Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 9: MGASA-2025-0165 critical: rootcerts, firefox out-of-bounds access

mageia
Calendar Grey May 27, 2025
Dist Mageia Esm H88
MGASA-2025-0166: Revised openssl, curl & vim packages address vulnerabilities for Mageia 9.
Out-of-bounds access when resolving Promise objects

Summary

Out-of-bounds access when resolving Promise objects. (CVE-2025-4918) Out-of-bounds access when optimizing linear sums. (CVE-2025-4919)

References

- https://bugs.mageia.org/show_bug.cgi?id=34287

- https://www.firefox.com/en-US/firefox/128.10.1/releasenotes/?redirect_source=mozilla-org

- https://www.mozilla.org/en-US/security/advisories/mfsa2025-37/

- https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_111.html

- https://www.cve.org/CVERecord?id=CVE-2025-4918

- https://www.cve.org/CVERecord?id=CVE-2025-4919

Topics%20covered

Topics Covered

security advisory firefox out-of-bounds nss mageia rootcerts

Resolution

SRPMS

- 9/core/rootcerts-20250424.00-1.mga9

- 9/core/nss-3.111.0-1.mga9

- 9/core/firefox-128.10.1-2.mga9

- 9/core/firefox-l10n-128.10.1-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 27 May 2025
URL: https://advisories.mageia.org/MGASA-2025-0165.html
Type: security
CVE: CVE-2025-4918, CVE-2025-4919

Topics%20covered

Topics Covered

security advisory firefox out-of-bounds nss mageia rootcerts

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here