ALSA-2025:8293
- Source
- https://errata.almalinux.org/9/ALSA-2025-8293.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2025:8293.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2025:8293
- Related
- Published
- 2025-05-29T00:00:00Z
- Modified
- 2025-05-29T21:09:18Z
- Summary
- Important: firefox security update
- Details
-
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
- firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)
- firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
- firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
- firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
- firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)
- firefox: thunderbird: Memory safety bug (CVE-2025-5269)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2025:8293
- https://access.redhat.com/security/cve/CVE-2025-5263
- https://access.redhat.com/security/cve/CVE-2025-5264
- https://access.redhat.com/security/cve/CVE-2025-5266
- https://access.redhat.com/security/cve/CVE-2025-5267
- https://access.redhat.com/security/cve/CVE-2025-5268
- https://access.redhat.com/security/cve/CVE-2025-5269
- https://bugzilla.redhat.com/2368750
- https://bugzilla.redhat.com/2368751
- https://bugzilla.redhat.com/2368752
- https://bugzilla.redhat.com/2368755
- https://bugzilla.redhat.com/2368756
- https://bugzilla.redhat.com/2368757
- https://errata.almalinux.org/9/ALSA-2025-8293.html
Affected packages
AlmaLinux:9 / firefox
Package
- Name
- firefox
- Purl
- pkg:rpm/almalinux/firefox