Red Hat Security AdvisoryRHSA-2025:2485
firefox security update
Released 2025-03-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) firefox-128.8.0-1.el8_6
- Red Hat Enterprise Linux AppStream E4S (v.8.6) firefox-128.8.0-1.el8_6
- Red Hat Enterprise Linux AppStream TUS (v.8.6) firefox-128.8.0-1.el8_6
Fixes 9 records
Priority MEDIUM 44
An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00423 · Published 2025-03-04 · Partial fix · 128.8, 136 CWE-125
Priority MEDIUM 40
It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00538 · Published 2025-03-04 · Partial fix · 115.21, 128.8 +1 CWE-416
Priority MEDIUM 40
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00401 · Published 2025-03-04 · Partial fix · 115.21, 128.8 +1 CWE-416
Priority LOW 38
jar: URLs retrieve local file content packaged in a ZIP archive.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00447 · Published 2025-03-04 · Partial fix · 128.8, 136 CWE-158
Priority LOW 36
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00562 · Published 2025-03-04 · Partial fix · 115.21, 128.8 +1 CWE-1260
Priority LOW 35
It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00453 · Published 2025-03-04 · Partial fix · 128.8, 136
Priority LOW 33
On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory.
CVSS 3.1HIGH 7.6· Network · No auth · User interaction · EPSS 0.00319 · Published 2025-03-04 · Partial fix · 115.21, 128.8 +1
Priority LOW 31
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00337 · Published 2025-03-04 · Partial fix · 128.8, 136 CWE-787
Priority LOW 20
A web page could trick a user into setting that site as the default handler for a custom URL protocol.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00343 · Published 2025-03-04 · Partial fix · 128.8, 136 CWE-79
THREATIST.IORead the docs