Back Linuxsecurity

Oracle Linux 10 Firefox Critical Security Notice ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • July 20, 2026

Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges ×

[140.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.12.0-1] - Update to 140.12.0 ESR [140.11.0-1] - Update to 140.11.0 ESR [140.10.2-1] - Update to 140.10.2 ESR [140.10.1-1] - Update to 140.10.1 ESR

firefox-140.12.0-1.0.1.el10_2.x86_64.rpm

firefox-140.12.0-1.0.1.el10_2.aarch64.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux 10 Firefox Security Advisories Released on July 20, 2026 On July 20, 2026, Oracle released two security advisories for Firefox in Oracle Linux 10, addressing critical vulnerabilities. The advisories include ELSA-2026-19157 and ELSA-2026-19160, with related CVEs including CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323, CVE-2026-8090, and CVE-2026-8092. The vulnerabilities could potentially allow for remote code execution and other exploits if left unpatched. Affected systems include Oracle Linux 10 with Firefox versions 140.10.x and 140.12.x. Users are urged to update their systems immediately to mitigate risks. The advisories detail fixes for default preferences and updates to the Extended Support Release (ESR) versions of Firefox. The advisories emphasize the importance of applying the patches to protect against potential exploitation. 3 sources 73

Extracted Entities

CVEs (3)

CVE-2026-8090 CVE-2026-8092 CVE-2026-8094

Platforms (2)

Firefox Oracle Linux