SUSE-SU-2025:0059-1: MozillaFirefox&distro=openSUSE Leap 15.6

CVSS: UnknownPublished
Published 10-01-2025Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2025:0059-1 is a vulnerability in MozillaFirefox&distro=openSUSE Leap 15.6 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 7 · Downstream 0 · Related 7
CVE-2025-0237CVE-2025-0238CVE-2025-0239CVE-2025-0240CVE-2025-0241CVE-2025-0242

Timeline

  1. 10-01-2025
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for MozillaFirefox This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 128.6.0 ESR * Fixed: Various security fixes. MFSA 2025-02 (bsc#1234991) * CVE-2025-0237 (bmo#1915257) WebChannel APIs susceptible to confused deputy attack * CVE-2025-0238 (bmo#1915535) Use-after-free when breaking lines * CVE-2025-0239 (bmo#1929156) Alt-Svc ALPN validation failure when redirected * CVE-2025-0240 (bmo#1929623) Compartment mismatch when parsing JavaScript JSON module * CVE-2025-0241 (bmo#1933023) Memory corruption when using JavaScript Text Segmentation * CVE-2025-0242 (bmo#1874523, bmo#1926454, bmo#1931873, bmo#1932169) Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 * CVE-2025-0243 (bmo#1827142, bmo#1932783) Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 - Firefox Extended Support Release 128.5.2 ESR * Fixed: Fixed a crash experienced by Windows users with Qihoo 360 Total Security Antivirus software installed (bmo#1934258)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse13 products
  • MozillaFirefox&distro=SUSE Enterprise Storage 7.1< 128.6.0-150200.152.167.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 128.6.0-150200.152.167.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 128.6.0-150200.152.167.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 128.6.0-150200.152.167.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 128.6.0-150200.152.167.1
Opensuse1 product
  • MozillaFirefox&distro=openSUSE Leap 15.6< 128.6.0-150200.152.167.1

2 vendors · 14 products

References

9 links