ALT-BU-2025-6117-1
Branch p11 update bulletin.
Package postgresql15 updated to version 15.12-alt4 for branch p11 in task 379890.
Closed bugs
Не замещает libpq5
Package postgresql16 updated to version 16.8-alt4 for branch p11 in task 379890.
Closed bugs
Не замещает libpq5
Package postgresql13 updated to version 13.20-alt4 for branch p11 in task 379890.
Closed bugs
Не замещает libpq5
Package postgresql17 updated to version 17.4-alt4 for branch p11 in task 379890.
Closed bugs
Не замещает libpq5
Package postgresql14 updated to version 14.17-alt4 for branch p11 in task 379890.
Closed bugs
Не замещает libpq5
Package postgresql17-1C updated to version 17.2-alt8 for branch p11 in task 379890.
Closed bugs
Не замещает libpq5
Package firefox-esr updated to version 128.9.0-alt1 for branch p11 in task 382317.
Closed vulnerabilities
BDU:2025-04986
Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с использованием памяти после ее освобождения, позволяющая нарушителю выполнить произвольный код
Modified: 2025-04-07
CVE-2025-3028
JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability affects Firefox < 137, Firefox ESR < 115.22, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1941002
- https://www.mozilla.org/security/advisories/mfsa2025-20/
- https://www.mozilla.org/security/advisories/mfsa2025-21/
- https://www.mozilla.org/security/advisories/mfsa2025-22/
- https://www.mozilla.org/security/advisories/mfsa2025-23/
- https://www.mozilla.org/security/advisories/mfsa2025-24/
Modified: 2025-04-07
CVE-2025-3029
A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.
Modified: 2025-04-07
CVE-2025-3030
Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.
- Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
- https://www.mozilla.org/security/advisories/mfsa2025-20/
- https://www.mozilla.org/security/advisories/mfsa2025-22/
- https://www.mozilla.org/security/advisories/mfsa2025-23/
- https://www.mozilla.org/security/advisories/mfsa2025-24/