ALARM Group ALERT - click for a description of ALARM, The Computing Alert System

Alert Number: 032608-01
Alert Date: 03/26/08
Alert Title: Updates available for Mozilla products
Update-to: None.
OS/Platform/Application:
Mozilla Firefox all versions older than 2.0.0.13
Mozilla Thunderbird all versions older than 2.0.0.13 -release date to be determined**
Mozilla SeaMonkey all versions older than 1.1.9

(on all supported platforms)

Category: ALERT
Severity: HIGH
Attention: Mozilla products users, System Administrators, Desktop Support Personnel


Summary: On March 25 2008 The Mozilla Foundation announced the release of updated versions of two of its most popular products.  Mozilla Firefox 2.0.0.13 and SeaMonkey 1.1.9 address multiple security vulnerabilities, including several rated as "critical" by the vendor.

**NOTE: In addition to updates available now for Firefox and SeaMonkey, Mozilla developers and various Internet Security resources are hinting that Thunderbird 2.0.0.13 will be released "Shortly".  Thunderbird 2.0.0.13 is presumed to address security vulnerabilities that affect previous versions of Thunderbird.


Recommended Actions:   Firefox and SeaMonkey users and system administrators/support personnel are encouraged to read the security advisories (safe links provided below) and install the updated versions of the applicable software as soon as possible.  Thunderbird users are encouraged to watch for version 2.0.0.13 and install it as soon as it is made available from the vendor.

Readers are encouraged to share this alert with family, friends, and associates who may use Mozilla products on their home PCs.


ITS Actions: N/A


Resources:

List of vulnerabilities fixed in Firefox 2.0.0.13:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox

List of vulnerabilities fixed in SeaMonkey 1.1.9:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#SeaMonkey

Mozillazine weblog detailing progress on Thunderbird 2.0.0.13:
http://weblogs.mozillazine.org/rumblingedge/archives/2008/03/tb_2-0-0-13.html

Firefox download page:
http://www.mozilla.com/en-US/

SeaMonkey download page:
http://www.seamonkey-project.org/releases/

SecurityFocus Advisory:
http://www.securityfocus.com/bid/28448

SANS Advisory:
http://isc.sans.org/diary.html?storyid=4196