Red Hat Product Errata RHSA-2026:25015 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25015 - Security Advisory Overview Updated Packages Synopsis Important: firefox security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for firefox is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): firefox: Other issue in the WebRTC component (CVE-2026-8094) firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 (CVE-2026-8092) firefox: Use-after-free in the DOM: Networking component (CVE-2026-8090) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2467706 - CVE-2026-8094 firefox: thunderbird: Other issue in the WebRTC component BZ - 2467708 - CVE-2026-8092 firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 BZ - 2467709 - CVE-2026-8090 firefox: thunderbird: Use-after-free in the DOM: Networking component CVEs CVE-2026-8090 CVE-2026-8092 CVE-2026-8094 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 SRPM firefox-140.10.2-1.el8_6.src.rpm SHA-256: 629a35c562b43d20901c747861beae00d220f95844d2593077de22e0cbdf1534 x86_64 firefox-140.10.2-1.el8_6.x86_64.rpm SHA-256: 0c2f163a3c83f4310a5b5337b0c62591c3a446ac83f06f63c4051b3f1d7d9307 firefox-debuginfo-140.10.2-1.el8_6.x86_64.rpm SHA-256: 3422a973fcc0aa4dd3e4940e5157905dafa4aa137f763a0b2e1fe2031b26e44e firefox-debugsource-140.10.2-1.el8_6.x86_64.rpm SHA-256: f6ac941dbe578ec70f67705ac16f8b33c184ef1adae2c24b6b8315eff6bf948a Red Hat Enterprise Linux Server - AUS 8.6 SRPM firefox-140.10.2-1.el8_6.src.rpm SHA-256: 629a35c562b43d20901c747861beae00d220f95844d2593077de22e0cbdf1534 x86_64 firefox-140.10.2-1.el8_6.x86_64.rpm SHA-256: 0c2f163a3c83f4310a5b5337b0c62591c3a446ac83f06f63c4051b3f1d7d9307 firefox-debuginfo-140.10.2-1.el8_6.x86_64.rpm SHA-256: 3422a973fcc0aa4dd3e4940e5157905dafa4aa137f763a0b2e1fe2031b26e44e firefox-debugsource-140.10.2-1.el8_6.x86_64.rpm SHA-256: f6ac941dbe578ec70f67705ac16f8b33c184ef1adae2c24b6b8315eff6bf948a The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .