The Mozilla Foundation has removed at least ten vulnerabilities from its browser, three of which were classified as critical by the developers.
The Mozilla developers discovered various bugs in the Mozilla Browser Engine; although they are not described in more detail it is understood that they were capable of crashing the browser and thus giving attackers the ability to inject and execute malicious code. The bug described in MFSA 2008-01 also affects the Thunderbird mail client. The next version of Thunderbird will include a fix.
A new class of problems lets a malicious app pre-configure an invisible privilege update.
New Hack language adds static typing and other conveniences.
New crypto policy system will offer easier configuration and more uniform security.
Ubuntu founder denounces insecurity in proprietary, close-source software blobs.
Vulnerability affects many Linux web servers
Donors will get to vote on new features for the free video editor.
Debian project puts init out to pasture and says no to Ubuntu's Upstart.