Skip to content
Heist/ feed
Back to feed
UnratedFix available

[DSA 6560-1] firefox-esr security update

Type: patchSources: Debian DSA

Multiple security issues in Mozilla Firefox could lead to arbitrary code execution, sandbox escape, information disclosure, mitigation bypass, or privilege escalation. The issues are fixed in the stable Debian trixie release of firefox-esr.

Products
firefox-esr
Affected versions
Not specified
Fixed versions
153.5.0esr-1~deb13u1
CVEs
CVE-2026-109705, CVE-2026-109706, CVE-2026-109707, CVE-2026-109708, CVE-2026-109709, CVE-2026-109710, CVE-2026-109711, CVE-2026-109712, CVE-2026-109713, CVE-2026-109715, CVE-2026-109716, CVE-2026-109717, CVE-2026-109718, CVE-2026-109719, CVE-2026-109720, CVE-2026-109721, CVE-2026-109722, CVE-2026-109723, CVE-2026-109724, CVE-2026-109725, CVE-2026-109726, CVE-2026-109727, CVE-2026-109728, CVE-2026-109729, CVE-2026-109730, CVE-2026-109731, CVE-2026-109732, CVE-2026-109733, CVE-2026-109734, CVE-2026-109736, CVE-2026-109737, CVE-2026-109738, CVE-2026-109741, CVE-2026-109742, CVE-2026-109743, CVE-2026-109744, CVE-2026-109745, CVE-2026-109751, CVE-2026-109752, CVE-2026-109753, CVE-2026-109754, CVE-2026-109756, CVE-2026-109757, CVE-2026-109759, CVE-2026-109760, CVE-2026-109762, CVE-2026-109763, CVE-2026-109764, CVE-2026-109765, CVE-2026-109766
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 10:21 UTC · Revision 1

Source evidence

[DSA 6560-1] firefox-esr security update

official-debian-dsa · Original source

Published 14 Oct 2026, 00:00 UTC

Multiple security issues in Mozilla Firefox could lead to arbitrary code execution, sandbox escape, information disclosure, mitigation bypass, or privilege escalation. The issues are fixed in the stable Debian trixie release of firefox-esr.

For the stable distribution (trixie), these problems have been fixed in version 153.5.0esr-1~deb13u1.

