Firefox 2.0.0.10 was released on Monday, November 26th. The following HIGH (Vulnerability can be used to gather sensitive data from sites in other windows or inject data or code into those sites, requiring no more than normal browsing actions.) impact security issues were fixed in this build:

• MFSA 2007-39 Referer-spoofing via window.location race condition


• MFSA 2007-38 Memory corruption vulnerabilities (rv:1.8.1.10)


• MFSA 2007-37 jar: URI scheme XSS hazard

Users should get automatic notification of the new version within the next 48-hours. Alternatively users can upgrade sooner by either going to the Help Menu and selecting Check For Updates…or downloading Firefox 2.0.0.10 directly via getfirefox.com

Sources:

• Known Vulnerabilities in Mozilla Products (Fx 2.0.0.10)


• Firefox 2 Release Notes (Fx 2.0.0.10)

Related Links

Firefox:1.5.0.10-2.0.0.2 - MozillaWiki

Firefox - MozillaWiki

Firefox 2.0.0.10 Released in Beta Channel | QMO

iTWire - Firefox 2.0.0.10 nears release

Firefox 2 download - Mozilla Firefox 2 - UK

Join the Firefox 2.0.0.10 Testday - Friday, 23. November ! - mozilla ...

Firefox 2 download - Mozilla Firefox 2

Join the Firefox 2.0.0.10 Testday - Friday, 23. November ! | QMO

One More Firefox Version Currently in Labs - Mozilla cooks Firefox 2.0 ...

Mozilla Firefox 2.0.0.10 coming up