SUSE-SU-2025:0059-1
SUSE-SU-2025:0059-1 · Security update for MozillaFirefox
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 128.6.0 ESR * Fixed: Various security fixes. MFSA 2025-02 (bsc#1234991) * CVE-2025-0237 (bmo#1915257) WebChannel APIs susceptible to confused deputy attack * CVE-2025-0238 (bmo#1915535) Use-after-free when breaking lines * CVE-2025-0239 (bmo#1929156) Alt-Svc ALPN validation failure when redirected * CVE-2025-0240 (bmo#1929623) Compartment mismatch when parsing JavaScript JSON module * CVE-2025-0241 (bmo#1933023) Memory corruption when using JavaScript Text Segmentation * CVE-2025-0242 (bmo#1874523, bmo#1926454, bmo#1931873, bmo#1932169) Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 * CVE-2025-0243 (bmo#1827142, bmo#1932783) Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 - Firefox Extended Support Release 128.5.2 ESR * Fixed: Fixed a crash experienced by Windows users with Qihoo 360 Total Security Antivirus software installed (bmo#1934258)
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP3-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP4-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP5-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP4
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP5
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox SUSE:Enterprise Storage 7.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
mozillafirefox openSUSE:Leap 15.6
- Intervalos de versiones afectados
- ECOSYSTEM: < 128.6.0-150200.152.167.1
Actualiza a 128.6.0-150200.152.167.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2025/suse-su-20250059-1/
- https://bugzilla.suse.com/1234991
- https://www.suse.com/security/cve/CVE-2025-0237
- https://www.suse.com/security/cve/CVE-2025-0238
- https://www.suse.com/security/cve/CVE-2025-0239
- https://www.suse.com/security/cve/CVE-2025-0240
- https://www.suse.com/security/cve/CVE-2025-0241
- https://www.suse.com/security/cve/CVE-2025-0242
- https://www.suse.com/security/cve/CVE-2025-0243
- https://osv.dev/vulnerability/SUSE-SU-2025:0059-1