firefox-esr - security update
This update blocks compromised intermediate certificates issued by the eMudhra CA. Most users will have these certs already blocked by the OneCRL feature provided by Firefox. This update blocks the certificates also for installations which have RemoteSettings disabled or which are unable to connect to the revocation backend service due to network constraints. https://security-tracker.debian.org/tracker/DSA-6573-1
Read at Debian Security Advisories
- Vendor
- Debian, Mozilla
- Product
- Debian, Certificate authorities, Firefox
- Exposure class
- Operating system, Identity, Browser
Why it ranks 26 (Notable)
- Exposed product class: identity
- Widely deployed vendor product (Debian)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Debian Security Advisories (lists.debian.org)
Related coverage
Other items that share a CVE or were clustered with this one.