OESA-2025-1379

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1379

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2025-1379.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2025-1379

Upstream

CVE-2023-32216

CVE-2023-6879

Published

2025-04-03T12:55:22Z

Modified

2025-09-03T06:31:05.587728Z

Summary

firefox security update

Details

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Memory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 113.

(CVE-2023-32216)

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestoration_dealloc().

(CVE-2023-6879)

Database specific

{
    "severity": "Critical"
}

References

Affected packages

openEuler:22.03-LTS-SP3 / firefox

Package

Name: firefox
Purl: pkg:rpm/openEuler/firefox&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

128.8.0-1.oe2203sp3

Ecosystem specific

{
    "src": [
        "firefox-128.8.0-1.oe2203sp3.src.rpm"
    ],
    "x86_64": [
        "firefox-128.8.0-1.oe2203sp3.x86_64.rpm",
        "firefox-debuginfo-128.8.0-1.oe2203sp3.x86_64.rpm",
        "firefox-debugsource-128.8.0-1.oe2203sp3.x86_64.rpm"
    ],
    "aarch64": [
        "firefox-128.8.0-1.oe2203sp3.aarch64.rpm",
        "firefox-debuginfo-128.8.0-1.oe2203sp3.aarch64.rpm",
        "firefox-debugsource-128.8.0-1.oe2203sp3.aarch64.rpm"
    ]
}