Critical Security Update for Firefox: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:0144: Important: firefox security update. Affects firefox versions < 128.6.0-1.el8_10. Fixed in 128.6.0-1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely-used open-source web browser known for its commitment to standards compliance, performance, and portability. It offers a range of features including tabbed browsing, privacy protection, and extensive customization options through add-ons. However, like any software, it is susceptible to vulnerabilities that can compromise user security and privacy.
Vulnerability Detail
The identified vulnerabilities in Firefox include a use-after-free issue when breaking lines in text (CVE-2025-0238), memory corruption related to JavaScript Text Segmentation (CVE-2025-0241), and an Alt-Svc ALPN validation failure during redirection (CVE-2025-0239). Additionally, memory safety bugs were fixed in multiple versions of Firefox and Thunderbird (CVE-2025-0242, CVE-2025-0243). These vulnerabilities can lead to potential exploitation, allowing attackers to execute arbitrary code or cause application crashes, thereby compromising user data and system integrity.
How To Fix
Minimum fixed version
128.6.0-1.el8_10
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for these vulnerabilities. The best course of action is to apply the available updates as soon as they are released.
Conclusion
The recent security update for Firefox addresses critical vulnerabilities that could compromise user security. It is essential for users to update their installations promptly to mitigate these risks. Regular monitoring of vulnerabilities using tools like Vulert can further enhance software security.
See every vulnerability recorded for firefox →
FAQ
The update addresses several vulnerabilities including use-after-free issues, memory corruption, and validation failures that could lead to security breaches.
You can check your Firefox version by navigating to 'Help' > 'About Firefox'. Compare it with the patched version 128.6.0-1.el8_10.
Using an older version of Firefox poses security risks as it may be vulnerable to exploitation. It is recommended to update to the latest version.
If you cannot update immediately, avoid accessing sensitive information and be cautious about the websites you visit until you can apply the update.
Vulert monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json, allowing you to stay informed about potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
