1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 5496-1] firefox-esr security update

    From Moritz Muehlenhoff@21:1/5 to All on Wed Sep 13 22:50:02 2023
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5496-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 13, 2023 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : firefox-esr
    CVE ID : CVE-2023-4863

    A buffer overflow in parsing WebP images may result in the execution of arbitrary code.

    For the oldstable distribution (bullseye), this problem has been fixed
    in version 102.15.1esr-1~deb11u1.

    For the stable distribution (bookworm), this problem has been fixed in
    version 102.15.1esr-1~deb12u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmUCH1EACgkQEMKTtsN8 TjZB7A//YpbXG3OOwqz3b83KzC0B2y53g1qcriYZ+PiUs+S0FNXX0ePnRJG2Txl1 c82NjGrzTO+D+qTtj3Uj/KB2k/v9UleRE7yeqoZcZXqMgdXqWPl/2C/xNaKLdwRd YjtNl/KgdDPRIxozwov/fRuS6bUWOtsOpYLGtWsFCfK7Wik20TN36dJNPH+4qvgR /YwRV5cqpxAKnguVZoFuKyKLxAXm2KxZCOaH3Ft3f5Sk6MWWt4ayWgmrUOiRzdEB vu/h4itb/q/dnLB/O4u7EzFGK5TtHHpP+4YoeibI/JQD/geiAFCyBdbBSmVlLv2c 8aUJLziUvawpE+5ig8b+7m5bwSsfCL5JNMYesVfM1joqY0ysKkwZj+WkYtfkVZQH SepJON7YTm9Hsbkx/WZ/RpF6VbW4/7YWcy9YN8Cevd2wQ4CSSicBpZ77MaPUgqWf cHCRYVKsTNLmUbDSAjKazUPbHPFNaiMEl2pG54xNfj6y4avyLnqOWmF00/kRoCG4 EsA8LGZgrhImqzgZMPQNkEmwstjiADQ8b8himl5CCjwiy70YVm3PmYynH/SiSkow 4/GpZsoDZZ1iWDnSQgw/8/WQ8PQFOkmMVV7wfAJ5RK6iVP3MJ7pNJEi0oY6a2SLk 2IXg48oJF9tWiY/xq+JezTuU0zmC0P90YHz3rywvlVlXlJ/AR7M=
    =H7ya
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)