[El-errata] ELSA-2025-21280 Important: Oracle Linux 9 firefox security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-21280

http://linux.oracle.com/errata/ELSA-2025-21280.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
firefox-140.5.0-1.0.1.el9_7.x86_64.rpm
firefox-x11-140.5.0-1.0.1.el9_7.x86_64.rpm

aarch64:
firefox-140.5.0-1.0.1.el9_7.aarch64.rpm
firefox-x11-140.5.0-1.0.1.el9_7.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/firefox-140.5.0-1.0.1.el9_7.src.rpm

Related CVEs:

CVE-2025-13012
CVE-2025-13013
CVE-2025-13014
CVE-2025-13015
CVE-2025-13016
CVE-2025-13017
CVE-2025-13018
CVE-2025-13019
CVE-2025-13020




Description of changes:

[140.5.0-1.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[140.5.0]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)

[140.5.0-1]
- Update to 140.5.0 ESR