Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Firefox Security Update Fixes Multiple Vulnerabilities

published 1 year ago

Summary

Mozilla has released an update for Firefox to address multiple security vulnerabilities that could be exploited by attackers to take control of your computer or steal sensitive information. It's recommended to update your Firefox browser as soon as possible to protect yourself from potential threats. If you're not sure how to update, contact your IT department for assistance.

What to do

Update redhat firefox to version 0:128.8.0-1.el8_4.
Update redhat firefox-debuginfo to version 0:128.8.0-1.el8_4.
Update redhat firefox-debugsource to version 0:128.8.0-1.el8_4.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.4::appstream	redhat	firefox	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	firefox-debuginfo	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	firefox-debugsource	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4
Red Hat:rhel_e4s:8.4::appstream	redhat	firefox	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4
Red Hat:rhel_e4s:8.4::appstream	redhat	firefox-debuginfo	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4
Red Hat:rhel_e4s:8.4::appstream	redhat	firefox-debugsource	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4
Red Hat:rhel_tus:8.4::appstream	redhat	firefox	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4
Red Hat:rhel_tus:8.4::appstream	redhat	firefox-debuginfo	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4
Red Hat:rhel_tus:8.4::appstream	redhat	firefox-debugsource	< 0:128.8.0-1.el8_4 Fix: upgrade to 0:128.8.0-1.el8_4

Original advisory text

Red Hat Security Advisory: firefox security update

References

https://access.redhat.com/errata/RHSA-2025:2484 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349786 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349787 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349790 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349792 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349793 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349794 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349795 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349796 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349797 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2484.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-1930 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1930 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1930 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1902309 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-14/ Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-15/ Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-16/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1931 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1931 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1931 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1944126 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1932 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1932 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1932 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1944313 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1933 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1933 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1933 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1946004 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1934 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1934 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1934 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1942881 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1935 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1935 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1935 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1866661 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1936 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1936 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1936 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1940027 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1937 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1937 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1937 Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938471%2C1940716 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1938 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1938 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1938 Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1922889%2C1935004%2C1943586%2C19... Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published10 Mar 2025

Updated27 Mar 2026

First seen27 Mar 2026

Sources

RHSA-2025:2484 · OSV

Track software like this

Free during beta