Debian alert DLA-3971-1 (firefox-esr)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 3971-1] firefox-esr security update
Date:
             
 
Thu, 28 Nov 2024 16:54:55 +0100
Message-ID:
             
 
<20241128155455.111B32A0CA8@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3971-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
November 28, 2024                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : firefox-esr
Version        : 128.5.0esr-1~deb11u1
CVE ID         : CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
                 CVE-2024-11697 CVE-2024-11699

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, spoofing or cross-site scripting.

For Debian 11 bullseye, these problems have been fixed in version
128.5.0esr-1~deb11u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Jxd4
-----END PGP SIGNATURE-----