Mozilla, the company behind Firefox, has updated Thunderbird its email application.

The new update closes two security holes through which attackers can inject malicious code.

Both vulnerabilities are related to JavaScript, although it is disabled by default in Thunderbird and the Mozilla developers explicitly warn against activating it.

The update can be automatically downloaded and installed by clicking on the "Check for updates" option in the Help menu, but an updated version of the complete installer is also available on the Mozilla servers.

Mozilla are recommending all users update the application.

>> Link - Thunderbird