p PatchFirst

SUSE-SU-2026:2814-1

SUSE-SU-2026:2814-1 · Security update for MozillaFirefox

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update for MozillaFirefox fixes the following issues: - Removed obsolete mozilla-nss-certs and recommends p11-kit-nss-trust (bsc#1269226) Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12291: Use-after-free in the Networking: HTTP component. - CVE-2026-12292: Incorrect boundary conditions in the Web Audio component. - CVE-2026-12294: Sandbox escape in the DOM: Workers component. - CVE-2026-12295: Sandbox escape in the DOM: Navigation component. - CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component. - CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component. - CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component. - CVE-2026-12302: Mitigation bypass in the DOM: Security component. - CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component. - CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component. - CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component. - CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12315: Mitigation bypass in the DOM: Security component. - CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component. - CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component. - CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. - CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. - CVE-2026-12329: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12330: Incorrect boundary conditions in the Internationalization component.

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP7

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise Server 15 SP4-LTSS

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise Server 15 SP5-LTSS

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise Server 15 SP6-LTSS

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP4

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP5

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

  • mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP6

    Plages de versions concernées
    • ECOSYSTEM: < 140.12.0-150200.152.245.1

    Mettez à jour vers 140.12.0-150200.152.245.1

Sources originales

Vérifiez votre serveur →