[Git][security-tracker-team/security-tracker][master] Track fixes for firefox via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 15 08:00:53 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
707d9179 by Salvatore Bonaccorso at 2026-10-15T09:00:39+02:00
Track fixes for firefox via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6066,7 +6066,7 @@ CVE-2026-109704 (Privilege escalation in the Application Update component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109704
CVE-2026-109705 (Sandbox escape, site isolation issue due to incorrect boundary conditi ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109705
@@ -6074,7 +6074,7 @@ CVE-2026-109705 (Sandbox escape, site isolation issue due to incorrect boundary
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109705
CVE-2026-109706 (Use-after-free in the Storage: IndexedDB component. This vulnerability ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109706
@@ -6082,7 +6082,7 @@ CVE-2026-109706 (Use-after-free in the Storage: IndexedDB component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109706
CVE-2026-109707 (Sandbox escape due to use-after-free in the Networking component. This ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109707
@@ -6090,7 +6090,7 @@ CVE-2026-109707 (Sandbox escape due to use-after-free in the Networking componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109707
CVE-2026-109708 (Sandbox escape due to incorrect boundary conditions in the Networking ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109708
@@ -6098,7 +6098,7 @@ CVE-2026-109708 (Sandbox escape due to incorrect boundary conditions in the Netw
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109708
CVE-2026-109709 (Information disclosure, privilege escalation in the Security: Process ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109709
@@ -6106,7 +6106,7 @@ CVE-2026-109709 (Information disclosure, privilege escalation in the Security: P
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109709
CVE-2026-109710 (Use-after-free in the Graphics: Text component. This vulnerability was ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109710
@@ -6114,7 +6114,7 @@ CVE-2026-109710 (Use-after-free in the Graphics: Text component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109710
CVE-2026-109711 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109711
@@ -6122,7 +6122,7 @@ CVE-2026-109711 (Use-after-free in the Graphics: Canvas2D component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109711
CVE-2026-109712 (Sandbox escape due to uninitialized memory in the Graphics component. ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109712
@@ -6130,18 +6130,18 @@ CVE-2026-109712 (Sandbox escape due to uninitialized memory in the Graphics comp
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109712
CVE-2026-109713 (Use-after-free in the Crash Reporting component. This vulnerability wa ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109713
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109713
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109713
CVE-2026-109714 (Incorrect boundary conditions in the Layout component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109714
CVE-2026-109715 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109715
@@ -6149,7 +6149,7 @@ CVE-2026-109715 (Incorrect boundary conditions in the JavaScript Engine componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109715
CVE-2026-109716 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109716
@@ -6157,7 +6157,7 @@ CVE-2026-109716 (Incorrect boundary conditions in the JavaScript Engine componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109716
CVE-2026-109717 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109717
@@ -6165,7 +6165,7 @@ CVE-2026-109717 (Use-after-free in the DOM: Bindings (WebIDL) component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109717
CVE-2026-109718 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109718
@@ -6173,7 +6173,7 @@ CVE-2026-109718 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109718
CVE-2026-109719 (Race condition, use-after-free in the Graphics: CanvasWebGL component. ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109719
@@ -6181,7 +6181,7 @@ CVE-2026-109719 (Race condition, use-after-free in the Graphics: CanvasWebGL com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109719
CVE-2026-109720 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109720
@@ -6189,7 +6189,7 @@ CVE-2026-109720 (JIT miscompilation in the JavaScript: WebAssembly component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109720
CVE-2026-109721 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109721
@@ -6197,7 +6197,7 @@ CVE-2026-109721 (Incorrect boundary conditions in the JavaScript Engine: JIT com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109721
CVE-2026-109722 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109722
@@ -6205,7 +6205,7 @@ CVE-2026-109722 (JIT miscompilation in the JavaScript Engine: JIT component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109722
CVE-2026-109723 (Integer overflow in the Layout: Text and Fonts component. This vulnera ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109723
@@ -6213,7 +6213,7 @@ CVE-2026-109723 (Integer overflow in the Layout: Text and Fonts component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109723
CVE-2026-109724 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109724
@@ -6221,14 +6221,14 @@ CVE-2026-109724 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109724
CVE-2026-109725 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109725
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109725
CVE-2026-109726 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109726
@@ -6236,7 +6236,7 @@ CVE-2026-109726 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109726
CVE-2026-109727 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109727
@@ -6244,7 +6244,7 @@ CVE-2026-109727 (Use-after-free in the Audio/Video component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109727
