[DSA 6054-1] firefox-esr security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6054-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
November 12, 2025                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2025-13012 CVE-2025-13013 CVE-2025-13014
                 CVE-2025-13015 CVE-2025-13016 CVE-2025-13017
		 CVE-2025-13018 CVE-2025-13019 CVE-2025-13020

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary code
or bypass of the same-origin policy.

For the oldstable distribution (bookworm), these problems have been fixed
in version 140.5.0esr-1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in
version 140.5.0esr-1~deb13u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=Udn6
-----END PGP SIGNATURE-----