Free Republic

Attackers could use fake certificate to get around protections. Mozilla has disabled an "opportunistic encryption" feature added to its Firefox browser last week, in order to fix a critical security flaw that allowed attackers to bypass HTTPS protections. The company last week released Firefox 37, which came with a new feature allowing connections to be encrypted even if a server didn't support HTTPS. This so-called "opportunistic encryption" acted as a bridge between plaintext HTTP and HTTPS connections based on either transport layer security (TLS) or the older secure sockets layer protocol. It allowed website owners who are unable to fully...

"CNet is reporting that Microsoft has issued an emergency patch for 10 IE security holes. 'The cumulative update, which Microsoft announced on Monday, resolves nine privately reported flaws and one that was publicly disclosed. ... Software affected by the cumulative update addressing all the IE vulnerabilities includes Windows 2000, Windows XP, Windows Server 2003 and Server 2008, Vista, and Windows 7.'" More details here...

What's New in Firefox 1.5.0.6 Firefox 1.5.0.6 is a stability update that is part of our ongoing program to provide a safe Internet experience for our customers. We recommend that all users upgrade to this latest version. Fixed an issue with playing Windows Media content Release Date: August 2, 2006 Downloading Firefox 1.5.0.6 Mozilla.com provides Firefox for Windows, Linux, and Mac OS X in a variety of languages. To get Firefox 1.5.0.6, download it here. For builds for other systems and languages not provided, see the Contributed Builds section at the end of this document.

Mozilla Firefox 1.5.0.3 has been released. This update fixes a publicly disclosed denial of service weakness. All users are encouraged to upgrade to this version. The bugfixes previously planned for Firefox 1.5.0.3 were shifted to 1.5.0.4, and a quick update was released shortly after the recent 1.5.0.2 release to address the publicly reported issue.