Mozilla have released Firefox 3.6.21 and 6.0.1, available from the built-in update system. This release is not due to any problems with Firefox, and it does not contain any updates for Firefox. The only change from the previous version is to remove a root CA digital certificate due to a compromised .google.com certificate issued by DigiNotar. There are reports of the compromised certificate being used in the wild.
The removal of the DigiNotar root CA will effect all websites that have certificates issued by DigiNotar. Sites using DigiNotar certificates will give security errors when you try to access them after installing this update, for example the Dutch government use DigiNotar for its secure sites.
Google and Microsoft are taking similar action:
http://googleonlinesecurity.blogspot.co ... iddle.html" onclick="window.open(this.href);return false;
http://blogs.technet.com/b/msrc/archive ... 07712.aspx" onclick="window.open(this.href);return false;
Firefox 3.6.21 & 6.0.1 released
-
- 3StarLounger
- Posts: 361
- Joined: 24 Jan 2010, 14:24
- Location: Buckinghamshire, England
-
- Administrator
- Posts: 78608
- Joined: 16 Jan 2010, 00:14
- Status: Microsoft MVP
- Location: Wageningen, The Netherlands
Re: Firefox 3.6.21 & 6.0.1 released
Thanks! The update refused to install the first time I tried, but the second time it went smoothly.
Best wishes,
Hans
Hans
-
- PlatinumLounger
- Posts: 5416
- Joined: 24 Jan 2010, 08:33
- Location: A cathedral city in England
Re: Firefox 3.6.21 & 6.0.1 released
No problem on my work machine, although it did baulk at "effect"/"affect"!
John Gray
"(or one of the team)" - how your hospital appointment letter indicates that you won't be seeing the Consultant...
"(or one of the team)" - how your hospital appointment letter indicates that you won't be seeing the Consultant...
-
- PlutoniumLounger
- Posts: 15647
- Joined: 24 Jan 2010, 23:23
- Location: brings.slot.perky
Re: Firefox 3.6.21 & 6.0.1 released
Same here. On the second shot I had an option read something like "Apply the already-downloaded updates?" as if the d/l worked, but the installation was one-step out of synchronization.HansV wrote:Thanks! The update refused to install the first time I tried, but the second time it went smoothly.
SPREAD THE WORD I'm using the most up to date version of some software
He who plants a seed, plants life.
-
- Administrator
- Posts: 78608
- Joined: 16 Jan 2010, 00:14
- Status: Microsoft MVP
- Location: Wageningen, The Netherlands
Re: Firefox 3.6.21 & 6.0.1 released
Surely you baulked, not your PC?John Gray wrote:No problem on my work machine, although it did baulk at "effect"/"affect"!
Best wishes,
Hans
Hans
-
- Administrator
- Posts: 78608
- Joined: 16 Jan 2010, 00:14
- Status: Microsoft MVP
- Location: Wageningen, The Netherlands
Re: Firefox 3.6.21 & 6.0.1 released
W00t!ChrisGreaves wrote:SPREAD THE WORD I'm using the most up to date version of some software
Best wishes,
Hans
Hans
-
- PlatinumLounger
- Posts: 5416
- Joined: 24 Jan 2010, 08:33
- Location: A cathedral city in England
Re: Firefox 3.6.21 & 6.0.1 released
I have a very intelligent and spelling-/grammar-aware PC!HansV wrote:Surely you baulked, not your PC?John Gray wrote:No problem on my work machine, although it did baulk at "effect"/"affect"!
John Gray
"(or one of the team)" - how your hospital appointment letter indicates that you won't be seeing the Consultant...
"(or one of the team)" - how your hospital appointment letter indicates that you won't be seeing the Consultant...
-
- 3StarLounger
- Posts: 361
- Joined: 24 Jan 2010, 14:24
- Location: Buckinghamshire, England
Re: Firefox 3.6.21 & 6.0.1 released
Hot on the heels of 3.6.22/6.0.1, Mozilla are currently building Firefox versions 3.6.22 and 6.0.2. The last update blocked sum certificates that shouldda bean whitelisted, specially those used on sum Dutch government sights. I expect the release within the next 24 hour's.
Tony
-
- Administrator
- Posts: 78608
- Joined: 16 Jan 2010, 00:14
- Status: Microsoft MVP
- Location: Wageningen, The Netherlands
-
- Panoramic Lounger
- Posts: 8188
- Joined: 25 Jan 2010, 09:09
- Location: retirement
Re: Firefox 3.6.21 & 6.0.1 released
I'll gloss over the abuse of the apostrophe and carry on waiting for the release of 3.6.22.TonyE wrote:24 hour's.
Ken
-
- 3StarLounger
- Posts: 361
- Joined: 24 Jan 2010, 14:24
- Location: Buckinghamshire, England
Re: Firefox 3.6.21 & 6.0.1 released
Will you gloss over the other errors in that poststuck wrote:I'll gloss over the abuse of the apostrophe and carry on waiting for the release of 3.6.22.TonyE wrote:24 hour's.
Though Mozilla have created Firefox 3.6.22 and 6.0.2 they have not released them. They are considering including further patches relating to the DigiNotar certificates and may create new versions of 3.6.22 and 6.0.2. In the meantime the Dutch may not be able to submit their tax returns
Tony
-
- Panoramic Lounger
- Posts: 8188
- Joined: 25 Jan 2010, 09:09
- Location: retirement
Re: Firefox 3.6.21 & 6.0.1 released
Only some of the Dutch. I believe there is one notable Dutchman who describes himself as an "unrepentant IE user".TonyE wrote:the Dutch may not be able to submit their tax returns
Ken
-
- Administrator
- Posts: 78608
- Joined: 16 Jan 2010, 00:14
- Status: Microsoft MVP
- Location: Wageningen, The Netherlands
Re: Firefox 3.6.21 & 6.0.1 released
The deadline for completing tax returns in The Netherlands is the 1st of April (and that's not a joke!), so most people (including me) will not have a problem. Only those who asked for an extension until the 1st of September are affected by the DigiNotar problem, and they can use a different browser or an older version...
Best wishes,
Hans
Hans
-
- Administrator
- Posts: 78608
- Joined: 16 Jan 2010, 00:14
- Status: Microsoft MVP
- Location: Wageningen, The Netherlands
Re: Firefox 3.6.21 & 6.0.1 released
About half an hour ago ago, the Dutch government announced that it won't be using DigiNotar's certificates anymore. DigiNotar failed to notify the Dutch government that DigiNotar servers had been hacked, and there are reports that DigiNotar continued to issue false certificates after it learned of the hack.
Dutch citizens won't be able to use some online government services until new certificates from another provider have been installed.
Dutch citizens won't be able to use some online government services until new certificates from another provider have been installed.
Best wishes,
Hans
Hans