CVE-2026-109728 (Use-after-free in the DOM: Animation component. This vulnerability was ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109728
@@ -6252,7 +6252,7 @@ CVE-2026-109728 (Use-after-free in the DOM: Animation component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109728
CVE-2026-109729 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109729
@@ -6260,7 +6260,7 @@ CVE-2026-109729 (Use-after-free in the JavaScript Engine: JIT component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109729
CVE-2026-109730 (Integer overflow in the Graphics component. This vulnerability was fix ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109730
@@ -6268,7 +6268,7 @@ CVE-2026-109730 (Integer overflow in the Graphics component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109730
CVE-2026-109731 (Incorrect boundary conditions in the Graphics: Canvas2D component. Thi ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109731
@@ -6276,7 +6276,7 @@ CVE-2026-109731 (Incorrect boundary conditions in the Graphics: Canvas2D compone
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109731
CVE-2026-109732 (Use-after-free in the DOM: Streams component. This vulnerability was f ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109732
@@ -6284,7 +6284,7 @@ CVE-2026-109732 (Use-after-free in the DOM: Streams component. This vulnerabilit
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109732
CVE-2026-109733 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109733
@@ -6292,18 +6292,18 @@ CVE-2026-109733 (JIT miscompilation in the JavaScript Engine: JIT component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109733
CVE-2026-109734 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109734
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109734
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109734
CVE-2026-109735 (Use-after-free in the DOM: Animation component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109735
CVE-2026-109736 (Frame poisoning in the Layout component. This vulnerability was fixed ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109736
@@ -6311,7 +6311,7 @@ CVE-2026-109736 (Frame poisoning in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109736
CVE-2026-109737 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109737
@@ -6319,14 +6319,14 @@ CVE-2026-109737 (Mitigation bypass in the Enterprise Policies component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109737
CVE-2026-109738 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109738
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109738
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109738
CVE-2026-109739 (Privilege escalation in the WebExtensions component. This vulnerabilit ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109739
CVE-2026-109740 (Sandbox escape due to incorrect boundary conditions in the Widget: Win ...)
- firefox <not-affected> (Only affects Firefox on Windows)
@@ -6337,7 +6337,7 @@ CVE-2026-109740 (Sandbox escape due to incorrect boundary conditions in the Widg
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109740
CVE-2026-109741 (Use-after-free in the Storage: Bucket File System component. This vuln ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109741
@@ -6345,7 +6345,7 @@ CVE-2026-109741 (Use-after-free in the Storage: Bucket File System component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109741
CVE-2026-109742 (Information disclosure in the PDF Viewer component. This vulnerability ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109742
@@ -6353,7 +6353,7 @@ CVE-2026-109742 (Information disclosure in the PDF Viewer component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109742
CVE-2026-109743 (Privilege escalation in the Panning and Zooming component. This vulner ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109743
@@ -6361,7 +6361,7 @@ CVE-2026-109743 (Privilege escalation in the Panning and Zooming component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109743
CVE-2026-109744 (Other issue in the DOM: File component. This vulnerability was fixed i ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109744
@@ -6369,30 +6369,30 @@ CVE-2026-109744 (Other issue in the DOM: File component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109744
CVE-2026-109745 (Sandbox escape due to uninitialized memory in the DOM: Web Serial comp ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109745
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109745
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109745
CVE-2026-109746 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109746
CVE-2026-109747 (Other issue in the Address Bar component. This vulnerability was fixed ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109747
CVE-2026-109748 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109748
CVE-2026-109749 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109749
CVE-2026-109750 (Site isolation issue in the DOM: Web Authentication component. This vu ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109750
CVE-2026-109751 (Information disclosure in the Networking component. This vulnerability ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109751
@@ -6400,7 +6400,7 @@ CVE-2026-109751 (Information disclosure in the Networking component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109751
CVE-2026-109752 (Use-after-free in the DOM: Workers component. This vulnerability was f ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109752
@@ -6408,7 +6408,7 @@ CVE-2026-109752 (Use-after-free in the DOM: Workers component. This vulnerabilit
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109752
CVE-2026-109753 (Incorrect boundary conditions in the Layout component. This vulnerabil ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109753
@@ -6416,18 +6416,18 @@ CVE-2026-109753 (Incorrect boundary conditions in the Layout component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109753
CVE-2026-109754 (Incorrect boundary conditions in the DOM: Editor component. This vulne ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109754
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109754
