Debian alert DLA-4635-1 (firefox-esr)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4635-1] firefox-esr security update
Date:
             
 
Fri, 19 Jun 2026 10:43:03 +0200
Message-ID:
             
 
<20260619084303.CDF6B5F0002D@kamino>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4635-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
June 19, 2026                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : firefox-esr
Version        : 140.12.0esr-1~deb11u1 140.12.0esr-1~deb12u1
CVE ID         : CVE-2026-12289 CVE-2026-12290 CVE-2026-12291 CVE-2026-12292
                 CVE-2026-12294 CVE-2026-12295 CVE-2026-12296 CVE-2026-12297
                 CVE-2026-12298 CVE-2026-12299 CVE-2026-12302 CVE-2026-12304
                 CVE-2026-12305 CVE-2026-12306 CVE-2026-12307 CVE-2026-12308
                 CVE-2026-12309 CVE-2026-12310 CVE-2026-12311 CVE-2026-12312
                 CVE-2026-12313 CVE-2026-12314 CVE-2026-12315 CVE-2026-12324
                 CVE-2026-12325 CVE-2026-12327 CVE-2026-12328 CVE-2026-12329
                 CVE-2026-12330

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, bypass of the same-origin policy, privilege escalation,
information disclosure, spoofing or sandbox escape.

For Debian 11 bullseye, these problems have been fixed in version
140.12.0esr-1~deb11u1.

For Debian 12 bookworm, these problems have been fixed in version
140.12.0esr-1~deb12u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=wm1O
-----END PGP SIGNATURE-----