RHSA-2025:1132: Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.Security Fix(es): firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017) firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010) firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016) firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013) firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011) firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009) firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014) firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat