Congratulations to Apple! Having released an insecure browser for Windows, it has raced to patch some holes, and version 3.01 is already available.
According to Apple's release note, 3.01 fixes a command injection vulnerability, an out-of-bounds memory read issue, and a cross-site scripting vulnerability.
The Safari download is at http://www.apple.com/safari/download/
It will not be a big surprise if 3.02 follows because Safari is "in play" (at least for now) and Apple needs to protect its reputation for security.
