[Git][security-tracker-team/security-tracker][master] Track firefox-esr issues fixed via unstable upload
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 14 04:47:11 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e524e8d0 by Salvatore Bonaccorso at 2026-10-14T05:46:44+02:00
Track firefox-esr issues fixed via unstable upload
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -943,10 +943,10 @@ CVE-2024-34320 (ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an
CVE-2024-34319 (A Server-Side Request Forgery (SSRF) in the serviceURL parameter of Pr ...)
TODO: check
CVE-2026-109783 (Mitigation bypass in the File Handling component. This vulnerability w ...)
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109783
CVE-2026-109782 (Mitigation bypass in the File Handling component. This vulnerability w ...)
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109782
CVE-2026-109704 (Privilege escalation in the Application Update component. This vulnera ...)
- firefox <unfixed>
@@ -955,47 +955,47 @@ CVE-2026-109704 (Privilege escalation in the Application Update component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109704
CVE-2026-109705 (Sandbox escape, site isolation issue due to incorrect boundary conditi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109705
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109705
CVE-2026-109706 (Use-after-free in the Storage: IndexedDB component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109706
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109706
CVE-2026-109707 (Sandbox escape due to use-after-free in the Networking component. This ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109707
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109707
CVE-2026-109708 (Sandbox escape due to incorrect boundary conditions in the Networking ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109708
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109708
CVE-2026-109709 (Information disclosure, privilege escalation in the Security: Process ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109709
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109709
CVE-2026-109710 (Use-after-free in the Graphics: Text component. This vulnerability was ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109710
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109710
CVE-2026-109711 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109711
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109711
CVE-2026-109712 (Sandbox escape due to uninitialized memory in the Graphics component. ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109712
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109712
CVE-2026-109713 (Use-after-free in the Crash Reporting component. This vulnerability wa ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109713
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109713
CVE-2026-109714 (Incorrect boundary conditions in the Layout component. This vulnerabil ...)
@@ -1003,102 +1003,102 @@ CVE-2026-109714 (Incorrect boundary conditions in the Layout component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109714
CVE-2026-109715 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109715
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109715
CVE-2026-109716 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109716
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109716
CVE-2026-109717 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109717
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109717
CVE-2026-109718 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109718
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109718
CVE-2026-109719 (Race condition, use-after-free in the Graphics: CanvasWebGL component. ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109719
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109719
CVE-2026-109720 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109720
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109720
CVE-2026-109721 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109721
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109721
CVE-2026-109722 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109722
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109722
CVE-2026-109723 (Integer overflow in the Layout: Text and Fonts component. This vulnera ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109723
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109723
CVE-2026-109724 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109724
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109724
CVE-2026-109725 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109725
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109725
CVE-2026-109726 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109726
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109726
CVE-2026-109727 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109727
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109727
CVE-2026-109728 (Use-after-free in the DOM: Animation component. This vulnerability was ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109728
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109728
CVE-2026-109729 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109729
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109729
CVE-2026-109730 (Integer overflow in the Graphics component. This vulnerability was fix ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109730
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109730
CVE-2026-109731 (Incorrect boundary conditions in the Graphics: Canvas2D component. Thi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109731
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109731
CVE-2026-109732 (Use-after-free in the DOM: Streams component. This vulnerability was f ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109732
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109732
CVE-2026-109733 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109733
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109733
CVE-2026-109734 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109734
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109734
CVE-2026-109735 (Use-after-free in the DOM: Animation component. This vulnerability was ...)
@@ -1106,17 +1106,17 @@ CVE-2026-109735 (Use-after-free in the DOM: Animation component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109735
CVE-2026-109736 (Frame poisoning in the Layout component. This vulnerability was fixed ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109736
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109736
CVE-2026-109737 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109737
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109737
CVE-2026-109738 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109738
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109738
CVE-2026-109739 (Privilege escalation in the WebExtensions component. This vulnerabilit ...)
