[go: up one dir, main page]
Bug 1237683 (CVE-2024-43097, CVE-2025-1930, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938, CVE-2025-26695, CVE-2025-26696) - VUL-0: MozillaFirefox / MozillaThunderbird: update to 136 and 128.8esr
Summary: VUL-0: MozillaFirefox / MozillaThunderbird: update to 136 and 128.8esr
Status: IN_PROGRESS
Alias: CVE-2024-43097, CVE-2025-1930, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938, CVE-2025-26695, CVE-2025-26696
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P2 - High : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/441998/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-43097:8.8:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2025-02-25 13:15 UTC by Martin Sirringhaus
Modified: 2025-04-08 16:33 UTC (History)
4 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 3 Maintenance Automation 2025-03-05 12:31:50 UTC 
SUSE-SU-2025:0783-1: An update that solves 10 vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250783-1
Category: security (important)
Bug References: 1237683
CVE References: CVE-2024-43097, CVE-2025-1930, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938
Maintenance Incident: [SUSE:Maintenance:37707](https://smelt.suse.de/incident/37707/)
Sources used:
SUSE Linux Enterprise Server 12 SP5 LTSS (src):
 MozillaFirefox-128.8.0-112.249.3
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src):
 MozillaFirefox-128.8.0-112.249.3

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 4 Maintenance Automation 2025-03-05 16:31:53 UTC 
SUSE-SU-2025:0788-1: An update that solves 10 vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250788-1
Category: security (important)
Bug References: 1237683
CVE References: CVE-2024-43097, CVE-2025-1930, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938
Maintenance Incident: [SUSE:Maintenance:37706](https://smelt.suse.de/incident/37706/)
Sources used:
openSUSE Leap 15.6 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
Desktop Applications Module 15-SP6 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise Server 15 SP3 LTSS (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise Server 15 SP4 LTSS (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise Server 15 SP5 LTSS (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src):
 MozillaFirefox-128.8.0-150200.152.173.1
SUSE Enterprise Storage 7.1 (src):
 MozillaFirefox-128.8.0-150200.152.173.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 5 OBSbugzilla Bot 2025-03-06 08:25:01 UTC 
This is an autogenerated message for OBS integration:
This bug (1237683) was mentioned in
https://build.opensuse.org/request/show/1250560 Factory / MozillaThunderbird
Comment 7 OBSbugzilla Bot 2025-03-07 08:05:02 UTC 
This is an autogenerated message for OBS integration:
This bug (1237683) was mentioned in
https://build.opensuse.org/request/show/1251116 Factory / MozillaFirefox
Comment 10 Maintenance Automation 2025-03-12 16:32:15 UTC 
SUSE-SU-2025:0849-1: An update that solves 12 vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250849-1
Category: security (important)
Bug References: 1237683
CVE References: CVE-2024-43097, CVE-2025-1930, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938, CVE-2025-26695, CVE-2025-26696
Maintenance Incident: [SUSE:Maintenance:37780](https://smelt.suse.de/incident/37780/)
Sources used:
openSUSE Leap 15.6 (src):
 MozillaThunderbird-128.8.0-150200.8.203.1
SUSE Package Hub 15 15-SP6 (src):
 MozillaThunderbird-128.8.0-150200.8.203.1
SUSE Linux Enterprise Workstation Extension 15 SP6 (src):
 MozillaThunderbird-128.8.0-150200.8.203.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.