drhowarddrfine - 10:59 am on Mar 23, 2010 (gmt 0)
Then this is craziness. The listed vulnerability has to do with downloadable fonts, something few people are doing yet. Not that a malicious site couldn't do it today but, as usual, a fix was created a couple days ago and is being tested before being released next week. It only affects version 3.6 also.