Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.2.0 ESR MFSA 2026-85 (bsc#1278001): * CVE-2026-75874 (bmo#2039972) Sandbox escape in the Remote Settings Client component * CVE-2026-84118 (bmo#2057457) Use-after-free in the JavaScript: GC component * CVE-2026-84119 (bmo#2057817) Sandbox escape due to use-after-free in the DOM: Navigation component * CVE-2026-84120 (bmo#2058911) Use-after-free in the Audio/Video component * CVE-2026-84121 (bmo#2059018) Sandbox escape due to use-after-free in the DOM: Security * CVE-2026-84122 (bmo#2059965) * CVE-2026-84123 (bmo#2060047) Privilege escalation due to use-after-free in the Graphics: WebGPU component * CVE-2026-84124 (bmo#2061110) Use-after-free in the DOM: Core & HTML component * CVE-2026-84125 (bmo#2063871) * CVE-2026-74952 (bmo#2021757) Privilege escalation in the Application Update component * CVE-2026-84129 (bmo#2055028) Site isolation issue in the DOM: Navigation component * CVE-2026-84130 (bmo#2057834) Information disclosure in the Graphics: WebGPU component * CVE-2026-84131 (bmo#2060008) Privilege escalation due to invalid pointer in the Graphics * CVE-2026-84132 (bmo#2063020) Information disclosure in the Networking: HTTP component * CVE-2026-84133 (bmo#2032388) Site isolation issue in the DOM: Push Subscriptions component * CVE-2026-84134 (bmo#2044882) Other issue in the Profile Backup component * CVE-2026-84136 (bmo#2048699) Other issue in the DOM: Navigation component * CVE
SUSE-SU-2026:23784-1
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:SUSE-SU-2026:23784-1
MozillaFirefox
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 153.2.0-160000.1.1
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
MozillaFirefox
Source reference: /affected/1/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 153.2.0-160000.1.1
Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "153.2.0-160000.1.1"
}
]
}
],
"package": {
"name": "MozillaFirefox",
"purl": "pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2016.0",
"ecosystem": "SUSE:Linux Enterprise Server 16.0"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23784-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"MozillaFirefox": "153.2.0-160000.1.1",
"MozillaFirefox-devel": "153.2.0-160000.1.1",
"MozillaFirefox-translations-other": "153.2.0-160000.1.1",
"MozillaFirefox-translations-common": "153.2.0-160000.1.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "153.2.0-160000.1.1"
}
]
}
],
"package": {
"name": "MozillaFirefox",
"purl": "pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0",
"ecosystem": "SUSE:Linux Enterprise Server for SAP applications 16.0"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23784-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"MozillaFirefox": "153.2.0-160000.1.1",
"MozillaFirefox-devel": "153.2.0-160000.1.1",
"MozillaFirefox-translations-other": "153.2.0-160000.1.1",
"MozillaFirefox-translations-common": "153.2.0-160000.1.1"
}
]
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #19958 · Revision 1
- Added to Heist Feed
- Publisher date