Back Linuxsecurity

Oracle Linux 10 Firefox Important Security Advisory ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • July 20, 2026

[140.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.12.0-1] - Update to 140.12.0 ESR [140.11.0-1] - Update to 140.11.0 ESR [140.10.2-1] - Update to 140.10.2 ESR [140.10.1-1] - Update to 140.10.1 ESR

firefox-140.12.0-1.0.1.el10_2.x86_64.rpm

firefox-140.12.0-1.0.1.el10_2.aarch64.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux 10 Firefox Security Advisories Released on July 20, 2026 On July 20, 2026, Oracle released two security advisories for Firefox in Oracle Linux 10, addressing critical vulnerabilities. The advisories include ELSA-2026-19157 and ELSA-2026-19160, with related CVEs including CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323, CVE-2026-8090, and CVE-2026-8092. The vulnerabilities could potentially allow for remote code execution and other exploits if left unpatched. Affected systems include Oracle Linux 10 with Firefox versions 140.10.x and 140.12.x. Users are urged to update their systems immediately to mitigate risks. The advisories detail fixes for default preferences and updates to the Extended Support Release (ESR) versions of Firefox. The advisories emphasize the importance of applying the patches to protect against potential exploitation. 3 sources 73

Extracted Entities

CVEs (4)

CVE-2026-7320 CVE-2026-7321 CVE-2026-7322 CVE-2026-7323