
Mozilla Foundation Security Advisory 2008-35 applies to both Firefox versions.
Firefox 2.X reportedly updates automatically if the user has left update checking enabled. However, it's reported that automatic updates are disabled in Firefox 3.0, so users must download and install the updated Firefox 3.0.1 manually.
Firefox 3.0.1 is available for download here.