Home / mailings [SECURITY] [DSA 6622-1] firefox-esr security update
Posted on 12 November 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6622-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
November 12, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : firefox-esr
CVE ID : CVE-2026-118007 CVE-2026-118019 CVE-2026-118021 CVE-2026-118024
CVE-2026-124853 CVE-2026-124854 CVE-2026-124855 CVE-2026-124856
CVE-2026-124857 CVE-2026-124858 CVE-2026-124859 CVE-2026-124860
CVE-2026-124861 CVE-2026-124862 CVE-2026-124863 CVE-2026-124864
CVE-2026-124865 CVE-2026-124866 CVE-2026-124868 CVE-2026-124869
CVE-2026-124870 CVE-2026-124872 CVE-2026-124873 CVE-2026-124874
CVE-2026-124875 CVE-2026-124876 CVE-2026-124877 CVE-2026-124879
CVE-2026-124880 CVE-2026-124881 CVE-2026-124882 CVE-2026-124883
CVE-2026-124884 CVE-2026-124885 CVE-2026-124886 CVE-2026-124887
CVE-2026-124888 CVE-2026-124889 CVE-2026-124890 CVE-2026-124891
CVE-2026-124892 CVE-2026-124893 CVE-2026-124894 CVE-2026-124895
CVE-2026-124896 CVE-2026-124897 CVE-2026-124898 CVE-2026-124899
CVE-2026-124901 CVE-2026-124902 CVE-2026-124903 CVE-2026-124905
CVE-2026-124906 CVE-2026-124907 CVE-2026-124909 CVE-2026-124910
CVE-2026-124912 CVE-2026-124913 CVE-2026-124914 CVE-2026-124915
CVE-2026-124917 CVE-2026-124918 CVE-2026-124919 CVE-2026-124922
CVE-2026-124924 CVE-2026-124926 CVE-2026-124927 CVE-2026-124929
CVE-2026-124930 CVE-2026-124931 CVE-2026-124932 CVE-2026-124933
CVE-2026-124934 CVE-2026-124935 CVE-2026-124938 CVE-2026-124939
CVE-2026-124940 CVE-2026-124941 CVE-2026-124942 CVE-2026-124948
CVE-2026-124951
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, sandbox escape, privilege escalation, bypass of the same-origin
policy, information disclosure or spoofing.
For the stable distribution (trixie), these problems have been fixed in
version 153.7.0esr-1~deb13u1.
We recommend that you upgrade your firefox-esr packages.
For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
