ARN

Mozilla rushes to fix Firefox password bug

Will release Firefox 3.0.3 next week to patch problem in this week's 3.0.2

Just a day after it released Firefox 3.0.2 to fix 11 vulnerabilities, Mozilla said that an overlooked password bug requires a fast-track update it hopes to launch this week.

Late Wednesday, Mike Beltzner, Mozilla's director of Firefox, said that the bug, which prevents some users from accessing their browser-saved passwords, means another update is necessary. "While this doesn't affect all Firefox users, it is a significant regression and has triggered a fast-release Firefox 3.0.3 which will contain a single fix," Beltzner said in a message to the mozilla.dev.planning group.

The bug popped up in Firefox 3.0.2, which Mozilla released last week, after developers added a fix to make the browser's password manager work on international domain name (IDN) sites. IDN sites are those that have non-ASCII characters in their URLs, such as addresses with Arabic, Hebrew or Chinese characters, or ones with non-English diacritical marks.

According to Beltzner, users who have saved passwords on IDN sites or some non-English domains will be unable to access those passwords or save any new passwords after updating to Firefox 3.0.2.

"There is no permanent data loss, the saved data is just inaccessible," Beltzner noted.

Regression bugs aren't unknown to Mozilla or Firefox. Last November, the company rushed a release out the door to fix five bugs it had introduced in the previous version of the browser, which had been posted for download about a week before.

A fix for the password regression bug has been crafted and is being tested, Beltzner added.

Nominations for the 2012 ARN IT Industry Awards open on Tuesday, June 12.

More about: Google, Mozilla
References show all

Comments

1

yrshfhq

Tue 10/03/2009 - 04:00

gybgSzxwgbuSWb

9ZrDbE <a href="http://cuarchfsyckg.com/">cuarchfsyckg</a>, [url=http://wumuqnynnfxe.com/]wumuqnynnfxe[/url], [link=http://vcfgidndcybj.com/]vcfgidndcybj[/link], http://dqtmixioxyir.com/

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the ARN comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Whitepapers
Latest Stories
Community Comments
ARN Directory | Distributors relevant to this article
Aquion , Avnet Technology Solutions
rhs_login_lockGet exclusive access to ARN's news, research and invitation only events.
ARN Distributor Directory
ARN Vendor Directory

iAsset is a channel management ecosystem that automates all major aspects of the entire sales,marketing and service process, including data tracking, integrated learning, knowledge management and product lifecycle management.