-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5113-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff April 06, 2022 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : firefox-esr CVE ID : CVE-2022-1097 CVE-2022-1196 CVE-2022-24713 CVE-2022-28281 CVE-2022-28282 CVE-2022-28285 CVE-2022-28286 CVE-2022-28289 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing. For the oldstable distribution (buster), these problems have been fixed in version 91.8.0esr-1~deb10u1. For the stable distribution (bullseye), these problems have been fixed in version 91.8.0esr-1~deb11u1. We recommend that you upgrade your firefox-esr packages. For the detailed security status of firefox-esr please refer to its security tracker page at: https://security-tracker.debian.org/tracker/firefox-esr Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmJNyRQACgkQEMKTtsN8 TjY9Ng/+L5PBIEKWRJadevXaxsSLRwtSkpPiGNbk/o9PSryVh4HEN+QJzIyvLQqC OMZcff4UCs4FftKOci7bs9P1iq3/ybVS1LEIPGuOGWAiCQ7ceA8UaDx8WAGCL9++ xrAC9eTFHoeC9Ir1mk5AWqKY8wicIhPyPsz395AF61eLa2Pn09hV/UvMhUDnpWdn TEyS1lLHYZ+pcpkbtaqDCxBDPCHkrGHZRGR7J7QsDc6HMGxQdob3dUWZP+GGpiK5 7oHyJ/lV3EnrrMuSPVaZqIdiTT/q2XRHzvVH2JrkkPYme/bcORk1mR6QtjceVdKl RjWjjP0lPYhl5e3Jz1jGNoLo/sBs5sgSV4JjZMqYh3wxhfigCzLY/YvFwDTOZ4Ag B0Fu5dzw5B6j46MaTUOHFSdYeRIia1TCzp7KSHG9r6poix+uIkIG9zP1oOnXzjyV JBRR4e1iQlUs6idvmjKiO+Da5E/Zw17uqO9aCARM98afFve7odM3tPBF334Ncghb Mov1MMcOBXGAQS5Gpw6VQiULAYNJs96pPgbQwADGJkuNAiYgDzIh+xOySgHhcXOk 60c25FnAgAfVvfPoDH0UnyoaRz8rpKIkxZYpDRqxqWlkPjmR6DC8r5VYA2mUjgBy hK+1ECjirJxnQQW3dvkqPqa6aRxVQtajcAlu3qYdBbXqa50lLQM= =ewmf -----END PGP SIGNATURE-----