[IT-SecNots] [SECURITY] [DSA 4324-1] firefox-esr security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4324-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
October 24, 2018                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2018-12389 CVE-2018-12390 CVE-2018-12392
                 CVE-2018-12393 CVE-2018-12395 CVE-2018-12396
                 CVE-2018-12397

Multiple security issues have been found in the Mozilla Firefox web
browser, which could result in the execution of arbitrary code,
privilege escalation or information disclosure.

For the stable distribution (stretch), these problems have been fixed in
version 60.3.0esr-1~deb9u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=g9Hk
-----END PGP SIGNATURE-----