| Name | DLA-4250-1 | 
| Description | firefox-esr - security update | 
| Source | Debian LTS | 
| References | CVE-2025-8027, CVE-2025-8028, CVE-2025-8029, CVE-2025-8030, CVE-2025-8031, CVE-2025-8032, CVE-2025-8033, CVE-2025-8034, CVE-2025-8035 | 
The table below lists information on source packages.
| Source Package | Release | Version | Status | 
|---|---|---|---|
| firefox-esr (PTS) | bullseye | 115.14.0esr-1~deb11u1 | vulnerable | 
| bullseye (security) | 140.4.0esr-1~deb11u1 | fixed | 
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs | 
|---|---|---|---|---|---|---|
| firefox-esr | source | bullseye | 128.13.0esr-1~deb11u1 |