New Firefox Version Fixes 7 Security HolesMozilla this week pushed out a new version

Mozilla this week pushed out a new version of its Firefox Web browser to mend at least seven security holes in the program, including at least four flaws that attackers could use to install software on vulnerable computers.

Firefox version 1.5.0.7 patches several serious security vulnerabilities, including a potential threat to the security of the browser's automatic update functionality, as well as one demonstrated last month that could allow bad guys to fool the browser into accepting perfectly forged digital certificates of the sort typically used to verify the authenticity of a secure Web site or digitally signed e-mail.

If you are using any version of Firefox 1.5, the browser should download and install the update automatically, and alert you that a restart of the browser is needed. If you are using an older version of Firefox, it's time to uninstall the old version (might want to back up that profile first) and upgrade to the latest version.

Source​