HCE3-SA-2025-0104 Important HCE 3.0 Security Fix(es): Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5. (CVE-2023-6209) VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. (CVE-2023-44488) HCE 3.0 mozjs102-102.9.0-6.r1.hce3.x86_64.rpm mozjs102-devel-102.9.0-6.r1.hce3.x86_64.rpm mozjs102-102.9.0-6.r1.hce3.aarch64.rpm mozjs102-devel-102.9.0-6.r1.hce3.aarch64.rpm