Software Update: Mozilla Thunderbird 17.0.8

The Mozilla Foundation has released an update for version 17 of Thunderbird. Mozilla Thunderbird is an open source email and newsgroup client, with features such as support for several mail and news accounts, a junk mail filter, spell checker, and a customizable look and feel. New in version 17 is that the menu button is now visible to new users by default and under Windows the tabs are shown in the title bar. Version 17.0.8 fixes several security vulnerabilities.

Fixed in Thunderbird 17.0.8

• MFSA 2013-75 Local Java applets may read contents of local file system
• MFSA 2013-73 Same-origin bypass with web workers and XMLHttpRequest
• MFSA 2013-72 Wrong principal used for validating URI for some Javascript components
• MFSA 2013-71 Further Privilege escalation through Mozilla Updater
• MFSA 2013-69 CRMF requests allow for code execution and XSS attacks
• MFSA 2013-68 Document URI misrepresentation and masquerading
• MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater
• MFSA 2013-63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8)

The following downloads are available:
Mozilla Thunderbird 17.0.8 for Windows (English)
Mozilla Thunderbird 17.0.8 for Linux (English)
Mozilla Thunderbird 17.0.8 for OS X (English)
Mozilla Thunderbird 17.0.8 for Windows (English)
Mozilla Thunderbird 17.0.8 for Linux (English)
Mozilla Thunderbird 17.0.8 for OS X (English)
Mozilla Thunderbird 17.0.8 for Windows (Frisian)
Mozilla Thunderbird 17.0.8 for Linux (Frisian)
Mozilla Thunderbird 17.0.8 for OS X (Frisian)