From the Register. . .

The Mozilla Foundation has patched a faulty patch that was itself subject to a security vulnerability.

A security update for Firefox and the SeaMonkey application suite issued in mid-December left users open to a JavaScript-related privilege escalation flaw that meant hackers could commandeer vulnerable machines, Mozilla warned on Monday.

The security bug affecting Firefox 1.5.0.9 and 2.0.0.1 as well as SeaMonkey 1.0.7 meant code designed to fix earlier flaws introduced a critical vulnerability. This vulnerability, which allowed scripts from web content to execute arbitrary code, was arguably worse than the bugs it tried to resolve because simply disabling JavaScript does not protect against the flaw.

FULL STORY

What else is new? Mozilla has just adopted M$ tradition of screwing up windows patches :-)

i_XpUser

Old news, this was fixed last week. It also was released the day after the flaw was found as well. You will not get taht sort of quick responce from M$.

May I ask a question please?

I'm not a Firefox user (although I have nothing against their browser) but at one time you used to have to install a new Firefox version to fix each security issue.

Do they now, as a general rule, issue add-on security patches MS style (but quicker maybe LOL)?

Just educating myself....

DerekW

It just updated Firefox with the patch. You also can downloaad the full version of FF 2.0.0.2