Mozilla has released the first (there was no Firefox 3.6.1) update for Firefox 3.6 about a week early. Besides including 100 bug fixes, this emergency release also addresses a critical exploit discovered last week.

Most notable in this release is a patch for a critical security vulnerability disclosed last week that could lead to remote code execution due to incorrect handling of a variable in the WOFF (Web Open Font Format) decompression routine. WOFF support is a new feature introduced in Firefox 3.6 so previous versions of Firefox are unaffected.

The final update for Firefox 3 (3.0.19) and the next routine update for Firefox 3.5 (3.5.9) are still scheduled for March 30th. Users should be prompted soon to update, but can obtain this update via Help the Menu and selecting Check For Updates…

For complete  list of changes and more information, please see the Firefox 3.6.2 Release Notes.

Source: Mozilla Links