SUSE-SU-2025:4173-1
SUSE-SU-2025:4173-1 · Security update for MozillaFirefox
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.5.0 ESR (bsc#1253188) - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component. - CVE-2025-13017: Same-origin policy bypass in the DOM: Notifications component. - CVE-2025-13018: Mitigation bypass in the DOM: Security component. - CVE-2025-13019: Same-origin policy bypass in the DOM: Workers component. - CVE-2025-13013: Mitigation bypass in the DOM: Core & HTML component. - CVE-2025-13020: Use-after-free in the WebRTC: Audio/Video component. - CVE-2025-13014: Use-after-free in the Audio/Video component. - CVE-2025-13015: Spoofing issue in Firefox.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP3-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP5-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP3
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP4
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP5
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox SUSE:Enterprise Storage 7.1
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
mozillafirefox openSUSE:Leap 15.6
- Plages de versions concernées
- ECOSYSTEM: < 140.5.0-150200.152.210.1
Mettez à jour vers 140.5.0-150200.152.210.1
Sources originales
- https://www.suse.com/support/update/announcement/2025/suse-su-20254173-1/
- https://bugzilla.suse.com/1253188
- https://www.suse.com/security/cve/CVE-2025-11708
- https://www.suse.com/security/cve/CVE-2025-11709
- https://www.suse.com/security/cve/CVE-2025-11710
- https://www.suse.com/security/cve/CVE-2025-11711
- https://www.suse.com/security/cve/CVE-2025-11712
- https://www.suse.com/security/cve/CVE-2025-11713
- https://www.suse.com/security/cve/CVE-2025-11714
- https://www.suse.com/security/cve/CVE-2025-11715
- https://www.suse.com/security/cve/CVE-2025-13012
- https://www.suse.com/security/cve/CVE-2025-13013
- https://www.suse.com/security/cve/CVE-2025-13014
- https://www.suse.com/security/cve/CVE-2025-13015
- https://www.suse.com/security/cve/CVE-2025-13016
- https://www.suse.com/security/cve/CVE-2025-13017
- https://www.suse.com/security/cve/CVE-2025-13018
- https://www.suse.com/security/cve/CVE-2025-13019
- https://www.suse.com/security/cve/CVE-2025-13020
- https://osv.dev/vulnerability/SUSE-SU-2025:4173-1