firefox security update

140.9.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.9.0-1 - Update to 140.9.0 ESR...

Oracle Linux 9 : firefox (ELSA-2026-5930)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5930 advisory. 140.9.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

SUSE CVE-2026-4699

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

SUSE CVE-2026-4704

Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

SUSE CVE-2026-4706

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

EUVD-2026-14855

Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...

EUVD-2026-14813

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...

EUVD-2026-14817

Mitigation bypass in the Networking: HTTP component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14825

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14839

Information disclosure in the Widget: Cocoa component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14831

Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14835

Incorrect boundary conditions in the Audio/Video component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14849

Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14819

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14827

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...

EUVD-2026-14845

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14843

Incorrect boundary conditions in the Audio/Video component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14810

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14802

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...

EUVD-2026-14800

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...