Critical Security Update for Firefox: Multiple Vulnerabilities Addressed
Summary
ALSA-2025:22363: Important: firefox security update. Affects firefox versions < 140.5.0-1.el8_10.alma.1. Fixed in 140.5.0-1.el8_10.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely used open-source web browser known for its commitment to standards compliance, performance, and portability. It supports a range of web technologies and is designed to provide users with a secure browsing experience. However, like any software, it can be susceptible to vulnerabilities that may compromise user security and privacy.
Vulnerability Detail
This security update addresses several vulnerabilities in Firefox, including a mitigation bypass in the DOM, use-after-free errors in the Audio/Video components, incorrect boundary conditions in WebAssembly, and various same-origin policy bypasses. These vulnerabilities could allow attackers to execute arbitrary code, bypass security restrictions, or spoof user actions, potentially leading to data breaches or unauthorized access.
How To Fix
Minimum fixed version
140.5.0-1.el8_10.alma.1
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable certain features that are affected by the vulnerabilities, such as disabling WebRTC or adjusting security settings in the browser. However, this is not a permanent solution and updating the browser is strongly recommended.
Conclusion
In summary, the recent security update for Firefox addresses critical vulnerabilities that could compromise user security. It is essential for users to update to the latest version to protect against these risks. Additionally, utilizing tools like Vulert can help monitor and alert for vulnerabilities in your software.
See every vulnerability recorded for firefox →
FAQ
The update addresses multiple vulnerabilities including use-after-free errors, race conditions, and same-origin policy bypasses.
You can check your Firefox version by navigating to 'Help' > 'About Firefox'. Compare it with the fixed version mentioned in the update.
If you cannot update immediately, consider disabling affected features as a temporary workaround, but prioritize updating as soon as possible.
More information can be found on the CVE pages linked in the advisory or by visiting Mozilla's security updates page.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, allowing you to stay informed about potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
