ELSA-2025-21281

ELSA-2025-21281 - firefox security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-12-02

Description

[140.5.0-2.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[140.5.0-2]
- Update to 140.5.0 ESR

Related CVEs

CVE-2025-13012

CVE-2025-13013

CVE-2025-13014

CVE-2025-13015

CVE-2025-13016

CVE-2025-13017

CVE-2025-13018

CVE-2025-13019

CVE-2025-13020

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	firefox-140.5.0-2.0.1.el10_1.src.rpm	144706e9af5cae89a3e44123bf6a7c294a0e54eacec4d49f0a215ed696f5e091	-	ol10_aarch64_appstream
	firefox-140.5.0-2.0.1.el10_1.aarch64.rpm	04d35d8a0ad3bb775837d0a057082e11e6e73d2cadb6ad7b94bf2ea1cbe74f8f	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	firefox-140.5.0-2.0.1.el10_1.src.rpm	144706e9af5cae89a3e44123bf6a7c294a0e54eacec4d49f0a215ed696f5e091	-	ol10_x86_64_appstream
	firefox-140.5.0-2.0.1.el10_1.x86_64.rpm	cb07c64b30eef6d4cb8b4a78d928745828fcf6fa363125672a2f87354d3444ff	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team