[SECURITY] [DSA 5858-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5858-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 05, 2025 https://www.debian.org/security/faq -...

SUSE CVE-2025-1010

An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

DSA-5858-1 firefox-esr - security update

Bulletin has no description...

Debian dsa-5858 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5858 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5858-1 [email protected] https://www.debian.org/securit...

CVE-2025-1017 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

DEBIAN-CVE-2025-1017

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firef...

CVE-2025-1012 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-1014 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-1016 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-1010

An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability affects Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

CVE-2025-1009 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-1011 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-1010 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

Mozilla Firefox ESR < 128.7

The version of Firefox ESR installed on the remote Windows host is prior to 128.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-09 advisory. - Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of thes...

Security Vulnerabilities fixed in Firefox ESR 128.7 — Mozilla

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. A bug in WebAssembly code generation could have lead to a cras...

Security Vulnerabilities fixed in Firefox ESR 115.20 — Mozilla

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. A race during concurrent delazification could have led to a...

The vulnerabilities of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, are related to a lack of mechanisms for verifying the source of access requests. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, are related to a lack of mechanisms for verifying the source of data. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to the lack of security measures for SQL query structures, allowing attackers to trigger a service failure.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, are related to the lack of security measures for handling SQL query structures. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...

Debian dla-3697 : firefox-esr - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3697 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3697-1 [email protected]...

ROS-20250114-04

The incognito mode vulnerability in Mozilla Firefox, Firefox ESR browsers is due to the application not properly impose security restrictions. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the implemented security restrictions Incognito mode vulnerability in...