ELSA-2026-0694

ELSA-2026-0694 - firefox security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-01-16

Description

[140.7.0-1.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[140.7.0]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)

[140.7.0-1]
- Update to 140.7.0 ESR

Related CVEs

CVE-2025-14327

CVE-2026-0877

CVE-2026-0878

CVE-2026-0879

CVE-2026-0880

CVE-2026-0882

CVE-2026-0883

CVE-2026-0884

CVE-2026-0885

CVE-2026-0886

CVE-2026-0887

CVE-2026-0890

CVE-2026-0891

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	firefox-140.7.0-1.0.1.el9_7.src.rpm	069588ab1d8e157a429862ddf97e3dc229dc01b747637120e7d9ea92909f4c30	-	ol9_aarch64_appstream
	firefox-140.7.0-1.0.1.el9_7.aarch64.rpm	9072fcce04401fdfee7a6564939e5e6488cf0112f864629209b05e894b4446ac	-	ol9_aarch64_appstream
	firefox-x11-140.7.0-1.0.1.el9_7.aarch64.rpm	b91e8c1027b85107942568b7bb0073d74277a03b9c1943d594a3b65ac93a8022	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	firefox-140.7.0-1.0.1.el9_7.src.rpm	069588ab1d8e157a429862ddf97e3dc229dc01b747637120e7d9ea92909f4c30	-	ol9_x86_64_appstream
	firefox-140.7.0-1.0.1.el9_7.x86_64.rpm	7bcb486f1e69b1f69c40d9e3fa00c3791a9b95942f5fccdbe689bfba80c6ca04	-	ol9_x86_64_appstream
	firefox-x11-140.7.0-1.0.1.el9_7.x86_64.rpm	e6305fd9225a086c5fe83ee27c817cf3d308e081cd10dd0eae8885081db649b8	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team