Mozilla today released a security update for Firefox that fixes two vulnerabilities, one made the browser crash and the other allowed websites to retrieve the browsing history of users.
A developer discovered that websites could access information in Firefox's HTTP cache. This allowed websites to retrieve previously visited URLs and even the content of those pages. The problem only affected Firefox 48 and Firefox 49, according to Mozilla. Exact details on the issue are not available as Mozilla hides the bug report from the general public, likely till most people have updated their browser.
Firefox 49.0.2 also fixes some other non-security related bugs.
Updates can be downloaded and installed through the automatic update feature of Firefox. Manually updates can be performed by downloading the update from Mozilla.org.
