Critical Security Update for Firefox: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:7671: Important: firefox security update. Affects firefox versions < 140.9.1-1.el9_7.alma.1. Fixed in 140.9.1-1.el9_7.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely used open-source web browser known for its commitment to standards compliance, high performance, and cross-platform portability. It is designed to provide users with a secure and efficient browsing experience. However, like any software, it can be susceptible to vulnerabilities that may compromise user security and privacy.
Vulnerability Detail
The vulnerabilities identified in this update include a use-after-free vulnerability in libpng (CVE-2026-33416) that could lead to arbitrary code execution, an out-of-bounds read/write issue in Neon palette expansion (CVE-2026-33636) resulting in information disclosure and denial of service, and several memory safety bugs in both Firefox and Thunderbird (CVE-2026-5731, CVE-2026-5734). Additionally, there is an integer overflow issue in the Graphics: Text component (CVE-2026-5732) that could lead to unexpected behavior. These vulnerabilities can have serious ramifications, including unauthorized access to user data and system instability.
How To Fix
Minimum fixed version
140.9.1-1.el9_7.alma.1
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable certain features of Firefox that may be affected by these vulnerabilities until the update is applied. However, the best course of action is to update to the latest version as soon as possible.
Conclusion
In summary, Mozilla Firefox has released a critical security update addressing multiple vulnerabilities that could compromise user security. It is essential for users to update their installations promptly to protect against potential threats. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for firefox →
FAQ
The vulnerabilities include use-after-free issues, memory safety bugs, and integer overflow problems that could lead to arbitrary code execution and system instability.
You can check your Firefox version and compare it with the patched version. Additionally, you can use Vulert to monitor and alert for vulnerabilities in your software.
While there are temporary workarounds, the most effective way to mitigate these vulnerabilities is to update to the latest version of Firefox.
If you cannot update immediately, consider disabling features that may be vulnerable and monitor for any unusual behavior in your browser.
More detailed information can be found on the CVE pages listed in the security advisory or by visiting the Mozilla security updates page.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
