REDHAT-BUG-2343754: Race Condition
First published: Tue Feb 04 2025(Updated: )
A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | <135 | |
| Mozilla Firefox ESR | <128.7 | |
| Mozilla Thunderbird | <128.7<135 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2025:1066
- https://access.redhat.com/errata/RHSA-2025:1133
- https://access.redhat.com/errata/RHSA-2025:1135
- https://access.redhat.com/errata/RHSA-2025:1138
- https://access.redhat.com/errata/RHSA-2025:1136
- https://access.redhat.com/errata/RHSA-2025:1132
- https://access.redhat.com/errata/RHSA-2025:1137
- https://access.redhat.com/errata/RHSA-2025:1139
- https://access.redhat.com/errata/RHSA-2025:1140
- https://access.redhat.com/errata/RHSA-2025:1184
- https://access.redhat.com/errata/RHSA-2025:1283
- https://access.redhat.com/errata/RHSA-2025:1292
- https://access.redhat.com/errata/RHSA-2025:1319
- https://access.redhat.com/errata/RHSA-2025:1317
- https://access.redhat.com/errata/RHSA-2025:1318
- https://access.redhat.com/errata/RHSA-2025:1339
- https://access.redhat.com/errata/RHSA-2025:1340
- https://access.redhat.com/errata/RHSA-2025:1341
- https://access.redhat.com/errata/RHSA-2025:1348
- https://bugzilla.redhat.com/show_bug.cgi?id=2343754
Frequently Asked Questions
What is the severity of REDHAT-BUG-2343754?
The severity of REDHAT-BUG-2343754 is classified as a potential privacy leak due to a race condition.
How do I fix REDHAT-BUG-2343754?
To fix REDHAT-BUG-2343754, update your Mozilla Firefox to version 135 or later, Mozilla Firefox ESR to version 128.7 or later, or Mozilla Thunderbird to version 135 or later.
Which applications are affected by REDHAT-BUG-2343754?
REDHAT-BUG-2343754 affects Mozilla Firefox versions below 135, Mozilla Firefox ESR versions below 128.7, and Thunderbird versions below 135.
What could happen if I do not address REDHAT-BUG-2343754?
If REDHAT-BUG-2343754 is not addressed, there is a risk of private browsing information being exposed in regular browsing sessions.
Is there a workaround for REDHAT-BUG-2343754?
Currently, the best workaround for REDHAT-BUG-2343754 is to avoid using the affected versions of the applications until an update is applied.
- agent/weakness
- agent/source
- agent/severity
- agent/first-publish-date
- agent/description
- agent/type
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/references
- agent/last-modified-date
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-1013
- vendor/mozilla
- canonical/mozilla firefox
- canonical/mozilla firefox esr
- canonical/mozilla thunderbird