Back Linuxsecurity

Debian: firefox-esr Important Sandbox Escape and Code Exec DSA-6101

Linuxsecurity •LinuxSecurity Advisories • January 15, 2026

For the oldstable distribution (bookworm), these problems have been fixed in version 140.7.0esr-1~deb12u1. For the stable distribution (trixie), these problems have been fixed in version 140.7.0esr-1~deb13u1. We recommend that you upgrade your firefox-esr packages. For the detailed security status of firefox-esr please refer to its security tracker page at: Further information Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at:

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Debian Releases Security Updates for firefox-esr Due to Critical Vulnerabilities Debian has released security updates for the firefox-esr package to address critical vulnerabilities, including a sandbox escape and privilege escalation. Users of the oldstable distribution (bookworm) and stable distribution (trixie) are advised to upgrade to the patched versions 140.7.0esr-1~deb12u1 and 140.7.0esr-1~deb13u1, respectively. The vulnerabilities could potentially allow for code execution and privilege escalation. 2 sources 18

Extracted Entities

Platforms (1)

Firefox-esr