firefox-esr

Fixed versions: 153.5.0esr-1~deb13u1

Complete source record
{
  "id": "5054c85005031dcb3cdf38bf36b4cb250221d02a586ef74d5acf4e91af47b2f8",
  "url": "https://lists.debian.org/debian-security-announce/2026/msg00475.html",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "[DSA 6560-1] firefox-esr security update",
    "summary": "Multiple security issues in Mozilla Firefox could lead to arbitrary code execution, sandbox escape, information disclosure, mitigation bypass, or privilege escalation. The issues are fixed in the stable Debian trixie release of firefox-esr.",
    "evidence": "For the stable distribution (trixie), these problems have been fixed in version 153.5.0esr-1~deb13u1.",
    "products": [
      {
        "name": {
          "value": "firefox-esr",
          "evidence": "Package : firefox-esr"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "153.5.0esr-1~deb13u1",
            "evidence": "For the stable distribution (trixie), these problems have been fixed in version 153.5.0esr-1~deb13u1."
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-109705",
        "evidence": "CVE-2026-109705"
      },
      {
        "value": "CVE-2026-109706",
        "evidence": "CVE-2026-109706"
      },
      {
        "value": "CVE-2026-109707",
        "evidence": "CVE-2026-109707"
      },
      {
        "value": "CVE-2026-109708",
        "evidence": "CVE-2026-109708"
      },
      {
        "value": "CVE-2026-109709",
        "evidence": "CVE-2026-109709"
      },
      {
        "value": "CVE-2026-109710",
        "evidence": "CVE-2026-109710"
      },
      {
        "value": "CVE-2026-109711",
        "evidence": "CVE-2026-109711"
      },
      {
        "value": "CVE-2026-109712",
        "evidence": "CVE-2026-109712"
      },
      {
        "value": "CVE-2026-109713",
        "evidence": "CVE-2026-109713"
      },
      {
        "value": "CVE-2026-109715",
        "evidence": "CVE-2026-109715"
      },
      {
        "value": "CVE-2026-109716",
        "evidence": "CVE-2026-109716"
      },
      {
        "value": "CVE-2026-109717",
        "evidence": "CVE-2026-109717"
      },
      {
        "value": "CVE-2026-109718",
        "evidence": "CVE-2026-109718"
      },
      {
        "value": "CVE-2026-109719",
        "evidence": "CVE-2026-109719"
      },
      {
        "value": "CVE-2026-109720",
        "evidence": "CVE-2026-109720"
      },
      {
        "value": "CVE-2026-109721",
        "evidence": "CVE-2026-109721"
      },
      {
        "value": "CVE-2026-109722",
        "evidence": "CVE-2026-109722"
      },
      {
        "value": "CVE-2026-109723",
        "evidence": "CVE-2026-109723"
      },
      {
        "value": "CVE-2026-109724",
        "evidence": "CVE-2026-109724"
      },
      {
        "value": "CVE-2026-109725",
        "evidence": "CVE-2026-109725"
      },
      {
        "value": "CVE-2026-109726",
        "evidence": "CVE-2026-109726"
      },
      {
        "value": "CVE-2026-109727",
        "evidence": "CVE-2026-109727"
      },
      {
        "value": "CVE-2026-109728",
        "evidence": "CVE-2026-109728"
      },
      {
        "value": "CVE-2026-109729",
        "evidence": "CVE-2026-109729"
      },
      {
        "value": "CVE-2026-109730",
        "evidence": "CVE-2026-109730"
      },
      {
        "value": "CVE-2026-109731",
        "evidence": "CVE-2026-109731"
      },
      {
        "value": "CVE-2026-109732",
        "evidence": "CVE-2026-109732"
      },
      {
        "value": "CVE-2026-109733",
        "evidence": "CVE-2026-109733"
      },
      {
        "value": "CVE-2026-109734",
        "evidence": "CVE-2026-109734"
      },
      {
        "value": "CVE-2026-109736",
        "evidence": "CVE-2026-109736"
      },
      {
        "value": "CVE-2026-109737",
        "evidence": "CVE-2026-109737"
      },
      {
        "value": "CVE-2026-109738",
        "evidence": "CVE-2026-109738"
      },
      {
        "value": "CVE-2026-109741",
        "evidence": "CVE-2026-109741"
      },
      {
        "value": "CVE-2026-109742",
        "evidence": "CVE-2026-109742"
      },
      {
        "value": "CVE-2026-109743",
        "evidence": "CVE-2026-109743"
      },
      {
        "value": "CVE-2026-109744",
        "evidence": "CVE-2026-109744"
      },
      {
        "value": "CVE-2026-109745",
        "evidence": "CVE-2026-109745"
      },
      {
        "value": "CVE-2026-109751",
        "evidence": "CVE-2026-109751"
      },
      {
        "value": "CVE-2026-109752",
        "evidence": "CVE-2026-109752"
      },
      {
        "value": "CVE-2026-109753",
        "evidence": "CVE-2026-109753"
      },
      {
        "value": "CVE-2026-109754",
        "evidence": "CVE-2026-109754"
      },
      {
        "value": "CVE-2026-109756",
        "evidence": "CVE-2026-109756"
      },
      {
        "value": "CVE-2026-109757",
        "evidence": "CVE-2026-109757"
      },
      {
        "value": "CVE-2026-109759",
        "evidence": "CVE-2026-109759"
      },
      {
        "value": "CVE-2026-109760",
        "evidence": "CVE-2026-109760"
      },
      {
        "value": "CVE-2026-109762",
        "evidence": "CVE-2026-109762"
      },
      {
        "value": "CVE-2026-109763",
        "evidence": "CVE-2026-109763"
      },
      {
        "value": "CVE-2026-109764",
        "evidence": "CVE-2026-109764"
      },
      {
        "value": "CVE-2026-109765",
        "evidence": "CVE-2026-109765"
      },
      {
        "value": "CVE-2026-109766",
        "evidence": "CVE-2026-109766"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-debian-dsa",
  "document_id": 23410,
  "published_at": "2026-10-14T00:00:00+00:00"
}