Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2025:1414-1 critical: MozillaFirefox privilege escalation

suse
Calendar Grey April 30, 2025
Dist Suse Esm H88
Ensure your SUSE systems are secure by applying the latest Mozilla Firefox patch. Follow the outlined steps for a successful update and verification process
* bsc#1241621 Cross-References: * CVE-2025-2817

Summary

## This update for MozillaFirefox fixes the following issues: * Firefox Extended Support Release 128.10.0 ESR MFSA 2025-29 (bsc#1241621): * CVE-2025-2817: Potential privilege escalation in Firefox Updater * MFSA-RESERVE-2025-193709: WebGL shader attribute memory corruption in Firefox for macOS * MFSA-RESERVE-2025-1958350: Process isolation bypass using `javascript:` URI links in cross-origin frames * MFSA-RESERVE-2025-1949994: Potential local code execution in "copy as cURL" command * MFSA-RESERVE-2025-1952465: Unsafe attribute access during XPath parsing * MFSA-RESERVE-2025-3: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 * MFSA-RESERVE-2025-7: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 ## Patch Instructions:

Topics%20covered

Topics Covered

security advisory critical privilege escalation important SUSE MozillaFirefox

References

* bsc#1241621

Cross-

* CVE-2025-2817

CVSS scores:

* CVE-2025-2817 ( SUSE ): 8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-2817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-2817 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Enterprise High Performance Computing 12 SP5

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2025-2817.html

* https://bugzilla.suse.com/show_bug.cgi?id=1241621

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:1414-1
Release Date: 2025-04-30T06:59:28Z
Rating: important

Topics%20covered

Topics Covered

security advisory critical privilege escalation important SUSE MozillaFirefox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here