[SECURITY] [DLA 4277-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4277-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 21, 2025 https://wiki.debian.org/LTS -...

Mozilla Firefox ESR Security Update (mfsa_2025-67) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

DLA-4277-1 firefox-esr - security update

Bulletin has no description...

[SECURITY] [DSA 5980-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5980-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 20, 2025 https://www.debian.org/security/faq -...

Linux Distros Unpatched Vulnerability : CVE-2019-11757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a...

DSA-5980-1 firefox-esr - security update

Bulletin has no description...

CVE-2025-9182

Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2...

CVE-2025-9182

Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2...

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

Mozilla Firefox ESR < 115.27

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.27. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-65 advisory. - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox E...

PT-2025-33870

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 142 Firefox ESR versions prior to 140.2 Thunderbird versions prior to 142 Thunderbird ESR versions prior to 140.2 Description: Memory safety bugs are present in the software, with some showing evidence of memory...

Linux Distros Unpatched Vulnerability : CVE-2023-29550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort...

Linux Distros Unpatched Vulnerability : CVE-2019-11735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of these bugs showed evidence of memory...

Linux Distros Unpatched Vulnerability : CVE-2023-29535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potential...

Linux Distros Unpatched Vulnerability : CVE-2022-31740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash. This...

Linux Distros Unpatched Vulnerability : CVE-2024-2608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AppendEncodedAttributeValue, ExtraSpaceNeededForAttrEncoding and AppendEncodedCharacters could have experienced integer overflows, causing underallocation of an...

Linux Distros Unpatched Vulnerability : CVE-2019-17021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses from the parent process...

Linux Distros Unpatched Vulnerability : CVE-2022-45404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Through a series of popup and window.print calls, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in...

Linux Distros Unpatched Vulnerability : CVE-2022-22740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially...

Linux Distros Unpatched Vulnerability : CVE-2023-25742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox 110,...