-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4695-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
July 22, 2026 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : firefox-esr
Version : 140.13.0esr-1~deb11u1 140.13.0esr-1~deb12u1
CVE ID : CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350
CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354
CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358
CVE-2026-16359 CVE-2026-16360 CVE-2026-16361 CVE-2026-16362
CVE-2026-16363 CVE-2026-16368 CVE-2026-16369 CVE-2026-16371
CVE-2026-16374 CVE-2026-16375 CVE-2026-16377 CVE-2026-16379
CVE-2026-16381 CVE-2026-16383 CVE-2026-16387 CVE-2026-16390
CVE-2026-16391 CVE-2026-16396 CVE-2026-16405 CVE-2026-16412
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, bypass of the same-origin policy, privilege escalation,
information disclosure, spoofing or sandbox escape.
For Debian 11 bullseye, these problems have been fixed in version
140.13.0esr-1~deb11u1.
For Debian 12 bookworm, these problems have been fixed in version
140.13.0esr-1~deb12u1.
We recommend that you upgrade your firefox-esr packages.
For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=671Q
-----END PGP SIGNATURE-----
