The timeline on this bug is intersting to me.
A patch to fix it was avaliable within 6 hours
after the exploit was posted and within 18
hours people who had not patched were protected
by changes to the mozilla.org update server.
This shows the power of open source when compared
to the months or even years a certain proprietary
browser maker has taken to release security updates
after the exploits were public.
2005-05-07 16:26 PDT Original posting of vulnerability
2005-05-07 22:32 PDT Patch to fix it available through bugzilla
2005-05-08 09:57 PDT or earlier Mozilla.org adjusted to protect even users who had not patched Firefox.
|