Fedora has issued an update for firefox and xulrunner. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, and potentially compromise a user's system.

For more information:
SA41244
SA41975

Solution
Apply updated packages using the yum utility ("yum update firefox xulrunner").
Original Advisory
FEDORA-2010-16885:
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050153.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050156.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers