[IT-SecNots] [SECURITY] [DSA 4655-1] firefox-esr security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4655-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
April 08, 2020                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2020-6821 CVE-2020-6822 CVE-2020-6825

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary code.

For the oldstable distribution (stretch), these problems have been fixed
in version 68.7.0esr-1~deb9u1.

For the stable distribution (buster), these problems have been fixed in
version 68.7.0esr-1~deb10u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=aqJi
-----END PGP SIGNATURE-----