ELA-1885-1 firefox-esr security update

Package	firefox-esr
Version	153.7.0esr-1~deb11u1 (bullseye)
Related CVEs	CVE-2026-118007 CVE-2026-118019 CVE-2026-118021 CVE-2026-118024 CVE-2026-124853 CVE-2026-124854 CVE-2026-124855 CVE-2026-124856 CVE-2026-124857 CVE-2026-124858 CVE-2026-124859 CVE-2026-124860 CVE-2026-124861 CVE-2026-124862 CVE-2026-124863 CVE-2026-124864 CVE-2026-124865 CVE-2026-124866 CVE-2026-124868 CVE-2026-124869 CVE-2026-124870 CVE-2026-124872 CVE-2026-124873 CVE-2026-124874 CVE-2026-124875 CVE-2026-124876 CVE-2026-124877 CVE-2026-124879 CVE-2026-124880 CVE-2026-124881 CVE-2026-124882 CVE-2026-124883 CVE-2026-124884 CVE-2026-124885 CVE-2026-124886 CVE-2026-124887 CVE-2026-124888 CVE-2026-124889 CVE-2026-124890 CVE-2026-124891 CVE-2026-124892 CVE-2026-124893 CVE-2026-124894 CVE-2026-124895 CVE-2026-124896 CVE-2026-124897 CVE-2026-124898 CVE-2026-124899 CVE-2026-124901 CVE-2026-124902 CVE-2026-124903 CVE-2026-124905 CVE-2026-124906 CVE-2026-124907 CVE-2026-124909 CVE-2026-124910 CVE-2026-124912 CVE-2026-124913 CVE-2026-124914 CVE-2026-124915 CVE-2026-124917 CVE-2026-124918 CVE-2026-124919 CVE-2026-124922 CVE-2026-124924 CVE-2026-124926 CVE-2026-124927 CVE-2026-124929 CVE-2026-124930 CVE-2026-124931 CVE-2026-124932 CVE-2026-124933 CVE-2026-124934 CVE-2026-124935 CVE-2026-124938 CVE-2026-124939 CVE-2026-124940 CVE-2026-124941 CVE-2026-124942 CVE-2026-124948 CVE-2026-124951

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, privilege escalation, bypass of the same-origin policy, information disclosure or spoofing.

For Debian 11 bullseye, these problems have been fixed in version 153.7.0esr-1~deb11u1.

We recommend that you upgrade your firefox-esr packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.