Back Linuxsecurity openSUSE: MozillaFirefox Important Vulnerability Fix 2025-20065
This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.5.0 ESR: * Fixed: Various security fixes (MFSA 2025-88 bsc#1253188): * CVE-2025-13012 Race condition in the Graphics component * CVE-2025-13016 Incorrect boundary conditions in the JavaScript: WebAssembly component * CVE-2025-13017 Same-origin policy bypass in the DOM: Notifications component * CVE-2025-13018 Mitigation bypass in the DOM: Security component * CVE-2025-13019 Same-origin policy bypass in the DOM: Workers component * CVE-2025-13013 Mitigation bypass in the DOM: Core & HTML component * CVE-2025-13020 Use-after-free in the WebRTC: Audio/Video component * CVE-2025-13014 Use-after-free in the Audio/Video component * CVE-2025-13015 Spoofing issue in Firefox - Firefox Extended Support Release 140.4.0 ESR * Fixed: Various security fixes. MFSA 2025-83 (bsc#1251263) * CVE-2025-11708
- openSUSE Leap 16.0: MozillaFirefox-140.5.0-160000.1.1 MozillaFirefox-branding-upstream-140.5.0-160000.1.1 MozillaFirefox-devel-140.5.0-160000.1.1 MozillaFirefox-translations-common-140.5.0-160000.1.1 MozillaFirefox-translations-other-140.5.0-160000.1.1
- openSUSE Leap 16.0: MozillaFirefox-140.5.0-160000.1.1 MozillaFirefox-branding-upstream-140.5.0-160000.1.1 MozillaFirefox-devel-140.5.0-160000.1.1 MozillaFirefox-translations-common-140.5.0-160000.1.1 MozillaFirefox-translations-other-140.5.0-160000.1.1
* bsc#1249391 * bsc#1250452 * bsc#1251263 * bsc#1253188References: * * * * * * * * * * * * * * * * * * * * * * * *
* bsc#1249391 * bsc#1250452 * bsc#1251263 * bsc#1253188References: * * * * * * * * * * * * * * * * * * * * * * * *
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
