It turned out Mozilla only needed a couple of days to release the needed fixes for a couple of security vulnerabilities disclosed in the last few days. One uncovered last week during the CanSecWest Pwn2Own contest; the other published a couple of days ago by an Italian hacker.
While Firefox 3.0.8 fixes only these two critical security bugs, another was already on schedule for release on mid-April. I think this release may delay Firefox 3.0.9 release a bit, but should still come out in April.
To update, in the Help menu, select Check For Updates… and follow the onscreen instructions if you are not automatically prompted before that.