Advanced

Mozilla Yanks Firefox 16 Over Security Concerns

Posted by masgeeks on · 6 comments
PC Magazine; By Chloe Albanesius
Mail this story
Print this story

Mozilla on Wednesday yanked the most recent version of its Firefox browser after discovering a security vulnerability that could provide scammers with access to your browsing history.

Mozilla on Wednesday yanked the most recent version of its Firefox browser after discovering a security vulnerability that could provide scammers with access to your browsing history.

Firefox 16 was removed from the current Firefox installer page last night. Those who have already been upgraded will get the patched version as soon as it's available, Mozilla said in a blog post. If you're worried, there's the option to downgrade to Firefox 15.0.1, which is not affected by the bug.

Mozilla said it is "actively working on a fix" and plans to ship an update sometime today.

"The vulnerability could allow a malicious site to potentially determine which websites users have visited and have access to the URL or URL parameters," Mozilla said. "At this time we have no indication that this vulnerability is currently being exploited in the wild."

Firefox 16 made its debut on Monday, and the update largely focused on new developer tools. That included a developer command line, which Mozilla showed off in the video demo below.

On mobile, Firefox for Android got Reader Mode, which made it easier to view, read and share articles and stories from your mobile phone or tablet. To use, tap the "Reader" icon in the Awesome Bar.

Full Story

  Nav
» Read more about: Story Type: News Story, Security

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (6)

I have 16.0 on an updated Mint system.
16.0.1 is out and I can confirm that least Ubuntu and Mint have already pushed out the updates.
I considered submitting these links:

http://arstechnica.com/security/2012/10/mozilla-pulls-day-ol...

http://arstechnica.com/security/2012/10/firefox-16-vulnerabi...

(I decided that they probably weren't really LXer material, but they might still be of some interest now, within the thread)
Hello, NoScript.
SalixOS and openSUSE pushed 16.0 yesterday as well. The enterprise distros have mostly stick with LTS releases and are using 10.0.7. I think they have it right. As I wrote in the other thread I consider the six week release cycle beyond insane and it I think it guarantees more problems like this. Release when ready, not just for the sake of rapid releases.
I now have 16.0.1 as well after today (10/12).

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post