seamonkey-2.53.23

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

Release notes are at ​https://www.seamonkey-project.org/releases/seamonkey2.53.23/

[zeckma]

Security fixes

• CVE-2025-13012: Race condition in the Graphics component
• CVE-2025-13013: Mitigation bypass in the DOM: Core & HTML component
• CVE-2025-13014: Use-after-free in the Audio/Video component
• CVE-2025-13015: Spoofing issue in Firefox
• CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component
• CVE-2025-13017: Same-origin policy bypass in the DOM: Notifications component
• CVE-2025-13018: Mitigation bypass in the DOM: Security component
• CVE-2025-13019: Same-origin policy bypass in the DOM: Workers component
• CVE-2025-13020: Use-after-free in the WebRTC: Audio/Video component
• CVE-2025-14321: Use-after-free in the WebRTC: Signaling component
• CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
• CVE-2025-14323: Privilege escalation in the DOM: Notifications component
• CVE-2025-14324: JIT miscompilation in the JavaScript Engine: JIT component
• CVE-2025-14325: JIT miscompilation in the JavaScript Engine: JIT component
• CVE-2025-14328: Privilege escalation in the Netmonitor component
• CVE-2025-14329: Privilege escalation in the Netmonitor component
• CVE-2025-14330: JIT miscompilation in the JavaScript Engine: JIT component
• CVE-2025-14331: Same-origin policy bypass in the Request Handling component
• CVE-2025-14333: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146

Highest rating is at High.

[zeckma]

Fixed at ad004d46c05f682605b4815e70ddf1ba5a654132. SA-12.4-075 issued.

[Bruce Dubbs]

Milestone renamed