Go Back   Tech Support Forum > Security Center > Computer Security News

User Tag List

Mozilla yanks Firefox 16 one day after release

This is a discussion on Mozilla yanks Firefox 16 one day after release within the Computer Security News forums, part of the Tech Support Forum category. Mozilla yesterday took the unusual step of yanking Firefox 16 from distribution just a day after its release. The company


Closed Thread
 
Thread Tools Search this Thread
Old 10-12-2012, 01:22 PM   #1
Security Manager
Analyst
Rangemaster, TSF Academy
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 39,536
OS: Windows 10 Pro

My System


Mozilla yesterday took the unusual step of yanking Firefox 16 from distribution just a day after its release.

The company said a critical vulnerability triggered the move.

The bug was apparently overlooked by Mozilla while it was developing Firefox 16, or introduced by the fixes baked into the upgrade that started reaching users early Tuesday.

"Mozilla is aware of a security vulnerability in the current release version of Firefox (version 16). Firefox version 15 is unaffected," said Michael Coates, Mozilla's director of security assurance, in a Wednesday post to the company's security blog.

On Tuesday, Mozilla rolled out Firefox 16, which featured patches for 24 vulnerabilities, 21 of which were judged "critical," the open-source developer's highest threat ranking.

Coates' comment that Firefox 15 did not harbor the bug indicated that the vulnerability was either an entirely new, and overlooked, flaw that affected only Firefox 16, or that it was introduced by the patching process.

The vulnerability has been assigned #799952 in Mozilla's Bugzilla change- and bug-tracking database. As is Mozilla's practice for unpatched flaws, details on that bug are not viewable by the general public. That Bugzilla number did not match any of the 24 vulnerabilities patched Tuesday.

Coates did not note when Mozilla became aware of the new vulnerability, or how it was discovered. Notes from a Mozilla meeting yesterday, however, show the company was aware of it by 11 a.m. PT Wednesday, when it told developers that a "chemspill" -- Mozilla's term for an emergency update -- was necessary.

As a precaution, Mozilla has pulled Firefox 16 from its primary download site and stopped serving it to current users as an upgrade, even though there was no sign that the bug was being exploited.

But as Ars Technica reported late Wednesday, Mozilla's secondary download page was still offering Firefox 16.

Users who do not want to wait for the patch but are afraid of running their already-obtained copies of Firefox 16 can downgrade to its precursor, Coates said.

Firefox will be re-released as version 16.0.1 some time Thursday, after which Mozilla will re-open the upgrade gates.

Mozilla has had to quickly re-release Firefox before. In December 2011 it did just that with Firefox 9 a day after that browser's release.

However, this was the first time Mozilla has pulled a version of Firefox from distribution because of a vulnerability.


Mozilla yanks Firefox 16 one day after release - Computerworld
Glaswegian is offline  
Sponsored Links
Advertisement
 
Old 10-12-2012, 01:26 PM   #2
Microsoft-Team Manager
Hardware - Team Manager
 
joeten's Avatar
 
Join Date: Dec 2008
Location: Glasgow Scotland
Posts: 68,311
OS: win 10 Home



Just been updated tonight
__________________






Eliminate all other factors, and the one which remains must be the truth.
joeten is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar Threads
Thread Thread Starter Forum Replies Last Post
unable to see msn photo gallery from Mozilla Firefox browser
Browser tries to transfer data from catalog.video.msn.com but it only loads a white screen. There's no error message, it displays "done" at the bottom of the page.
abelmdo Mozilla/Firefox Browsers 3 05-04-2011 04:39 PM
I have both Internet explorer and Mozilla firefox browsers?
Hi All; my firefox browser will not open my yahoo email but it will open my other sites. Internet explorer does open them all,, is anyone else having this problem with mozilla and their yahoo email? Regards Wingmark
wingmark Mozilla/Firefox Browsers 3 03-18-2011 05:05 AM
Can't Download from Mozilla Firefox
Every time I try to download anything with Mozilla Firefox it will not give me a download page but just brings up a box asking if I want to 'Save' or 'Cancel'. I don't want to do either, I just want, like Internet Explorer will do, to download! I have tried to find my saved files but this is...
Many Problems Mozilla/Firefox Browsers 1 03-13-2011 10:48 AM
No longer able to get Mozilla Firefox to connect to the Internet?
Hi, I have internet, and with IE it works, but I can't get FireFox to work--suddenly. It was very random. everytime I try and bring up FireFox it says, 'Unable to connect'. It might have something to do with my firewall, but I'm not sure? I have Windows Firewall is all, I believe. ...
AliceAcedia Mozilla/Firefox Browsers 1 01-17-2011 06:59 PM
How To change the Firefox Bookmark Menu Timing
Firefox Bookmark Menu Timing I ran a program to "speedup" Firefox and it changed the Firefox Bookmark Menu Timing it such a way that I had trouble using a mouse to select Firefox Bookmarks. It took a lot of research to come up with a solution, so, I wanted to post this on "the web" in...
Terry.Harris Mozilla/Firefox Browsers 0 01-17-2011 06:50 AM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 06:55 AM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts