bugtraq - [SECURITY] [DSA 4411-1] firefox-esr security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20190320220919.5rxjlwja3d3oo7k4@seger.debian.org>
Date: Wed, 20 Mar 2019 22:09:19 +0000
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4411-1] firefox-esr security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4411-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
March 20, 2019                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2018-18506 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 
                 CVE-2019-9792 CVE-2019-9793 CVE-2019-9795 CVE-2019-9796

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code.

For the stable distribution (stretch), these problems have been fixed in
version 60.6.0esr-1~deb9u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=VKkA
-----END PGP SIGNATURE-----