The Browser Report

Opera 9.5b2

Now, we’ve made the fastest browser in the world even faster. Opera’s new beta is quicker to start, faster at loading Web pages and better at running your favorite Web applications.

About the security content of Safari 3.1.1

Safari 3.1.1

* Safari,
CVE-ID: CVE-2007-2398
Available for: Windows XP or Vista
Impact: A maliciously crafted website may control the contents of the address bar
Description: A timing issue in Safari 3.1 allows a web page to change the contents of the address bar without loading the contents of the corresponding page. This could be used to spoof the contents of a legitimate site, allowing user credentials or other information to be gathered. This issue was addressed in Safari Beta 3.0.2, but reintroduced in Safari 3.1. This update addresses the issue by restoring the address bar contents if a request for a new web page is terminated. This issue does not affect Mac OS X systems.

* Safari,
CVE-ID: CVE-2008-1024
Available for: Windows XP or Vista
Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
Description: A memory corruption issue exists in Safari’s file downloading. By enticing a user to download a file with a maliciously crafted name, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of file downloads. This issue does not affect Mac OS X systems.

* WebKit,
CVE-ID: CVE-2008-1025
Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.2, Mac OS X Server v10.5.2, Windows XP or Vista
Impact: Visiting a malicious website may result in cross-site scripting
Description: An issue exists in WebKi’s handling of URLs containing a colon character in the host name. Opening a maliciously crafted URL may lead to a cross-site scripting attack. This update addresses the issue through improved handling of URLs. Credit to Robert Swiecki of Google Information Security Team and David Bloom for reporting this issue.

* WebKit,
CVE-ID: CVE-2008-1026
Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.2, Mac OS X Server v10.5.2, Windows XP or Vista
Impact: Viewing a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution
Description: A heap buffer overflow exists in WebKit’s handling of JavaScript regular expressions. The issue may be triggered via JavaScript when processing regular expressions with large, nested repetition counts. This may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing additional validation of JavaScript regular expressions. Credit to Charlie Miller, Jake Honoroff, and Mark Daniel working with TippingPoint’s Zero Day Initiative for reporting this issue.”

(Via .)

Macworld | Review: Safari 3.1

“Macworld’s recent review of Safari 3.0.4 () highlighted the browser’s excellent—and constantly updated—support for modern Web standards. Continuing that trend, the just-released Safari 3.1 not only stays at the head of the pack in standards support, but also becomes the first browser to work with such up-and-coming technologies as CSS Animations and the audio and video tags in HTML version 5, which is still in draft mode.”

(Via Macworld.com)

Inside Firefox 3 video from CNET TV takes us on a 1:40 minute “Insider Secrets” tour of the ins-and-outs of the latest version of Firefox guided by Randall Bennett.

Firefox 3 beta 5 portable edition available - safest way to try out FF3b5 - Download Squad

: “But you can also install a portable application like Firefox 3 beta 5 portable edition to any folder on your hard drive. Why would you want to do that? Because then you can try out the latest test version of Firefox without overwriting any of your Firefox 2 settings.”

(Via Download Squad.)

In addition to today’s release, Mozilla also indicated that the source code of the final release candidate will be frozen next Wednesday, April 8th.

According to downloadsquad.com:

Firefox 3 beta 5 features tighter integration with the Windows, Mac, and Linux operating system. That means you have native icons and interface widgets. The OS X version supports Growl notifications, and the Linux version uses the native GTK theme.

According to Mashable:

However, I can still tell you what’s new in Firefox 3 Beta 5. In continuing some of the more notable updates to the overall Firefox 3 release, Beta 5 includes more personalized options. For instance, a Places Organizer lets you better manage your bookmarks, tags and browsing history, with search capabilities, smart folders, multiple views, and saved frequent searches. That should also give you a few more restore settings to save you when your browser crashes because you’re testing Beta 5.

Other updates include integration with Windows and Macs, with improved icons and the use of native interface widgets in the browser and web forms. Linux integration also uses native icons/buttons/menu styles. Lastly, thanks to improvements to the JavaScript engine and profile-guided optimizations, the speed of Firefox 3 Beta 5 has been increased, so your apps will run faster. See here for previous coverage of Firefox 3.

Wired’s Compiler blog adds these notes about the newest beta:

• 755 bug fixes, including all Firefox 3 P1 blockers (these are the top priority must-fix bugs).
• Improved performance. Dotzler says Beta 5 is even faster than Beta 4 according to Mozilla’s own testing. We here at Compiler found that Beta 4 is already extremely fast, so that’s good news.
• This release was prepared in a very compressed beta cycle of three weeks.

Here are the official Release Notes from Mozilla.

Opera press release:

Opera today released the beta preview of Opera Mini, the newest version of the award-winning browser that works on almost every mobile phone. Opera Mini 4.1 improves the way Opera Mini interacts with your phone to make browsing more convenient, more productive and definitely more fun. Opera Mini is available to download for beta testing at http://www.operamini.com/beta

They claim it’s “up to 50% faster than 4.0.” There are a bunch of seemingly-useful features like saving sites for offline viewing, find-on-page, and auto-complete.

They have a video Opera Mini 4.1b Guided Tour.

Dan Burkhart, Flock’s VP of Marketing, notes

With the decision to cease ongoing support of the Netscape browser, we are honored to have the support and endorsement of AOL and Netscape, who have introduced Flock to millions of loyal Netscape users as AOL sunsets ongoing support for the Netscape products in the field. Tom Drapeau from Netscape has been instrumental in helping increase awareness of the Flock browser, and by doing so has introduced a global audience of people to the unique experience that only the Flock browser delivers.

Flock is designed to support and enhance the way that we use the web today. We appreciate Tom’s assistance in helping get the word out, and encourage you to be a champion of innovation by telling your friends about your experience with Flock as well. If you like the idea of people working late nights to deliver a free product to you, so that you can get more enjoyment out of your daily web experience, please lend a hand.

Netscape ruled, and now Flock rocks! We’re committed to keeping the Netscape’s original spirit of innovation alive and well.

Ars Technica’s Infinite Loop blog is reporting Net Applications data showing that as of March 2008 84.36% of Safari users are using version 3, compared to 9.96% on version 2.0 and 5.67% on version 1.

Overall Safari usage rebounded after slipping slightly in February to match the high water mark set in January at 5.82%.

Mac OSX has 7.48% marketshare according to this data. Of that, 60.69% is using Intel chips.