Mozilla pushed out a new update of Firefox on Thursday that fixes ten security vulnerabilities, three of which are deemed critical.

The trio of critical patches for Firefox 2.0.0.12 variously fix vulnerabilities including web browsing history and forward navigation stealing bugs; a privilege escalation flaw that creates a possible mechanism to run cross site scripting exploits and also poses a malware injection risk; and a memory corruption bug in the popular open source browser. A full list of the flaws can be found here.

The Firefox update completes a busy week for client software update, with patches for Adobe Reader, Skype and QuickTime all arriving this week. Client-side versions of Java also need updating. Next week promises the arrival of a dozen patches from Microsoft, on a special Valentine's Day edition of Patch Tuesday, seven of which earn the dread rating of critical. The critical updates cover a variety of unspecified flaws in IE, Office and Windows as explained in Microsoft's alert here.

Security notification firm Secunia reported on Thursday that progress in installing the then available patches has been slow. Reason enough, you'd think, for sys admins to put in for overtime even before Microsoft's update next Tuesday. ®

Related stories

• Firefox developers tinker with new security protections (finally) (20 May 2008)
• Firefox language pack provides adware back-door (8 May 2008)
• Google launches security group for open source (6 May 2008)
• Firefox and Safari updates tackle alternative browser bugs (17 April 2008)
• Attackers hose down Microsoft's Jet DB Engine (26 March 2008)
• Critical Outlook and Excel bugs star in March Patch Tuesday (12 March 2008)
• Mozilla reaches stage 4 of Firefox 3 beta endurance test (11 March 2008)
• Opera screeches at Mozilla over security disclosure (18 February 2008)
• Mozilla 2 promises big change (14 February 2008)
• Firefox 3 beta is live (13 February 2008)
• Microsoft dishes out six critical updates (13 February 2008)
• Stealthy Adobe Reader update fixes mystery security bugs (7 February 2008)
• Skype squishes cross-zone scripting bug (6 February 2008)
• SkypeFinds another security snafu (1 February 2008)
• Mozilla security chief confirms data leakage bug in Firefox (24 January 2008)
• Microsoft plugs 'critical' hole in Vista (8 January 2008)
• Mozilla rubbishes IE Firefox security study (3 December 2007)
• Firefox update puts lid on Jar bug (27 November 2007)
• Firefox version 3 makes beta (20 November 2007)