SUSE-SU-2025:02122-1

Опубликовано: 26 июн. 2025

Источник: suse-cvrf

Описание

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to MozillaFirefox 128.12.0 (MFSA 2025-23, bsc#1244670):

CVE-2025-6424: Use-after-free in FontFaceSet
CVE-2025-6425: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
CVE-2025-6426: No warning when opening executable terminal files on macOS
CVE-2025-6429: Incorrect parsing of URLs could have allowed embedding of youtube.com
CVE-2025-6430: Content-Disposition header ignored when a file is included in an embed or object tag

Список пакетов

Container suse/kiosk/firefox-esr:latest

MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP6

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise Server 15 SP3-LTSS

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise Server 15 SP4-LTSS

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise Server 15 SP5-LTSS

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

openSUSE Leap 15.6

MozillaFirefox-128.12.0-150200.152.188.1

MozillaFirefox-branding-upstream-128.12.0-150200.152.188.1

MozillaFirefox-devel-128.12.0-150200.152.188.1

MozillaFirefox-translations-common-128.12.0-150200.152.188.1

MozillaFirefox-translations-other-128.12.0-150200.152.188.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-202502122-1/
Link for SUSE-SU-2025:02122-1
https://lists.suse.com/pipermail/sle-updates/2025-June/040491.html
E-Mail link for SUSE-SU-2025:02122-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1244670
SUSE Bug 1244670
https://www.suse.com/security/cve/CVE-2025-6424/
SUSE CVE CVE-2025-6424 page
https://www.suse.com/security/cve/CVE-2025-6425/
SUSE CVE CVE-2025-6425 page
https://www.suse.com/security/cve/CVE-2025-6426/
SUSE CVE CVE-2025-6426 page
https://www.suse.com/security/cve/CVE-2025-6429/
SUSE CVE CVE-2025-6429 page
https://www.suse.com/security/cve/CVE-2025-6430/
SUSE CVE CVE-2025-6430 page

Описание

unknown

Затронутые продукты

Container suse/kiosk/firefox-esr:latest:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-devel-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-translations-common-128.12.0-150200.152.188.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-6424.html
CVE-2025-6424
https://bugzilla.suse.com/1244670
SUSE Bug 1244670

Описание

unknown

Затронутые продукты

Container suse/kiosk/firefox-esr:latest:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-devel-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-translations-common-128.12.0-150200.152.188.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-6425.html
CVE-2025-6425
https://bugzilla.suse.com/1244670
SUSE Bug 1244670

Описание

unknown

Затронутые продукты

Container suse/kiosk/firefox-esr:latest:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-devel-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-translations-common-128.12.0-150200.152.188.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-6426.html
CVE-2025-6426
https://bugzilla.suse.com/1244670
SUSE Bug 1244670

Описание

unknown

Затронутые продукты

Container suse/kiosk/firefox-esr:latest:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-devel-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-translations-common-128.12.0-150200.152.188.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-6429.html
CVE-2025-6429
https://bugzilla.suse.com/1244670
SUSE Bug 1244670

Описание

unknown

Затронутые продукты

Container suse/kiosk/firefox-esr:latest:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-devel-128.12.0-150200.152.188.1

SUSE Enterprise Storage 7.1:MozillaFirefox-translations-common-128.12.0-150200.152.188.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-6430.html
CVE-2025-6430
https://bugzilla.suse.com/1244670
SUSE Bug 1244670

SUSE-SU-2025:02122-1

Описание

Список пакетов

Container suse/kiosk/firefox-esr:latest

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Module for Desktop Applications 15 SP6

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2025-6424

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-6425

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-6426

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-6429

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-6430

Описание

Затронутые продукты

Ссылки