DSA-5496: -1 firefox-esr -- security update
Published Sep 13, 2023
·Updated
A buffer overflow in parsing WebP images may result in the execution of arbitrary code.
Affected Software
2 affected componentsFixes available
debian/firefox-esr
debian/firefox-esr
140.12.0esr-1~deb12u1153.6.0esr-1~deb12u2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 140.12.0esr-1~deb12u1Fixed in 153.6.0esr-1~deb12u2 - Upgrade
Upgrade
firefox-esrto a version that resolves this vulnerability.Patch DSA-5496-1
Event History
Sep 13, 2023
Advisory Published
12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this security update?
The vulnerability ID for this security update is DSA-5496.
2
What is the title of this security update?
The title of this security update is 'DSA-5496-1 firefox-esr -- security update'.
3
What is the description of the vulnerability?
The vulnerability is a buffer overflow in parsing WebP images that may result in the execution of arbitrary code.
4
Which software is affected by this vulnerability?
The software affected by this vulnerability is firefox-esr.
5
What is the severity level of this vulnerability?
The severity level of this vulnerability is not specified.
6
How can I fix this vulnerability?
To fix this vulnerability, you should apply the security update provided by Debian.