摘要:
firefox security update
安全等级: Critical
公告ID: KylinSec-SA-2025-1259
发布日期: 2025年8月20日
关联CVE: CVE-2025-1016
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.
Security Fix(es):
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.(CVE-2025-1016)
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2025-1016 | V6 | firefox | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| firefox | x86_64 | 128.7.0-1.ks6.kb1 |
| firefox | aarch64 | 128.7.0-1.ks6.kb1 |
方法一：下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存，如 xxx.rpm
2、通过rpm命令升级，如 rpm -Uvh xxx.rpm
方法二：通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包，如 yum install 包名
