[SECURITY] [DLA 4896-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4896-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 12, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6622-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6622-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 12, 2026 https://www.debian.org/security/faq -...

Debian dla-4896 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4896 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4896-1 [email protected]...

UBUNTU-CVE-2026-124856

Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

CVE-2026-124934

Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124909

Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

CVE-2026-124912

Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124899

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

CVE-2026-124902

Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

CVE-2026-124952

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45...

UBUNTU-CVE-2026-124868

Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124919

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124884

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124952

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45...

UBUNTU-CVE-2026-124889

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124870

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124906

Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124912

Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124893

Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...

UBUNTU-CVE-2026-124902

Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7...