-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5259-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
October 19, 2022                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2022-42927 CVE-2022-42928 CVE-2022-42929 CVE-2022-42932

Multiple security issues have been found in the Mozilla Firefox
web browser, which could potentially result in the execution
of arbitrary code or information disclosure.

For the stable distribution (bullseye), these problems have been fixed in
version 102.4.0esr-1~deb11u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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l2ad
-----END PGP SIGNATURE-----