{"id":"MGASA-2025-0207","aliases":[],"status":"published","title":"Updated firefox packages fix security vulnerabilities","description":"Suggested Advisory\nThe last packaged version for armv7hl was 115.13.0, so from the point of\nview of the armv7hl architecture, this is a Security Advisory and fixes a\nlot of CVEs; see the linked Security Advisories below.\nhttps://advisories.mageia.org/MGASA-2024-0325.html\nhttps://advisories.mageia.org/MGASA-2024-0331.html\nhttps://advisories.mageia.org/MGASA-2024-0349.html\nhttps://advisories.mageia.org/MGASA-2024-0383.html\nhttps://advisories.mageia.org/MGASA-2025-0009.html\nhttps://advisories.mageia.org/MGASA-2025-0045.html\nhttps://advisories.mageia.org/MGASA-2025-0092.html\nhttps://advisories.mageia.org/MGASA-2025-0125.html\nhttps://advisories.mageia.org/MGASA-2025-0150.html\nhttps://advisories.mageia.org/MGASA-2025-0165.html\nhttps://advisories.mageia.org/MGASA-2025-0195.html\nhttps://advisories.mageia.org/MGASA-2025-0201.html\nFor the remaining architectures, this is just a bump in the release\nsubversion. We understand it can be upsetting to get an update that does not\nfix or improve something, but as part of quality assurance the packages\nof a piece of software should be built from the same source rpm for all\nthe architectures.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-07-11T18:52:28Z","modified":"2026-04-16T04:20:40Z","fixes":[{"ecosystem":"Mageia:9","package":"firefox","fixed_in":["128.12.0-1.4.mga9"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"firefox-l10n","fixed_in":["128.12.0-1.2.mga9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.4.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.2.mga9"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2025-0207.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34430","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2025-0207","title":"Updated firefox packages fix security vulnerabilities","description":"Suggested Advisory\nThe last packaged version for armv7hl was 115.13.0, so from the point of\nview of the armv7hl architecture, this is a Security Advisory and fixes a\nlot of CVEs; see the linked Security Advisories below.\nhttps://advisories.mageia.org/MGASA-2024-0325.html\nhttps://advisories.mageia.org/MGASA-2024-0331.html\nhttps://advisories.mageia.org/MGASA-2024-0349.html\nhttps://advisories.mageia.org/MGASA-2024-0383.html\nhttps://advisories.mageia.org/MGASA-2025-0009.html\nhttps://advisories.mageia.org/MGASA-2025-0045.html\nhttps://advisories.mageia.org/MGASA-2025-0092.html\nhttps://advisories.mageia.org/MGASA-2025-0125.html\nhttps://advisories.mageia.org/MGASA-2025-0150.html\nhttps://advisories.mageia.org/MGASA-2025-0165.html\nhttps://advisories.mageia.org/MGASA-2025-0195.html\nhttps://advisories.mageia.org/MGASA-2025-0201.html\nFor the remaining architectures, this is just a bump in the release\nsubversion. We understand it can be upsetting to get an update that does not\nfix or improve something, but as part of quality assurance the packages\nof a piece of software should be built from the same source rpm for all\nthe architectures.\n","status":"published","published":"2025-07-11T18:52:28Z","modified":"2026-04-16T04:20:40.501981Z","updated_at":"2026-11-02T15:49:43.178336Z"}]}}