SUSE-SU-2026:21607-1

Details

Description of the patch:

This update for MozillaFirefox fixes the following issues

Updated to Firefox Extended Support Release 140.10.2 ESR (bsc#1264378,MFSA 2026-41):

CVE-2026-8090: Use-after-free in the DOM: Networking component.
CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback component.
CVE-2026-8092: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2.
CVE-2026-8094: Other issue in the WebRTC component.

Affected Packages

MozillaFirefox

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

140.10.2-160000.1.1

MozillaFirefox-devel

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

140.10.2-160000.1.1

MozillaFirefox-translations-common

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in: