Package firefox updated to version 143.0.4-alt1 for branch sisyphus in task 396308.

Published: 2025-09-30
Modified: 2025-10-30

CVE-2025-11152

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability affects Firefox < 143.0.3.

Severity: HIGH (8.6) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

References:

Published: 2025-09-30
Modified: 2025-10-13

CVE-2025-11153

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 143.0.3.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References:

xdg-open: firefox: execv: /usr/lib64/firefox/firefox: Bad address при количестве переменных > 120

Version: 2.1.2