-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4220-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
June 08, 2018                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2018-6126

Ivan Fratric discovered a buffer overflow in the Skia graphics library
used by Firefox, which could result in the execution of arbitrary code.

For the oldstable distribution (jessie), this problem has been fixed
in version 52.8.1esr-1~deb8u1.

For the stable distribution (stretch), this problem has been fixed in
version 52.8.1esr-1~deb9u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=pAlB
-----END PGP SIGNATURE-----