Debian alert DLA-4044-1 (firefox-esr)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4044-1] firefox-esr security update
Date:
             
 
Fri, 07 Feb 2025 22:27:47 +0100
Message-ID:
             
 
<20250207212747.79DB52A01BD@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4044-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
February 07, 2025                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : firefox-esr
Version        : 128.7.0esr-1~deb11u1
CVE ID         : CVE-2024-11704 CVE-2025-1009 CVE-2025-1010 CVE-2025-1011
                 CVE-2025-1012 CVE-2025-1013 CVE-2025-1014 CVE-2025-1016
                 CVE-2025-1017

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code.

For Debian 11 bullseye, these problems have been fixed in version
128.7.0esr-1~deb11u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Ju4n
-----END PGP SIGNATURE-----