Errata overview
Errata ID 387
Date 2019-12-11
Source package firefox-esr
Fixed in version 68.3.0esr-1~deb9u1
Description
This update addresses the following issues:
* Tor Browser through 8.5.3 has an information exposure vulnerability. It
  allows remote attackers to detect the browser's language via vectors
  involving an IFRAME element, because text in that language is included in
  the title attribute of a LINK element for a non-HTML page. This is related
  to a behavior of Firefox before 68. (CVE-2019-13075)
* Buffer overflow in plain text serializer (CVE-2019-17005)
* Use-after-free in worker destruction (CVE-2019-17008)
* Use-after-free when performing device orientation checks (CVE-2019-17010)
* Use-after-free when retrieving a document in antitracking (CVE-2019-17011)
* Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
  (CVE-2019-17012)
Additional notes
CVE ID CVE-2019-13075
CVE-2019-17005
CVE-2019-17008
CVE-2019-17010
CVE-2019-17011
CVE-2019-17012
UCS Bug number #50621