[Git][security-tracker-team/security-tracker][master] Track fixes for firefox-esr via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Sep 30 05:28:19 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
6f4e1d25 by Salvatore Bonaccorso at 2026-09-30T06:27:56+02:00
Track fixes for firefox-esr via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -525,27 +525,27 @@ CVE-2015-20122 (Seeyon A6 collaborative office automation platform contains an u
TODO: check
CVE-2026-100756 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100756
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100756
CVE-2026-100757 (Use-after-free in the Widget component. This vulnerability was fixed i ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100757
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100757
CVE-2026-100758 (Sandbox escape in the DOM: Navigation component. This vulnerability wa ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100758
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100758
CVE-2026-100759 (Uninitialized memory in the Storage: Quota Manager component. This vul ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100759
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100759
CVE-2026-100760 (Sandbox escape in the Security: Process Sandboxing component. This vul ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100760
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100760
CVE-2026-100761 (Privilege escalation due to use-after-free in the Graphics: WebGPU com ...)
@@ -553,7 +553,7 @@ CVE-2026-100761 (Privilege escalation due to use-after-free in the Graphics: Web
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100761
CVE-2026-100762 (Sandbox escape due to use-after-free in the DOM: Content Processes com ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100762
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100762
CVE-2026-100763 (Incorrect boundary conditions in the Graphics: WebGPU component. This ...)
@@ -564,17 +564,17 @@ CVE-2026-100764 (Privilege escalation due to incorrect boundary conditions in th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100764
CVE-2026-100765 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100765
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100765
CVE-2026-100766 (Information disclosure in the Networking: JAR component. This vulnerab ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100766
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100766
CVE-2026-100767 (Use-after-free in the Networking: Cache component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100767
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100767
CVE-2026-100768 (Use-after-free in the Graphics: WebGPU component. This vulnerability w ...)
@@ -582,122 +582,122 @@ CVE-2026-100768 (Use-after-free in the Graphics: WebGPU component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100768
CVE-2026-100769 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100769
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100769
CVE-2026-100770 (Sandbox escape due to use-after-free in the DOM: Content Processes com ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100770
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100770
CVE-2026-100771 (Undefined behavior in the DOM: Streams component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100771
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100771
CVE-2026-100772 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100772
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100772
CVE-2026-100773 (Use-after-free in the Storage: IndexedDB component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100773
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100773
CVE-2026-100774 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100774
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100774
CVE-2026-100775 (Sandbox escape in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100775
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100775
CVE-2026-100776 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100776
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100776
CVE-2026-100777 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100777
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100777
CVE-2026-100778 (Sandbox escape due to use-after-free in the DOM: Core & HTML component ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100778
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100778
CVE-2026-100779 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100779
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100779
CVE-2026-100780 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100780
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100780
CVE-2026-100781 (Sandbox escape due to incorrect boundary conditions in the Graphics: W ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100781
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100781
CVE-2026-100782 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100782
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100782
CVE-2026-100783 (Uninitialized memory in the Audio/Video component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100783
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100783
CVE-2026-100784 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100784
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100784
CVE-2026-100785 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100785
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100785
CVE-2026-100786 (Sandbox escape due to use-after-free in the Graphics component. This v ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100786
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100786
CVE-2026-100787 (Sandbox escape in the XUL component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100787
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100787
CVE-2026-100788 (Invalid pointer in the JavaScript: WebAssembly component. This vulnera ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100788
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100788
CVE-2026-100789 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100789
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100789
CVE-2026-100790 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100790
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100790
CVE-2026-100791 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100791
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100791
CVE-2026-100792 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100792
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100792
CVE-2026-100793 (JIT miscompilation in the JavaScript Engine component. This vulnerabil ...)
@@ -705,12 +705,12 @@ CVE-2026-100793 (JIT miscompilation in the JavaScript Engine component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100793
CVE-2026-100794 (Sandbox escape due to incorrect boundary conditions in the Internation ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100794
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100794
CVE-2026-96869 (Information disclosure in the Networking component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-96869
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-96869
CVE-2026-100795 (Denial-of-service in the Networking component. This vulnerability was ...)
@@ -721,12 +721,12 @@ CVE-2026-100796 (Use-after-free in the JavaScript: WebAssembly component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100796
CVE-2026-100797 (Privilege escalation due to use-after-free in the Graphics: WebRender ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100797
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100797
CVE-2026-100798 (Cryptography misuse in Storage: Quota Manager component. This vulnerab ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100798
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100798
CVE-2026-100799 (Uninitialized memory in the Graphics: WebGPU component. This vulnerabi ...)
