Linux · Security advisory · April 17, 2024

DSA-5663-1: firefox-esr security update

DSA-5663-1, released April 17, 2024, fixes 1 CVE in firefox-esr. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0060
49th percentile

Fixed package versions

ProductReleaseFixed in
firefox-esrDebian 11.6 (bullseye)115.10.0esr-1~deb11u1
firefox-esrDebian 12.15 (bookworm)115.10.0esr-1~deb12u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2024-2609 Mozilla Firefox ESR and 5 others: Product UI does not Warn User of Unsafe Actions 6.1 0.0060 None reported
Showing 1 to 1 of 1 1