Security update for shell: extenal protocol vulnerability

[Asa Dotzler]

Today, the Mozilla team released a configuration change which fixes the
shell: external protocol vulnerability by explicitly disabling the use
of the shell: external protocol handler. The fix is available in a small
patch or in the newest full release of each of these products.

The XPI patch for all of Mozilla, Firefox and Thunderbird is available
at
http://ftp.mozilla.org/pub/mozilla.org/mozilla/releases/mozilla1.7.1/shellblock.xpi

New Windows builds of Mozilla, Firefox, and Thunderbird are available at:
http://ftp.mozilla.org/pub/mozilla.org/mozilla/releases/mozilla1.7.1/mozilla-win32-1.7.1-installer.exe
http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/0.9.2/FirefoxSetup-0.9.2.exe
http://ftp.mozilla.org/pub/mozilla.org/thunderbird/releases/0.7.2/ThunderbirdSetup-0.7.2.exe

More information and detailed instructions about updating your Mozilla
applications can be found at http://mozilla.org/security/shell.html

--Asa