Debian alert DLA-2607-1 (firefox-esr)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2607-1] firefox-esr security update
Date:
             
 
Thu, 25 Mar 2021 17:37:26 +0100
Message-ID:
             
 
<20210325163726.CEE932A24A9@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2607-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
March 25, 2021                                https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : firefox-esr
Version        : 78.9.0esr-1~deb9u1
CVE ID         : CVE-2021-23981 CVE-2021-23982 CVE-2021-23984 CVE-2021-23987

Multiple security issues have been found in the Mozilla Firefox
web browser, which could potentially result in the execution
of arbitrary code, information disclosure or spoofing attacks.

For Debian 9 stretch, these problems have been fixed in version
78.9.0esr-1~deb9u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=/raq
-----END PGP SIGNATURE-----