openSUSE-SU-2026:20486-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20486-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20486-1
- Upstream
CVE (3)
- CVE-2026-5731
- CVE-2026-5732
- CVE-2026-5734
- Related
- Published
- 2026-04-09T12:58:07Z
- Modified
- 2026-04-22T18:26:37Z
- Summary
- Security update for MozillaFirefox
- Details
-
This update for MozillaFirefox fixes the following issues:
Update to Firefox Extended Support Release 140.9.1 ESR (bsc#1261663).
- MFSA 2026-27:
- CVE-2026-5731: memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2.
- CVE-2026-5732: incorrect boundary conditions, integer overflow in the Graphics: Text component.
- CVE-2026-5734: memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2.
- MFSA 2026-27:
- References
Affected packages
openSUSE:Leap 16.0 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed140.9.1-160000.1.1
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "140.9.1-160000.1.1",
"MozillaFirefox-branding-upstream": "140.9.1-160000.1.1",
"MozillaFirefox-devel": "140.9.1-160000.1.1",
"MozillaFirefox-translations-common": "140.9.1-160000.1.1",
"MozillaFirefox-translations-other": "140.9.1-160000.1.1"
}
]
}