Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-4751

Опубликовано: 30 мая 2025
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2025-4751: firefox security update (IMPORTANT)

[128.10.0-1.0.1]

  • Updated to 128.10.0 build [Orabug: 37924620]
  • Fixes CVE-2025-2817 CVE-2025-4083 CVE-2025-4087 CVE-2025-4091 and
  • CVE-2025-4093

[128.9.0-2.0.1]

  • Update to 128.9.0 build2 [Orabug: 37796786][CVE-2025-3028][CVE-2025-3029] [CVE-2025-3030]

[128.8.0-1.0.1]

  • Update to 128.8.0 build1 [Orabug: 37700882][CVE-2025-1930][CVE-2025-1931] [CVE-2025-1932][CVE-2025-1933][CVE-2025-1934][CVE-2025-1935][CVE-2025-1936] [CVE-2025-1937][CVE-2025-1938]

[128.7.0-1.0.1]

  • Update to 128.7.0 build1 [Orabug: 37564202][CVE-2025-1009][CVE-2025-1010] [CVE-2025-1011][CVE-2025-1012][CVE-2025-1013][CVE-2025-1014][CVE-2025-1016] [CVE-2025-1017]

[128.6.0-1.0.1]

  • Update to 128.6.0 build1 [Orabug: 37460830][CVE-2025-0237][CVE-2025-0238] [CVE-2025-0239][CVE-2025-0240][CVE-2025-0241][CVE-2025-0242][CVE-2025-0243]
  • Enable PipeWire camera support for RHEL 10
    • backport upstream fixes for PipeWire camera support Fixes: RHEL-64749

[128.5.1-1.0.1]

  • Update to 128.5.1 [Orabug: 37370369][CVE-2024-11692][CVE-2024-11694] [CVE-2024-11695][CVE-2024-11696][CVE-2024-11697][CVE-2024-11699]

[128.4.0-1.0.1]

  • Update to 128.4.0 build1 [Orabug: 37236498][CVE-2024-10458][CVE-2024-10459] [CVE-2024-10460][CVE-2024-10461][CVE-2024-10462][CVE-2024-10463] [CVE-2024-10464][CVE-2024-10465][CVE-2024-10466][CVE-2024-10467]

[128.3.1-2.0.1]

  • Update to 128.3.1 [Orabug: 37168934]

[128.3.0-1.0.1]

  • Update to 128.3.0 [Orabug: 37139909]

[128.2.0-1.0.1]

  • Remove nomerge annotation from abort calls [Orabug: 37079143]
  • Update to 128.2.0 [Orabug: 37079143]

[115.12.0-1.0.3]

  • Security fixes [Orabug: 36904311][Orabug: 36948200][CVE-2024-6601] [CVE-2024-6603][CVE-2024-6604][CVE-2024-7519][CVE-2024-7520][CVE-2024-7521] [CVE-2024-7522][CVE-2024-7524][CVE-2024-7525][CVE-2024-7526][CVE-2024-7527] [CVE-2024-7529]

[115.12.0-1.0.1]

  • Remove upstream references [Orabug: 30143292]
  • Update distribution for Oracle Linux [Orabug: 30143292]
  • Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[115.12.0-1]

  • Update to 115.12.0 build1

[115.11.0-1]

  • Update to 115.11.0 build1

[115.10.0-1]

  • Update to 115.10.0 build1

[115.9.1-2]

  • Removed expat CVE fix

[115.9.1-1]

  • Update to 115.9.1

[115.9.0-2]

  • Update to 115.9.0 build2

[115.9.0-1]

  • Update to 115.9.0 build1
  • Fix expat CVE-2023-52425

[115.8.0-1]

  • Update to 115.8.0 build1

[115.7.0-1]

  • Update to 115.7.0 build1

[115.6.0-1]

  • Update to 115.6.0 build1

[115.5.0-1]

  • Update to 115.5.0 build1

[115.4.0-1]

  • Update to 115.4.0 build1
  • Add fix for CVE-2023-44488
  • Set homepage from os-release HOME_URL

[115.3.1-1]

  • Update to 115.3.1

[115.3.0-1]

  • Update to 115.3.0 ESR

[115.2.0-3]

  • Update to 115.2.0 ESR

[115.1.0-1]

  • Update to 115.1.0 ESR

[115.0.2-1]

  • Update to 115.0.2 ESR

[115.0b8-1]

  • Update to 115.0b8

[102.11.0-2]

  • Update to 102.11.0 build2

[102.11.0-1]

  • Update to 102.11.0 build1

[102.10.0-1]

  • Update to 102.10.0 build1

[102.9.0-4]

  • Update to 102.9.0 build2

[102.9.0-2]

  • removed disable-openh264-download

[102.9.0-1]

  • Update to 102.9.0 build1

[102.8.0-2]

  • Update to 102.8.0 build2

[102.8.0-1]

  • Update to 102.8.0 build1

[102.7.0-1]

