday July 17, 2009 @06:05AM (#28727405) Homepage

    Going by previous versions of firefox, shouldn't it be 3.5.0.1 rather than 3.5.1?

    Mozilla decided to simplify that with Firefox 3 (note that the upcoming security release for Firefox 3 is 3.0.12, not 3.0.0.12). Exactly why they used four numbers in the first place is something I don't know, it seems it started with Firefox 1.5. I know that one advantage touted of XPCOM was the ability to easily make incremental updates, so maybe there was a plan for a Firefox 1.5.1 and 1.5.2 (with the final number for each being used for security updates). Of course that would've been complicated and silly, so it seems the plan was abandoned and the version number compacted.

  • by wembley fraggle ( 78346 ) on Friday July 17, 2009 @09:06AM (#28728473) Homepage

    On the macintosh version at least, the 'check for updates' menu item is in the Help menu. Because that's clearly where it belongs. I only found it because I was just about to search the help for advice on where to find it.

  • by BZ ( 40346 ) on Friday July 17, 2009 @12:44PM (#28731501)

    Becuase Gears uses low-level binary hooks (e.g. completely replacing the Firefox HTTP cache with its own) and presumably doesn't want to worry about your browser crashing due to a code change on the Firefox end?

Happiness is twin floppies.

Working...