ALARM Group ALERT - click for a description of ALARM, The Computing Alert System Alert Number:  110806-01 Alert Date:  11/8/06 Alert Title:  Mozilla releases version 1.5.0.8 of Firefox and Thunderbird Update-to:   None OS/Platform/Application:  Mozilla Firefox and Thunderbird versions < 1.5.0.8 Category:  ALERT Severity:  MEDIUM Attention:  System Administrators, Desktop Support Personnel, Mozilla users

Summary:  On November 7 2006 The Mozilla Foundation announced the release of updated versions of its popular FireFox web browser and Thunderbird eMail Client.  According to the vendor, version 1.5.0.8 address multiple security vulnerabilities (including at least three rated as "critical"). 

Recommended Actions:  The latest available version of Firefox is version 2.  Persons who have chosen to still manage, maintain or use Firefox 1.5.x products are encouraged to read the update information (including any associated caveats, system requirements, etc) and (if appropriate) apply the upgrade immediately as per the instructions provided by the vendor.  Thunderbird users are encouraged to upgrade to 1.5.0.8 as this is the more recent version of code for this application.

ITS Actions:  At this time, ITS is taking no specific additional actions to address this software update release.

Resources:

Mozilla Homepage:
http://www.mozilla.org/

Mozilla Security Advisory Page (includes details of vulnerabilities addressed in
latest release):
http://www.mozilla.org/security/announce/

Mozilla Firefox 1.5.0.8 "what's new" page:
http://www.mozilla.com/en-US/firefox/releases/1.5.0.8.html#FAQ