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109754
CVE-2026-109755 (Sandbox escape in the DOM: Content Processes component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109755
CVE-2026-109756 (Privilege escalation in the DOM: Navigation component. This vulnerabil ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109756
@@ -6435,7 +6435,7 @@ CVE-2026-109756 (Privilege escalation in the DOM: Navigation component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109756
CVE-2026-109757 (Sandbox escape due to race condition in the Networking component. This ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109757
@@ -6443,7 +6443,7 @@ CVE-2026-109757 (Sandbox escape due to race condition in the Networking componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109757
CVE-2026-109759 (Site isolation issue in the Networking component. This vulnerability w ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109759
@@ -6451,18 +6451,18 @@ CVE-2026-109759 (Site isolation issue in the Networking component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109759
CVE-2026-109760 (Mitigation bypass in the Networking: HTTP component. This vulnerabilit ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109760
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109760
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109760
CVE-2026-109761 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109761
CVE-2026-109762 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109762
@@ -6470,7 +6470,7 @@ CVE-2026-109762 (Incorrect boundary conditions in the SVG component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109762
CVE-2026-109763 (Mitigation bypass in the File Handling component. This vulnerability w ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109763
@@ -6478,7 +6478,7 @@ CVE-2026-109763 (Mitigation bypass in the File Handling component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109763
CVE-2026-109764 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109764
@@ -6486,7 +6486,7 @@ CVE-2026-109764 (Mitigation bypass in the Enterprise Policies component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109764
CVE-2026-109765 (Race condition, use-after-free in the Graphics: Text component. This v ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109765
@@ -6494,7 +6494,7 @@ CVE-2026-109765 (Race condition, use-after-free in the Graphics: Text component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109765
CVE-2026-109766 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109766
@@ -6502,41 +6502,41 @@ CVE-2026-109766 (Mitigation bypass in the Enterprise Policies component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109766
CVE-2026-109767 (Information disclosure in the Networking component. This vulnerability ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109767
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109767
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109767
CVE-2026-109768 (Denial-of-service in the Site Reports component. This vulnerability wa ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109768
CVE-2026-109769 (Information disclosure in the Networking: Cache component. This vulner ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109769
CVE-2026-109770 (Spoofing issue in the DOM: Web Serial component. This vulnerability wa ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109770
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109770
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109770
CVE-2026-109771 (Information disclosure in the WebRTC: Networking component. This vulne ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109771
CVE-2026-109772 (Same-origin policy bypass in the DevTools component. This vulnerabilit ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109772
CVE-2026-109773 (Denial-of-service in the Sync component. This vulnerability was fixed ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109773
CVE-2026-109774 (Invalid pointer, undefined behavior in the DOM: Notifications componen ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109774
CVE-2026-109775 (Denial-of-service in the WebRTC component. This vulnerability was fixe ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109775
@@ -6544,7 +6544,7 @@ CVE-2026-109775 (Denial-of-service in the WebRTC component. This vulnerability w
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109775
CVE-2026-109776 (Race condition in the XPCOM component. This vulnerability was fixed in ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109776
@@ -6552,7 +6552,7 @@ CVE-2026-109776 (Race condition in the XPCOM component. This vulnerability was f
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109776
CVE-2026-109777 (Information disclosure in the Storage: IndexedDB component. This vulne ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109777
@@ -6560,21 +6560,21 @@ CVE-2026-109777 (Information disclosure in the Storage: IndexedDB component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109777
CVE-2026-109778 (Privilege escalation in the WebExtensions component. This vulnerabilit ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109778
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109778
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109778
CVE-2026-109779 (Race condition in the Networking: DNS component. This vulnerability wa ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109779
CVE-2026-109780 (Mitigation bypass in the DOM: Core & HTML component. This vulnerabilit ...)
- - firefox <unfixed>
+ - firefox 158.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109780
CVE-2026-109781 (Denial-of-service in the Printing: Output component. This vulnerabilit ...)
{DSA-6560-1}
- - firefox <unfixed>
+ - firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109781
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/707d917995ddab878d61d57d3112569e1ed95d53
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/707d917995ddab878d61d57d3112569e1ed95d53
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/bfc144a1/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list