Packages / Debian 12 (Bookworm) / web / firefox-esr

Package: firefox-esr (140.12.0esr-1~deb12u1)

Browser web Mozilla Firefox - Extended Support Release (ESR)

Other Packages Related to firefox-esr:

  • dep: [libasound2] (>= 1.0.16)

    libreria condivisa per applicazioni ALSA

  • dep: [libatk1.0-0] (>= 1.12.4)

    Toolkit di accessibilità ATK

  • dep: [libc6] (>= 2.35)

    GNU C Library: Shared libraries

  • dep: [libcairo-gobject2] (>= 1.10.0)

    Cairo 2D vector graphics library (GObject library)

  • dep: [libcairo2] (>= 1.10.0)

    Cairo 2D vector graphics library

  • dep: [libdbus-1-3] (>= 1.9.14)

    simple interprocess messaging system (library)

  • dep: [libevent-2.1-7] (>= 2.1.8-stable)

    Libreria per la notifica asincrona di eventi

  • dep: [libffi8] (>= 3.4)

    Foreign Function Interface library runtime

  • dep: [libfontconfig1] (>= 2.12.6)

    generic font configuration library - runtime

  • dep: [libfreetype6] (>= 2.3.5)

    Motore di font FreeType 2, file della libreria condivisa

  • dep: [libgcc-s1] (>= 4.2)

    GCC support library

  • dep: [libgdk-pixbuf-2.0-0] (>= 2.22.0)

    Libreria GDK Pixbuf

  • dep: [libglib2.0-0] (>= 2.37.0)

    GLib library of C routines

  • dep: [libgtk-3-0] (>= 3.13.7)

    GTK graphical user interface library

  • dep: [libnspr4] (>= 2:4.32~)

    NetScape Portable Runtime Library

  • dep: [libnss3] (>= 2:3.82)

    Librerie Network Security Service

  • dep: [libpango-1.0-0] (>= 1.14.0)

    Layout and rendering of internationalized text

  • dep: [libstdc++6] (>= 12)

    GNU Standard C++ Library v3

  • dep: [libvpx7] (>= 1.12.0)

    codec video VP8 e VP9 (libreria condivisa)

  • dep: [libx11-6]

    Libreria lato client X11

  • dep: [libx11-xcb1] (>= 2:1.8.4)

    Xlib/XCB interface library

  • dep: [libxcb-shm0]

    X C Binding, shm extension

  • dep: [libxcb1]

    X C Binding

  • dep: [libxcomposite1] (>= 1:0.4.5)

    Libreria dell'estensione Composite di X11

  • dep: [libxdamage1] (>= 1:1.1)

    Libreria dell’estensione delle regioni danneggiate di X11

  • dep: [libxext6]

    X11 miscellaneous extension library

  • dep: [libxfixes3]

    Libreria dell'estensione varia «fixes» di X11

  • dep: [libxrandr2] (>= 2:1.4.0)

    Libreria di estensione RandR di X11

  • dep: [zlib1g] (>= 1:1.2.3.4)

    compression library - runtime

  • dep: [fontconfig]

    generic font configuration library - support binaries

  • dep: [procps]

    /proc file system utilities

  • dep: [debianutils] (>= 1.16)

    Miscellaneous utilities specific to Debian

  • rec: libavcodec62

    Package not available

  • rec: libavcodec-extra62

    Package not available

  • rec: libavcodec61

    Package not available

  • rec: libavcodec-extra61

    Package not available

  • rec: libavcodec60

    Package not available

  • rec: libavcodec-extra60

    Package not available

  • rec: [libavcodec59]

    Libreria FFmpeg con de/encoder per codec audio/video: file di runtime

  • rec: [libavcodec-extra59]

    Libreria FFmpeg con de/encoder aggiuntivi per codec audio/video

  • rec: libavcodec58

    Package not available

  • rec: libavcodec-extra58

    Package not available

  • rec: libavcodec57

    Package not available

  • rec: libavcodec-extra57

    Package not available

  • rec: libavcodec56

    Package not available

  • rec: libavcodec-extra56

    Package not available

  • rec: libavcodec55

    Package not available

  • rec: libavcodec-extra55

    Package not available

  • rec: libavcodec54

    Package not available

  • rec: libavcodec-extra54

    Package not available

  • rec: libavcodec53

    Package not available

  • rec: libavcodec-extra53

    Package not available

  • sug: [fonts-stix]

