Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.announce.security > #4418 > unrolled thread

[SECURITY] [DSA 5858-1] firefox-esr security update

Back to article view | Back to linux.debian.announce.security

Contents

  [SECURITY] [DSA 5858-1] firefox-esr security update Moritz Muehlenhoff <jmm@debian.org> - 2025-02-05 14:40 +0100

#4418 — [SECURITY] [DSA 5858-1] firefox-esr security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5858-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
February 05, 2025                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2024-11704 CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 
                 CVE-2025-1012 CVE-2025-1013 CVE-2025-1014 CVE-2025-1016 
                 CVE-2025-1017

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code.

For the stable distribution (bookworm), these problems have been fixed in
version 128.7.0esr-1~deb12u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=SAOd
-----END PGP SIGNATURE-----

[toc] | [standalone]

Back to top | Article view | linux.debian.announce.security

csiph-web