Headline
Debian Security Advisory 5765-1
Debian Linux Security Advisory 5765-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512- -------------------------------------------------------------------------Debian Security Advisory DSA-5765-1 [email protected]://www.debian.org/security/ Moritz MuehlenhoffSeptember 04, 2024 https://www.debian.org/security/faq- -------------------------------------------------------------------------Package : firefox-esrCVE ID : CVE-2024-8381 CVE-2024-8382 CVE-2024-8383 CVE-2024-8384Multiple security issues have been found in the Mozilla Firefox webbrowser, which could potentially result in the execution of arbitrarycode.For the stable distribution (bookworm), these problems have been fixed inversion 115.15.0esr-1~deb12u1.We recommend that you upgrade your firefox-esr packages.For the detailed security status of firefox-esr please refer toits security tracker page at:https://security-tracker.debian.org/tracker/firefox-esrFurther information about Debian Security Advisories, how to applythese updates to your system and frequently asked questions can befound at: https://www.debian.org/security/Mailing list: [email protected] PGP SIGNATURE-----iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmbX9bEACgkQEMKTtsN8Tjbwzg/7BRH1FshkIoqMreCmhj9AYevh3VmSLDqcUOVU0a2LrLOqcJCsRIyhhrl5BXxGt0w9Q1KOIYBlwSsRU+EAlcwlh6+1FyKqrAcc8SDN+klK7NekODMHXj4gzge3adyaVYoYpHNhfYt+aVwZD+XTrI0d64V9HsO7Jsa9bwyI+xelgxuFfb8061L4q+ViQgzyCrl+vjaS6doRK5gZCVjPeuaFPKbppO5VIapF2/RIqDqZOCrziSONeqTaw7IRPITMnEHEl/+hPK9qQOmyw/suEES/Cl7aagj5znd8pQVvwpMMql/soAGX96G+y/2dC0s4cgaxwN6JAyRao7tFbCTjHpbxK+hy6pXcEBnrMPZ79plaZQ7L5uEMX6OxgEtRWGRA10Nti1RxRT48bgx8o8BnQ7K7lIHJn8afXb5pTf9rwezRyvy0UrCHAtta6Z2galVPrb5tbPBLt8MrS0cPd+RYj1M8wgrVnxCIa8N4qHLtw0adiyZa32e+lwtCbOhMQarAobD3zFGKBJsd0/lzKjeQHgIX3hRmZ57TOAgqRR6M91bbtxpDg+dGrxMUiqV/+fF7oB3WsR4KgXJCO+1YR7khOlWieTl+2Uf/w3PT0BBE4smJ9SAa+ZZuGZFyVVdmWRP2hy3OR5h7Hpe3po59/TzMlIcm6TdhYKUp0q/ANPKFS0cu9Ks==YiPV-----END PGP SIGNATURE-----Related news
Red Hat Security Advisory 2024-6816-03 - An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
Red Hat Security Advisory 2024-6723-03 - An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat Security Advisory 2024-6722-03 - An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
Red Hat Security Advisory 2024-6721-03 - An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service.
Red Hat Security Advisory 2024-6720-03 - An update for thunderbird is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Red Hat Security Advisory 2024-6719-03 - An update for thunderbird is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Ubuntu Security Notice 6995-1 - Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. It was discovered that Thunderbird did not properly manage certain memory operations when processing graphics shared memory. An attacker could potentially exploit this issue to escape the sandbox.
Debian Linux Security Advisory 5767-1 - Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code.
Ubuntu Security Notice 6992-1 - Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. Nils Bars discovered that Firefox contained a type confusion vulnerability when performing certain property name lookups. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code.