    Scientific and Technical Information eXchange fonts

  • sug: otf-stix

    Package not available

  • sug: [fonts-lmodern]

    OpenType fonts based on Computer Modern

  • sug: [libgssapi-krb5-2]

    Librerie runtime di MIT Kerberos - Meccanismo GSS-API krb5

  • sug: libkrb53

    Package not available

  • sug: [libcanberra0]

    simple abstract interface for playing event sounds

  • sug: [pulseaudio]

    PulseAudio sound server

Download firefox-esr

ArchitecturePackage sizeInstalled sizeFilesPackage
amd6473 MiB272 MiBlist of filesDownload
arm6466 MiB254 MiBlist of filesDownload

Percorsi file del pacchetto (66)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/firefox-esr/firefox-esr.js
  • /usr/bin/firefox
  • /usr/bin/firefox-esr
  • /usr/lib/firefox-esr/application.ini
  • /usr/lib/firefox-esr/browser/chrome
  • /usr/lib/firefox-esr/browser/defaults
  • /usr/lib/firefox-esr/browser/omni.ja
  • /usr/lib/firefox-esr/crashhelper
  • /usr/lib/firefox-esr/crashreporter
  • /usr/lib/firefox-esr/defaults/pref/channel-prefs.js
  • /usr/lib/firefox-esr/dependentlibs.list
  • /usr/lib/firefox-esr/distribution
  • /usr/lib/firefox-esr/firefox-bin
  • /usr/lib/firefox-esr/firefox-esr
  • /usr/lib/firefox-esr/fonts/TwemojiMozilla.ttf
  • /usr/lib/firefox-esr/glxtest
  • /usr/lib/firefox-esr/gmp-clearkey/0.1/libclearkey.so
  • /usr/lib/firefox-esr/gmp-clearkey/0.1/manifest.json
  • /usr/lib/firefox-esr/libfreeblpriv3.so
  • /usr/lib/firefox-esr/libgkcodecs.so
  • /usr/lib/firefox-esr/liblgpllibs.so
  • /usr/lib/firefox-esr/libmozavcodec.so
  • /usr/lib/firefox-esr/libmozavutil.so
  • /usr/lib/firefox-esr/libmozgtk.so
  • /usr/lib/firefox-esr/libmozsandbox.so
  • /usr/lib/firefox-esr/libmozsqlite3.so
  • /usr/lib/firefox-esr/libmozwayland.so
  • /usr/lib/firefox-esr/libnss3.so
  • /usr/lib/firefox-esr/libnssutil3.so
  • /usr/lib/firefox-esr/libsmime3.so
  • /usr/lib/firefox-esr/libsoftokn3.so
  • /usr/lib/firefox-esr/libssl3.so
  • /usr/lib/firefox-esr/libxul.so
  • /usr/lib/firefox-esr/omni.ja
  • /usr/lib/firefox-esr/pingsender
  • /usr/lib/firefox-esr/platform.ini
  • /usr/lib/firefox-esr/v4l2test
  • /usr/lib/firefox-esr/vaapitest
  • /usr/lib/mime/packages/firefox-esr
  • /usr/share/applications/firefox-esr.desktop
  • /usr/share/bug/firefox-esr/control
  • /usr/share/bug/firefox-esr/presubj
  • /usr/share/bug/firefox-esr/script
  • /usr/share/doc/firefox-esr/changelog.Debian.gz
  • /usr/share/doc/firefox-esr/copyright
  • /usr/share/doc/firefox-esr/NEWS.Debian.gz
  • /usr/share/doc/firefox-esr/README.Debian
  • /usr/share/firefox-esr/browser/chrome/icons/default/default128.png
  • /usr/share/firefox-esr/browser/chrome/icons/default/default16.png
  • /usr/share/firefox-esr/browser/chrome/icons/default/default32.png
  • /usr/share/firefox-esr/browser/chrome/icons/default/default48.png
  • /usr/share/firefox-esr/browser/chrome/icons/default/default64.png
  • /usr/share/firefox-esr/browser/defaults/preferences/debugger.js
  • /usr/share/firefox-esr/browser/defaults/preferences/firefox-branding.js
  • /usr/share/firefox-esr/browser/defaults/preferences/firefox.js
  • /usr/share/firefox-esr/browser/defaults/preferences/vendor.js
  • /usr/share/firefox-esr/browser/defaults/syspref
  • /usr/share/firefox-esr/distribution/searchplugins/common/debsearch.xml
  • /usr/share/icons/hicolor/128x128/apps/firefox-esr.png
  • /usr/share/icons/hicolor/16x16/apps/firefox-esr.png
  • /usr/share/icons/hicolor/32x32/apps/firefox-esr.png
  • /usr/share/icons/hicolor/48x48/apps/firefox-esr.png
  • /usr/share/icons/hicolor/64x64/apps/firefox-esr.png
  • /usr/share/icons/hicolor/symbolic/apps/firefox-esr-symbolic.svg
  • /usr/share/lintian/overrides/firefox-esr
  • /usr/share/man/man1/firefox-esr.1.gz

