ROS-20251215-7303

A vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

MozillaFirefox-146.0-1.1 on GA media (moderate)

MozillaFirefox-146.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15813-1 Rating: moderate Cross-References: CVE-2025-14321 CVE-2025-14322 CVE-2025-14323 CVE-2025-14324 CVE-2025-14325 CVE-2025-14326 CVE-2025-14327 CVE-2025-14328 CVE-2025-14329 CVE-2025-14330 CVE-2025-14331 CVE-2025-14332...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.6.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

FreeBSD : Mozilla -- JIT miscompilation in the JavaScript Engine: JIT component (b25f61b8-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b25f61b8-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1997503 reports: JIT miscompilation in the JavaScript Engin...

FreeBSD : Mozilla -- Spoofing issue (aad09be1-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aad09be1-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1970743 reports: Spoofing issue in the Downloads Panel...

FreeBSD : Mozilla -- Use-after-free (9525edbf-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9525edbf-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1992760 reports: Use-after-free in the WebRTC: Signaling...

OPENSUSE-SU-2025:15814-1 MozillaThunderbird-140.6.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : Mozilla -- Privilege escalation (b06e1b9a-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b06e1b9a-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1997018 reports: Privilege escalation in the Netmonitor...

Mozilla Firefox Security Update (mfsa_2025-92) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Thunderbird Security Update (mfsa_2025-95) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

FreeBSD : Mozilla -- Memory safety bugs (b6e19247-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b6e19247-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/buglist.cgi?bugid=1963153%2C1985058%2C1995637%2C1997118 reports: Memory...

FreeBSD : Mozilla -- Same-origin policy bypass (b463bded-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b463bded-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2000218 reports: Same-origin policy bypass in the Request...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2025-345-01)

The version of mozilla-thunderbird installed on the remote host is prior to 140.6.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-345-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

OPENSUSE-SU-2025:15813-1 MozillaFirefox-146.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-146.0-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : Mozilla -- Memory safety bugs (bb326db4-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bb326db4-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/buglist.cgi?bugid=1966501%2C1997639 reports: Memory safety bugs. Some of...

FreeBSD : Mozilla -- Privilege escalation (9c923dc2-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9c923dc2-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1996555 reports: Privilege escalation in the DOM:...

FreeBSD : Mozilla -- Privilege escalation (ae40f296-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ae40f296-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1996761 reports: Privilege escalation in the Netmonitor...

FreeBSD : Mozilla -- Sandbox escape (9a9d50a6-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9a9d50a6-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1996473 reports: Sandbox escape due to incorrect boundary...

Mozilla Thunderbird Security Update (mfsa_2025-95) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Firefox Security Advisory (MFSA2025-92) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-92. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...