Description:
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
* firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029)
* firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
firefox-128.9.0-2.el9_5.aarch64.rpm |
6e4ad63e4e3ca444256d19ed3afe26b816f262a3f543c6852fc4be32738d0668 |
aarch64 |
firefox-x11-128.9.0-2.el9_5.aarch64.rpm |
8400d55d870042f4922a28c318a38116fccd6412c00ddd615dbe7ebe7c139f65 |
ppc64le |
firefox-x11-128.9.0-2.el9_5.ppc64le.rpm |
1506627a5dd9a9d7030a609cfa6a0841331c1ac008fcee86f8d603fb0155affa |
ppc64le |
firefox-128.9.0-2.el9_5.ppc64le.rpm |
3b429da067f25da5cdf1fbebde60f2944257e545f568d9a1bd46978118ada748 |
s390x |
firefox-128.9.0-2.el9_5.s390x.rpm |
4f40cdfacff5e28ce711ba1f326891dcb3ee12ec7d4495325c34aaffdfe6a3d6 |
s390x |
firefox-x11-128.9.0-2.el9_5.s390x.rpm |
e6431081994794e536dd549216ff4bd410e5217368565b8d8b22879f33801ab4 |
x86_64 |
firefox-x11-128.9.0-2.el9_5.x86_64.rpm |
812dee6d7ddb2c189a1fee233d9c8abc73c49e7186423526ef5f45cad34e9c33 |
x86_64 |
firefox-128.9.0-2.el9_5.x86_64.rpm |
ed04e2f019e32312876cc4645e376cc75f0924d5105e27a672ec0f5bc5623978 |