Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 5c8bc28d by Salvatore Bonaccorso at 2026-07-21T16:10:10+02:00 Add firefox-esr CVEs from mfsa2026-70 - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,9 +1,16 @@ +CVE-2026-16361 + - firefox-esr <unfixed> + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16361 CVE-2026-16360 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16360 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16360 CVE-2026-16412 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16412 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16412 CVE-2026-16411 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16411 @@ -24,7 +31,9 @@ CVE-2026-16406 NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16406 CVE-2026-16405 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16405 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16405 CVE-2026-16404 - firefox <not-affected> (Only affects Firefox on Android) NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16404 @@ -51,7 +60,9 @@ CVE-2026-16397 NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16397 CVE-2026-16396 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16396 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16396 CVE-2026-16395 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16395 @@ -60,7 +71,9 @@ CVE-2026-16394 NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16394 CVE-2026-16359 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16359 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16359 CVE-2026-16393 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16393 @@ -69,10 +82,14 @@ CVE-2026-16392 NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16392 CVE-2026-16391 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16391 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16391 CVE-2026-16390 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16390 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16390 CVE-2026-16389 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16389 @@ -82,7 +99,9 @@ CVE-2026-16388 NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16388 CVE-2026-16387 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16387 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16387 CVE-2026-16386 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16386 @@ -94,37 +113,51 @@ CVE-2026-16384 NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16384 CVE-2026-16383 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16383 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16383 CVE-2026-16382 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16382 CVE-2026-16381 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16381 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16381 CVE-2026-16380 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16380 CVE-2026-16358 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16358 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16358 CVE-2026-16379 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16379 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16379 CVE-2026-16378 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16378 CVE-2026-16377 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16377 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16377 CVE-2026-16376 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16376 CVE-2026-16375 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16375 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16375 CVE-2026-16374 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16374 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16374 CVE-2026-16373 - firefox <not-affected> (Only affects Firefox on Android) NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16373 @@ -133,34 +166,50 @@ CVE-2026-16372 NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16372 CVE-2026-16371 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16371 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16371 CVE-2026-16370 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16370 CVE-2026-16357 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16357 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16357 CVE-2026-16356 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16356 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16356 CVE-2026-16355 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16355 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16355 CVE-2026-16369 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16369 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16369 CVE-2026-16368 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16368 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16368 CVE-2026-16367 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16354 CVE-2026-16354 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16354 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16354 CVE-2026-16353 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16353 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16353 CVE-2026-16366 - firefox <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16366 @@ -172,22 +221,34 @@ CVE-2026-16364 NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16364 CVE-2026-16363 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16363 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16363 CVE-2026-16352 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16352 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16352 CVE-2026-16351 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16351 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16351 CVE-2026-16362 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16362 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16362 CVE-2026-16350 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16350 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16350 CVE-2026-16349 - firefox <unfixed> + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16349 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16349 CVE-2026-15370 [Stack buffer overflow in SFTP server longname construction] - libssh <unfixed> (bug #1142537) NOTE: https://www.libssh.org/2026/07/21/libssh-0-12-1-and-0-11-5-security-releases/ @@ -7448,10 +7509,14 @@ CVE-2024-7708 (For requests that have a body, but reading the body may end up in TODO: check CVE-2026-15719 (We are aware that exploit code for this is public however we are not a ...) - firefox 152.0.6-1 + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-67/#CVE-2026-15719 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-15719 CVE-2026-15718 (We are aware that exploit code for this is public however we are not a ...) - firefox 152.0.6-1 + - firefox-esr <unfixed> NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-67/#CVE-2026-15718 + NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-15718 CVE-2026-42491 - xen-api <removed> NOTE: https://xenbits.xen.org/xsa/advisory-498.html View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c8bc28d40b4bcbb1031364a6d56a4fd80bdc089 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c8bc28d40b4bcbb1031364a6d56a4fd80bdc089 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