@@ -1129,27 +1129,27 @@ CVE-2026-109740 (Sandbox escape due to incorrect boundary conditions in the Widg
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109740
CVE-2026-109741 (Use-after-free in the Storage: Bucket File System component. This vuln ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109741
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109741
CVE-2026-109742 (Information disclosure in the PDF Viewer component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109742
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109742
CVE-2026-109743 (Privilege escalation in the Panning and Zooming component. This vulner ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109743
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109743
CVE-2026-109744 (Other issue in the DOM: File component. This vulnerability was fixed i ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109744
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109744
CVE-2026-109745 (Sandbox escape due to uninitialized memory in the DOM: Web Serial comp ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109745
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109745
CVE-2026-109746 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
@@ -1169,22 +1169,22 @@ CVE-2026-109750 (Site isolation issue in the DOM: Web Authentication component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109750
CVE-2026-109751 (Information disclosure in the Networking component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109751
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109751
CVE-2026-109752 (Use-after-free in the DOM: Workers component. This vulnerability was f ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109752
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109752
CVE-2026-109753 (Incorrect boundary conditions in the Layout component. This vulnerabil ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109753
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109753
CVE-2026-109754 (Incorrect boundary conditions in the DOM: Editor component. This vulne ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109754
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109754
CVE-2026-109755 (Sandbox escape in the DOM: Content Processes component. This vulnerabi ...)
@@ -1192,22 +1192,22 @@ CVE-2026-109755 (Sandbox escape in the DOM: Content Processes component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109755
CVE-2026-109756 (Privilege escalation in the DOM: Navigation component. This vulnerabil ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109756
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109756
CVE-2026-109757 (Sandbox escape due to race condition in the Networking component. This ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109757
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109757
CVE-2026-109759 (Site isolation issue in the Networking component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109759
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109759
CVE-2026-109760 (Mitigation bypass in the Networking: HTTP component. This vulnerabilit ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109760
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109760
CVE-2026-109761 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
@@ -1215,32 +1215,32 @@ CVE-2026-109761 (Use-after-free in the JavaScript: WebAssembly component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109761
CVE-2026-109762 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109762
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109762
CVE-2026-109763 (Mitigation bypass in the File Handling component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109763
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109763
CVE-2026-109764 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109764
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109764
CVE-2026-109765 (Race condition, use-after-free in the Graphics: Text component. This v ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109765
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109765
CVE-2026-109766 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109766
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109766
CVE-2026-109767 (Information disclosure in the Networking component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109767
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109767
CVE-2026-109768 (Denial-of-service in the Site Reports component. This vulnerability wa ...)
@@ -1251,7 +1251,7 @@ CVE-2026-109769 (Information disclosure in the Networking: Cache component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109769
CVE-2026-109770 (Spoofing issue in the DOM: Web Serial component. This vulnerability wa ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109770
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109770
CVE-2026-109771 (Information disclosure in the WebRTC: Networking component. This vulne ...)
@@ -1268,22 +1268,22 @@ CVE-2026-109774 (Invalid pointer, undefined behavior in the DOM: Notifications c
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109774
CVE-2026-109775 (Denial-of-service in the WebRTC component. This vulnerability was fixe ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109775
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109775
CVE-2026-109776 (Race condition in the XPCOM component. This vulnerability was fixed in ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109776
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109776
CVE-2026-109777 (Information disclosure in the Storage: IndexedDB component. This vulne ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109777
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109777
CVE-2026-109778 (Privilege escalation in the WebExtensions component. This vulnerabilit ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109778
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109778
CVE-2026-109779 (Race condition in the Networking: DNS component. This vulnerability wa ...)
@@ -1294,7 +1294,7 @@ CVE-2026-109780 (Mitigation bypass in the DOM: Core & HTML component. This vulne
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109780
CVE-2026-109781 (Denial-of-service in the Printing: Output component. This vulnerabilit ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109781
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109781
CVE-2026-102699 ([This CNA information record relates to multiple CVEs; the text explai ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e524e8d068b583e80ebd4787bc1f22041ff80e25
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e524e8d068b583e80ebd4787bc1f22041ff80e25
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/3d5ac1e0/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list