Firefox 3.0.10 released
Firefox 3.0.10 released
Posted Apr 28, 2009 14:21 UTC (Tue) by malefic (guest, #37306)In reply to: Firefox 3.0.10 released by danielpf
Parent article: Firefox 3.0.10 released
Posted Apr 28, 2009 14:34 UTC (Tue)
by mattdm (subscriber, #18)
[Link]
Posted Apr 28, 2009 14:55 UTC (Tue)
by danielpf (guest, #4723)
[Link] (2 responses)
"One of the security fixes in Firefox 3.0.9 introduced a regression that caused some users to experience frequent crashes. Users of the HTML Validator add-on were particularly affected, but other users also experienced this crash in some situations. In analyzing this crash we discovered that it was due to memory corruption similar to cases that have been identified as security vulnerabilities in the past."
Posted Apr 28, 2009 17:12 UTC (Tue)
by stumbles (guest, #8796)
[Link]
Posted Apr 28, 2009 18:18 UTC (Tue)
by man_ls (guest, #15091)
[Link]
I guess what I'm saying can be resumed as: without more information it is hard to know how bad it is.
Firefox 3.0.10 released
Firefox 3.0.10 released
The latest advisory description, especially the last sentence gives an impression that Firefox's code is not under tight control:
Frankly I think you are being nit picky, and doesn't in my view suggest
they have or are losing control.
Firefox 3.0.10 released
Bad fixes are a routine cause of bugs. In business developments, on average you can expect that 5-10% of your bug fixes will generate new bugs. Security fixes should pass a more intense inspection and test cycle, but still... Say that one of the last 100 security fixes has resulted in another bug; 1% of bad fixes would look like a desirable target even in security fixes, even if the fix isolated leaves a bad impression.
One bad fix?