[DSA 6573-1] firefox-esr security update

{
  "id": "6d2c351aa7d687d4512b7f5dc210b861b92ebe2b229ce3b96770d53b7d4eece3",
  "url": "https://lists.debian.org/debian-security-announce/2026/msg00488.html",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "[DSA 6573-1] firefox-esr security update",
    "summary": "The update blocks compromised intermediate certificates issued by the eMudhra CA, including on installations with RemoteSettings disabled or unable to reach the revocation backend. For trixie, the issue is fixed in firefox-esr version 153.5.1esr-1~deb13u1.",
    "evidence": "This update blocks compromised intermediate certificates issued by the eMudhra CA.",
    "products": [
      {
        "name": {
          "value": "firefox-esr",
          "evidence": "Package : firefox-esr"
        },
        "prerequisites": [
          {
            "value": "RemoteSettings disabled",
            "evidence": "This update blocks the certificates also for installations which have RemoteSettings disabled or which are unable to connect to the revocation backend service due to network constraints."
          },
          {
            "value": "unable to connect to the revocation backend service due to network constraints",
            "evidence": "This update blocks the certificates also for installations which have RemoteSettings disabled or which are unable to connect to the revocation backend service due to network constraints."
          }
        ],
        "fixed_versions": [
          {
            "value": "153.5.1esr-1~deb13u1",
            "evidence": "For the stable distribution (trixie), this problem has been fixed in version 153.5.1esr-1~deb13u1."
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-113470",
        "evidence": "CVE ID : CVE-2026-113470"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-debian-dsa",
  "document_id": 23396,
  "published_at": "2026-10-21T00:00:00+00:00"
}