Attention: Firefox and Thunderbird* users, System Administrators, Desktop Support Personnel

Summary: On April 17 2008 The Mozilla Foundation announced the release of an updated versions of its popular Firefox web browser.  Update 2.0.0.14 addresses one potential security vulnerability.  

*NOTE: A previous ALARM alert (032608-01, "Updates available for Mozilla products") mentioned that Mozilla was planning on releasing Thunderbird 2.0.0.13 "Shortly".  Since the publishing of that alert Mozilla developers have announced that Thunderbird 2.0.0.13 will NOT be released but version 2.0.0.14 will be released instead.  The release date for this updated version of Thunderbird has not yet been made available to the public.

Recommended Actions:   Firefox users and system administrators/support personnel are encouraged to read the security advisory (safe links provided below) and install the updated versions of the applicable software as soon as possible. 

Readers are encouraged to share this alert with family, friends, and associates who may use Mozilla products on their home PCs.

ITS Actions: N/A

Resources:

List of vulnerabilities fixed in Firefox 2.0.0.14:
http://www.mozilla.org/security/announce/2008/mfsa2008-20.html

Firefox download page:
http://www.mozilla.com/en-US/

Mozilla Blog entry (details changes in Firefox):
http://blog.mozilla.com/blog/2008/04/16/firefox-2.0.0.14-security-and-stability-update-now-available-for-download/

*Mozilla Blog entry (details Thunderbird 2.0.0.14):
http://weblogs.mozillazine.org/rumblingedge/archives/2008/04/tb_2-0-0-14.html