Mozilla rushing out update for Firefox flaws
Mozilla hits the "fire drill" button, and rushes out an update for a pair of flaws.


Mozilla is to release a "high-priority fire drill security" update for its Firefox browser, after two flaws were discovered.
The patches will be released either 30 March or April as part of the next edition of the browser, Firefox 3.0.8 which is being rushed out because of the flaws.
The vulnerabilities at issue are the Pwn2Own flaw discovered at CanSecWest, as well as the XSLT bug. Mozilla described both as critical issues that allow malicious code execution. "These issues can be exploited by tricking a user into visiting a malicious web page hosting the exploit code," Mozilla said on its security blog.
"Both issues have been investigated and fixes have been developed which are now undergoing quality assurance testing," Mozilla added.
Mozilla faces renewed competition from Microsoft with the recent release of Internet Explorer 8, but Firefox still came out tops in our four-way browser beta test.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Freelance journalist Nicole Kobie first started writing for ITPro in 2007, with bylines in New Scientist, Wired, PC Pro and many more.
Nicole the author of a book about the history of technology, The Long History of the Future.
-
Enterprises face delicate balancing act with data center sustainability goals
News High energy consumption, raw material requirements, and physical space constraints are holding back data center sustainability efforts, according to new research from Seagate.
By Emma Woollacott
-
Cleo attack victim list grows as Hertz confirms customer data stolen
News Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
By Ross Kelly
-
Spanish spyware outfit uncovered, develops exploits for Windows, Chrome, and Firefox
News Google was only able to discover the company after an anonymous submission was made to its Chrome bug reporting programme
By Zach Marzouk
-
Firefox 95 boosts protection against zero-day attacks
News Mozilla's browser now takes a more granular approach to walling off code
By Danny Bradbury
-
Mozilla to end support for Firefox Lockwise password manager
News Replacement service already lined up as browser specialist continues to streamline business
By Bobby Hellard
-
Firefox available on Microsoft Store for first time
News Gecko-based browser arrives after Microsoft removes restrictions
By Danny Bradbury
-
Mozilla to cut 250 jobs as part of major coronavirus restructure
News The reorganisation has been made so the company can become faster, more innovative, and find more revenue streams
By Keumars Afifi-Sabet
-
Why I’m leading a browser double life
Opinion There are benefits to using more than one browser
By Barry Collins
-
Mozilla re-hires veteran Mitchell Baker to serve as CEO
News The interim chair and CEO formally rejoins the organisation after Chris Beard stepped down in December 2019
By Keumars Afifi-Sabet
-
Mozilla fixes two Firefox zero-days being actively exploited
News Critical vulnerabilities allow attackers to execute arbitrary code or trigger crashes
By Carly Page