  • Update to 102.7.0 build1

[102.6.0-2]

  • Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9

[102.6.0-1]

  • Update to 102.6.0 build1

[102.5.0-2]

  • Added libwebrtc screencast patch for newer features

[102.5.0-1]

  • Update to 102.5.0 build1

[102.4.0-1]

  • Update to 102.4.0 build1

[102.3.0-7]

  • Fix for expat CVE-2022-40674 and non functional webrtc

[102.3.0-6]

  • Update to 102.3.0 build1

[91.12.0-1]

  • Update to 91.12.0 build1

[91.11.0-2]

  • Update to 91.11.0 build2

[91.11.0-1]

  • Update to 91.11.0 build1

[91.10.0-1]

  • Update to 91.10.0 build1

[91.9.1-1]

  • Update to 91.9.1 build1

[91.9.0-1]

  • Update to 91.9.0

[91.8.0-1]

  • Update to 91.8.0

[91.7.0-3]

  • Update to 91.7.0 build3

[91.7.0-2]

  • Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315

[91.7.0-1]

  • Update to 91.7.0 build2

[91.6.0-2]

  • Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190

[91.6.0-1]

  • Update to 91.6.0 build1

[91.5.0-2]

  • Use default update channel to fix non working enterprise policies: rhbz#2044667

[91.5.0-1]

  • Update to 91.5.0 build1

[91.4.0-2]

  • Added fix for failing addons signatures.

[91.4.0-1]

  • Update to 91.4.0 build1

[91.3.0-1]

  • Update to 91.3.0 build1

[91.2.0-5]

  • Fixed crashes when FIPS is enabled.

[91.2.0-4]

  • Disable webrender on the s390x due to wrong colors: rhbz#2009503

[91.2.0-3]

  • Update to 91.2.0 build1

[91.1.0-1]

  • Update to 91.1.0 build1
  • Update to 91.0.1 build1

[91.0-1]

  • Update to 91.0 ESR

[91.0-1]

  • Update to 91.0b8

[78.12.0-2]

  • Rebuild to pickup older nss

[78.12.0-1]

  • Update to 78.12.0 build1

[78.11.0-3]

  • Update to 78.11.0 build2 (release)

[78.11.0-2]

  • Fix rhel_minor_version for dist .el8_4 and .el8

[78.11.0-1]

  • Update to 78.11.0 build1

[78.10.0-1]

  • Update to 78.10.0

[78.9.0-1]

  • Update to 78.9.0 build1

[78.8.0-1]

  • Update to 78.8.0 build2

[78.7.1-1]

  • Update to 78.7.1

[78.7.0-3]

  • Fixing install prefix for the homepage

[78.7.0-2]

  • Update to 78.7.0 build2

[78.7.0-1]

  • Update to 78.7.0 build1

[78.6.1-1]

  • Update to 78.6.1 build1

[78.6.0-1]

  • Update to 78.6.0 build1

[78.5.0-1]

  • Update to 78.5.0 build1
  • Update to 78.4.1

[78.4.0-3]

  • Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading

[78.4.0-2]

  • Enable addon sideloading

[78.4.0-1]

  • Update to 78.4.0 build2
  • Update to 78.3.0 build1

[78.2.0-3]

  • Update to 78.2.0 build1
  • Update to 68.11.0 build1
  • Update to 68.10.0 build1
  • Update to 68.9.0 build1
  • Added patch for pipewire 0.3
  • Added s390x specific patches
  • Update to 68.8.0 build1

[68.7.0-3]

  • Added fix for rhbz#1821418

[68.7.0-2]

  • Update to 68.7.0 build3

[68.6.1-1]

  • Update to 68.6.1 ESR
  • Update to 68.6.0 build1

[68.5.0-3]

  • Added fix for rhbz#1805667
  • Enabled mzbz@1170092 - Firefox prefs at /etc
  • Update to 68.5.0 build2
  • Update to 68.5.0 build1
  • Update to 68.4.1esr build1
  • Update to 68.4.0esr build1
  • Fix for wrong intl.accept_lang when using non en-us langpack

[68.3.0-1]

  • Update to 68.3.0 ESR

[68.2.0-4]

  • Added patch for TLS 1.3 support.

[68.2.0-3]

  • Rebuild

[68.2.0-2]

  • Rebuild

[68.2.0-1]

  • Update to 68.2.0 ESR

[68.1.0-6]

  • Enable system nss on RHEL6

[68.1.0-2]

  • Enable building langpacks

[68.1.0-1]

  • Update to 68.1.0 ESR

[68.0.1-4]

  • Enable system nss

[68.0.1-3]

  • Enable official branding

[68.0.1-2]

  • Enabled PipeWire on RHEL8

[68.0.1-1]

  • Updated to 68.0.1 ESR

[68.0-0.11]

  • Update to 68.0 ESR

[68.0-0.10]

  • Updated to 68.0 alpha 13
  • Enabled second arches

[68.0-0.1]

  • Updated to 68.0 alpha

[60.6.0-3]

  • Added Google API keys (mozbz#1531176)

[60.6.0-2]

  • Update to 60.6.0 ESR (Build 2)

[60.6.0-1]

  • Update to 60.6.0 ESR (Build 1)

[60.5.1-1]

  • Update to 60.5.1 ESR

[60.5.0-3]

  • Added fix for rhbz#1672424 - Firefox crashes on NFS drives.

