SUSE-SU-2025:01701-1

Опубликовано: 24 мая 2025

Источник: suse-cvrf

Описание

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 128.10.1 ESR.

MFSA 2025-37 (bsc#1243303)
- CVE-2025-4918: Out-of-bounds access when resolving Promise objects
- CVE-2025-4919: Out-of-bounds access when optimizing linear sums

Список пакетов

Container suse/kiosk/firefox-esr:esr

MozillaFirefox-128.10.1-150200.152.182.1

Container suse/kiosk/firefox-esr:latest

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

MozillaFirefox-128.10.1-150200.152.182.1

SUSE Enterprise Storage 7.1

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP6

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise Server 15 SP3-LTSS

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise Server 15 SP4-LTSS

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise Server 15 SP5-LTSS

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

openSUSE Leap 15.6

MozillaFirefox-128.10.1-150200.152.182.1

MozillaFirefox-branding-upstream-128.10.1-150200.152.182.1

MozillaFirefox-devel-128.10.1-150200.152.182.1

MozillaFirefox-translations-common-128.10.1-150200.152.182.1

MozillaFirefox-translations-other-128.10.1-150200.152.182.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-202501701-1/
Link for SUSE-SU-2025:01701-1
https://lists.suse.com/pipermail/sle-updates/2025-May/039342.html
E-Mail link for SUSE-SU-2025:01701-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1243303
SUSE Bug 1243303
https://www.suse.com/security/cve/CVE-2025-4918/
SUSE CVE CVE-2025-4918 page
https://www.suse.com/security/cve/CVE-2025-4919/
SUSE CVE CVE-2025-4919 page

Описание

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.

Затронутые продукты

Container suse/kiosk/firefox-esr:esr:MozillaFirefox-128.10.1-150200.152.182.1

Container suse/kiosk/firefox-esr:latest:MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-128.10.1-150200.152.182.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-4918.html
CVE-2025-4918
https://bugzilla.suse.com/1243303
SUSE Bug 1243303

Описание

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.

Затронутые продукты

Container suse/kiosk/firefox-esr:esr:MozillaFirefox-128.10.1-150200.152.182.1

Container suse/kiosk/firefox-esr:latest:MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-128.10.1-150200.152.182.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-128.10.1-150200.152.182.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-4919.html
CVE-2025-4919
https://bugzilla.suse.com/1243303
SUSE Bug 1243303

SUSE-SU-2025:01701-1

Описание

Список пакетов

Container suse/kiosk/firefox-esr:esr

Container suse/kiosk/firefox-esr:latest

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP5-SAP-Azure-LI-BYOS

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

Image SLES15-SP5-SAP-Azure-VLI-BYOS

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP6-SAP-Azure-LI-BYOS

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

Image SLES15-SP6-SAP-Azure-VLI-BYOS

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Module for Desktop Applications 15 SP6

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2025-4918

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-4919

Описание

Затронутые продукты

Ссылки