[Git][security-tracker-team/security-tracker][master] new firefox-esr issues

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Nov 11 16:01:15 GMT 2025



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ae98571a by Moritz Muehlenhoff at 2025-11-11T17:00:17+01:00
new firefox-esr issues

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,24 +1,38 @@
 CVE-2025-13015
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13015
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13015
 CVE-2025-13014
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13014
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13014
 CVE-2025-13020
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13020
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13020
 CVE-2025-13013
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13013
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13013
 CVE-2025-13019
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13019
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13019
 CVE-2025-13018
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13018
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13018
 CVE-2025-13017
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13017
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13017
 CVE-2025-13026
 	- firefox <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13026
@@ -30,13 +44,17 @@ CVE-2025-13024
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13024
 CVE-2025-13016
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13016
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13016
 CVE-2025-13023
 	- firefox <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13023
 CVE-2025-13012
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13012
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13012
 CVE-2025-13022
 	- firefox <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13022


=====================================
data/dsa-needed.txt
=====================================
@@ -18,6 +18,8 @@ amd64-microcode (carnil)
 cpp-httplib
   Maintainer preparing updates, waiting for feedback on bookworm status
 --
+firefox-esr (jmm)
+--
 frr/oldstable
   coordination with the maintainer ongoing, Daniel Baumann proposing an update
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae98571a94f40b52c79a398769a491da35ccf896

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae98571a94f40b52c79a398769a491da35ccf896
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251111/1dec6896/attachment.htm>


More information about the debian-security-tracker-commits mailing list