Every CVESearch/Get API key

SUSE-SU-2025:03447-1

Security update for MozillaFirefox

No scoreFix available

SUSE-SU-2025:03447-1 is a vulnerability with no CVSS score yet in MozillaFirefox, published October 2, 2025. No source lists public exploit code. Fixed in MozillaFirefox 140.3.1-112.283.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
140.3.1-112.283.1MozillaFirefox +1 more

Description

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 140.3.1 ESR (bsc#1250452).

  • Improved reliability when HTTP/3 connections fail: Firefox no longer forces HTTP/2 during fallback, allowing the server to choose the protocol and preventing stalls on some sites.

Affected packages

Affected packages
PackageAffectedFixed
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5-LTSS
before 140.3.1-112.283.1
140.3.1-112.283.1
MozillaFirefox
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
before 140.3.1-112.283.1
140.3.1-112.283.1

What each source reports

OSVNo score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 140.3.1 ESR (bsc#1250452).

  • Improved reliability when HTTP/3 connections fail: Firefox no longer forces HTTP/2 during fallback, allowing the server to choose the protocol and preventing stalls on some sites.
Record
SUSE-SU-2025:03447-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open