critique
SUSE-SU-2025:4173-1
Security update for MozillaFirefox
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.5.0 ESR (bsc#1253188) - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component. - CVE-2025-13017: Same-origin policy bypass in the DOM: Notifications component. - CVE-2025-13018: Mitigation bypass in the DOM: Security component. - CVE-2025-13019: Same-origin policy bypass in the DOM: Workers component. - CVE-2025-13013: Mitigation bypass in the DOM: Core & HTML component. - CVE-2025-13020: Use-after-free in the WebRTC: Audio/Video component. - CVE-2025-13014: Use-after-free in the Audio/Video component. - CVE-2025-13015: Spoofing issue in Firefox.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.6 | MozillaFirefox, MozillaFirefox-branding-upstream, MozillaFirefox-devel et 2 autres | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common et 1 autres | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common et 1 autres | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common et 1 autres | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common et 1 autres | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.7 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common et 1 autres | 140.5.0-150200.152.210.1 |
Afficher les 25 entrées de 6 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.6 | MozillaFirefox | 140.5.0-150200.152.210.1 |
| openSUSE Leap 15.6 | MozillaFirefox-branding-upstream | 140.5.0-150200.152.210.1 |
| openSUSE Leap 15.6 | MozillaFirefox-devel | 140.5.0-150200.152.210.1 |
| openSUSE Leap 15.6 | MozillaFirefox-translations-common | 140.5.0-150200.152.210.1 |
| openSUSE Leap 15.6 | MozillaFirefox-translations-other | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox-devel | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox-translations-common | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox-translations-other | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox-devel | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox-translations-common | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox-translations-other | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox-devel | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox-translations-common | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox-translations-other | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox-devel | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox-translations-common | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox-translations-other | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.7 | MozillaFirefox | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.7 | MozillaFirefox-devel | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.7 | MozillaFirefox-translations-common | 140.5.0-150200.152.210.1 |
| SUSE Linux Enterprise 15.7 | MozillaFirefox-translations-other | 140.5.0-150200.152.210.1 |
Références
- https://bugzilla.suse.com/1253188
- https://lists.suse.com/pipermail/sle-security-updates/2025-November/023324.html
- https://www.suse.com/security/cve/CVE-2025-11708/
- https://www.suse.com/security/cve/CVE-2025-11709/
- https://www.suse.com/security/cve/CVE-2025-11710/
- https://www.suse.com/security/cve/CVE-2025-11711/
- https://www.suse.com/security/cve/CVE-2025-11712/
- https://www.suse.com/security/cve/CVE-2025-11713/
Les 21 références
- https://www.suse.com/security/cve/CVE-2025-11714/
- https://www.suse.com/security/cve/CVE-2025-11715/
- https://www.suse.com/security/cve/CVE-2025-13012/
- https://www.suse.com/security/cve/CVE-2025-13013/
- https://www.suse.com/security/cve/CVE-2025-13014/
- https://www.suse.com/security/cve/CVE-2025-13015/
- https://www.suse.com/security/cve/CVE-2025-13016/
- https://www.suse.com/security/cve/CVE-2025-13017/
- https://www.suse.com/security/cve/CVE-2025-13018/
- https://www.suse.com/security/cve/CVE-2025-13019/
- https://www.suse.com/security/cve/CVE-2025-13020/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2025/suse-su-20254173-1/