SUSE-SU-2025:4174-1
Security update for MozillaFirefox
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.5.0 ESR (bsc#1253188) - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component. - CVE-2025-13017: Same-origin policy bypass in the DOM: Notifications component. - CVE-2025-13018: Mitigation bypass in the DOM: Security component. - CVE-2025-13019: Same-origin policy bypass in the DOM: Workers component. - CVE-2025-13013: Mitigation bypass in the DOM: Core & HTML component. - CVE-2025-13020: Use-after-free in the WebRTC: Audio/Video component. - CVE-2025-13014: Use-after-free in the Audio/Video component. - CVE-2025-13015: Spoofing issue in Firefox.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.5 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 140.5.0-112.289.1 |
1 kaynaktaki 3 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.5 | MozillaFirefox | 140.5.0-112.289.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox-devel | 140.5.0-112.289.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox-translations-common | 140.5.0-112.289.1 |
Referanslar
- https://bugzilla.suse.com/1253188
- https://lists.suse.com/pipermail/sle-security-updates/2025-November/023323.html
- https://www.suse.com/security/cve/CVE-2025-11708/
- https://www.suse.com/security/cve/CVE-2025-11709/
- https://www.suse.com/security/cve/CVE-2025-11710/
- https://www.suse.com/security/cve/CVE-2025-11711/
- https://www.suse.com/security/cve/CVE-2025-11712/
- https://www.suse.com/security/cve/CVE-2025-11713/
21 referansın hepsi
- https://www.suse.com/security/cve/CVE-2025-11714/
- https://www.suse.com/security/cve/CVE-2025-11715/
- https://www.suse.com/security/cve/CVE-2025-13012/
- https://www.suse.com/security/cve/CVE-2025-13013/
- https://www.suse.com/security/cve/CVE-2025-13014/
- https://www.suse.com/security/cve/CVE-2025-13015/
- https://www.suse.com/security/cve/CVE-2025-13016/
- https://www.suse.com/security/cve/CVE-2025-13017/
- https://www.suse.com/security/cve/CVE-2025-13018/
- https://www.suse.com/security/cve/CVE-2025-13019/
- https://www.suse.com/security/cve/CVE-2025-13020/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2025/suse-su-20254174-1/