[SECURITY] [DLA 2740-1] firefox-esr security update

2021-08-1216:18:07

lists.debian.org

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.5%

JSON

Debian LTS Advisory DLA-2740-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
August 12, 2021 https://wiki.debian.org/LTS

Package : firefox-esr
Version : 78.13.0esr-1~deb9u1
CVE ID : CVE-2021-29980 CVE-2021-29984 CVE-2021-29985 CVE-2021-29986
CVE-2021-29988 CVE-2021-29989

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code.

For Debian 9 stretch, these problems have been fixed in version
78.13.0esr-1~deb9u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9allfirefox-esr-l10n-eo< 78.13.0esr-1~deb9u1firefox-esr-l10n-eo_78.13.0esr-1~deb9u1_all.deb
Debian10allfirefox-esr-l10n-br< 78.13.0esr-1~deb10u1firefox-esr-l10n-br_78.13.0esr-1~deb10u1_all.deb
Debian11allthunderbird-l10n-ro< 1:78.13.0-1~deb11u1thunderbird-l10n-ro_1:78.13.0-1~deb11u1_all.deb
Debian9alliceowl-l10n-br< 1:78.13.0-1~deb9u1iceowl-l10n-br_1:78.13.0-1~deb9u1_all.deb
Debian9allfirefox-esr-l10n-da< 78.13.0esr-1~deb9u1firefox-esr-l10n-da_78.13.0esr-1~deb9u1_all.deb
Debian9allthunderbird-l10n-de< 1:78.13.0-1~deb9u1thunderbird-l10n-de_1:78.13.0-1~deb9u1_all.deb
Debian9alliceweasel-l10n-vi< 1:78.13.0esr-1~deb9u1iceweasel-l10n-vi_1:78.13.0esr-1~deb9u1_all.deb
Debian9alliceweasel-l10n-tr< 1:78.13.0esr-1~deb9u1iceweasel-l10n-tr_1:78.13.0esr-1~deb9u1_all.deb
Debian9alllightning-l10n-ro< 1:78.13.0-1~deb9u1lightning-l10n-ro_1:78.13.0-1~deb9u1_all.deb
Debian9allthunderbird-l10n-id< 1:78.13.0-1~deb9u1thunderbird-l10n-id_1:78.13.0-1~deb9u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	all	firefox-esr-l10n-eo	< 78.13.0esr-1~deb9u1	firefox-esr-l10n-eo_78.13.0esr-1~deb9u1_all.deb
Debian	10	all	firefox-esr-l10n-br	< 78.13.0esr-1~deb10u1	firefox-esr-l10n-br_78.13.0esr-1~deb10u1_all.deb
Debian	11	all	thunderbird-l10n-ro	< 1:78.13.0-1~deb11u1	thunderbird-l10n-ro_1:78.13.0-1~deb11u1_all.deb
Debian	9	all	iceowl-l10n-br	< 1:78.13.0-1~deb9u1	iceowl-l10n-br_1:78.13.0-1~deb9u1_all.deb
Debian	9	all	firefox-esr-l10n-da	< 78.13.0esr-1~deb9u1	firefox-esr-l10n-da_78.13.0esr-1~deb9u1_all.deb
Debian	9	all	thunderbird-l10n-de	< 1:78.13.0-1~deb9u1	thunderbird-l10n-de_1:78.13.0-1~deb9u1_all.deb
Debian	9	all	iceweasel-l10n-vi	< 1:78.13.0esr-1~deb9u1	iceweasel-l10n-vi_1:78.13.0esr-1~deb9u1_all.deb
Debian	9	all	iceweasel-l10n-tr	< 1:78.13.0esr-1~deb9u1	iceweasel-l10n-tr_1:78.13.0esr-1~deb9u1_all.deb
Debian	9	all	lightning-l10n-ro	< 1:78.13.0-1~deb9u1	lightning-l10n-ro_1:78.13.0-1~deb9u1_all.deb
Debian	9	all	thunderbird-l10n-id	< 1:78.13.0-1~deb9u1	thunderbird-l10n-id_1:78.13.0-1~deb9u1_all.deb