Google's been busy dealing with Android bugs lately, and now they've one more to deal with. After the text messaging issue and Nexus S reboot problem (both of which are either fixed or will be soon), it's been revealed that 2.3 has a security issue that allows access to a user's microSD card. Xuxian Jiang, a computer security researcher at North Carolina State University, discovered that the bug could allow a website to access data on a user's microSD card, like photo, voicemails, and banking info, and upload it to a server. The hole has apparently been in Android for a while and was thought to be fixed, but Jiang was able to find an easy workaround. Google is reportedly working on a fix that'll be included in a Gingerbread maintenance update, although no ETA for that update has been given.
While this new bug sounds pretty serious, the good news is that there are a couple of ways to avoid falling victim to it, like disabling Javascript or switching to an alternate browser for the time being. Those may not be ideal solutions, but considering how quickly Google's been responding to bugs lately, I've got a feeling that this new maintenance update will be coming along sooner rather than later.