[El-errata] ELSA-2025-18155 Important: Oracle Linux 9 firefox security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-18155

http://linux.oracle.com/errata/ELSA-2025-18155.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
firefox-140.4.0-3.0.1.el9_6.x86_64.rpm
firefox-x11-140.4.0-3.0.1.el9_6.x86_64.rpm

aarch64:
firefox-140.4.0-3.0.1.el9_6.aarch64.rpm
firefox-x11-140.4.0-3.0.1.el9_6.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/firefox-140.4.0-3.0.1.el9_6.src.rpm

Related CVEs:

CVE-2025-11708
CVE-2025-11709
CVE-2025-11710
CVE-2025-11711
CVE-2025-11712
CVE-2025-11714
CVE-2025-11715




Description of changes:

[140.4.0-3.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[140.4.0]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)

[140.4.0-3]
- Update to 140.4.0 ESR