Some of you may have noticed that I don't treat 'vulnerabilities' that serious, and I am certainly not the one rushing for updates. Now, here's my recommendation.
geffr wrote:We're getting close to the cutoff date where Mozilla is going to end support for Firefox 1.5.x. While I plan to stay with FF 1.5.x until there is a serious security issue, at that time I will have to change browsers as I'm still on Win 98 & 2.0.x just doesn't play well with Win 98 & likely never will. (BIG memory leaks & some pages load REALLY slow).
If you are careful with your surfing behaviour, I would say that staying in Firefox 1.5.0.x will be fine, at least for quite a while.
From my observations, reports from Mozilla and especially from Secunia do have a tendency of over-exaggerating and in many cases kind of scaring people. Kind of like salesperson, telling customer to upgrade their products. I am not saying you should ignore 'vulnerabilities' reported, but please, try to read what exactly the vulnerabilities are about
and pay less attention to the critical rating given by Secunia. I am sure you can find some descriptions of vulnerabilities can be easily avoided without the need of upgrade, as well as outrageous critical rating.
My suggestion: relax a bit. You will be fine with latest 1.5.0.x series for a period of time.
UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2