[Git][security-tracker-team/security-tracker][master] Update status for two firefox{,-esr} CVEs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f58bd184 by Salvatore Bonaccorso at 2026-10-14T05:54:53+02:00
Update status for two firefox{,-esr} CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -953,8 +953,8 @@ CVE-2026-109782 (Mitigation bypass in the File Handling component. This vulnerab
 	- firefox-esr 153.5.0esr-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109782
 CVE-2026-109704 (Privilege escalation in the Application Update component. This vulnera ...)
-	- firefox <unfixed>
-	- firefox-esr <unfixed>
+	- firefox <not-affected> (Vulnerable code in Application Update component)
+	- firefox-esr <not-affected> (Vulnerable code in Application Update component)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109704
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109704
 CVE-2026-109705 (Sandbox escape, site isolation issue due to incorrect boundary conditi ...)
@@ -1127,8 +1127,8 @@ CVE-2026-109739 (Privilege escalation in the WebExtensions component. This vulne
 	- firefox <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109739
 CVE-2026-109740 (Sandbox escape due to incorrect boundary conditions in the Widget: Win ...)
-	- firefox <unfixed>
-	- firefox-esr <unfixed>
+	- firefox <not-affected> (Only affects Firefox on Windows)
+	- firefox-esr <not-affected> (Only affects Firefox ESR on Windows)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109740
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109740
 CVE-2026-109741 (Use-after-free in the Storage: Bucket File System component. This vuln ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f58bd1848e608914e56a965004f6f16826bb21f0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f58bd1848e608914e56a965004f6f16826bb21f0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/aa2e3aa1/attachment.htm>