—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2023.3854
firefox-esr security update
10 July 2023
===========================================================================
AusCERT Security Bulletin Summary
———————————
Product: firefox-esr
Publisher: Debian
Operating System: Debian GNU/Linux
Resolution: Patch/Upgrade
CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207
CVE-2023-37202 CVE-2023-37201
Original Bulletin:
https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html
Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS Source: Red Hat
Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
– ————————–BEGIN INCLUDED TEXT——————–
– —–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
– – ————————————————————————-
Debian LTS Advisory DLA-3484-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
July 08, 2023 https://wiki.debian.org/LTS
– – ————————————————————————-
Package : firefox-esr
Version : 102.13.0esr-1~deb10u1
CVE ID : CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208
CVE-2023-37211
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code or spoofing.
For Debian 10 buster, these problems have been fixed in version
102.13.0esr-1~deb10u1.
We recommend that you upgrade your firefox-esr packages.
For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
– —–BEGIN PGP SIGNATURE—–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=inoz
– —–END PGP SIGNATURE—–
– ————————–END INCLUDED TEXT——————–
You have received this e-mail bulletin as a result of your organisation’s
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to [email protected]
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT’s members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation’s
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author’s website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: [email protected]
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
—–BEGIN PGP SIGNATURE—–
Comment: https://auscert.org.au/gpg-key/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=9YbT
—–END PGP SIGNATURE—–
Source: Read More
Security Bulletins