RLSA-2026:19160

Synopsis

Important: firefox security update

Description

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Other issue in the WebRTC component (CVE-2026-8094)

* firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 (CVE-2026-8092)

* firefox: Use-after-free in the DOM: Networking component (CVE-2026-8090)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2467708 2467706 2467709

CVEs

CVE-2026-8090 CVE-2026-8092 CVE-2026-8094

Affected packages

Rocky Linux 10 ppc64le - AppStream

firefox-debuginfo-0:140.10.2-1.el10_2.ppc64le.rpm firefox-0:140.10.2-1.el10_2.src.rpm firefox-0:140.10.2-1.el10_2.ppc64le.rpm firefox-debugsource-0:140.10.2-1.el10_2.ppc64le.rpm

Rocky Linux 10 aarch64 - AppStream

firefox-0:140.10.2-1.el10_2.src.rpm firefox-0:140.10.2-1.el10_2.aarch64.rpm firefox-debugsource-0:140.10.2-1.el10_2.aarch64.rpm firefox-debuginfo-0:140.10.2-1.el10_2.aarch64.rpm

Rocky Linux 10 riscv64 - AppStream

firefox-0:140.10.2-1.el10_2.src.rpm

Rocky Linux 10 s390x - AppStream

firefox-0:140.10.2-1.el10_2.src.rpm firefox-debuginfo-0:140.10.2-1.el10_2.s390x.rpm firefox-0:140.10.2-1.el10_2.s390x.rpm firefox-debugsource-0:140.10.2-1.el10_2.s390x.rpm

Rocky Linux 10 x86_64 - AppStream

firefox-0:140.10.2-1.el10_2.src.rpm firefox-debuginfo-0:140.10.2-1.el10_2.x86_64.rpm firefox-debugsource-0:140.10.2-1.el10_2.x86_64.rpm firefox-0:140.10.2-1.el10_2.x86_64.rpm