Mozilla Releases Firefox 158.0.1 Update

The browser update patches critical security vulnerabilities and resolves several functional bugs across multiple platforms.

Updated on Oct. 20, 2026 in Cybersecurity

Bold flat-color editorial illustration of a metal shield and locking mechanism, symbolizing digital security and software integrity.
Mozilla released Firefox 158.0.1 to patch four critical security vulnerabilities and improve browser stability across multiple operating systems worldwide. AI Illustration. Upload story photo >

Live Poll

Do you feel it is important to update your web browser immediately when security patches arrive?

Mozilla has released Firefox 158.0.1 to address four security vulnerabilities, including a denial-of-service risk in the PDF Viewer component. This update also blocks compromised eMudhra intermediate certificates via the OneCRL block list.

Why it matters

The release ensures user security by revoking trust in compromised certificates, even if custom security policies are in place. It also targets stability improvements to maintain browser performance during daily operation.

Firefox 158.0.1 addresses four distinct security vulnerabilities and includes stability patches for Linux multi-monitor window placement. The update specifically forces a block on eMudhra intermediate certificates via the OneCRL list.

The players

Mozilla

Mozilla is a global software community and foundation dedicated to keeping the internet open, public, and accessible.

eMudhra

eMudhra is a provider of digital identity and trust services including digital signature certificates.

The details

Beyond security fixes, the update resolves a bug where pages unexpectedly scrolled to the top during text selection and corrects a crash on Windows systems involving assistive technology. It also addresses an issue on macOS where files dragged into the browser failed to drop correctly.

Timeline

  1. October 17, 2026: New security rules block eMudhra certificates.

  2. October 20, 2026: Mozilla releases Firefox 158.0.1.

The Tech Race

The use of the OneCRL block list is a standard industry practice for modern browsers to revoke trust in compromised certificates. This update follows that established protocol to ensure users are protected from revoked digital credentials.

Users can install the update via official browser binaries or through the Flatpak app available on Flathub to ensure their software remains secure. The patches will automatically improve browser stability and prevent unexpected scrolling or crashing during file operations.

The takeaway

Maintaining up-to-date software is the most effective way to protect against revoked security certificates and browser-specific bugs. Users should enable automatic updates to ensure these critical security patches are applied immediately upon release.

Further reading

For broader trends in browser safety, explore our Cybersecurity section.

Live Poll

Do you feel it is important to update your web browser immediately when security patches arrive?