@@ -734,12 +734,12 @@ CVE-2026-100799 (Uninitialized memory in the Graphics: WebGPU component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100799
CVE-2026-100800 (Sandbox escape due to use-after-free in the Disability Access APIs com ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100800
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100800
CVE-2026-100801 (Privilege escalation in the DLL Services component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100801
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100801
CVE-2026-100802 (Uninitialized memory in the Graphics: WebGPU component. This vulnerabi ...)
@@ -747,7 +747,7 @@ CVE-2026-100802 (Uninitialized memory in the Graphics: WebGPU component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100802
CVE-2026-100803 (Same-origin policy bypass in the WebExtensions component. This vulnera ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100803
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100803
CVE-2026-100804 (Sandbox escape due to use-after-free in the Preferences: Backend compo ...)
@@ -758,22 +758,22 @@ CVE-2026-100805 (Race condition, use-after-free in the Audio/Video component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100805
CVE-2026-100806 (Uninitialized memory in the Graphics: WebGPU component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100806
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100806
CVE-2026-100807 (Privilege escalation in the DOM: Service Workers component. This vulne ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100807
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100807
CVE-2026-100808 (Mitigation bypass in the DOM: Service Workers component. This vulnerab ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100808
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100808
CVE-2026-100809 (Same-origin policy bypass in the DevTools component. This vulnerabilit ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100809
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100809
CVE-2026-100810 (Other issue in the DevTools component. This vulnerability was fixed in ...)
@@ -781,12 +781,12 @@ CVE-2026-100810 (Other issue in the DevTools component. This vulnerability was f
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100810
CVE-2026-100811 (Sandbox escape due to use-after-free in the DOM: Core & HTML component ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100811
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100811
CVE-2026-100812 (Denial-of-service in the Graphics component. This vulnerability was fi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100812
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100812
CVE-2026-100813 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
@@ -794,17 +794,17 @@ CVE-2026-100813 (Invalid pointer in the JavaScript Engine: JIT component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100813
CVE-2026-100814 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100814
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100814
CVE-2026-100815 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100815
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100815
CVE-2026-100816 (Site isolation issue in the DOM: Networking component. This vulnerabil ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100816
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100816
CVE-2026-100817 (Other issue in the JavaScript: WebAssembly component. This vulnerabili ...)
@@ -812,27 +812,27 @@ CVE-2026-100817 (Other issue in the JavaScript: WebAssembly component. This vuln
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100817
CVE-2026-100818 (Sandbox escape due to use-after-free in the Widget: Gtk component. Thi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100818
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100818
CVE-2026-100819 (Sandbox escape due to incorrect boundary conditions in the XPCOM compo ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100819
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100819
CVE-2026-100820 (Privilege escalation in the Address Bar component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100820
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100820
CVE-2026-100821 (Site isolation issue in the Panning and Zooming component. This vulner ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100821
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100821
CVE-2026-100822 (Spoofing issue in the Networking: HTTP component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100822
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100822
CVE-2026-100823 (Spoofing issue in the Downloads component in Firefox for Android. This ...)
@@ -840,41 +840,41 @@ CVE-2026-100823 (Spoofing issue in the Downloads component in Firefox for Androi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100823
CVE-2026-100824 (Privilege escalation in the Places component. This vulnerability was f ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100824
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100824
CVE-2026-100825 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100825
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100825
CVE-2026-100826 (Denial-of-service in the Storage: StorageManager component. This vulne ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100826
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100826
CVE-2026-100828 (Mitigation bypass in the Bookmarks & History component. This vulnerabi ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100828
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100828
CVE-2026-100829 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100829
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100829
CVE-2026-100830 (Mitigation bypass in the DOM: Navigation component. This vulnerability ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100830
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100830
CVE-2026-100831 (Use-after-free in the DOM: UI Events & Focus Handling component. This ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100831
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100831
CVE-2026-100832 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- - firefox-esr <unfixed>
+ - firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
CVE-2026-84782 (Issue summary: The DTLS retransmission logic does not correctly handle ...)
- openssl 3.6.5-1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f4e1d2508279fc0a776f02790a6a61c94b9dbf5
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f4e1d2508279fc0a776f02790a6a61c94b9dbf5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/eb621157/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list