Firefox 2.0.0.8 Security Update, 18 October 2007

Mozilla released a security update for Firefox, including MFSA 2007-35 and MFSA 2007-29 which are identified as critical.

Release Notes, Firefox 2.0.0.8

• MFSA 2007-36 -- URIs with invalid %-encoding mishandled by Windows
• MFSA 2007-35 -- XPCNativeWrapper pollution using Script object
• MFSA 2007-34 -- Possible file stealing through sftp protocol
• MFSA 2007-33 -- XUL pages can hide the window titlebar
• MFSA 2007-32 -- File input focus stealing vulnerability
• MFSA 2007-31 -- Browser digest authentication request splitting
• MFSA 2007-30 -- onUnload Tailgating
• MFSA 2007-29 -- Crashes with evidence of memory corruption (rv:1.8.1.8)

If you have Firefox set to "ask" (Tools > Options > Advanced > Update), get the update now rather than waiting for it to be offered. It is as easy as 1, 2, 3:

1. Select Help > Check for updates

2. Click Download & Install Now

3. Click Restart Firefox Now


Since it is that simple, go ahead and update now.