Back Linuxsecurity

Oracle Linux Firefox Important Buffer Overflow Vuln ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • August 26, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

[140.14.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] - diable wasi_sdk to prevent build failure with newer llvm [140.14.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.14.0-1] - Update to 140.14.0 ESR

firefox-140.14.0-1.0.1.el8_10.x86_64.rpm

firefox-140.14.0-1.0.1.el8_10.aarch64.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Firefox Vulnerabilities in Oracle Linux Prompt Urgent Updates Oracle has released important security updates for Firefox in Oracle Linux 8, 9, and 10 due to multiple critical vulnerabilities. These updates address buffer overflow vulnerabilities and other security issues, with CVEs such as CVE-2026-74939 being publicly disclosed on August 25, 2026. The vulnerabilities affect various versions of Firefox across different Oracle Linux distributions, including 8, 9, and 10. Administrators are urged to apply the updates immediately to mitigate potential exploitation. The updates include patches for debranding and default preferences, as well as fixes for specific bugs. Affected systems include x86_64 and aarch64 architectures. The vulnerabilities have been linked to a range of CVEs, all published on August 18, 2026, indicating a significant security risk. The current status emphasizes the need for immediate action to secure systems against potential threats. 3 sources 72

Oracle Linux Firefox Important Buffer Overflow Vuln ELSA-2026

The full story

Extracted Entities

CVEs (31)

CWE Weaknesses (1)

Platforms (2)