America Online Inc. is set to release an update to its Netscape Web browser in August, but it wont be coming out on Aug. 3 as has been widely speculated.
The Netscape Store Web site, which sells CD copies of the browser suite, had listed Aug. 3 as a ship date for the browser. News that Netscape Navigator 7.2 would be available on that date spread this week among online message boards and on Slashdot.
The word from AOL: Not so fast.
The date referred not to a general release but to a deadline for placing early orders of the browser update on CD, said AOL spokesman Andrew Weinstein on Thursday.
“It was not a release date, but online users can order a CD up to that date to be sent by mail after that,” Weinstein said.
But the date isnt too far off target. Weinstein confirmed that Netscape 7.2 will be available soon after that date—within the first two weeks of August, both on CD and as a free download from Netscape.com. He declined to give an exact date.
By Thursday, the Netscape Store had changed the Aug. 3 shipping date with a note reading that the “7.2 CD will ship soon.”
Netscape 7.2 is the first update in a year to the once market-leading Web browser. It is based on the same code and Gecko rendering engine as the latest Mozilla browser suite, Version 1.7.
Many Netscape users and market analysts had expected AOL to stop releasing new versions of Netscape after AOL in July 2003 spun out the Mozilla open-source browser development group it had created about five years earlier. Mozilla is now its own independent foundation.
In May, AOL officials had confirmed that AOL was working on a Netscape update but said little about whether the move was an effort to more aggressively revive the Netscape browser or to simply maintain it.
All indications from AOL, though, point to a maintenance release with Version 7.2. More than anything, Netscape 7.2 will bring the browser in line with security and feature updates that Mozilla has undergone in the past year.
“The 7.2 upgrade is more of an iterative upgrade, and it fixes security issues,” Weinstein said. “It is based on the Mozilla core, so there are not a lot of additive features.”
Among the new features in the release will be performance enhancement, password manager improvements, improved junk mail filters and support for vCards, Weinstein said. Netscape 7.2, like past releases, also is likely to include AOL-specific features such as a new Netscape toolbar and AOL Instant Messenger.
Netscape 7.2 will be available for Windows, Mac OS X and Linux.
Next Page: Mozilla at work on pair of flaws.
Page 2
Meanwhile, Mozilla said this week that it is working to fix two security vulnerabilities that affects all of its Web browsers, both its namesake suite and the stand-alone Firefox browser. Both vulnerabilities relate to the handling of security certificates, said Chris Hofmann, director of engineering for the Mountain View, Calif., foundation.
The first vulnerability could allow an attacker to point a user to a malicious Web site where the content appears similar to a trusted site, such as a bank site, while using the security certificate from the trusted site, Hofmann said. It could give users a false sense of security.
The second problem could entice a user to accept a malicious certificate that would corrupt a users other certificates, Hofmann said.
Hofmann said he knows of no active exploits of the vulnerabilities, and security researchers have rated the flaws as moderate risks.
“Were just trying to stay ahead,” Hofmann said. “A number of small issues can pile up and be used to construct a more extensive exploit.”
Mozilla plans to issue a fix next week for the security flaws, either by issuing updates for both browsers or by releasing a security patch, Hofmann said.
Netscape 7.2 would presumably incorporate the fixes as well, but neither Mozilla nor AOL officials could confirm whether the updated Netscape browser would include the security patches.
Be sure to add our eWEEK.com enterprise applications news feed to your RSS newsreader or My Yahoo page