[60.5.0-2]

  • Updated to 60.5.0 ESR build2

[60.5.0-1]

  • Updated to 60.5.0 ESR build1

[60.4.0-3]

  • Fixing fontconfig warnings (rhbz#1601475)

[60.4.0-2]

  • Added pipewire patch from Tomas Popela (rhbz#1664270)

[60.4.0-1]

  • Update to 60.4.0 ESR

[60.3.0-2]

  • Added firefox-gnome-shell-extension

[60.3.0-1]

  • Update to 60.3.0 ESR

[60.2.2-2]

  • Added patch for rhbz#1633932

[60.2.2-1]

  • Update to 60.2.2 ESR

[60.2.1-1]

  • Update to 60.2.1 ESR

[60.2.0-1]

  • Update to 60.2.0 ESR

[60.1.0-9]

  • Do not set user agent (rhbz#1608065)
  • GTK dialogs are localized now (rhbz#1619373)
  • JNLP association works again (rhbz#1607457)

[60.1.0-8]

  • Fixed homepage and bookmarks (rhbz#1606778)
  • Fixed missing file associations in RHEL6 (rhbz#1613565)

[60.1.0-7]

  • Run at-spi-bus if not running already (for the bundled gtk3)

[60.1.0-6]

  • Fix for missing schemes for bundled gtk3

[60.1.0-5]

  • Added mesa-libEGL dependency to gtk3/rhel6

[60.1.0-4]

  • Disabled jemalloc on all second arches

[60.1.0-3]

  • Updated to 60.1.0 ESR build2

[60.1.0-2]

  • Disabled jemalloc on second arches

[60.1.0-1]

  • Updated to 60.1.0 ESR

[60.0-12]

  • Fixing bundled libffi issues
  • Readded some requirements

[60.0-10]

  • Added fix for mozilla BZ#1436242 - IPC crashes.

[60.0-9]

  • Bundling libffi for the sec-arches
  • Added openssl-devel for the Python
  • Fixing bundled gtk3

[60.0-8]

  • Added fix for mozilla BZ#1458492

[60.0-7]

  • Added patch from rhbz#1498561 to fix ppc64(le) crashes.

[60.0-6]

  • Disabled jemalloc on second arches

[60.0-4]

  • Update to 60.0 ESR

[52.7.0-1]

  • Update to 52.7.0 ESR

[52.6.0-2]

  • Build Firefox for desktop arches only (x86_64 and ppc64le)

[52.6.0-1]

  • Update to 52.6.0 ESR

[52.5.0-1]

  • Update to 52.5.0 ESR

[52.4.0-1]

  • Update to 52.4.0 ESR

[52.3.0-3]

  • Update to 52.3.0 ESR (b2)
  • Require correct nss version

[52.2.0-1]

  • Update to 52.2.0 ESR

[52.1.2-1]

  • Update to 52.1.2 ESR

[52.0-7]

  • Added fix for accept language (rhbz#1454322)

[52.0-6]

  • Removing patch required for older NSS from RHEL 7.3
  • Added patch for rhbz#1414564

[52.0-5]

  • Added fix for mozbz#1348168/CVE-2017-5428

[52.0-4]

  • Update to 52.0 ESR (b4)

[52.0-3]

  • Added fix for rhbz#1423012 - ppc64 gfx crashes

[52.0-2]

  • Enable system nss

[52.0-1]

  • Update to 52.0ESR (B1)
  • Build RHEL7 package for Gtk3

[52.0-0.13]

  • Added fix for rhbz#1414535

[52.0-0.12]

  • Update to 52.0b8

[52.0-0.11]

  • Readded addons patch

[52.0-0.10]

  • Update to 52.0b3

[52.0-0.9]

  • Update to 52.0b2

[52.0-0.8]

  • Update to 52.0b1

[52.0-0.5]

  • Firefox Aurora 52 testing build

Связанные уязвимости

oracle-oval
29 дней назад

ELSA-2025-7428: firefox security update (IMPORTANT)

oracle-oval
около 1 месяца назад

ELSA-2025-4797: thunderbird security update (IMPORTANT)

oracle-oval
около 2 месяцев назад

ELSA-2025-4460: thunderbird security update (IMPORTANT)

oracle-oval
около 1 месяца назад

ELSA-2025-4458: firefox security update (IMPORTANT)

oracle-oval
около 2 месяцев назад

ELSA-2025-4443: firefox security update (IMPORTANT)

Уязвимость ELSA-2025-4751