Debian alert DLA-4250-1 (firefox-esr)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4250-1] firefox-esr security update
Date:
             
 
Thu, 24 Jul 2025 08:28:36 +0200
Message-ID:
             
 
<20250724062836.C9BBA5F00099@kamino>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4250-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
July 24, 2025                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : firefox-esr
Version        : 128.13.0esr-1~deb11u1
CVE ID         : CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030
                 CVE-2025-8031 CVE-2025-8032 CVE-2025-8033 CVE-2025-8034
                 CVE-2025-8035

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code.

For Debian 11 bullseye, these problems have been fixed in version
128.13.0esr-1~deb11u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=VACR
-----END PGP SIGNATURE-----