Security is a process and not a feature. One of the easier tasks is keeping up with updates. FireFox (2.0 and 1.5) and Thunderbird each have security updates coming. They should automatically notice the new versions and offer to update it, but you may need to force it manually if you've somehow disabled updates, or you are working with an older (pre-auto-update) version.