ELSA-2026-2271

ELSA-2026-2271 - firefox security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-02-09

Description

[140.7.0-1.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[140.7.0-1]
- Update to 140.7.0 ESR

Related CVEs

CVE-2025-14327

CVE-2026-0877

CVE-2026-0878

CVE-2026-0879

CVE-2026-0880

CVE-2026-0882

CVE-2026-0883

CVE-2026-0884

CVE-2026-0885

CVE-2026-0886

CVE-2026-0887

CVE-2026-0890

CVE-2026-0891

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	firefox-140.7.0-1.0.1.el10_1.src.rpm	2bae094b27dac3af92950062f987e82bf32708959ea3c93935386e1f8425d983	-	ol10_aarch64_appstream
	firefox-140.7.0-1.0.1.el10_1.aarch64.rpm	160f5ad66eaeb470bdc19d83c65a6e160deef75363ae23e405e138409b0c0e8e	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	firefox-140.7.0-1.0.1.el10_1.src.rpm	2bae094b27dac3af92950062f987e82bf32708959ea3c93935386e1f8425d983	-	ol10_x86_64_appstream
	firefox-140.7.0-1.0.1.el10_1.x86_64.rpm	0e664638f4f229468c6e9fff95c56c860977120c410730c604921bd23c2b29be	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team