Red Hat Security Advisory

RHSA-2025:3590

firefox security update

Released 2025-04-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.4) firefox-128.9.0-2.el9_4, firefox-x11-128.9.0-2.el9_4

TI-2025-02643 CVE-2025-3030 · GHSA-8r77-rxc7-qgvv

LOW 38

Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00513 Published 2025-04-01 Partial fix · 128.9, 137 CWE-416

TI-2025-02641 CVE-2025-3028 · GHSA-p5r8-47qx-x497

LOW 36

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0087 Published 2025-04-01 Partial fix · 115.22, 128.9 +1 CWE-416

TI-2025-02642 CVE-2025-3029 · GHSA-799g-3g44-3g9m

LOW 32

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00355 Published 2025-04-01 Partial fix · 128.9, 137 CWE-290