Debian alert DLA-4695-1 (firefox-esr)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4695-1] firefox-esr security update
Date:
             
 
Wed, 22 Jul 2026 23:41:47 +0200
Message-ID:
             
 
<20260722214147.BC2275F02024@kamino>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4695-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
July 22, 2026                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : firefox-esr
Version        : 140.13.0esr-1~deb11u1 140.13.0esr-1~deb12u1
CVE ID         : CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350
                 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354
                 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358
                 CVE-2026-16359 CVE-2026-16360 CVE-2026-16361 CVE-2026-16362
                 CVE-2026-16363 CVE-2026-16368 CVE-2026-16369 CVE-2026-16371
                 CVE-2026-16374 CVE-2026-16375 CVE-2026-16377 CVE-2026-16379
                 CVE-2026-16381 CVE-2026-16383 CVE-2026-16387 CVE-2026-16390
                 CVE-2026-16391 CVE-2026-16396 CVE-2026-16405 CVE-2026-16412

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, bypass of the same-origin policy, privilege escalation,
information disclosure, spoofing or sandbox escape.

For Debian 11 bullseye, these problems have been fixed in version
140.13.0esr-1~deb11u1.

For Debian 12 bookworm, these problems have been fixed in version
140.13.0esr-1~deb12u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=671Q
-----END PGP SIGNATURE-----