The Mozilla Foundation, which develops Firefox and other Mozilla-based software such as the Thunderbird email client, on Wednesday issued a Firefox update -- version 1.0.7 - fixing the flaw, as well as a week-old security bug in the handling of International Domain Names (IDN).