<a href="http://www.news.com/8301-10784_3-9823744-7.html?part=rss&subj=news&tag=2547-1_3-0-5">CNet is reporting</a> that Mozilla has released an update to Firefox which patches 3 critical security issues:

<blockquote style="margin-left:5px">The first cross-site request forgery vulnerability could allow an attacker to generate a fake HTTP Referer header by exploiting a timing condition when setting the window.location property....
The second cross-site request forgery concerns the jar zip format enabling web sites to load pages packaged in zip archives containing signatures in java-archive format.</blockquote>

More info about the issue can be found on <a href="http://www.news.com/8301-10784_3-9823744-7.html?part=rss&subj=news&tag=2547-1_3-0-5">CNet&apos;s  article</a> and the update is available for download via <a href="http://www.mozilla.com/en-US/firefox/?from=getfirefox">Mozilla Firefox&apos;s site</a>.