Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4173-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4173-1

UNKNOWN

Security update for MozillaFirefox

Published Nov 24, 2025

Modified 1 months ago

Fix available

Details

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 140.5.0 ESR (bsc#1253188)
CVE-2025-13012: Race condition in the Graphics component.
CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component.
CVE-2025-13017: Same-origin policy bypass in the DOM: Notifications component.
CVE-2025-13018: Mitigation bypass in the DOM: Security component.
CVE-2025-13019: Same-origin policy bypass in the DOM: Workers component.
CVE-2025-13013: Mitigation bypass in the DOM: Core & HTML component.
CVE-2025-13020: Use-after-free in the WebRTC: Audio/Video component.
CVE-2025-13014: Use-after-free in the Audio/Video component.
CVE-2025-13015: Spoofing issue in Firefox.

Affected Packages

SUSE:Enterprise Storage 7.1MozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Enterprise Storage 7.1MozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Enterprise Storage 7.1MozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Enterprise Storage 7.1MozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6MozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6MozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6MozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6MozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP4-LTSSMozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP4-LTSSMozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP4-LTSSMozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP4-LTSSMozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP5-LTSSMozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP5-LTSSMozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP5-LTSSMozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server 15 SP5-LTSSMozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

openSUSE:Leap 15.6MozillaFirefox

Fixed in:

140.5.0-150200.152.210.1

openSUSE:Leap 15.6MozillaFirefox-branding-upstream

Fixed in:

140.5.0-150200.152.210.1

openSUSE:Leap 15.6MozillaFirefox-devel

Fixed in:

140.5.0-150200.152.210.1

openSUSE:Leap 15.6MozillaFirefox-translations-common

Fixed in:

140.5.0-150200.152.210.1

openSUSE:Leap 15.6MozillaFirefox-translations-other

Fixed in:

140.5.0-150200.152.210.1

References

Upstream

CVE-2025-11708 CVE-2025-11709 CVE-2025-11710 CVE-2025-11711 CVE-2025-11712 CVE-2025-11713 CVE-2025-11714 CVE-2025-11715 CVE-2025-13012 CVE-2025-13013 CVE-2025-13014 CVE-2025-13015 CVE-2025-13016 CVE-2025-13017 CVE-2025-13018 CVE-2025-13019 CVE-2025-13020

Ecosystems

Timeline

PublishedNov 24, 2025

ModifiedNov 24, 2025

SUSE-SU-2025:4173-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline