| Package | firefox-esr |
|---|---|
| Version | 153.5.1esr-1~deb11u1 (bullseye) |
| Related CVEs | CVE-2026-113470 |
This update blocks compromised intermediate certificates issued by the eMudhra CA.
Most users will have these certs already blocked by the OneCRL feature provided by Firefox. This update blocks the certificates also for installations which have RemoteSettings disabled or which are unable to connect to the revocation backend service due to network constraints.
For Debian 11 bullseye, these problems have been fixed in version 153.5.1esr-1~deb11u1.
We recommend that you upgrade your firefox-esr packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.