Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: restore support for finding...

SUSE-SU-2025:3759-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: - Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: restore support for finding...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the disclosure of information, allowing a perpetrator to access protected data.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the disclosure of information. Exploiting these vulnerabilities can allow a malicious actor to disclose the protected information remotely...

The vulnerability of Mozilla Firefox browsers and the Thunderbird email client relates to operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of Mozilla Firefox browsers and the Thunderbird email client relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FreeBSD : Mozilla -- Memory safety bugs (7b9a8247-ab7b-11f0-b961-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7b9a8247-ab7b-11f0-b961-b42e991fc52e advisory. [email protected] reports: Some of these bugs showed evidence of memory corruption and we presume th...

FreeBSD : Mozilla -- integer overflow (c7383de4-ab7a-11f0-b961-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c7383de4-ab7a-11f0-b961-b42e991fc52e advisory. [email protected] reports: Integer overflow in the SVG component Tenable has extracted the preceding...

FreeBSD : Mozilla -- Memory safety bugs (20840621-ab82-11f0-b961-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 20840621-ab82-11f0-b961-b42e991fc52e advisory. [email protected] reports: Memory safety bugs. Some of these bugs showed evidence of memory corrupti...

thunderbird: firefox: Cross-process information leaked due to malicious IPC messages

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...

FreeBSD : Mozilla -- Out-of-bounds reads and writes (b760c618-ad02-11f0-b2aa-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b760c618-ad02-11f0-b2aa-b42e991fc52e advisory. [email protected] reports: A compromised web process was able to trigger out of bounds reads and...

FreeBSD : Mozilla -- JavaScript Object property overriding (fff839db-ad04-11f0-b2aa-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fff839db-ad04-11f0-b2aa-b42e991fc52e advisory. [email protected] reports: There was a way to change the value of JavaScript Object properties that...

FreeBSD : Mozilla -- Memory disclosure (f7047dfc-ad02-11f0-b2aa-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f7047dfc-ad02-11f0-b2aa-b42e991fc52e advisory. [email protected] reports: A compromised web process using malicious IPC messages could have caused...

FreeBSD : Mozilla -- Use-after-free (85c17eb8-ad02-11f0-b2aa-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 85c17eb8-ad02-11f0-b2aa-b42e991fc52e advisory. [email protected] reports: Use-after-free in MediaTrackGraphImpl::GetInstance Tenable has extracted...

MozillaFirefox-144.0-1.1 on GA media (moderate)

MozillaFirefox-144.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15645-1 Rating: moderate Cross-References: CVE-2025-11708 CVE-2025-11709 CVE-2025-11710 CVE-2025-11711 CVE-2025-11712 CVE-2025-11713 CVE-2025-11714 CVE-2025-11715 CVE-2025-11716 CVE-2025-11717 CVE-2025-11718 CVE-2025-11719...

FreeBSD : Mozilla -- Information disclosure (4fe6f98e-ab7b-11f0-b961-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4fe6f98e-ab7b-11f0-b961-b42e991fc52e advisory. [email protected] reports: This vulnerability affects Firefox 143, Firefox ESR 140.3, Thunderbird 14...

OPENSUSE-SU-2025:15646-1 MozillaThunderbird-140.4.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15645-1 MozillaFirefox-144.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-144.0-1.1 package on the GA media of openSUSE Tumbleweed...

Cross-site scripting vulnerability in multiple Mozilla products (CNVD-2025-24632)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

Mozilla Firefox and Mozilla Thunderbird Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols and HTML mail format. A memory misreference vulnerability exists in Mozilla Firefox and Mozilla...