Back Linuxsecurity

Debian Firefox-ESR Critical Issues Execution CVE-2026-16365 DSA-6481

Linuxsecurity •LinuxSecurity Advisories • September 2, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

For the stable distribution (trixie), these problems have been fixed in version 140.15.0esr-1~deb13u1. We recommend that you upgrade your firefox-esr packages. For the detailed security status of firefox-esr please refer to its security tracker page at: Further information Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at:

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Debian Firefox-ESR Vulnerabilities Prompt Urgent Patching Debian has released critical security updates for Firefox-ESR due to vulnerabilities including CVE-2026-16365, which was published on July 21, 2026. The vulnerabilities affect Debian 12 (bookworm) and Debian 13 (trixie) users, with patches available in versions 140.15.0esr-1~deb12u1 and 140.15.0esr-1~deb13u1, respectively. The vulnerabilities could allow for code execution, posing a significant risk to users who do not apply the updates. Administrators are advised to upgrade their firefox-esr packages immediately to mitigate potential exploitation. The urgency is underscored by the critical nature of the vulnerabilities and the potential for active exploitation. Users should refer to the security tracker pages for detailed status and guidance on applying updates. 4 sources 72

Extracted Entities

CVEs (1)

CVE-2026-16365