ELSA-2026-19370

ELSA-2026-19370 - firefox security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-29

Description

[140.12.0-1.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[140.12.0]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)

[140.12.0-1]
- Update to 140.12.0 ESR

[140.11.0-1]
- Update to 140.11.0 ESR

[140.10.2-1]
- Update to 140.10.2 ESR

[140.10.1-1]
- Update to 140.10.1 ESR

Related CVEs

CVE-2026-7320

CVE-2026-7321

CVE-2026-7322

CVE-2026-7323

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	firefox-140.12.0-1.0.1.el9_8.src.rpm	731a28c064e205d07aad12de540c6ef6359ed2909efe3b69940c935abacebf0e	-	ol9_aarch64_appstream
	firefox-140.12.0-1.0.1.el9_8.aarch64.rpm	4fa25b1797bc38ef79bc8db1e0a5983a27e4f1ede867bcdb8715d45be36f353c	-	ol9_aarch64_appstream
	firefox-x11-140.12.0-1.0.1.el9_8.aarch64.rpm	1b36238cbf2c16bcca86ae97ee64ae301071a2ed8bc76d0901c9115429c86f57	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	firefox-140.12.0-1.0.1.el9_8.src.rpm	731a28c064e205d07aad12de540c6ef6359ed2909efe3b69940c935abacebf0e	-	ol9_x86_64_appstream
	firefox-140.12.0-1.0.1.el9_8.x86_64.rpm	46920b3289a7c35c10aad0bf14cc901a8d9969adbc6bdbe2bf038a6f23371b3f	-	ol9_x86_64_appstream
	firefox-x11-140.12.0-1.0.1.el9_8.x86_64.rpm	2585d5a0947cd286c388d07349ee9b2ff57c77c2fa186da774e48e8952c45956	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team