Red Hat Product Errata RHSA-2026:13682 - Security Advisory Issued: 2026-05-05 Updated: 2026-05-05 RHSA-2026:13682 - Security Advisory Overview Updated Packages Synopsis Important: firefox security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for firefox is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability BZ - 2451819 - CVE-2026-33636 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion BZ - 2455897 - CVE-2026-5734 thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 BZ - 2455901 - CVE-2026-5731 thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 BZ - 2455908 - CVE-2026-5732 firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component CVEs CVE-2026-5731 CVE-2026-5732 CVE-2026-5734 CVE-2026-33416 CVE-2026-33636 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM firefox-140.9.1-1.el8_8.src.rpm SHA-256: f9ff7df70055e0ff81826279e677ec027338eef8da1cb8099b7ce14f13f46255 x86_64 firefox-140.9.1-1.el8_8.x86_64.rpm SHA-256: 99fb9d78ee38b123f98bb0e0ec1240cef6b758e25b852fa2b945fb441bda4827 firefox-debuginfo-140.9.1-1.el8_8.x86_64.rpm SHA-256: dce7a8a71939a83a0f33bf03cbaddd7ed54d364bd52f58933753c6eecd4fa2a8 firefox-debugsource-140.9.1-1.el8_8.x86_64.rpm SHA-256: 0eecd849ca0a0fa35c44c3ac23cfa27c7e4d6194ef4e8ebd4cca8d7801b912f5 Red Hat Enterprise Linux Server - TUS 8.8 SRPM firefox-140.9.1-1.el8_8.src.rpm SHA-256: f9ff7df70055e0ff81826279e677ec027338eef8da1cb8099b7ce14f13f46255 x86_64 firefox-140.9.1-1.el8_8.x86_64.rpm SHA-256: 99fb9d78ee38b123f98bb0e0ec1240cef6b758e25b852fa2b945fb441bda4827 firefox-debuginfo-140.9.1-1.el8_8.x86_64.rpm SHA-256: dce7a8a71939a83a0f33bf03cbaddd7ed54d364bd52f58933753c6eecd4fa2a8 firefox-debugsource-140.9.1-1.el8_8.x86_64.rpm SHA-256: 0eecd849ca0a0fa35c44c3ac23cfa27c7e4d6194ef4e8ebd4cca8d7801b912f5 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM firefox-140.9.1-1.el8_8.src.rpm SHA-256: f9ff7df70055e0ff81826279e677ec027338eef8da1cb8099b7ce14f13f46255 ppc64le firefox-140.9.1-1.el8_8.ppc64le.rpm SHA-256: ba2f72ecedf718f49e0547d71580b387cef2f47c5a156f9a10f14ad5dc442d1b firefox-debuginfo-140.9.1-1.el8_8.ppc64le.rpm SHA-256: 0099b6835e183918c743d1e02d3a450e4507083cbeb8828de8efca2048ed79fc firefox-debugsource-140.9.1-1.el8_8.ppc64le.rpm SHA-256: c39ee7f66ba0465e404f32997d84d0990e22e91de7416fc7cdf8772807aedfdc Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM firefox-140.9.1-1.el8_8.src.rpm SHA-256: f9ff7df70055e0ff81826279e677ec027338eef8da1cb8099b7ce14f13f46255 x86_64 firefox-140.9.1-1.el8_8.x86_64.rpm SHA-256: 99fb9d78ee38b123f98bb0e0ec1240cef6b758e25b852fa2b945fb441bda4827 firefox-debuginfo-140.9.1-1.el8_8.x86_64.rpm SHA-256: dce7a8a71939a83a0f33bf03cbaddd7ed54d364bd52f58933753c6eecd4fa2a8 firefox-debugsource-140.9.1-1.el8_8.x86_64.rpm SHA-256: 0eecd849ca0a0fa35c44c3ac23cfa27c7e4d6194ef4e8ebd4cca8d7801b912f5 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .