Security Vulnerabilities fixed in Firefox 152.0.6
Announced
July 14, 2026
Impact
critical
Products
Firefox
Fixed in
Firefox 152.0.6
…
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw.
Not available with https://software.opensuse.org/package/MozillaFirefox - use binary or rpm package from Mozilla.
The flatpak is also on 152.0.6, too.
As always, it usually takes a little bit for updates to find their way through the build system. If you need the patch now, then using packages from Mozilla or the flatpak is the way to get it more quickly. But usually when a fix is announced it takes a little bit for it to work its way through any distribution’s build process.
You posted this with a tag of “Leap-16”. I’ll note that Leap is using the ESR version of firefox. Maybe there’s also a security problem there, but I’ll be waiting to hear about advice for the ESR version.
@Svyatko Can you show your test results for this CVE and the current openSUSE version of Firefox in Leap 16.0?
New FF ESR is not released yet (the latest is 140.12.0esr) - possibly it has no such flaws.
Newer Firefox (152.x) is available for Leap from openSUSE with Mozilla experimental repo.
Firefox 152.x is available for Leap from openSUSE with Mozilla experimental repo.
https://build.opensuse.org/package/show/mozilla/firefox152
firefox-152.0.4.source.tar.xz
Link to package: https://download.opensuse.org/repositories/mozilla/16.0/x86_64/MozillaFirefox-152.0.4-lp160.1.8.x86_64.rpm
I.e. FF 152.0.4.
Access to these two Firefox bugs is denied:
@Svyatko Just remember that on Leap, version numbers mean diddly squat as many fixes are backported to existing versions. One must check the changelogs or patch info/descriptions on fixes as well… I use Chrome on Leap/Tumbleweed, firefox left the building many years ago here…
one has to check by oneself…
https://src.opensuse.org/pool/firefox-esr/src/branch/factory/
https://src.opensuse.org/pool/MozillaFirefox/src/branch/factory/
https://src.opensuse.org/pool/MozillaFirefox/src/branch/slfo-main/
https://src.opensuse.org/pool/MozillaFirefox/src/branch/slfo-1.2/
I go to https://download.opensuse.org/distribution/leap/16.0/repo/oss/x86_64/
, type ‘firefox’ in the search box, MozillaFirefox-140.12.0 is there, it’s the latest esr version.
I would not use the devel repos, they can be in an inconsistent state when in the process of packaging a new version.
If I need the non-esr version on Leap, I would use the flatpak one.
JFYI: Unfortunately, the request for FF 152.0.6 hasn’t been accepted yet: https://bugzilla.opensuse.org/show_bug.cgi?id=1271403.
FF 152.0.6 is available from the Mozilla:repo for Leap and TW (https://download.opensuse.org/repositories/mozilla/), and it has been submitted to TW.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.