Home / mailings [SECURITY] [DSA 6560-1] firefox-esr security update
Posted on 14 October 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6560-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
October 14, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : firefox-esr
CVE ID : CVE-2026-109705 CVE-2026-109706 CVE-2026-109707 CVE-2026-109708
CVE-2026-109709 CVE-2026-109710 CVE-2026-109711 CVE-2026-109712
CVE-2026-109713 CVE-2026-109715 CVE-2026-109716 CVE-2026-109717
CVE-2026-109718 CVE-2026-109719 CVE-2026-109720 CVE-2026-109721
CVE-2026-109722 CVE-2026-109723 CVE-2026-109724 CVE-2026-109725
CVE-2026-109726 CVE-2026-109727 CVE-2026-109728 CVE-2026-109729
CVE-2026-109730 CVE-2026-109731 CVE-2026-109732 CVE-2026-109733
CVE-2026-109734 CVE-2026-109736 CVE-2026-109737 CVE-2026-109738
CVE-2026-109741 CVE-2026-109742 CVE-2026-109743 CVE-2026-109744
CVE-2026-109745 CVE-2026-109751 CVE-2026-109752 CVE-2026-109753
CVE-2026-109754 CVE-2026-109756 CVE-2026-109757 CVE-2026-109759
CVE-2026-109760 CVE-2026-109762 CVE-2026-109763 CVE-2026-109764
CVE-2026-109765 CVE-2026-109766 CVE-2026-109767 CVE-2026-109770
CVE-2026-109775 CVE-2026-109776 CVE-2026-109777 CVE-2026-109778
CVE-2026-109781 CVE-2026-109782 CVE-2026-109783
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, sandbox escape, information disclosure, mitigation bypass or
privilege escalation.
For the stable distribution (trixie), these problems have been fixed in
version 153.5.0esr-1~deb13u1.
We recommend that you upgrade your firefox-esr packages.
For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
