Поиск уязвимостей

Уязвимость функции loadManifestFromFile браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю обойти ограничения безопасности

ALT-PU-2025-1049: package `firefox-esr` update to version 128.5.2-alt1

ALT-PU-2024-16378: package `firefox-esr` update to version 128.5.0-alt1

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

The application failed to account for exceptions thrown by the `loadMa ...

ALT-PU-2024-16377: package `thunderbird` update to version 128.5.0-alt1

ALT-PU-2025-2027: package `thunderbird` update to version 128.6.0-alt0.p10.1

ALT-PU-2024-16375: package `firefox` update to version 133.0.0-alt1

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

ALT-PU-2025-2230: package `firefox` update to version 134.0.2-alt0.p10.1

Important: qemu-kvm security update

Important: firefox security update

ELSA-2026-18479: qemu-kvm security update (IMPORTANT)

ELSA-2024-10881: firefox security update (IMPORTANT)

ELSA-2024-10752: firefox security update (IMPORTANT)

ELSA-2024-10702: firefox security update (IMPORTANT)

Important: thunderbird security update

ELSA-2024-10592: thunderbird security update (IMPORTANT)