bugtraq - [SECURITY] [DSA 4324-1] firefox-esr security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 24 Oct 2018 20:38:22 +0000
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4324-1] firefox-esr security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4324-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
October 24, 2018                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2018-12389 CVE-2018-12390 CVE-2018-12392
                 CVE-2018-12393 CVE-2018-12395 CVE-2018-12396
		 CVE-2018-12397

Multiple security issues have been found in the Mozilla Firefox web
browser, which could result in the execution of arbitrary code,
privilege escalation or information disclosure.

For the stable distribution (stretch), these problems have been fixed in
version 60.3.0esr-1~deb9u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=g9Hk
-----END PGP SIGNATURE-----