From the
‘
Security in Obscurity
‘
files:
With all the hype and excitement around the Firefox Aurora and the upcoming Firefox 5 release, it’s important not to forget that Firefox 4 has never been patched.
That’s about to change.
Firefox 4.0.1 is now available to beta testers (basically people that were running Firefox 4 Betas before it hit GA).
The release notes (as they currently stand) are quite sparse:
- Fixed several security issues.
- Fixed several stability issues.
No, Mozilla has not disclosed what those security issues might be and nor should they. The disclosure and advisories will not come until the Firefox 4.0.1 release is generally available. Mozilla does not want to put users at risk by revealing security details for items that most users have not patched for.
On the stability front, by my count there are at least 52 fixed bugs in 4.0.1 that will improve the stability of the open source web browser.