This update for MozillaFirefox fixes the following issues:
Changes in MozillaFirefox:
Firefox Extended Support Release 140.6.0 ESR was released:
- Fixed: Various security fixes.
MFSA 2025-94 (bsc#1254551):
- CVE-2025-14321: Use-after-free in the WebRTC: Signaling component
- CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2025-14323: Privilege escalation in the DOM: Notifications component
- CVE-2025-14324: JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2025-14325: JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2025-14328: Privilege escalation in the Netmonitor component
- CVE-2025-14329: Privilege escalation in the Netmonitor component
- CVE-2025-14330: JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2025-14331: Same-origin policy bypass in the Request Handling component
- CVE-2025-14333: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146