Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status | 
|---|
| firefox-esr (PTS) | bookworm | 128.14.0esr-1~deb12u1 | vulnerable | 
|  | bookworm (security) | 140.4.0esr-1~deb12u1 | fixed | 
|  | trixie | 128.14.0esr-1~deb13u1 | vulnerable | 
|  | trixie (security) | 140.4.0esr-1~deb13u1 | fixed | 
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs | 
|---|
| firefox-esr | source | bookworm | 140.4.0esr-1~deb12u1 |  |  |  | 
| firefox-esr | source | trixie | 140.4.0esr-1~deb13u1 |  |  |  |