The final update to the legacy branch

Apr 10, 2010 08:26 GMT  ·  By

Those still relying on a desktop email client have probably moved to Thunderbird 3 by now, but, if you haven't, Mozilla developers are not leaving you behind entirely. The venerable Thunderbird 2 has been updated with the latest release, Thunderbird 2.0.0.24, patching a few security holes and fixing several stability bugs. In total, five security vulnerabilities have been dealt with, three of which were critical, and eight other bugs were patched. Mozilla says this is the last security update for Thunderbird 2.

"Thunderbird 2.0.0.24 is available for Windows, Mac, and Linux for free download. We recommend that users keep up to date with the latest stability and support versions of Thunderbird, and encourage all our users to upgrade to the very latest version, Thunderbird 3.0.4 or Thunderbird 2.0.0.24," Mozilla announced.

"We strongly recommend that all Thunderbird users upgrade to these releases. If you already have Thunderbird, you will receive an automated update notification within 24 to 48 hours. Please note: This is the last planned security and stability release for Thunderbird 2.0.0.24," the announcement warned.

Security vulnerabilties fixed in Mozilla Thunderbird 2.0.0.24:

· TreeColumns dangling pointer vulnerability - Critical; · Heap buffer overflow in string-to-number conversion - Critical; · Fixes for potentially exploitable crashes ported to the legacy branch - Critical; · NTLM reflection vulnerability - High; · Download filename spoofing with RTL override - Low.

The update also fixes several crash bugs and a few less critical issues. A couple of problems that were fixed had to do with drive space usage. One issue enabled mailboxes to grow beyond 4GB, while another bug created a 4 GB trash file in some cases.

The successor to Thunderbird 2, unsurprisingly, Thunderbird 3, was launched several months ago. It has seen several minor updates since and the Mozilla Messaging developers are getting ready for the first bit update, Thunderbird 3.1. A beta for the latest version is already available.

Mozilla Thunderbird 2.0.0.24, 3.0.4 and 3.1 Beta 1 for Windows are available for download here. Mozilla Thunderbird 2.0.0.24, 3.0.4 and 3.1 Beta 1 for Mac are available for download here. Mozilla Thunderbird 2.0.0.24, 3.0.4 and 3.1 Beta 1 for Linux are available for download here.