firefox security update

140.7.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.7.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.7.0-1 - Update to 140.7.0 ESR...

CVE-2026-22863

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

firefox: thunderbird: Use-after-free in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics component...

firefox: thunderbird: Mitigation bypass in the DOM: Security component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

CVE-2026-22772 vulnerabilities

Vulnerabilities for packages: cosign, tekton-chains, aactl, falcoctl, slsa-verifier, vexctl, witness, skopeo, gitsign, kubescape, sigstore-scaffolding, zarf, falco-no-driver, kots...

CVE-2026-0960

HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service...

CVE-2026-0961

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

GHSA-7RF3-MQPX-H7XG vulnerabilities

Vulnerabilities for packages: druid...

CVE-2025-13751 vulnerabilities

Vulnerabilities for packages: openvpn...

GHSA-7RF3-MQPX-H7XG vulnerabilities

Vulnerabilities for packages: druid...

GHSA-Q2WP-RJMX-X6X9 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-tensorrtllm-24.04...

GHSA-6Q42-8X5P-5C72 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

GHSA-MRMF-653P-5VH8 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

GHSA-XG28-VM4V-PCGP vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

SUSE CVE-2026-0882

Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

CVE-2026-0877

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

CVE-2026-0892

Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0885

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...