Debian alert DLA-4215-1 (ublock-origin)

From:
             
 
Markus Koschany <apo@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4215-1] ublock-origin security update
Date:
             
 
Thu, 12 Jun 2025 00:21:56 +0200
Message-ID:
             
 
<e4b26dd9ced789d64f11fe42ca0e13dee70f3063.camel@debian.org>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4215-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                      Markus Koschany
June 12, 2025                                 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : ublock-origin
Version        : 1.62.0+dfsg-0+deb11u1
CVE ID         : CVE-2025-4215
Debian Bug     : 1104635

A flaw was found in ublock-origin, a lightweight and efficient ads, malware,
trackers blocker. A remote attacker could abuse an inefficient regular
expression in ublock-origin's filters to cause a denial-of-service and freeze a
web browser.

For Debian 11 bullseye, this problem has been fixed in version
1.62.0+dfsg-0+deb11u1.

We recommend that you upgrade your ublock-origin packages.

For the detailed security status of ublock-origin please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ublock-origin

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=Pv0d
-----END PGP SIGNATURE-----