Description:
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
* firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
* firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
* firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
* firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
* firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
* firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
* firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
* firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
* firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
* firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
* firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)
* firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)
* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)
* firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
firefox-140.16.0-1.el8_10.alma.1.aarch64.rpm |
8e3c9a231c7b8b5ec35bec8342807f469a961ee4a7b07da77e7c528610ebff05 |
| ppc64le |
firefox-140.16.0-1.el8_10.alma.1.ppc64le.rpm |
790874da64a22de91d2f4c7d8da5d2b1c894b8ecdda02423ed99ac359ab03680 |
| s390x |
firefox-140.16.0-1.el8_10.alma.1.s390x.rpm |
0e1b1526ac81490d8aeb21e4c27b70d0a1491c20bc8203275ec3377be2e9c3ce |
| x86_64 |
firefox-140.16.0-1.el8_10.alma.1.x86_64.rpm |
0c4c82956b44fc7cb7fac02458201539ad2d6af12a507cfc7f4524eac3436f3d |