Mozilla releases security updates

Firefox and Thunderbird for Windows, Mac and Linux affected

[phranque]

from CNET News.com [news.com.com]:

Mozilla has released updates to its Firefox browser and Thunderbird e-mail client for Windows, Mac and Linux users, the organization announced Friday.

"Due to the security fixes, we strongly recommend that all Firefox users upgrade to these latest releases," Mozilla said in a post on its development site.

"This update resolves the location.hostname vulnerability and other security and stability issues," Mike Schroepfer, vice president of engineering at Mozilla, said in a statement.

The location.hostname vulnerability that Schroepfer referred to was the Firefox cookie flaw discovered by Michal Zalewski, an "ethical hacker" from Poland.

this is the update page for Firefox version 2.0.0.2 [GetFirefox.com].
this is the update page for Firefox version 1.5.0.10 [mozilla.com] (until april 24, 2007).
this is the update page Thunderbird version 1.5.0.10 [GetThunderbird.com].

[encyclo]

Glad to see that Mozilla is still fully supporting Firefox 1.5 rather than forcing an upgrade to 2.x which is not always possible on some platforms and systems. The update process should take care of the rest.