Date: Mon, 26 Sep 2005 23:13:39 -0300 From: madodel at ptdprolog.net Subject: [VOICENWS] SW: Firefox 1.5b1 & the IDN buffer overflow security issue ++ From the VOICE OS/2-eComStation News Service http://www.os2voice.org ++ From: "Sander Nyman"<2sanderDESPAM at DESPAMsbcglobal.net> While the Mozilla suite version 1.7.12, and Firefox 1.0.7 both address the IDN buffer overflow security issue, it should be noted that the next generation Firefox 1.5b1 was released just prior to the availablity of the patch. If you have tried Firefox 1.5b1, and just can't go back to the 1.0.x version (hey, I'm with you), the problem is easily resolved. The following work around has been posted by Mozilla: 1. Type about:config into the address field and hit Enter. 2. In the Filter toolbar, type network.enableIDN. 3. Right click on the the network.enableIDN item and select toggle to change value to false. To verify the fix, be sure to restart the browser and then follow these steps. 1. Type about:config into the address field and hit Enter. 2. In the Filter toolbar, type network.enableIDN. 3. Ensure that the the value for this item is set to false. Regards, Sander -- ----------------------------------------------------------- "Sander Nyman"<2sanderDESPAM at DESPAMsbcglobal.net> ----------------------------------------------------------- Put your hand on a hot stove for a minute, and it seems like an hour. Sit with a pretty girl for an hour, and it seems like a minute. THAT'S relativity. - Albert Einstein -- Warpstock 2005 - Hershey, Pennsylvania, Oct. 6-9 http://www.warpstock.org Warpstock Europe 2005 - Dresden, Germany, Nov. 18-20 http://www.warpstock.net [Moderator's note: All posts are sent without guarantee to the accuracy of the content. We try to verify details and URLs but this is an entirely volunteer run list, so 100% fact checking and the quality/useability of products announced here is impossible. If you respond to this post please remove the DESPAM from the poster's email addresses. Please do not send requests for information about a specific post to the moderator unless it is an update or I sent it.] -- To unsubscribe yourself from this list, send the following message to majormajor at os2voice.org unsubscribe news your.email.address at here end Or, visit http://www.os2voice.org/MailingLists.html If you have an announcement you would like posted to the VOICE News list, please send it to submit at os2voice.org or go to http://www.os2voice.org/fSubNews.html . Please include a valid reply address and a real contact name. If you wish to comment on this post, please reply to feedback at os2voice.org