Software Update: Mozilla Firefox 1.0.5

A new version of Mozilla Firefox was released today that fixes twelve security vulnerabilities, two of which are critical. For the time being, only an English version of release 1.0.5 is available, which can be downloaded for Windows† Mac OS X or Linux† The changelog looks like this:

• Several security fixes.
  • MFSA 2005-56 Code execution through shared function objects
  • MFSA 2005-55 XHTML node spoofing
  • MFSA 2005-54 Javascript prompt origin spoofing
  • MFSA 2005-53 Standalone applications can run arbitrary code through the browser
  • MFSA 2005-52 Same origin violation: frame calling top.focus()
  • MFSA 2005-51 The return of frame-injection spoofing
  • MFSA 2005-50 Possibly exploitable crash in InstallVersion.compareTo()
  • MFSA 2005-49 Script injection from Firefox sidebar panel using data:
  • MFSA 2005-48 Same-origin violation with InstallTrigger callback
  • MFSA 2005-47 Code execution via “Set as Wallpaper”
  • MFSA 2005-46 XBL scripts ran even when Javascript disabled
  • MFSA 2005-45 Content-generated event vulnerabilities
• Improvements to stability