Field source: Debian 12 (Bookworm) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
140.12.0esr-1~deb12u1bookworm / mainamd64Debian 12 · main · amd6473 MiB271 MiBpool/main/f/firefox-esr/firefox-esr_140.12.0esr-1~deb12u1_amd64.deb
140.12.0esr-1~deb12u1bookworm / mainarm64Debian 12 · main · arm6466 MiB252 MiBpool/main/f/firefox-esr/firefox-esr_140.12.0esr-1~deb12u1_arm64.deb
140.14.0esr-1~deb12u1bookworm-security / mainamd64Debian 12 security · main · amd6473 MiB272 MiBpool/updates/main/f/firefox-esr/firefox-esr_140.14.0esr-1~deb12u1_amd64.deb
140.14.0esr-1~deb12u1bookworm-security / mainarm64Debian 12 security · main · arm6466 MiB254 MiBpool/updates/main/f/firefox-esr/firefox-esr_140.14.0esr-1~deb12u1_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVEGravitàImpatto per versione
[CVE-2026-113470]

Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.1esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.1esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.1esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.1esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109704]

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

High(8.8)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109705]

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158,

Critical(9.6)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109706]

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109707]

Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Critical(9.6)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109708]

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Critical(9.6)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109709]

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

High(8.8)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109710]

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109711]

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109712]

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

High(7.1)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109713]

Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109715]

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

High(8.1)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109716]

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

High(8.1)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109717]

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109718]

Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109719]

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(4.2)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109720]

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

High(7.1)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109721]

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109722]

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

High(8.1)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[CVE-2026-109723]

Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Medium(5.4)Interessata
Dettagli (4)
  • 140.12.0esr-1~deb12u1 · amd64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.12.0esr-1~deb12u1 · arm64 · bookworm

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

  • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

    Interessata · Corretta: 153.5.0esr-1~deb12u1

    nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

[Altri risultati]

Ultima sincronizzazione:

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

140.12.0esr-1~deb12u1 / amd64Osservato Sep 1, 2026sha256 ce50b83e3cb8…52615647Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): ce50b83e3cb81b0908346f555fabb679646baefe24a3270913347a9b52615647

Verifica download

printf '%s %s\n' 'ce50b83e3cb81b0908346f555fabb679646baefe24a3270913347a9b52615647' 'firefox-esr_140.12.0esr-1~deb12u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

140.12.0esr-1~deb12u1 / arm64Osservato Sep 1, 2026sha256 70efaa4b1747…e2332207Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 70efaa4b17478473b251c0d7924d702f2dd845c1cdb72a180540e3f0e2332207

Verifica download

printf '%s %s\n' '70efaa4b17478473b251c0d7924d702f2dd845c1cdb72a180540e3f0e2332207' 'firefox-esr_140.12.0esr-1~deb12u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

140.14.0esr-1~deb12u1 / amd64Osservato Sep 1, 2026sha256 8c466a26e775…23f6b144Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 8c466a26e775c06062060c608bc5b431bf8f06d44f0d83b6d8620cb323f6b144

Verifica download

printf '%s %s\n' '8c466a26e775c06062060c608bc5b431bf8f06d44f0d83b6d8620cb323f6b144' 'firefox-esr_140.14.0esr-1~deb12u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main amd64

140.14.0esr-1~deb12u1 / arm64Osservato Sep 1, 2026sha256 356c0aa725c9…94ed667aImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 356c0aa725c9b6559f9fc6a25679431f790fd653681a903650ab73a994ed667a

Verifica download

printf '%s %s\n' '356c0aa725c9b6559f9fc6a25679431f790fd653681a903650ab73a994ed667a' 'firefox-esr_140.14.0esr-1~deb12u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main arm64

Fonti

  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Observed SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Observed SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Result
    match verified