http://blog.washingtonpost.com/securityfix/2006/04/security_updates_for_firefox_o.htmlMozilla has issued a new version of Firefox to fix multiple, serious flaws in the open-source browser, including at least five vulnerabilities that hackers could deploy on malicious Web sites to install malware if users visited the sites with vulnerable browsers.
The new versions of Firefox, v. 1.5.0.2, and v. 1.0.8, were issued as part of a massive upgrade that fixes 22 different security flaws in various Mozilla products, including the Thunderbird e-mail program and the Mozilla Suite.
If you are using Firefox 1.5 or later, you should receive a pop up window saying that an update has been downloaded and is ready to install. Firefox users who are still running the standard Firefox version (prior to 1.0.8 -- you can check which version by clicking on "Help" in the pull down menu and selecting "About Mozilla Firefox.") can update to v. 1.0.8 from Mozilla's FTP site.
I have the older version of Firefox installed on one of my PCs, and I have to say I like the newer model (v. 1.5.x) better (OK, I'm somewhat partial to the not-so-subtle auto-updating function.) Plus, this latest update seems to be playing especially nice with the Firefox extensions I have installed, whereas Firefox versions prior to 1.5.x always seem to need a day or two before some of my extensions work after an upgrade.
Secunia
http://secunia.com/advisories/19631/Frsirt
http://www.frsirt.com/english/advisories/2006/1356