[MW Forums]

The Mozilla Foundation has released Firefox 1.0.1, an update to their popular Web browser for multiple platforms including Mac OS X. The new release is available for download from the Mozilla Web site. The updated release has improved stability and "several fixes to guard against spoofing and arbitrary code execution," according to the developers. more

[chewygoat]

The IDN fix is very welcome and in itself timely, but in general the Mac version of Firefox has been left behind when it comes to security updates. Whatever benefit there is to open source source software from a security standpoint has been lost on the Mac version. This update addresses the IDN flaw and some unspecified other flaws, but there have been known flaws with Firefox 1.0 for a long time that were addressed in Linux in short time, but not at all on the Mac, until today, finally. I'm not sure about the security flaw response time with the Windows version, but for the Mac it has been very poor indeed and I don't recommend Firefox to Mac users as a result. It may be great on other platforms, but Mac Firefox users have been treated as second class citizens by the developers.

[Hawaiian717]

I'm not sure what you mean by security fixes being made for the Linux version of Firefox but not for Mac. If you mean by nightly builds, maybe, I don't follow those.
But all three platforms were updated yesterday to 1.0.1, none have had an update to the release version of Firefox since 1.0 came out until yesterday.

[DPG4450Guy]

Peter, can you follow up to see if these same fixes will be put on "official" releases of Mozilla and Camino shortly? Thanks.

[d00d]

A Mozilla update is coming soon.

[Londoner]

It's not only Explorer and Firefox that can handle these kind of spoofs. I just ran the Secunia spoofing test (http://secunia.com/multiplebrowsersidnspoofingtest/) using the nice little Japanese Safari variant Shiira, and it spotted the spoof the same way as Firefox, i.e. instead of displaying "http://www.paypal.com/" in the address bar, it shows "http://www.xn--paypl-7ve.com/". And this version of Shiira (0.9.3) has been around since early December! I think we'll see a Safari fix shortly, as this must be a very simple thing to fix. In the meantime I urge people to try Shiira (http://hmdt-web.net/shiira/index-e.htm), which is a much nicer alternative to Safari than Firefox - and uses Safari's bookmarks!