From: CNet.com —

The Mozilla consortium this week released Firefox 3.0.4, which reportedly fixes a dozen flaws, six of which Mozilla rated as ‘critical’. Version 2.x users can get an update to version 2.0.18 which fixes the same problems. However, Mozilla is encouraging all 2.x users to update to version 3.x as soon as possible.

As CNet’s Robert Vamosi reports, “Among the critical is one that could allow an attacker privilege escalation after a session restore. Another could allow arbitrary code to execute with compromised Flash media files.”

Updates are being pushed automatically to Windows users. Mac users, however, must apparently update their Safari browsers manually.