Critical Security Update for Firefox: Multiple Vulnerabilities Addressed
Summary
ALSA-2025:21280: Important: firefox security update. Affects firefox versions < 140.5.0-1.el9_7.alma.1. Fixed in 140.5.0-1.el9_7.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely-used open-source web browser known for its commitment to standards compliance, performance, and user privacy. It supports various web technologies and is designed to provide a secure browsing experience. However, like any software, it can be susceptible to vulnerabilities that may compromise user security and privacy.
Vulnerability Detail
This update addresses several critical vulnerabilities in Firefox, including a mitigation bypass in the DOM, use-after-free errors in audio/video components, incorrect boundary conditions in WebAssembly, and various same-origin policy bypasses. These vulnerabilities could allow attackers to execute arbitrary code, access sensitive information, or spoof user actions, posing significant risks to users.
How To Fix
Minimum fixed version
140.5.0-1.el9_7.alma.1
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable certain features in Firefox that may be exploited until the update is applied. However, the best course of action is to apply the update as soon as possible to ensure complete protection.
Conclusion
The recent security update for Firefox addresses critical vulnerabilities that could potentially compromise user security. It is essential for users to update their browsers to the latest version to mitigate these risks effectively. Utilizing tools like Vulert can further enhance security by monitoring for vulnerabilities in open-source software.
See every vulnerability recorded for firefox →
FAQ
The update addresses multiple vulnerabilities, including use-after-free errors, same-origin policy bypasses, and a race condition in the graphics component.
You can check your version of Firefox by navigating to 'Help' > 'About Firefox'. Compare it with the patched version mentioned in the update.
If you cannot update immediately, consider disabling features that may be vulnerable, but prioritize applying the update as soon as possible.
For detailed information, refer to the CVE pages linked in the advisory or visit the Mozilla security advisories page.
Vulert monitors open-source vulnerabilities in your software using a manifest file like package-lock.json, providing real-time alerts without requiring code access or installation.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
