Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4424-1

UNKNOWN

Security update for MozillaFirefox

Published Dec 17, 2025

Modified 4 weeks ago

Fix available

Details

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 140.6.0 ESR (bsc#1254551).

MFSA 2025-94
- CVE-2025-14321: use-after-free in the WebRTC: Signaling component.
- CVE-2025-14322: sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
- CVE-2025-14323: privilege escalation in the DOM: Notifications component.
- CVE-2025-14324: JIT miscompilation in the JavaScript Engine: JIT component.
- CVE-2025-14325: JIT miscompilation in the JavaScript Engine: JIT component.
- CVE-2025-14328: privilege escalation in the Netmonitor component.
- CVE-2025-14329: privilege escalation in the Netmonitor component.
- CVE-2025-14330: JIT miscompilation in the JavaScript Engine: JIT component.
- CVE-2025-14331: same-origin policy bypass in the Request Handling component.
- CVE-2025-14333: memory safety bugs.

Affected Packages

SUSE:Enterprise Storage 7.1MozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Enterprise Storage 7.1MozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Enterprise Storage 7.1MozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Enterprise Storage 7.1MozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6MozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6MozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6MozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6MozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP4-LTSSMozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP4-LTSSMozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP4-LTSSMozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP4-LTSSMozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP5-LTSSMozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP5-LTSSMozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP5-LTSSMozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server 15 SP5-LTSSMozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

openSUSE:Leap 15.6MozillaFirefox

Fixed in:

140.6.0-150200.152.213.1

openSUSE:Leap 15.6MozillaFirefox-branding-upstream

Fixed in:

140.6.0-150200.152.213.1

openSUSE:Leap 15.6MozillaFirefox-devel

Fixed in:

140.6.0-150200.152.213.1

openSUSE:Leap 15.6MozillaFirefox-translations-common

Fixed in:

140.6.0-150200.152.213.1

openSUSE:Leap 15.6MozillaFirefox-translations-other

Fixed in:

140.6.0-150200.152.213.1

References

Upstream

CVE-2025-14321 CVE-2025-14322 CVE-2025-14323 CVE-2025-14324 CVE-2025-14325 CVE-2025-14328 CVE-2025-14329 CVE-2025-14330 CVE-2025-14331 CVE-2025-14333

Ecosystems

Timeline

PublishedDec 17, 2025

ModifiedDec 17, 2025

SUSE-SU-2025:4424-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4424-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline