Firefox 1.5.0.5 started a few minutes ago to spread itself to users worldwide through the browser’s Auto-Update functions.

Bringing forth several security improvements, better overall stability and minor changes related to localization, Firefox 1.5.0.5 is dubbed a “security update that is part of our ongoing program to provide a safe Internet experience for our customers” by the Mozilla Foundation.

Some of the security fixes address Javascript-related vulnerabilities, Native DOM flaws and some crashes due to memory corruption.

Check below for more detailed information.

*** FIXES IN FIREFOX 1.5.0.5 ***

MFSA 2006-56 chrome: scheme loading remote content
MFSA 2006-55 Crashes with evidence of memory corruption (rv:1.8.0.5)
MFSA 2006-54 XSS with XPCNativeWrapper(window).Function(…)
MFSA 2006-53 UniversalBrowserRead privilege escalation
MFSA 2006-52 PAC privilege escalation using Function.prototype.call
MFSA 2006-51 Privilege escalation using named-functions and redefined “new Object()”
MFSA 2006-50 JavaScript engine vulnerabilities
MFSA 2006-48 JavaScript new Function race condition
MFSA 2006-47 Native DOM methods can be hijacked across domains
MFSA 2006-46 Memory corruption with simultaneous events
MFSA 2006-45 Javascript navigator Object Vulnerability
MFSA 2006-44 Code execution through deleted frame reference

*** RELEVANT LINKS ***

Download Firefox 1.5.0.5 for Windows (.exe installer, English, 4.9MB)
Download Firefox 1.5.0.5 for Mac OS X (.dmg, Universal Binary, English, 16MB)
Download Firefox 1.5.0.5 for Linux (.tar.gz, English, 8.1MB)

Download Firefox 1.5.0.5 for your operating system (.exe installer, defaults to your language, if build available)
Download Firefox 1.5.0.5 for your operating system (.exe installer, choose the desired language)

Mozilla Firefox 1.5.0.5 Release Notes

As described in the Firefox 2.0 roadmap, the first alpha release (2a) was launched in Q1 2006 (21st of March). Carrying on the established naming tradition (Firefox 1.5 - Deer Park), this “pre-feature complete alpha” is codenamed “Bon Echo“.

Intended as a testing-only release, Bon Echo Alpha 1 is targeted to web application developers and members of the Firefox testing community. Consumers should stick to the Firefox 1.5 series.

According to the aforementioned roadmap, the first feature complete Alpha will be launched in early Q2 2006, while release candidates be available in late Q2 2006.

*** WHAT’S NEW IN BON ECHO ALPHA 1 ***

- Changes to tabbed browsing behavior
- New data storage layer for bookmarks and history (using SQLlite)
- Extended search plugin format
- Updates to the extension system to provide enhanced security and to allow for easier localization of extensions
- Support for SVG text using svg:textPath
- List of notable bug fixes

*** RELEVANT LINKS ***
Bon Echo Project Homepage
Download Bon Echo Alpha 1 for Windows (.exe - 4.9MB)
Download Bon Echo Alpha 1 for Mac (.dmg - 9.5MB)
Download Bon Echo Alpha 1 for Linux (.tar.gz - 8.2MB)