Bug Fix - Part 2

Firefox 2.0.0.13 released

26 Mar, 2008 | Posted by Danesh | in Mozilla, Software

Firefox 2.0.0.13 has just been released. It fixes a few security issues.

XUL popup spoofing variant (cross-tab popups)
Java socket connection to any local port via LiveConnect 2008-17
Privacy issue with SSL Client Authentication
HTTP Referrer spoofing with malformed URLs
Crashes with evidence of memory corruption (rv:1.8.1.13)
JavaScript privilege escalation and arbitrary code execution

If the auto update does not work for you, download the latest Firefox.

Source: Mozilla | Mozilla Security Advisories

Deluge BitTorrent Client 0.5.8.5 released

29 Feb, 2008 | Posted by Danesh | in BitTorrent, Open Source, Software

2 Comments

A new verison of Deluge is out. Version 0.5.8.5

Changes made to this version shown below,

Fix force recheck
auto scraping of tracker if it doesn’t report number of peers on reply
fix web seed proxy preference
Fix adding of duplicate torrents
Fix timers for saving fastresume and uploaded memory
Fix rechecking on start
PnP fixes
Fix possible libtorrent crash in storage

Grab your copy here.

Source: Deluge

Firefox 2.0.0.12 released

11 Feb, 2008 | Posted by Danesh | in Internet, Software

1 Comment

Mozilla has release a new version of the popular Firefox web browser. Version 2.0.0.12.

This release fixes some important security vulnerabilities that were discovered in 2.0.0.11.

MFSA 2008-11 Web forgery overwrite with div overlay
MFSA 2008-10 URL token stealing via stylesheet redirect
MFSA 2008-09 Mishandling of locally-saved plain text files
MFSA 2008-08 File action dialog tampering
MFSA 2008-06 Web browsing history and forward navigation stealing
MFSA 2008-05 Directory traversal via chrome: URI
MFSA 2008-04 Stored password corruption
MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution
MFSA 2008-02 Multiple file input focus stealing vulnerabilities
MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12)

Download the latest version of Firefox here.

Source: Mozilla

WordPress 2.3.3 released

5 Feb, 2008 | Posted by Danesh | in Software, WordPress

2 Comments

A new security release for WordPress is out. This will be an urgent fix as it attentions a flaw found in the XML-RPC implementation. An attacker could easily exploit this vulnerability and gain the ability to edit user posts.