ELSA-2026-27717

ELSA-2026-27717 - firefox security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-22

Description

[140.12.0-1.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789]
- diable wasi_sdk to prevent build failure with newer llvm

[140.12.0]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)

[140.12.0-1]
- Update to 140.12.0 ESR

Related CVEs

CVE-2026-12289

CVE-2026-12290

CVE-2026-12291

CVE-2026-12292

CVE-2026-12294

CVE-2026-12295

CVE-2026-12296

CVE-2026-12297

CVE-2026-12298

CVE-2026-12299

CVE-2026-12302

CVE-2026-12304

CVE-2026-12305

CVE-2026-12306

CVE-2026-12307

CVE-2026-12308

CVE-2026-12309

CVE-2026-12310

CVE-2026-12311

CVE-2026-12312

CVE-2026-12313

CVE-2026-12314

CVE-2026-12315

CVE-2026-12324

CVE-2026-12325

CVE-2026-12327

CVE-2026-12328

CVE-2026-12329

CVE-2026-12330

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	firefox-140.12.0-1.0.1.el8_10.src.rpm	f57410697899a1f0ff7b01ea618f8eb2cc08d2eca68ca4fb11bb3ac9b62bcf0f	-	ol8_aarch64_appstream
	firefox-140.12.0-1.0.1.el8_10.aarch64.rpm	899a1f8164600446fe3f8b6c466b0f863764af34b139a64754adfa9433d60cad	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	firefox-140.12.0-1.0.1.el8_10.src.rpm	f57410697899a1f0ff7b01ea618f8eb2cc08d2eca68ca4fb11bb3ac9b62bcf0f	-	ol8_x86_64_appstream
	firefox-140.12.0-1.0.1.el8_10.x86_64.rpm	785609eda1b3156020c4a010913c6a2917e2685a501b5b620bd7e46264e7fdb3	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team