Description of the patch:
This update for MozillaFirefox fixes the following issues:
Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071):
- CVE-2026-12289: Privilege escalation in the Graphics: WebRender component.
- CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12291: Use-after-free in the Networking: HTTP component.
- CVE-2026-12292: Incorrect boundary conditions in the Web Audio component.
- CVE-2026-12294: Sandbox escape in the DOM: Workers component.
- CVE-2026-12295: Sandbox escape in the DOM: Navigation component.
- CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component.
- CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component.
- CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component.
- CVE-2026-12302: Mitigation bypass in the DOM: Security component.
- CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component.
- CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
- CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
- CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12315: Mitigation bypass in the DOM: Security component.
- CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component.
- CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component.
-...