Four critical patches for Firefox 2

The Mozilla team has fixed a total of twelve security problems in its new version 2.0.0.15 of Firefox. Four are classed as critical, i.e. could allow the injection of external code. Details of each vulnerability can be found on the Mozilla Security Advisory web page, via the link below.

The Mozilla team is recommending all users to switch to Firefox version 3, but will continue to release security and stability updates for the still widely-used predecessor version until mid-December 2008. Heise's browser statistics for the first two days of July show that although Firefox 2 still has a 25 per cent share, it has already been overtaken by Firefox 3 with a 32 per cent share.

There is still no update for the security problem reported directly after Firefox 3's release.

The latest version 2 releases are available to download for Windows, Mac and Linux. The new version should start to be distributed via the automatic update mechanism within the next few days, or the automatic update can be triggered immediately using "Check for updates..."

The majority of the bugs also affect the internet application suite SeaMonkey, and are fixed in SeaMonkey 1.1.10, which can be downloaded here or as a localised version here.

See also:

• Fixed in Firefox 2.0.0.15, Known Vulnerabilities in Mozilla Products

(trk)