Mozilla 1.7.2 Available for download.

  • Thread starter Thread starter Wayne D
  • Start date Start date
[email protected]# said:
I wonder why, if it's a patch, they make the download so obscure on
their page. If it's NOT a patch, I'm not going to do a total reinstall
of the program in order to accomplish a simple security fix.
Click to expand...
Hello John:

Don't worry about uninstall. You can run the full install and it will
update accordingly.

I've just did it.

Regards

Wayne D
 
[email protected]# said:
I wonder why, if it's a patch, they make the download so obscure on
their page. If it's NOT a patch, I'm not going to do a total reinstall
of the program in order to accomplish a simple security fix.
Click to expand...

There's no patch available. You have to install the entire new package.
Unfortunately 1.7.2 still has some bugs that I find annoying, so I'm
using the latest 1.8.x nightlies, which, strangely enough, seem to be
cleaner.
 
Kerodo said:
There's no patch available. You have to install the entire new package.
Unfortunately 1.7.2 still has some bugs that I find annoying, so I'm
using the latest 1.8.x nightlies, which, strangely enough, seem to be
cleaner.
Click to expand...

Now THAT is strange and thanks for the reply.

By the way, another question I have is which versions of Windows the
security hole affects. If it doesn't affect Millennium Edition, then
there's no need for me to bother with the update.
 
Wayne said:
Hello John:
Don't worry about uninstall. You can run the full install and it will
update accordingly.
I've just did it.
Click to expand...

Thanks for your response, Wayne. The full install would probably
restore that "Local Folders" account which I hate so much in the
mail/news reader. If the security issue doesn't apply to Millennium
Edition, then I guess I wouldn't really need to do the update.
I was unable to discover whether or not this is the case, but I did
find this link:

http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.2.

(link may wrap)
 
[email protected]# said:
By the way, another question I have is which versions of Windows the
security hole affects. If it doesn't affect Millennium Edition, then
there's no need for me to bother with the update.
Click to expand...

I would assume that it affects all versions of Windows...
 
»Q« said:
Those three bugs were in all versions of Mozilla on all platforms.
Click to expand...

*sigh* I looked up the bugs and all three bug report pages said that
they affected all OSes and all versions of those OSes listed in the
dropdowns on those pages.

Updating Mozilla for small issues is about as appealing as installing
all the Microsoft "updates" to my OS and-or Internet Explorer. I might
be more inclined to do so if they came as small patches, but
reinstalling the whole program is entirely another deal. Guess I'll
just take my chances and leave things as they are.
 
Kerodo said:
I would assume that it affects all versions of Windows...
Click to expand...

I just looked up the bugs and yes, they do. Still, I'm not going to
get into this business of updating every week and will take my chances.
 
I just looked up the bugs and yes, they do. Still, I'm not going to
get into this business of updating every week and will take my chances.
Click to expand...

My ISP recently upgraded my lowest cost DSL service from 640K to 1500K
download without charging extra (they are meeting competition from a
local internet cable provider). Took only a couple of minutes to d/l
and install 1.7.2 over 1.7.1

I know it would be a PITA on dialup (and on a slow PC). Yet, I'd
probably do it anyway. Seems to me the Moz developers are doing a good
job so far of staying ahead of actual exploits, unlike the situation
with IE. Makes sense to stay with them, though if I was on dialup I
might limit my downloading of new versions to a max frequency of maybe
once every 2-4 weeks. And it would depend on the severity of the known
vulnerability that was fixed. This last one ... the buffer overflow
and possible hack to root access .... was a surprise ... and very
serious.


Art
http://www.epix.net/~artnpeg
 
My ISP recently upgraded my lowest cost DSL service from 640K to 1500K
download without charging extra (they are meeting competition from a
local internet cable provider). Took only a couple of minutes to d/l
and install 1.7.2 over 1.7.1
I know it would be a PITA on dialup (and on a slow PC). Yet, I'd
probably do it anyway. Seems to me the Moz developers are doing a good
job so far of staying ahead of actual exploits,
Click to expand...

No argument there from me.
unlike the situation
with IE. Makes sense to stay with them, though if I was on dialup I
might limit my downloading of new versions to a max frequency of maybe
once every 2-4 weeks. And it would depend on the severity of the known
vulnerability that was fixed. This last one ... the buffer overflow
and possible hack to root access .... was a surprise ... and very
serious.
Click to expand...

I'm on a fiber optic connection and downloading is very fast. The
downloading isn't the problem, it's the reconfiguring that's often
necessary afterward. I use several Mozilla extensions and sometimes
some of them quit working when I update. I also *HATE* with extreme
prejudice, the "Local Folders" BS that shows up every time I update
Moz. Local Folders should be optional, period.

Still wish the Moz development team would make these minor updates
available as easy to install patches rather than a total program update.

Guess I'll do the update. I'll also post back and if there are any
problems as a result, since I'm sure that would be of interest to
other Moz users.
 
(e-mail address removed) wrote:
Click to expand...
I'm on a fiber optic connection and downloading is very fast. The
downloading isn't the problem, it's the reconfiguring that's often
necessary afterward. I use several Mozilla extensions and sometimes
some of them quit working when I update.
Click to expand...

Interesting. It shouldn't really, at least for extensions you install in
your profile. I'm talking about minor changes in the browser of course,
as in the recent series of updates.

For firefox which is similar to Mozilla, it took me an estimated 10
minutes at most to upgrade from 0.9.2--->0.9.3 after download.

I renamed the old firefox directory, installed the new one in the old
location (I used a zip copy actually instead of the installer), copy the
info in the plugin and searchplugin to the new folders, then reuse the
old profile. Got some warnings from firewall etc that program file has
changed -accept, then all is done.

Works perfectly for me.

When upgrading to 1.0 in Sept, I expect quite a few extensions won't
work, but other than that, it should take at most 30 minutes if you know
what to do.
 
*sigh* I looked up the bugs and all three bug report pages said that
they affected all OSes and all versions of those OSes listed in the
dropdowns on those pages.

Updating Mozilla for small issues is about as appealing as installing
all the Microsoft "updates" to my OS and-or Internet Explorer. I might
be more inclined to do so if they came as small patches, but
reinstalling the whole program is entirely another deal.
Click to expand...


I'm not sure why you find it so hard. Leaving aside the bandwidth
problem, Upgrading for firefox takes me about 5 minutes. Shouldn't be
that different for mozilla. Mentally though it feels more tiring I admit
as compared to a patch.


Guess I'll
just take my chances and leave things as they are.
Click to expand...

It's your computer, but I strongly advise against it. The buffer
overflows in libpng looks very serious.
 
It's your computer, but I strongly advise against it. The buffer
overflows in libpng looks very serious.
Click to expand...

I agree. I don't know if there are any in-the-wild exploits yet, but
anything that allows arbitrary code to run with escalated privileges is
worth fixing IMO. Fixing Fx under Windows was easy (I use the zip file
just as you described); with Gentoo GNU/Linux I get to look forward to
compiling the new libpng then recompiling I-don't-know-how-many
packages that were relying specifically on my old libpng.
 
Back
Top